Cookie policy

Effective from: 1 July 2026

Controller (Company): OBS d.o.o., Letališka cesta 29, 1000 Ljubljana — operator of the MountVacation and MV-Travel platforms

Introduction

This Cookie Policy explains the use of cookies and similar technologies on the MountVacation and MV-Travel websites (together, the “Platform”), operated by OBS d.o.o. (the “Company”). This Policy applies uniformly to both brands, regardless of which one the user accesses the Platform through.

This document has been prepared in accordance with:

• Regulation (EU) 2016/679 (GDPR),
• applicable electronic communications legislation (the Electronic Communications Act, ZEKom-2),
• the guidelines of the Information Commissioner of the Republic of Slovenia.

What Are Cookies

Cookies are small text files that a website stores on the user’s device when the user visits the website. They enable recognition of the user’s device, secure use of the Platform, and an improved user experience.

In addition to cookies, we may also use similar technologies, such as local storage, pixels, or other identifiers.

Types of Cookies

The cookie categories are named and classified so as to correspond to the categories used in the consent management tool (Cookiebot), which the user sees in the consent banner and in the live cookie list (see clause 7).

Strictly Necessary Cookies

These cookies are necessary for the basic functioning of the Platform and are installed without the user’s consent, as they are indispensable for the service expressly requested by the user. These include cookies used for:

• secure use of the Platform and login to the user account,
• operation of the booking system and storage of shopping-cart content,
• basic system security (e.g. prevention of CSRF/abuse),
• the technical recording of the user’s cookie consent settings (the cookie consent cookie).

Affiliate and Partner Cookies (Commission Attribution)

Where a user accesses the Platform via a link from a partner or affiliate provider, a cookie is installed that retains an identifier of the visit’s origin for a period of 90 days. This cookie is necessary to fulfil the Company’s contractual obligations to the partner (correct attribution of any resulting booking and commission arising from the user’s own express action – clicking the partner link) and is installed without separate consent, as it is a direct consequence of the user’s own activity. This cookie is not used for advertising or for profiling the user for the purposes of third-party advertising platforms.

Preference Cookies

These enable an enhanced and customised user experience:

• storing user settings (language, currency, display),
• remembering login between sessions,
• tracking referrals within the Loyalty Program, where this extends beyond a single visit or session,
• the operation of support features, such as live chat (e.g. Zendesk).

Use of these cookies is based on the user’s consent, except where an individual cookie in this category is strictly necessary for functionality expressly requested by the user within the current session.

Statistics Cookies

These enable the collection of anonymous or pseudonymised data on use of the Platform for the purposes of visit analysis, performance improvement, and optimisation of the user experience (e.g. Google Analytics). They are used exclusively on the basis of the user’s consent.

Marketing Cookies

These enable the display of tailored advertisements, the measurement of advertising campaign effectiveness, and the retargeting of users (remarketing) on other platforms (e.g. Meta, Google Ads). They are used only on the basis of the user’s express consent.

The duration of cookies in this category is limited to a maximum of 12 months from installation, after which renewed user consent is required for continued use, regardless of any longer technical limitation that may apply on a given platform (e.g. Google Ads allows up to 540 days, Meta up to 90 days for individual cookies) — the Company commits to the stricter 12-month limit as its own standard.

Use of Third-Party Providers

The Platform may use the services of third-party providers who install cookies from the categories set out in clause 3 on the Company’s behalf, or who use similar technologies, in particular for:

• statistics (e.g. Google Analytics),
• customer support and live chat (e.g. Zendesk),
• marketing and advertising (e.g. Meta, Google Ads),
• improving the user experience.

These providers may also process personal data outside the European Economic Area, in which case appropriate safeguards are applied in accordance with the GDPR (e.g. standard contractual clauses).

Content and Offer Personalisation

Based on cookies and user settings, the Platform may:

• adapt the display of content and offers,
• enable the correct operation of affiliate and referral systems,
• provide a personalised user experience.

Cookies do not enable automated decision-making producing legal effects for the user and are not used for automated decision-making within the meaning of Article 22 GDPR.

Managing Cookies

The user may give, adjust, or withdraw their consent at any time via the cookie management tool, accessible at the bottom of every page of the Platform (the cookie settings icon). The tool enables:

• “Accept All” – consent to all categories of cookies,
• “Reject All” – consent only to strictly necessary cookies,
• “Customize” – separate consent by individual category (Preferences, Statistics, Marketing).

The user may additionally delete or restrict cookies through their browser settings. Restricting or disabling cookies may affect the operation of certain features of the Platform.

For questions relating to cookies, the user may contact the Company at: privacy@mountvacation.com

List of Cookies

A detailed, automatically updated list of all cookies actually used on the Platform (cookie name, provider, category, purpose, and retention period) is available to the user directly within the cookie management tool on the website. The categories in the list correspond to the categories set out in clause 3 of this Policy (Strictly Necessary, Preferences, Statistics, Marketing).

The table below is an informative overview of the cookies and similar technologies used on the Platform. Some cookies are only set following a specific user action (e.g. access via a partner link, starting a booking, using live chat), so not all of them are necessarily present on any given visit. The retention periods stated are the longest periods envisaged; browsers may further limit the actual lifetime of a cookie (e.g. to 400 days).

Relationship to the Privacy Policy

Further information on the processing of personal data is available in the Privacy Policy (GDPR), published on the Platform’s website.

Changes to This Cookie Policy

This Cookie Policy may be amended from time to time. The current, effective version is always published on the Platform’s website.