Privacy policy
The protection of personal data is very important on the website of Apartments Smokvica (hereinafter Smokvica-pag.com). Use of this website is possible without providing personal data, however, if the respondent wants to use some of the services of this website, the processing of personal data may be necessary. If data processing is necessary, but there is no legal basis for it, the respondent will always be asked for consent.
The processing of personal data such as the name, surname, address, email address or telephone number of the respondent will always be in accordance with the General Regulation on Personal Data Protection and the legislation of the Member State applicable to the Smokvica-pag.com website. Through these Privacy Policy, we wish to inform the public about the nature, scope and purpose of the personal data collected and processed. Furthermore, we hereby wish to inform you of your rights.
A number of technical and organizational measures have been installed on the Smokvica-pag.com website to ensure the complete protection of the personal data being processed. However, data transmission over the Internet can in theory have security vulnerabilities, so one hundred percent protection cannot always be guaranteed. For this reason, each respondent can provide personal information by alternative methods, eg by telephone call.
DEFINITIONS
The Privacy Policy of the Smokvica-pag.com website is based on the terms used by EU Legislation in drafting and adopting the General Regulation on Personal Data Protection. The Privacy Policy is legible and understandable to the general public.
These Privacy Policy uses, inter alia, the following terms:
a) Personal data
Personal data is any data relating to any identified natural person (“respondent”). An identified natural person is one who can be identified, directly or indirectly, by name and surname, identification number, location data, online identifiers such as the physical, mental, genetic, mental, economic, cultural or social identity of the natural person.
b) Respondent
Respondent is any natural person whose identity has been established or can be established, and whose personal data is subject to processing by the controller in charge of personal data processing.
c) Processing
Processing is any process or set of procedures applicable to personal data, whether automated processes such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, review, use, transmission, transmission, dissemination or placement available, align, restrict, delete or destroy.
d) Processing restriction
Processing restriction is the marking of stored personal data with the aim of limiting their processing in the future.
e) Profiling
Profiling is any way of automated processing of personal data consisting of the use of personal data to determine the personal preferences of a natural person, more precisely to analyze and overlook aspects of job performance, economic situation, health, personal preferences, interests, reliability, behavior , locating and moving each individual natural person.
f) Pseudonymization
Pseudonymization is the processing of personal data in such a way that the subject can no longer be assigned features without the use of additional data collected in a separate way, and can be subject to technical and organizational measures to ensure that the data cannot be applied to any a natural person whose identity has been established or can be established.
g) The head of personal data processing or the person in charge as the head of personal data processing
The head of personal data processing or the person in charge as the head of personal data processing is any natural or legal person, public institution, agency or other body that alone or in cooperation with others determines the purpose and manner of personal data processing; in places where the purpose and manner of processing personal data is regulated by the legislation of an EU Member State, the criteria for the selection of the controller shall be under the jurisdiction of the legislation of the EU Member State.
h) Executor of personal data processing
The executor of personal data processing is a natural or legal person, public institution, agency or other body that processes personal data on behalf of the controller of personal data processing.
i) Recipient
The recipient is a natural or legal person, public institution, agency or other body to which personal data have been provided, whether a third party or not. However, public authorities that receive personal data through a specific inquiry that is in line with EU or Member State law will not be considered as recipients; the processing of personal data by these state bodies will be in accordance with the applicable regulations related to the purpose of data processing.
j) Third party
A third party is a natural or legal person, public institution, agency or other body that is not the respondent, controller or processor, and who is authorized to process the respondent’s personal data with the direct permission of the controller or processor.
k) Consent
Respondent’s consent is any well-defined, informed and unambiguous indication of the respondent’s wish that he or she consents to the processing of personal data relating to him or her through a statement or clear affirmative action.
GENERAL DATA OF THE DATA PROCESSING MANAGER:
The head of personal data processing under the General Regulation on Personal Data Protection or other laws concerning the protection of personal data applicable in EU Member States is:
Apartment Smokvica
Marija Negulić
Smokvica 35
Croatia
Phone number: +385 95 9008775
Email: info@smokvica-pag.com
Website: https://smokvica-pag.com
Cookies
The Smokvica-pag.com website uses cookies. Cookies are text files that your browser saves on your computer system.
Many websites and servers use cookies. Many cookies contain a so-called cookie ID. Cookie ID is a unique identifier of cookies. It consists of a string of characters that websites and servers can assign to the specific browser in which the cookie is stored. This allows the websites and servers visited to distinguish individual browsers from other browsers that have different cookies. An individual browser can be identified by a unique cookie ID.
Through the use of cookies, the website provides visitors with more affordable services that would not be possible without the use of cookies.
The information and offers of the website can be optimized through cookies so that the user and his user experience come first. As mentioned earlier, cookies allow us to identify website users. The purpose is to make it easier for the user to use the website. For example, a user who uses cookies does not have to enter access data every time they access the website, because this procedure is taken over by the website that places the cookie on the computer system. Another example of using cookies is a shopping cart in a web store. The web store remembers the items that the user has placed in the cart via cookies.
The respondent may at any time prevent the placement of cookies by editing the settings of the browser he uses, and thus may permanently disable the placement of cookies. Furthermore, already set cookies can be removed at any time via any browser. However, if the respondent deactivates the setting of cookies in their browser, they will not be able to use all the functions of the website.
Collection of general data and information
The Smokvica-pag.com website collects general data and information when a respondent or automated system accesses the website. This general data and information is then stored on the server as log files. It collects (1) the type of browser and its version, (2) the operating system (3) the website from which my website is accessed (so-called referrers), (4) subpages, (5) the date and time of access to the website, (6) ) IP address, (7) Internet service provider and (8) other similar data and information that may be used in the event of an attack on the information system.
When using this general data and information, no conclusions are drawn about the respondent. In contrast, this information is needed to (1) properly deliver website content, (2) optimize website content and marketing, (3) ensure the long-term capability of the system and website, (4) provide the necessary assistance to government agencies in a case of prosecution for cyber-attack. Therefore, the Smokvica-pag.com website analyzes anonymously collected data and information statistically with the aim of increasing data protection and security, and to ensure an optimal level of protection of all collected personal data that it processes. Anonymous data of server log files are stored separately from the personal data of the respondents.
Possibility of contact via the website
The Smokvica-pag.com website contains information that enables quick contact via electronic media as well as direct communication that includes the so-called email address. If the respondent contacts the head of personal data processing via email or contact form, the transferred personal data is automatically saved. Personal data transferred voluntarily by the respondent to the controller of personal data processing are automatically stored for the purpose of processing or further communication with the respondent. There is no transfer of this type of personal data to a third party.
Routinely deleted or blocked personal data
The head of personal data processing will process and keep the personal data of the respondents only for the time necessary to achieve the goals of holding personal data, or until the deadline allowed by EU legislation or other legislators under whose authority the head of personal data processing is.
If the reason for storing personal data cannot be fulfilled or the retention period set by EU Legislation or other competent legislators expires, the personal data of the respondents will be routinely blocked or deleted in accordance with legal requirements.
Respondents’ rights
a) The right to confirmation of personal data
Each respondent has the right, guaranteed by EU legislation, to obtain confirmation from the controller of personal data whether his or her personal data are used or processed. If the respondent wishes to exercise this right to confirmation, he or she may at any time contact the head of personal data processing.
b) The right of access to personal data
Each respondent has the right guaranteed by EU Legislation to receive at any time from the controller of personal data free information about their personal data stored, as well as a copy of the requested personal data. Furthermore, European provisions and directives allow the respondent access to the following information:
purpose of personal data processing;
the type of personal data requested;
the recipient or type of recipient with whom the personal data are shared, in particular recipients from third countries or international organizations;
where possible, the envisaged period of retention of personal data, or in the event of impossibility, the criteria determining that period;
the existence of the right of the respondent to request from the controller of personal data processing the correction or deletion of personal data, the restriction of the processing of personal data of the respondent or the right of the respondent to object to the processing of personal data;
the existence of the right to lodge a complaint with the supervisory authority;
if personal data are not collected directly from respondents, information on the source of personal data is available;
the existence of an automated decision-making process referred to in Article 22, Paragraphs 1 and 4 of the General Data Protection Regulation, and in this case available information on the logic of automation, as well as the importance and intended consequences for the respondents. Furthermore, the respondent has the right to information if his or her personal data is transferred to third countries or international organizations. In this case, the respondent is entitled to information on security measures implemented in the data transfer
If the respondent wishes to exercise this right of access, he may at any time contact the head of personal data processing.
c) The right to correction of personal data
Every respondent has the right guaranteed by European legislation to receive a correction of inaccurate personal data from the controller at any time. Having in mind the purpose of personal data processing, the respondent has the right to have his / her incomplete personal data supplemented, among other things, by means of a supplementary statement.
If the respondent wishes to exercise this right to rectification, he may at any time contact the head of personal data processing.
d) The right to delete personal data (Right to forget)
Every respondent has the right, guaranteed by European legislation, to request at any time from the controller of personal data the deletion of personal data related to the respondent without delay. The controller of personal data processing has the obligation to delete personal data without delay where at least one of the conditions is applicable, as long as the processing is not necessary:
Personal data are no longer required in terms of the purpose for which they were collected or processed.
The respondent withdrew his consent to the processing of personal data based on Article 6, Paragraph 1 or Article 9, Paragraph 2 of the General Regulation on Personal Data Protection, and where there is no longer a legal basis for data processing.
The respondent opposes the processing of data according to Article 21, Paragraph 1 of the General Regulation on Personal Data Protection, and there is no legal basis for data processing, or the respondent opposes the processing of data according to Article 21, Paragraph 2 of the General Regulation on Personal Data Protection.
Personal data has been processed illegally.
Personal data must be deleted in accordance with the legal obligation under the EU or the laws of the Member State whose controller is the national.
Personal data were collected in connection with the offer of the information society service according to Article 8, Paragraph 1 of the General Regulation on Personal Data Protection. If at least one of the above reasons is applicable, and the respondent requests the deletion of personal data collected by the Smokvica-pag.com website, he or she may contact the head of personal data processing. The head of personal data processing will ensure that the deletion of personal data is carried out immediately.
In places where the controller has allowed the publication of personal data, and according to Article 17, Paragraph 1, the deletion of such personal data is mandatory, the controller shall take reasonable steps, including technical measures, to take into account technical feasibility and implementation costs. informed other heads of personal data processing that the respondent has requested the deletion of all links, copies or replicas of personal data, until their processing is no longer required. The head of personal data processing on the Smokvica-pag.com website will ensure the implementation of these measures in each individual case.
e) The right to limit the processing of personal data
According to EU legislation, each respondent has a guaranteed right to obtain from the controller of personal data processing the right to restrict the processing of personal data in cases where the following applies:
The accuracy of personal data is disputed by the respondents which allows the head of personal data processing to check the accuracy of personal data.
The processing of personal data is illegal, and the respondent opposes the deletion of personal data and instead requests a restriction on the use of the said personal data.
Head of Personal Data Processing Personal data are no longer required for processing, however the respondent is required to establish, implement or defend legal claims.
The respondent objected to the processing of personal data pursuant to Article 21, Paragraph 1 of the General Regulation on Personal Data Protection, pending verification of whether the legal basis of the controller of personal data processing outweighs that of the respondent.
If at least one of the above reasons is applicable, and the respondent requests a restriction on the processing of personal data collected by the Smokvica-pag.com website, he or she may contact the head of personal data processing. The head of personal data processing will ensure that the processing of personal data is restricted.
f) The right to the portability of personal data
Every respondent under EU law has a guaranteed right to receive personal data relating to him or her from the controller of personal data processing, in a structured, mostly used and legible format. The respondent has the right to transfer the said personal data to another controller of personal data from the current controller of personal data processing without any interference, as long as the processing of personal data is based on consent under point A, Article 6, paragraph 1 or point A, Article 9, paragraph 2 Of the General Regulation on Personal Data Protection, or under a contract under point B, Article 6, Paragraph 1 of the General Regulation on Data Protection, and data processing is performed automatically, as long as data processing is not necessary for tasks of public interest or for performing official duties. personal data.
Furthermore, under the existing right to personal data portability under Article 20 (1) of the General Data Protection Regulation, the respondent has the right to have his or her personal data transferred directly between the controller, where technically feasible where this procedure does not infringe and the freedoms of other respondents.
In order to exercise his right to the transfer of personal data, the respondent may at any time contact the head of personal data processing of the website Smokvica-pag.com
g) The right to object
Under EU law, each respondent is guaranteed the right to object based on his or her own situation, at all times, to the processing of personal data relating to the respondent, based on points E and F of Article 6 (1) of the General Data Protection Regulation. It may also apply to profiling based on this Regulation.
The Smokvica-pag.com website will not continue processing personal data in the event of a complaint, unless there is a serious legal basis for the processing of personal data, which may bypass the interests, rights and freedoms of respondents, or to establish, implement or defend legal claims.
If the website Smokvica-pag.com processes personal data for marketing purposes, the respondent has the right to object at any time against the processing of personal data used for these purposes. This also applies to profiling that is closely related for the purposes of such direct marketing. If the respondent objects to the processing of personal data for the purposes of direct marketing, the website Smokvica-pag.com will no longer process the personal data of the respondent for the purposes of direct marketing.
In addition, the respondent has the right based on his own situation the right to object to the processing of personal data by the website Smokvica-pag.com, which are used for scientific research or statistical purposes under Article 89, paragraph 1 of the General Regulation on Personal Data Protection, unless the processing of the data is necessary for the purpose of the public interest.
In order to exercise the right to object, the respondent may at any time contact the head of personal data processing of the Smokvica-pag.com website. In addition, in the context of the use of information society services, the respondent, despite Regulation 2002/58 / EC, may exercise his right to object by automated means using technical specifications.
h) Automated decision making, including profiling
Every respondent under EU law is guaranteed the right not to be subject to decisions based solely on automated processing of personal data, including profiling, which may have legal or similar consequences for him or her, as long as decision (1) is not part of an agreement between respondents and the controller of personal data, or (2) is not allowed under EU law or individual Member States that take appropriate measures to protect the rights, freedoms and interests of respondents, or (3) is not based on the explicit consent of respondents.
If the decision (1) is required for a contract between the respondent and the head of personal data processing, or (2) is based on the explicit consent of the respondent, the website Smokvica-pag.com will implement measures to protect the respondent’s rights, freedoms and interests, minimum right to human intervention by the personal data controller to whom he will express his views and challenge the decision.
If the respondent wishes to exercise his / her rights regarding automated individual decision-making, he / she can contact the head of personal data processing on the Smokvica-pag.com website at any time.
i) The right to withdraw and revoke consent
Every respondent under EU law has the guaranteed right to withdraw and / or revoke their consent to the processing of personal data at any time.
If the respondent wishes to exercise the right to withdraw and / or revoke his consent, he may at any time contact the head of personal data processing on the Smokvica-pag.com website.
Personal data protection provisions related to Facebook
On the Smokvica-pag.com website, the head of personal data processing installed Facebook components. Facebook is a social network.
A social network is a place of social connection on the Internet, an online community that typically allows users to communicate with each other in a virtual space. A social network serves as a platform to share opinions and experiences, or to provide the Internet community with personal or work-related information. Facebook allows its users to create private profiles, upload images and connect through friend requests.
Facebook is owned by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the person using Facebook lives outside the United States or Canada, the head of personal data processing is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.
By opening any page of the Smokvica-pag.com website, which is managed by the head of personal data processing, and on which the Facebook component (Facebook plugin) is installed, the respondent’s browser will display the appropriate Facebook component. An overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/. During this technical procedure, Facebook was provided with information about a specific subpage visited by the respondent.
If the respondent is logged in to Facebook, at the same time Facebook can detect each of his views of the website Smokvica-pag.com, and during his stay on the website which specific subpages he visited. This information is collected through the Facebook component and remitted to the respondent’s Facebook account. If the respondent clicks on any Facebook button integrated on the Smokvica-pag.com website, eg the “Like” button, or if the respondent sends a comment, then Facebook transfers the information to the respondent’s personal Facebook account and thus saves personal data.
Each time the respondent is logged in to Facebook and at the same time accesses the Smokvica-pag.com website, Facebook will receive information about it via the Facebook component. This will happen regardless of whether the respondent clicks on the Facebook component or not. If the respondent does not want to transfer this type of information, he can prevent the same by logging out of the Facebook account before accessing the Smokvica-pag.com website.
The data protection guidelines published by Facebook at https://facebook.com/about/privacy/ provide information on the collection, processing and use of personal data by Facebook. It also explained what settings Facebook provides to protect respondents ’personal information. Also, various configuration options are available to prevent the transfer of personal data to Facebook. The respondent may use the above options for the purpose of disabling the sending of personal data.
PROVISIONS FOR THE PROTECTION OF PERSONAL DATA RELATED TO GOOGLE ANALYTUCS (WITH ANONYMOUS FUNCTION)
On the Smokvica-pag.com website, the head of personal data processing has installed Google Analytics components (with an anonymization function). Google Analytics is an Internet service; collecting and analyzing data on visitor behavior on the website. The web analytics service collects, among other things, information about the website from which the respondent came, which subpages he visited or how often and for how long he browses a particular subpage. Web analytics is used to optimize a website and to conduct online advertising analysis.
Google Analytics is owned by Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, USA.
For the purposes of web analytics via Google Analytics, the head of personal data processing uses the application “_gat._anonymizelp” through which the IP address of the respondent is shortened by Google and anonymized when the website Smokvica-pag.com is accessed by a respondent from an EU Member State or another country. competences of the European Economic Area.
The purpose of the Google Analytics component is to analyze traffic on the Smokvica-pag.com website. Google uses the data and information collected, inter alia, to evaluate your use of the Website and to provide reporting that reflects activity on the Website, and to provide other services related to your use of the Website.
Google Analytics places a cookie on the respondent’s computer system. The definition of cookies is already explained in this document. Setting cookies allows Google to analyze the use of the website. Each time an individual subpage of the Smokvica-pag.com website is managed by a personal data processing manager with a Google Analytics component installed, the respondent’s browser will automatically provide the Google Analytics component with the information needed for Internet advertising and Google’s commission calculation. During this technical procedure, Google will receive personal information such as the IP address of the respondent (used to understand where visits and clicks come from, and create a commission calculation based on that).
The cookie is used to store personal information such as the time of access to the website, the location from which it is accessed and the frequency of access to the website by the respondents. With each visit to the Smokvica-pag.com website, such personal data, including the IP address of the respondents, will be forwarded to Google and will be located there. Google may transfer this personal information through a technical procedure to a third party.
As already mentioned, the respondent can prevent the setting of cookies by appropriate modifications to the browser at any time. Such modifications would also prevent Google Analytics from setting a cookie on the respondents ’computer system. It is also possible to delete cookies that have already been set via a browser or some other software solution.
Additionally, the respondent may object to the collection and processing of personal data generated by Google Analytics, which are related to the use of the Smokvica-pag.com website. To accomplish this, the respondent must download the browser add-on located at https://tools.google.com/dlpage/gaoptout and install it. This JavaScript add-on lets Google Analytics know that information about respondents’ visits to the website may not be collected and processed. Google considers the installation of this add-on to be a valid complaint against the collection of personal data. If at any subsequent time the respondent’s computer system is deleted, formatted, or reinstalled, the respondent will need to reinstall browser add-ons to disable Google Analytics. If for some reason the respondent or an authorized person removed the add-on to the browser, or the add-on to the browser is disabled, it is always possible to reinstall or activate it.
Additional information and Google’s privacy policy can be found at https://www.google.com/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/us.html . Additional information related to Google Analytics can be found at https://www.google.com/analytics/.
Legal basis for the processing of personal data
Article 6, Paragraph 1, Subparagraph A of the General Regulation on Personal Data Protection is the legal basis for the processing of personal data for which we have obtained consent. If the processing of personal data is necessary for the implementation of the contract of which the respondent is a part, such as when the processing of personal data is necessary for the supply of goods or services, the processing is based on Article 6 (1) (B) of the General Data Protection Regulation. The same applies to the processing of personal data needed to carry out pre-contractual measures, eg in inquiries related to products or services. If a legal or natural person is subject to a legal obligation where the processing of personal data is necessary, such as the fulfillment of tax obligations, the processing of personal data is based on Article 6, Paragraph 1, Subparagraph C of the General Data Protection Regulation. In rare cases, the processing of personal data is necessary in order to protect the interests of the respondent or some other natural person. For example, in the event that a respondent is injured while visiting the premises of the owner of this website, personal information such as name, age, health insurance information or some other vital information will have to be passed on to a doctor, hospital or a third party. Such data processing is based on Article 6, Paragraph 1, Subparagraph D of the General Regulation on Personal Data Protection. Finally, the processing of personal data may also be based on Article 6, Paragraph 1, Subparagraph F of the General Data Protection Regulation. This legal basis is used in personal data processing procedures when no previous legal basis is applicable, if the processing of personal data is necessary for the legitimate interests of the owner of the website Smokvica-pag.com or a third party, except in situations where these interests jeopardize fundamental rights. and the freedoms of respondents, which require the protection of personal data. Such processing of personal data is particularly permitted as it is specifically mentioned by EU Legislation. It is envisaged that it is possible to invoke a legitimate interest if the respondent is a client of the controller of personal data processing.
Legitimate interests of the controller of personal data processing or a third party
In places where the processing of personal data is based on Article 6, Paragraph 1, Subparagraph F of the General Data Protection Regulation, a legitimate interest is to do business for the benefit of employees and / or shareholders, if any.
Period of storage of personal data
The criterion in determining the storage period of personal data is the maximum storage period determined by law. After the expiration of this period, personal data are routinely deleted, until they are no longer needed to fulfill the contract or its conclusion.
PROVISION OF PERSONAL DATA AS A LEGAL OR CONTRACTUAL PREREQUISITE FOR CONCLUSION OF THE CONTRACT, OBLIGATION OF THE RESPONDENT TO PROVIDE PERSONAL DATA, POSSIBLE CONSEQUENCES IF THE DATA IS NOT PROVIDED
We need to clarify that the provision of personal data is partially prescribed by law (e.g. tax provisions) or may be the result of a contractual obligation (e.g. information about a contractual partner). Sometimes it is necessary to conclude a contract so that the respondent provides personal data which is then processed. The respondent, for example, is required to provide personal information when concluding a contract with the owner of the Smokvica-pag.com website. Refusal to provide personal data will result in the inability to enter into a contract. Before the respondent provides personal information, he will have to contact the owner of the Smokvica-pag.com website. He will then indicate to him whether the provision of personal data is legally or contractually necessary, or whether it is necessary for the conclusion of the contract, whether there is an obligation to provide personal data and ultimately the consequences if he refuses to provide personal data.
Existence of an automated decision making process
The Smokvica-pag.com website does not use an automated decision-making process, ie profiling.
DELETION OF PERSONAL DATA ON REQUEST
To delete personal data stored by the Smokvica-pag.com website during the respondent’s use, each respondent may apply with a direct request for deletion to the e-mail address: info@smokvica-pag.com
OTHER
This website may contain links that lead to other websites. Smokvica-pag.com is not responsible for the content or the Privacy Policy of these websites.