Personal Information Protection Policy at Marina Resort Cavtat d.o.o
GENERAL PRINCIPLES
Thank you for visiting our website.
Marina Resort Cavtat d.o.o. Vukovarska 22, 20000 Dubrovnik PIN: 36996230690 [hereinafter: MRC] is very serious about protecting the privacy of your personal information and implements all technical and organisational measures required by best practices, Croatian laws and the General Data Protection Regulation (EC 2016/679), abbreviated as “GDPR”.The specific purpose and method of processing of your personal information largely depend on the type of business relationship based on which we collect your information. We are guided by the basic personal information protection principles in our business, which means that we process information legally, transparently and fairly, that the processing is limited to the purpose for which the information was collected, and that only the information essential for this purpose is processed. We only store your personal information for as long as we have to in order to fulfil the purpose of information processing, except in cases when legal regulations require us to store personal information for a longer period and in cases when the storing of information is required by our legitimate interests (e.g. establishment, realization or protection of legal requirements). When processing your personal information, we are guided by the principles of accuracy, reliability, confidentiality and integrity. Access to your personal information is restricted to authorized persons at MRC our business service provider partners (data processors).
If you disagree with MRC Personal Information Protection Policy, please refrain from using our website and sharing your personal information with us. Any changes to MRC privacy policy will be published on the website.
This Privacy Policy regulates the manner of treating the personal data to which the company MRC have access through the reservation system or any other form.
KEY INFORMATION
Data Controller and Personal Information Protection Officer
Marina Resort Cavtat d.o.o. Vukovarska 22, 20000 Dubrovnik, HR is the Data Controller.
Matea Bošković is the Personal Information Protection Officer at MRC.
Please send all your inquiries to:
- Address: Marina Resort Cavtat d.o.o., Vukovarska 22, 20000 Dubrovnik, HR, Attn. Personal Information Protection Officer
- E-mail address: dpo@marinaresortcavtat.com
Processing purposes and legal grounds for personal information processing
MRC as the Data Controller, protects your privacy and only processes the personal information that is essential to MRC and that has been collected as a part of MRC business activities, whether the information was provided by you or a third party or obtained from publicly available sources, for the following purposes:
- Fulfilment of contractual obligations – when processing is necessary to fulfil the contract that you are a party to or to take action at your request prior to concluding the contract
- Satisfaction of legitimate interests – when necessary, we process personal information outside of a specific contractual relationship in order to satisfy our legitimate interests. Such legitimate interests may include the following:
- Conducting legal proceedings and maintain records of legal proceedings
- Discovering perpetrators of criminal offences and fraud prevention
- Protection of persons and property
- Fulfilment of your requests so you could help us develop, deliver and improve our products and services
- Answering your inquiries and comments
- Processing of personal information for special purposes or several special purposes described by consent, solely after receiving your consent to have your personal information processed for a particular purpose. Your consent is compliant with the relevant provisions of the Regulation and given unconditionally and freely. You reserve the right to revoke your consent at any time.
Should we process your personal information for purposes not described here or outside of the purpose to which you have consented, prior to such processing; we will provide you with information about the other purpose and all other relevant information about the processing.
By providing your personal information such as e-mail address, phone, etc., you also give your explicit consent for the company MRC to use your data for a relevant purpose. If, at any time, you prefer not to have the company MRC use your information for any of the purposes mentioned above, you are authorised to withdraw, without any consequences for your rights, your consent for the data processing which has been given for processing for a particular purpose.
This privacy policy text does not apply to our processing of personal data on behalf and based on instructions of a third party, such as companies that organise or offer travel packages and other service providers which are legally entitled to share your personal data with us.
Which personal information do we process and how do we get it?
We primarily process personal information collected Personal data that are structured and covered by our privacy policy are primarily personal information collected within the scope of a contractual relationship, such as:
- full name, date and place of birth, citizenship, passport information related to the obtaining of the OIB (PIN) in front of the competent tax office,
- address
- e-mail address
- phone, cell phone or fax number
- the data on the credit card you provided during online reservation or to a third party
- payment or payment insurance procedure
- your preferences to improve our services
- any other information you mention to us that you want to keep confidential
- CV when applying for employment
We shall not sell, lease or disclose your personal data to any third party without your explicit consent, as this is contrary to the privacy policy and the General Regulation and the Law. The company MRC shall not be liable for an accidental error or an error due to a force majeure which would cause a possible breach of the protection of your personal data, but it will remedy it as soon as possible. The company MRC only collects personal data you provided to us voluntarily and we use them to provide the above services. We do not ask you to send us your data so that you can access our webpage, nor do we ask you to disclose more data than is actually necessary to use one of our services. The credit card data you provide us are used only as a means of securing payment for reserved services and the company MRC take appropriate organisational and technical protection measures to process such data. After duly provided and paid-for service, those data shall no longer be used without your express consent. By filling out the form on the webpage, you guarantee that the information you have provided is correct and you agree to the terms of our privacy policy.
Are you under obligation to share your personal information with us?
You are not under obligation to do so. However, keep in mind that in some cases, should you refuse to provide the requested information, MRC will not be able to enter into a contractual relationship with you or fulfil its legal or contractual obligations.
Data storage period
MRC will only store your personal information for as long as necessary to fulfil its legal or contractual obligation or legitimate interest, except in case your personal information is processed based on consent, when processing ceases at the moment that you withdraw your consent. You can withdraw your consent at any time by sending your request to:
- Address: Marina Resort Cavtat d.o.o., Vukovarska 22, 20000 Dubrovnik, HR, Attn. Personal Information Protection Officer
- E-mail address: dpo@marinaresortcavtat.com
We would like to underline that withdrawing your consent has no effect on the legality of information processing based on the consent prior to its withdrawal.When your personal information is no longer needed for the fulfilment of above purposes, it will be destroyed, except in cases when continued storage is required by law.
We emphasise that your personal data shall remain confidential when you visit webpage, unless you wish to voluntarily disclose them. We undertake that we will not disclose your personal data to other parties, except in cases prescribed by law.
Who is the recipient of your personal information?
MRC is under obligation to protect your personal information and will not disclose or make it available to third parties without your express consent, except:
- to service providers we hire as data processors for tasks related to the execution of contracts to which you are a party,
- to the authorities for purposes of activities from their scope (Tax Administration etc.)
- when the information is requested by a court of law, relevant state attorney’s office, or other authorities in equivalent legal proceedings
- when MRC is obligated under the law to disclose the information.
What are your rights with respect to the processing of personal information?
Depending on the legal basis for processing, you may have the following rights:
- Right to request access to personal information relating to you, which means that you have the right to be informed about the scope of collected information, purpose of processing, category of personal information that is processed, recipients that the information is delivered to, and the period of storage
- Right to have incorrect personal information rectified and incomplete personal information amended, in which case we are under obligation to fulfil your request without unnecessary delay
- Right to object to the processing of personal information in case it is processed based on MRC’s legitimate interest or for direct marketing purposes
- Right to request deletion of information in cases when the purpose of processing has been fulfilled, when you have withdrawn your consent as the only basis for processing, when your privacy protection interest outweighs MRC’s legitimate interest in processing, when you have lodged an objection against the processing of information for direct marketing purposes, when it is required for purposes of compliance with legal requirements that MRC is subject to, and in cases of any illegal processing. The right to have the information deleted is not an absolute right and does not apply, for instance, in cases when processing is necessary to exercise the right to the freedom of information and expression, compliance with legal requirements that MRC is subject to, establishment, realisation or defence of legal requests, and so on.
- Right to restrict the processing of information, for instance, in cases when you have disputed the accuracy of the information, for as long as it takes to verify its accuracy
- Right to transfer the information to another Data Controller if the processing is based on consent or execution of a contract to which you are a party, or if the processing is performed automatically and it would be technically feasible
- Right to submit an objection to a national supervisory authority, i.e. the Croatian Personal Data Protection Agency Requesting access to personal information pertaining to you or requesting the rectification of your personal informationIf you want access to your personal information or if you believe that irregularities occurred in the processing of personal information, please contact our Personal Information Protection Officer.
Objecting to the processing of personal information
If you believe that MRC has no legal grounds to process your personal information, you can submit an objection to the Personal Information Protection Officer at any time.In this case, we will no longer process your personal information and we will not be able to provide our services to you or be in a business relationship with you.
< BACK