Normativa sulla privacy

PRIVACY POLICY - MASLINICA HOTELS & RESORT

THIS POLICY IS INTENDED TO INFORM YOU OF THE WAY WE ENSURE THE LEGAL COLLECTION, PROCESSING AND STORAGE OF YOUR PERSONAL DATA, AND THE PRIVACY AND CONFIDENTIALITY OF ALL DATA COLLECTED THROUGH THIS WEBSITE, SOCIAL NETWORK PROFILES AND BY E-MAIL.

PROCESSING MANAGER INFORMATION

MASLINICA limited liability company for catering, tourism and trade

Headquarters: Maslinica 1-3, Rabac (town of Labin)

Contact: +385 (0) 52 884 150

Data Protection Officer (DPO) contact: dpo@maslinica-rabac.com

INFORMATION ON PERSONAL DATA PROCESSING

Information about the processing of personal data through this website, social media profiles and legitimate interests of this processing manager.

Through this website, we collect personal information in order to make an online reservations, respond to a requests and to submit an open job offer.

Data that we do not collect through this website but provide information about their processing because we believe that they are an appropriate way to inform our users, is information about personal data that we collect and process through profiles or pages that we manage on social networks.

We provide information on the processing of personal data that we collect through this website and other sources of collection whose processing we base on our legitimate interest so that users whose personal data we process on this basis always have available information about the processing and how to exercise guaranteed rights.

DATA COLLECTED THROUGH “ON-LINE RESERVATION”

Data collected: name and surname, country, e-mail, mob./tel., date of arrival and date of departure.

Method of data collection: via the “On-line reservation” form on the home page of this website. A secure getaway reservation system is used. For data transfer we use “Thawte” certificate and SSL technology with 128-bit encryption.

Purpose of data collection: to make a reservation for a stay in our accommodation

Legality of processing: data are collected for the purpose of providing the accommodation reservation service – legality of processing Art. 6 (1) (b) GDPR

Obligation to provide data: the data required in the form in question as mandatory data marked with an asterisk are necessary for the execution of our service and in case of non- provision of the same we are not able to perform the requested service (reservation).

Data processing for other purposes: the user’s e-mail, in addition to accommodation booking, is also used for the purpose of the legitimate interest of the processing manager to periodically inform him about new services and special benefits in accordance with the reservation. The user may restrict or prohibit such further processing.

Storage period: data are stored in the reservation system of the company and is stored for the entire stay in our accommodation units. After unsubscribing, the data is deleted from the reservation system within three years in the event that the object is not re-booked within that period.

Deletion of data: it may be requested to delete personal data from the reservation system before the expiry of a period of three years from the last reservation of accommodation but not earlier than three months after the reservation.

DATA COLLECTED THROUGH “CONTACT FORM”

Data collected: name, surname and e-mail address

Method of collection: delivery of data via the contact form “contact us”

Purpose of data collection: responding to a query or request

Legality of processing: data are collected for the purpose of providing a service or in order to take previous actions for the purpose of providing a service – legality of processing Art. 6 (1) (b) GDPR

Obligation to provide data: the data required in the subject form as mandatory data marked with an asterisk are necessary for the execution of our service or response to the request.

Data processing for other purposes: the data collected in this way are also used for the legitimate interest of the controller in order to periodically inform the user about new services and special benefits in accordance with the completed request. The user may restrict or prohibit such further processing of personal data.

Storage period: data are stored for a period of three years.

Deletion of data: it may be requested to delete personal data collected via the contact form after the expiration of thirty days from the date of the inquiry. Such a deadline is determined based on the internal rules of the processing manager to ensure business processes.

DATA COLLECTED THROUGH THE “EMPLOYMENT QUESTIONNAIRE”

Data collected: name and surname, date and place of birth, address, e-mail, mobile phone, high school, college, university, additional education, knowledge of foreign languages, work experience, desired job, when a person could get started.

Method of collection: delivery of personal data by filling out a questionnaire

Purpose of data collection: consideration of possible employment

Legality of processing: data are collected at the request of the respondents for the purpose of considering possible employment – legality of processing Art. 6 (1) (b) GDPR

Obligation to provide data: the data required in the form as mandatory data are marked with an asterisk and are necessary to consider the application.

Recipient category: data collected through the questionnaire are not passed on to third parties

Data processing for other purposes: data are not processed for any other purpose.

Storage period: data is stored for a period of one year. Within this period, it is possible to contact the respondent and invite him/her for an interview in case there is a need for such a profile of the employee and the stated desired job.

Deletion of data: it may be requested to delete personal data collected through the questionnaire.

NETWORK IDENTIFIER

The collection of data through cookies used on this website is described in detail in our Cookie Policy, please read it.

DATA COLLECTED THROUGH SOCIAL NETWORKS

We collect personal data via social networks only when the user submits them to us for inquiries or comments, and we process them in accordance with the rules of that social network.

We do not use the personal data collected in this way for any other purpose and do not pass it on to third parties.

However, every user of the social network should be familiar with the rules of use of the social network and the processing of personal data by the same and therefore please get acquainted in detail with such rules, responsibilities and possible risks before you provide any personal data to this controller through the profiles/pages he leads on social networks.

The company has the following pages/profiles on social networks:

Instagram:

@MaslinicaHotelsResort@olivacampandresidence

Facebook:

https://www.facebook.com/olivacampandresidence/https://www.facebook.com/MaslinicaHotelsResort/

Legality of processing: provision of a service/response to a request or comment - Article 6 (1) (b) of the GDPR

Data processing: data is processed only for the purpose of interaction on the social network and in accordance with the rules of the social network on which the interaction takes place.

Data processing for other purposes: the data is not used for purposes other than the purpose of collection.

Data storage: Data is not stored in the systems of this processing manager.

Data deletion: the collected data remains on the social network platform and is deleted in accordance with the same rules, except when you provide us with personal data via messages. In that case, you can ask to delete them.

LEGITIMATE INTERESTS

The controller may process personal data for his or her legitimate interests, except where those interests are not stronger than the interests or fundamental rights and freedoms of the respondent which require the protection of personal data, especially if the respondent is a child. This controller conducted a comprehensive analysis of the justification of each identified legitimate interest, an assessment of the data protection impact for each individual legitimate interest, which is controlled by a control document. This is regularly checked and updated and records are kept.

Processings based on the legitimate interest of this controller are publicly available through this website where any change or modification of the identified legitimate interest is also notified. In the event that a change or modification may have a greater impact on the respondent, such change or modification shall be communicated to the respondent directly if possible or in another, acceptable manner.

Pursuant to the foregoing, and in accordance with Article 6 (1) (f) of the GDPR, we carry out the following processing on the basis of established legitimate interests:

VIDEO SURVEILLANCE

Data collected: video

Purpose: protection of people and property in accordance with Article 25 of the Law on the Implementation of the General Regulation

Description: We conduct video surveillance for the safety of the guest and his property and to protect the property of the processing manager. Places before entering the perimeter of the shooting are marked with the prescribed mark with the necessary information. Prior to video surveillance, a Data Protection Impact Assessment was conducted in accordance with the Decision on the Establishment and Publication of a List of Types of Processing Procedures Subject to the Request for Data Protection Impact Assessment of the Croatian Regulatory Authority, ie AZOP. Video surveillance is carried out in accordance with the Video Surveillance Policy of Maslinica d.o.o. ensuring the highest possible degree of protection of personal data in accordance with the capabilities of this company. A video surveillance policy is available at reception.

Storage period: recordings are stored for a period of 3 months, except when they are needed to meet legal requirements.

Data processing for other purposes: data are not processed for other purposes except in the case of realization of legal requirements.

Categories of data recipients: data are not passed on to third parties except in the case of legal requirements or at the request of the competent state authority.

Objection to processing: an objection may be lodged to the processing of personal data collected through video surveillance to the data protection officer. The objection does not affect the interruption of such processing except when it is proved that the interests of the respondents significantly exceed the established legitimate interest of the controller.

Data deletion: it may be requested to delete personal data collected via video surveillance. The right can be exercised by contacting the data protection officer.

MARKETING - NEWSLETTER

Data collected: e-mail address

Method of collection: 'contact form' on this website, accommodation reservation form via this website, registration for Spotty WI-FI in the accommodation facility, delivery of inquiries to the e-mail of this processing manager

Purpose: to inform about the services and special benefits of the processing manager for marketing purposes

Processing description: sending a newsletter to the collected e-mail address

E-mail address storage period: three years from the last contact

Data processing for other purposes: the e- mail address is not processed for purposes other than the purpose of collection

Categories of data recipients: data are not passed on to third parties

Objection to processing: an objection may be lodged to the processing of personal data for marketing purposes and further or complete prohibition of further processing, ie delivery of newsletters.

Deletion of data: it may be requested to delete the e-mail to which the newsletter is delivered. The right can be exercised by contacting the data protection officer.

CATEGORIES OF PERSONAL DATA RECIPIENTS

We do not forward data collected for the purpose of booking the service, contacting inquiries or information obtained by e-mail to other recipients.

We are committed to the confidentiality and protection of your personal data and will not disclose or make them available to third parties without your special consent, except in cases prescribed by the General Regulation on Personal Data Protection or when required by other legislation. In such a case, we only pass on personal data to third parties who provide reasonable guarantees and have taken appropriate technical and organizational measures to ensure the protection of your rights, including the proper information.

SECURITY OF PERSONAL DATA PROCESSING

In order to protect personal data, we have introduced appropriate technical and organizational measures that ensure a level of security appropriate to the risks posed by the processing of data and the nature of the personal data being protected, bearing in mind the characteristics and costs of their introduction. Following the risk assessment, we have taken all appropriate measures to protect personal data from accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, especially in cases where processing involves the transfer of personal data over the network, and from all other unlawful forms of processing. The Company has established clear policies and procedures in order to be able to prove the reliability of all data we collect and process at all times.

Implemented organizational and technical protection measures are available in the Privacy Policy at the reception.

YOUR RIGHTS REGARDING PERSONAL DATA

RIGHT OF ACCESS

You can ask us at any time to confirm whether your personal data is being processed. When your personal data are processed you have the right to request access to that data and information about the processing.

RIGHT TO CORRECTION

You have the right to obtain the correction of inaccurate and incomplete personal data without delay.

RIGHT TO DELETION

You have the right to request the deletion of your personal data before the deadlines for their extraction. In this case, the data will be deleted without undue delay. If there are reasons that prevent or limit us from meeting the request, we will inform you as soon as possible in response to the request.

RIGHT TO LIMIT PROCESSING

You have the right to ask us to restrict the processing of your personal data if you dispute the accuracy of this data (for a period allowing us to verify the accuracy of personal data), if the processing is illegal and you object to the deletion of data, if you object to the processing of your data. we no longer need the data and we can extract them, but you need them to set, implement or defend legal claims, and therefore you want us to continue to store them.

RIGHT TO WITHDRAW CONSENT

IN THE EVENT WHEN WE PROCESS DATA ON THE BASIS OF YOUR CONSENT, THEN YOU CAN WITHDRAW THE SAME CONSENT AT ANY MOMENT WITHOUT AFFECTING THE LEGALITY OF PROCESSING BASED ON CONSENT.

ADMINISTRATIVE COST

Your rights are exercised free of charge, and only exceptionally with the payment of an administrative fee. We will notify you of the administrative cost in case the prerequisites for its collection before collection are met.

NOTICE OF CHANGES

We carry out regular checks and amendments to personal data protection measures. Please check our changes to our privacy policy from time to time.

INFORMATION ABOUT EXERCISING YOUR RIGHTS

You can submit a request for access to personal data, a complaint at any time and, based on your special situation, object to the processing of your personal data that we carry out. We will review and evaluate the complaint and may contact you for additional information if necessary.

In order to be able to respond to the request, it is necessary to provide data for valid identification. Once the identification has been established, we will respond as soon as possible within 30 days. In certain situations, we may have to extend the deadline, but not more than 60 days, in which case we will inform you in advance about the extension of the deadline and the reasons for its extension.

We submit the answer electronically (e-mail) unless explicitly requested delivery by mail or otherwise.

You can send your requests to the Data Protection Officer, who you can contact for all questions regarding the processing and protection of personal data by e-mail: dpo@maslinica-rabac.com

In case that you believe that your rights have been violated, you can file a complaint with the Agency for Personal Data Protection, Selska cesta 136, Zagreb.

LAST AMENDMENTS

We regularly review our privacy policies and check that they reflect the way the Company processes personal data.

Last update:

- March 2021

Update on new data collected through the website for the purpose of submitting an application (open application) for employment with this processing manager. There are no changes related to the exercise of the rights of the respondents.

- May 2020

There are no changes related to the collection and exercise of respondents rights.

- August 2019

There are no changes related to the exercise of the rights of the respondents.

This website uses cookies. We use cookies to keep our website reliable and secure. Necessary cookies are always active in order for our website to function properly. With your permission, we will use optional cookies to provide you with social networking features, display personalized content and ads, and to analyze how you use our website. Please note that if you choose to decline certain categories of cookies, some parts of our website may not work properly.

Maslinica Rabac is always looking for new ways to improve the use and functionality of this website, and to gain a better understanding of how you use it.

Cookies are small text files used by websites to enhance the user experience. The law allows cookies to be stored on your device if it is explicitly required for the operation of the website. For all other types of cookies, we need your permission.

This website uses different types of cookies. Some cookies are set by third-party services that appear on our site.

You may change or withdraw your consent to the use of certain categories of cookies at any time.

When contacting us regarding your consent, be sure to provide your ID number and date of Consent.

You can configure cookie settings by following the instructions below:

Microsoft Internet Explorer

Google Chrome

Apple Safari

Mozilla Firefox

Get Google Analytics Opt-out Browser Add-on.

For more information, visit our Privacy Policy and Cookie Policy.

Your consent applies to the following domains: maslinica-rabac.com

Your current state: Allow all.

Your consent ID: avij4vb3YZa4LcQnLcHXzJ+aYuaRjXnyHlBt92vEbd3dvJb/pBzIqA==Consent date: Friday, July 15, 2022 at 09:53:59 AM GMT+2

Change your consent | Withdraw your consent

Cookie declaration last updated on 10/25/22 by Cookiebot:

Necessary (4)

Cookies necessary for the website to function and cannot be switched off in our systems. You can set your browser to block these cookies, but some parts of the website will not work then. These cookies do not store any personally identifiable information.

Preferences (1)

These cookies enable the website to provide enhanced functionality and personalize the user experience, e.g., remember your preferred language or the region in which you are located. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.

Statistics (4)

These cookies help us to know how you communicate with our website, or which pages are the most and least popular. By analyzing this data, we strive to improve the performance of our website. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies we will not know when you have visited our site, and will not be able to monitor its performance.

Marketing (5)

These cookies may be set through our site by our carefully selected and monitored advertising partners (third parties). Our partners may use these cookies to create a portfolio of your interests and to display relevant ads on other sites. They do not store your personal information directly, but are based on the unique identification of your browser and Internet device. If you do not allow these cookies, you will experience less targeted advertising.