1. Introduction

At DoCilja d.o.o., we understand that trust is the foundation of every good relationship. Your privacy is extremely important to us, which is why we have designed this Privacy Policy with transparency in mind.

Here you will find clear information on how, within the 2Dest mobile application (hereinafter: the App), we handle your data, why we need it and how we protect it.

By using the App and accepting the Terms of Use, you agree that DoCilja d.o.o., as the data controller, processes your data in accordance with the provisions below.

2. Data Controller

You may address any questions related to your personal data to:

DoCilja d.o.o.
Address: Koroška cesta 64, 2370 Dravograd
Phone: +386 30 689 576
Email: info@2dest.com

3. What Data Do We Collect?

We collect personal data in two ways: data you provide directly and data generated automatically through the use of the App.

A. Data Provided Directly (during registration and use)

To ensure proper functioning of the App and to identify users, we require:

• Identification data: first name, last name, date of birth
• Contact data: email address

B. Data Collected Automatically

• Usage analytics: how the App is used, access times, accessed features and navigation within the App
• Technical device data: IP address, operating system, device model, operating system version and browser type

4. Purpose of Data Processing

• App operation: managing the user account, enabling App features and resolving technical issues
• Improvements: analysing trends to improve the user interface and functionality
• Communication: informing users about updates and providing user support
• Legislation: fulfilling legal obligations

Providing data is voluntary; however, for certain functionalities (e.g., registration) it is required. Without this data, the use of the App is not possible.

5. Data Retention Period

• Until withdrawal of consent: data is stored until you withdraw your consent
• Account deletion: upon deletion of the account, all personal data is permanently erased, except for the minimum required set (name, e-mail and deletion date) for evidence of the deletion request
• Legal proceedings: in case of judicial or legal disputes, the retention period is extended until the proceedings are concluded

6. Your Rights

In accordance with GDPR, you have the right to:

• Access and review your data
• Correct inaccurate data
• Request deletion (right to be forgotten)
• Withdraw consent
• Data portability
• Restrict processing and object to processing

How to exercise your rights:
Write to us at info@2dest.com or send a written request to our physical address.
Make sure to include information necessary for identification (name, address, phone number).

7. Sharing Data with Third Parties

Your personal data is safe with us. We do not sell personal data nor disclose it to unauthorised third parties.

Exceptions:

• state authorities, if a valid legal basis is presented (court order, law)

Effective date of this document: 25.11.2025
DoCilja d.o.o.