PRIVACY AND DATA PROTECTION
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016. on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (Official Journal of the European Union L 119, 4.5.2016, p. 1), hereinafter referred to as the General Regulation on data protection), which has been in full application since 25 May 2018. in the Republic of Croatia and all EU Member States, as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18, hereinafter: the Act), respectively in accordance with the legal framework for the protection of personal data in the Republic of Croatia and the European Union, MC Ultimaks Ltd. headquartered in the Republic of Croatia, Rakarska 18, 10410 Velika Gorica, registered with the Commercial Court of Zagreb under the Personal Identification Number (OIB): 53535281166 (hereinafter: the Company), as the head of processing personal data of users of its services and customers has made Privacy Policy for users of services and customers. Privacy policy is a unilaterally binding legal act based on fundamental principles in the processing of personal data, which regulates what data users and / or customers collect, how such data is processed, for what purposes it is used. The privacy policy also informs users of the services and / or customers of their rights in the collection and further processing of personal information, all for the purpose of protecting their privacy in a broad sense.
Privacy policy is based on the following principles of processing personal data: the principle of legality, transparency and best practice, the principle of limited processing and reduction of data, the principle of accuracy and completeness of personal data, the principle of limited storage, the principle of data integrity and confidentiality, the principle of responsibility, the principle of trust and fair treatment, the principle of opportunity (processing purposes), the principle of processing in an unnamed (anonymized) form.
The Privacy Policy applies to all services offered by the Company, with the goal being to clearly and transparently inform users and / or customers about the processing of their personal information and their rights. First and foremost, users and / or customers may at any time apply to the Company for a request to amend and / or update the data relating to them, as well as for a statement of the purposes for which they wish their the data is processed.
PERSONAL DATA PROCESSING IS THE LIABILITY OF THE COMPANY:
MC Ultimaks d.o.o. based in the Republic of Croatia, Velika Gorica, Rakarska 18, registered at the Commercial Court in Zagreb under Personal Identification Number (OIB): 53535281166.
CONTACT DATA OF THE DATA PROCESSING OFFICER:
e-mail: info@hotel-royal-airport.com
Method of collection and types of data to be collected
Some of the services provided by the Company require the collection of personal information of users and / or customers, with basic information being collected in the following ways:
COOKIES POLICY
By switching off and / or blocking the cookie from being saved, the user and / or customer can still browse the Company’s web pages. However, it is likely that some features and / or functionality of the Website will not be available to such user and / or customer, or that the time required to access certain features of the Website will be longer than usual.
The network identifiers in question may leave clues that, in combination with other identifiers and information provided by the Internet service servers, may serve to identify the user and / or customer. We also collect and process the following information for this purpose:
The amount of personal information that the Company collects depends on the type of service the Company provides to its customers, as well as the legal basis on which it collects data. The Company constantly takes care of collecting only the necessary scope of personal data that is required to achieve the legally determined purpose for which the data are processed.
For what purposes personal data is collected and further processed
The Company collects personally identifiable information in order to provide, maintain, protect and improve its services related to the purchase of certain products, to understand the ways in which users and / or customers use the services provided and use the Company’s web sites and to fulfill their contractual obligations Society. Such information The Company collects on the basis of the consent given by the user and / or customer for one or more specific purposes, as well as in one of the following cases.
Performance of contractual obligations
The Company collects and further processes personal information of users and / or customers for the purpose of entering into and executing contracts, delivering ordered products, advising and assisting with the use of products, providing appropriate additional and / or extended product warranties, resolving customer and / or customer complaints and other actions related to the conclusion and execution of the contract in accordance with the relevant regulations.
The legal basis for processing personal data of users and / or customers for the purposes stated above is the necessity to conclude a contract, that is, if the user and / or customer refuses to provide relevant data, the Company will not be able to conclude a contract and / or take certain actions related to execution of the concluded contract.
Fulfillment of legal obligations
On the basis of a written request from users and / or customers at the above-mentioned address of the personal data protection officer, the Company is obliged to provide them with access to the personal data it processes about them, correct inaccurate personal data, delete personal data or restrict the processing of personal data with the possibility of objecting to the processing of personal data and the right to data portability.
Direct Marketing
The contact details of users and / or customers may be used to send promotional notices about the Company’s products and services if the user and / or buyer has consented to such processing or if there is a legitimate interest of the Company in such actions, unless such interests are stronger or fundamental rights and freedoms of the user and / or customer that require the protection of personal information.
The Company may use contact information and personally address users and / or customers whose personal information it already possesses, based on a legitimate interest in sending promotional notices to all products and services it provides, using all available publicity channels, unless the user and / or the buyer does not object to such processing.
In order for the user and / or buyer to be able to receive information appropriate to his wishes and habits, it is necessary for the Company to use certain information of users and / or customers to create personalized promotional announcements, until the user and / or customer explicitly objects to such processing of data. that is, withdraw your earlier application for processing.
The legal basis for processing personal data for the aforementioned purposes is the legitimate interest of the Company, unless the interest or fundamental rights and freedoms that require the protection of the data are stronger than that interest.
Internal purposes
The Company uses certain information of users and / or customers solely for the purposes of its own records, for the purpose of protecting the legitimate interests of users and / or customers and / or the Company. For example, this includes the use of personal information for the purpose of creating offers that meet the needs and desires of users and / or customers, market research and analysis.
Information about potential users
The Company is also authorized to collect information about potential users and / or customers of its services and / or products. This information includes basic information (name and surname, e-mail address) as well as the interests of potential users and / or customers who contact the Company with the desire to be informed and / or offered certain products and services.
The legal basis for collection in the case described is the consent of the user and / or buyer.
Time period in which personal data is stored and processed
Depending on the purpose and the legal basis on which the personal data of users and / or customers are collected, the Company is obliged in certain cases to keep personal data for a time period prescribed by the relevant regulations or until the termination of the purpose for which they were collected. With the expiry of the statutory period obliging the Company to keep certain personal data or with termination of the purpose, data shall be deleted.
In cases where the basis for the collection and processing of data constitutes a legitimate interest of the Company or the consent of the user and / or customer, the personal data are stored for the following periods:
Data processed based on the legitimate interest of the Company and / or the attraction of users and / or customers may be deleted even before the expiry of the period specified in this Policy, in case such deletion is requested by the user and / or buyer, or when the user and / or buyer objects to such process.
USER RIGHTS
Right to access personal information
The Company, as processing manager, undertakes to provide access to personal data it processes about them on the basis of a written request from the user and / or customer, which may also be in the form of electronic mail, to inform them about the purpose of processing personal data into which they are processed, the type of personal data that is being processed, the recipients or categories of recipients to whom personal data have been disclosed or will be disclosed, the estimated processing time period or the criteria used to determine that period.
Right to correct incorrect information
As processing manager, the Company will allow the correction of inaccurate personal information in each individual case when it is determined that the collected personal information about the user and / or customer is incorrect or there has been a change in the user and / or customer data.
Right to delete personal information
The Company will erase the personal data of the user and / or customer in the following cases:
The right to restrict data processing
Restriction of the processing personal data The Company will ensure in cases where the user and / or customer disputes the accuracy of the data, when the processing is illegal and the user and / or customer opposes the deletion of data and instead requests a restriction of their use, when the processing manager no longer needs personal data for processing needs, but the user and / or buyer requests information for the fulfillment of legal requirements, as well as in cases where the user and / or buyer objects to the processing of personal data based on the legitimate interest of the Company, including the creation of user and / or customer profiles.
Right to file a complaint
The user and / or buyer has the right to object to the processing of personal data relating to him if the data is processed for the legitimate interest of the processing manager. In such a case, the Company, as processing manager, will cease processing personal data unless it proves that there are compelling legitimate reasons for processing personal data in relation to the rights of the user and / or customer, or where the processing of data serves to set up, obtain or defend legal requirements.
If the personal data of the user and / or customer are processed for direct marketing purposes, the user has the right to object at any time to processing for direct marketing purposes, especially if the personal data is used for the purpose of creating a profile.
Where personal information is processed
The Company processes personal data of users and / or customers in the Republic of Croatia.
Under what conditions personal information is passed on to third parties
The Company shall only pass on personal data of users and / or customers to third parties (including competent authorities) in the following cases:
Manage consent
The active role of the user and / or customer in the protection of privacy is reflected in giving consent as a voluntary, especially informed and unequivocal expression of the wishes of the respondents to whom, by a statement or clear affirmative action, they consent to the processing of personal data. Consent management implies the possibility for the user and / or buyer to pro actively and unequivocally authorize the Company to collect and process certain personal data for one or more purposes (consent of the respondents), or to withdraw the consent given earlier in order to collect and process personal data, in one or more purposes.
Who to talk to
In the event of any questions regarding the protection of personal data by the Company, users and / or customers may contact the Personal Data Protection Officer by email at the email address provided in this Privacy Policy or in writing at the following address:
MC Ultimaks d.o.o.
n / r Data Protection Officer
Rakarska 18, HR-10410 Velika Gorica
Changes to the Privacy Policy
The Company reserves the right to amend this Policy at any time without giving any special notice to interested persons. For this reason, it is recommended that all interested parties regularly check the content of the Company’s web pages for information on the updated content of this Policy.
In Zagreb, December 2019. .
MC Ultimaks d.o.o.
