Information on the collection and processing of personal data
Luxury house Vodice, The luxury villa collection pays great attention to the protection and processing of personal data. In performing its registered activity, the Company processes personal data in compliance with all relevant laws and regulations.
The Controller is responsible for data processing:
Vladem d.o.o., HR – 48260 KRIŽEVCI, adresa, OIB
+385 (0)00 000 000
email: luxuryhouse.vodice@gmail.com
Službenik za zaštitu podataka (DPO) je: Davor Maksić i dostupan je za kontakt: T. +385 (0)0 000 000
email: luxuryhouse.vodice@gmail.com
If we use the services of external providers to process your personal data ("Processors"), we are talking about the processing (of personal data) by order. Even in this case, we are responsible for the protection of your personal data. When processing your personal data, we do not use service providers outside the EU. Exceptionally, if it proves necessary, we will only do so if there is a decision of the European Commission on suitability for that third country or if we have agreed with the service provider as a Processor on appropriate guarantees or compliance with binding regulations on the protection of personal data.
This Privacy Policy on the collection and processing of personal data describes what data we collect, how we process it and for what purposes we use it, as well as your rights related to your data. The purpose of these Rules is to inform you about all relevant features of the collection of your personal data, their processing and storage. The above applies to all personal data that you have transmitted to us through electronic, written or verbal communication, or that have been transmitted to us through a third party and with whom you have a contractual or other similar relationship, as well as data collected from other sources.
Personal data we collect
We process the following personal data:
a) Your basic personal data that you or third parties make available to us when booking - Name, surname, country and city and address of residence, email address, telephone number, child's age, child's first and last name and date of birth, special requirements and habits , and the data of your companions; information required to make the reservation - credit card number, contact information in case of emergency - first and last name, phone number; other necessary data - e-mail address, health data - in case of requests related to epidemiological measures (COVID-19, etc.), data related to web use - IP address, website visits, data from social networks and similar data regarding the use of Internet browsers.
b) Guest check-in and check-out - Name and surname, date of birth, gender, personal document number (identity card, passport, driver's license), credit card number, country of birth, citizenship, visa number if the guest is subject to the visa regime, border crossing, i.e. the place of entry into the Republic of Croatia, the date of the guest's arrival at the facility and the date of departure.
The purpose of collecting personal data and the legal basis of processing
The company determines the purpose and means of processing personal data and in this sense is considered the manager of personal data processing. The main purpose of collecting personal data is a legal obligation and/or the conclusion and execution of a contract on accommodation and the provision of hospitality and tourism services, or to take actions at your request before and during the contract. At the same time, the scope of personal data that we collect depends on the type of contract you intend to conclude or are concluding or the request to exercise rights (type of service provided and price). Actions at your request before concluding a contract include checking your requirements and needs, if necessary checking the appropriateness or suitability of products and services for your special circumstances, all with the aim of making an offer and/or an informative calculation.
We process your basic personal data and guest registration and de-registration data on the basis of the legal obligation to enter them into the eVISITOR system, in accordance with the regulations on the way of keeping a list of tourists and on the form and content of the tourist registration form to the tourist association and the Act on Tourist Fees or for the needs of the Ministry of the Interior in accordance with to the Law on Foreigners, and the provision of the above information is necessary at the time of booking (in the event of amendments to the regulations and/or new regulations, the same will be directly applied to this Information). We delete the specified data after transferring it to the eVISITOR system, that is, after submitting the data to the MUP.
Accordingly, the collection of personal data with regard to the defined purpose represents a legal and contractual obligation and a necessary condition for concluding a contract. If you refuse to provide certain information, we will not be able to fulfill our legal or contractual obligations, which will result in the impossibility of concluding an accommodation contract.
We need the data necessary for the execution of the contractual obligation in order to confirm the reservation with an advance payment, so it is not possible to make a reservation, and therefore not to conclude the subject contract for the provision of accommodation without disclosing the said data, which is kept until the termination of the contract for the provision of accommodation.
The credit card number is collected because it is needed to conclude and execute the contract with the guest. It is used as insurance to pay the costs of accommodation and other services that could arise in the event that the guest does not settle the debt to the Company. The specified data is also used to pay for the service.
In case of emergency, we process contact data on the basis of legitimate interests, i.e. a potential situation when it is necessary and urgent to transfer certain relevant information to people close to you (in case of extraordinary circumstances such as illness, accident, etc.). We process other necessary data, i.e. e-mail address, based on the legitimate interest in quality communication between the contracting parties for the purpose of fulfilling all aspects of the contract, i.e. easier communication in terms of organizing your arrival and booking the accommodation itself, which data we also delete upon termination of the contract on the provision of accommodation services.
All your personal data that you or a third party have transferred to us are processed in accordance with the purpose of their processing (at the same time, we note that if you travel with children under 16 years old, we process their personal data, regardless of the basis, only on the basis of your express consent).
Links to third-party websites and services
Please note that we are not responsible for the collection, use, maintenance, exchange or publication of data and information by third parties. If you provide information on or use third-party websites, the privacy policies and terms of use of those websites apply. We recommend that you read the privacy policies of the websites you visit before providing any personal information.
Of course, we must take into account that no security system or internet data transmission system can guarantee complete security.
The immediate interests of the Company as the purpose of personal data processing
We will process your personal data for the needs of our immediate interests, except when your interests or your fundamental rights and freedoms that require the protection of personal data take precedence over these interests. We may also use the above data for our internal statistical and analytical purposes.
You can object to this direct interest of the Company at any time, in which case we will no longer process your data for this purpose, and this will not affect the legality of the processing until the day of withdrawal. In any case, we must have your express consent for direct marketing.
The right to submit a complaint to the supervisory authority
At any time, you can submit an objection to the processing of your personal data to the competent supervisory authority in accordance with the Act on the Implementation of the General Regulation on the Protection of Personal Data or another regulation that governs the protection of personal data and determines supervisory powers regarding the processing of personal data.
Other information
We regularly update the privacy policy.
This Information on the collection and processing of personal data applies from July 1, 2022. in accordance with EU Regulation 2016/679 of the European Parliament and the Council on the protection of individuals in connection with the processing of personal data and the free movement of such data from April 27, 2016 (General Data Protection Regulation - GDPR) and in accordance with the Law on the Implementation of the General Data Protection Regulation data (Official Gazette, No. 42/2018).