PRIVACY POLICY
TZG Metkovića, with its registered office in Metković, Ante Starčevića 3, OIB: 24761712785 (hereinafter: TZG Metkovića), respects the privacy of every person whose personal data it collects. We would like to inform you about what personal data TZG METKOVIĆA collects, how we protect it, and what your rights are.
TZG METKOVIĆA retains all copyrights to the use of photographs, texts and other published materials, in accordance with the positive legal regulations in the Republic of Croatia. Photographs, texts and other materials may not be published, sold, publicly or privately published or used in any other way without the consent of TZG METKOVIĆA. Any failure to comply with the above conditions entails the liability and obligation of TZG METKOVIĆA to compensate for non-material damage due to the violation of individual materials.
This Policy applies to all processing of personal data of TZG METKOVIĆ, unless otherwise stipulated by another policy of TZG METKOVIĆ. Exceptionally, in relation to the processing of data of guests and users of TZG METKOVIĆ services, this Policy takes precedence over other policies if those policies stipulate different rights and obligations regarding data processing.
Data controller and legal framework
TZG METKOVIĆA, as the Data Controller, respects your privacy and is committed to protecting your personal data. Data collection and storage are carried out in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018) and other regulations governing the relevant area and applicable in the Republic of Croatia.
Data Protection Officer
TZG METKOVIĆA has appointed a personal data protection officer who can be contacted at any time via the following address: info@tzmetkovic.hr or by mail to the address TZG Metković, Ante Starčevića 3, Metković, Republic of Croatia.
Within the framework of the application of this Policy, TZG METKOVIĆA pays special attention to respecting the principles of data processing and processes data:
Lawful – processing will be possible if it is permitted by law and within the limits permitted by law.
Fairly – taking into account the specifics of each relationship, applying all adequate measures to protect personal data and privacy in general, and not preventing the respondent from exercising their rights.
Transparent – informing respondents about the processing of personal data. From the very collection of data, when respondents are informed about all aspects of data processing, until the termination of data processing, respondents are provided with simple and quick access to their own data, which includes the possibility of viewing and obtaining a copy in accordance with the provisions of the Regulation. Certain information may be restricted only when required by law or when necessary for the protection of third parties.
With purpose limitation – processing personal data for the purposes for which they were collected and for other purposes if the conditions set out in the Regulation are met. Data may be processed for compatible purposes only taking into account (a) any link between the purposes for which the personal data were collected and the purposes for which the intended further processing is carried out; (b) the context in which the personal data were collected, in particular in relation to the relationship between the data subject and TZG Metković; (c) the nature of the personal data, in particular whether special categories of personal data are processed in accordance with Article 9 of the Regulation or personal data relating to criminal convictions and offences in accordance with Article 10 of the Regulation; (d) the possible consequences of the intended further processing for the data subjects; and (e) the existence of appropriate safeguards.
With storage limitation – storing data in a form that permits identification of data subjects only for as long as is necessary for the purposes for which the personal data are processed, and for longer only if permitted by the Regulation.
With data minimization – processing data if it is adequate, relevant and limited to what is necessary. Particular care is taken to avoid collecting data for which there is no justified need for processing.
Taking care of accuracy – taking care of the accuracy and up-to-dateness of data and deleting inaccurate data to the extent possible.
Taking into account integrity and confidentiality – providing appropriate security of personal data through technical and organizational measures, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage by applying appropriate technical or organizational measures. Relevant measures are applied taking into account the risk of each type of data processing.
Third parties, processors (for example, TZG METKOVIĆ associates who provide IT services or other services), may also have access to guests' personal data, if necessary and to a limited extent, and they store them in their databases until the processing is complete. A detailed contract is concluded with such entities regarding their powers and obligations when processing personal data, in accordance with the requirements of the Regulation.
In certain situations, it is possible for external entities, together with TZG Metkovića, to jointly determine the purposes and means of processing personal data, in which case these external partners and TZG Metkovića are joint controllers. In these relationships, the joint controllers shall transparently determine their responsibilities for complying with the obligations under the Regulation, in particular with regard to the exercise of the rights of data subjects and their duties to respect the transparency of processing, unless responsibilities are determined by law.
If data processing involves the transfer of data to third countries, TZG Metkovića ensures compliance with high standards of protection in order to comply with the highest possible standard of personal data protection, in accordance with the strict requirements of the Regulation. In this regard, when international transfers of personal data are applied, TZG Metkovića will inform the data subject of the intention to transfer personal data to a third country or international organization and of the existence or absence of an adequacy decision by the European Commission. At the same time, the data subject will be informed of the appropriate or appropriate safeguards and the means of obtaining a copy of them or the place where they are made available if the transfer is subject to appropriate safeguards under Article 46 of the Regulation, the application of binding corporate rules under Article 47 of the Regulation or if Article 49, paragraph 1, subparagraph 2 of the Regulation is applicable. Any transfer of personal data to third countries will be carried out in accordance with Chapter V of the Regulation.
Purpose of collection
The Metković Tourist Board is obliged to collect some of your personal data in order to fulfill the accommodation contract and due to regulations governing the hospitality industry, but the Metković Tourist Board may collect some other or the same data for other purposes, primarily for contact purposes, namely:
fulfillment of the accommodation contract
fulfilling the requirements of the law and other applicable positive regulations governing the hospitality industry
for direct marketing purposes
sending offers and information about work
for the purpose of holding prize games
for the purpose of improving and personalizing the service to you as a guest and member
for the purpose of protecting property and the safety of individuals by applying video surveillance measures
The Metković Tourist Board guarantees that the collected data will be used only for the stated purposes.
TZG Metkovića may use depersonalized data for statistical purposes.
Legal basis for collection
The legal basis for the stated collection purposes is:
legal,
contractual,
key interests of the respondents,
a legitimate interest which overrides the interests of the data subject or
consent or explicit consent of the data subject, depending on the purpose of the processing and the type of personal data
Data collection locations
Metković Tourist Board collects your data during:
when fulfilling the legal obligation to register – registering in eVisitor, by filling out the registration card
participation in the prize game by filling out the survey form.
Data retention time
The data that the Metković Tourist Board collects on the basis of the law is obliged to be kept for the period of time specified by a particular law or other positive regulation.
The data collected by the Metković Tourist Board on the basis of a contractual relationship will be kept only for as long as necessary for the purpose of fulfilling the contract or providing the service.
Data on the name, surname and e-mail address collected by the Metković Tourist Board on the basis of legitimate interest for direct marketing purposes will be kept in its guest database for 10 years.
Other data that the Metković Tourist Board collects based on the guest's explicit consent (mobile phone number, number of children, marital status, pets, interests, travel method, accommodation preferences and destination preferences) will be stored in its guest database for 5 years.
TZG Metkovića may also, based on your explicit consent, collect and store data about the content you view on the website (so-called cookies), and in that case it will keep them in its database for a period of 2 years. TZG Metkovića will use the aforementioned data for the purpose of informing you about special and personalized offers, news and events it organizes via online channels (e-mail, web, internet promotion).
Rights of the respondent
Regardless of the basis for data collection, you can request free of charge at any time:
access, change or supplement data in all personal data bases, on the basis of which the Metković Tourist Board will provide access to or change your data in all its bases depending on your request,
deletion ("right to be forgotten") of personal data in all personal data databases, on the basis of which TZG Metkovića will delete you from all its databases, except from databases that TZG METKOVIĆA is obliged to have and keep on the basis of positive regulations, and if there are no stronger legitimate reasons for processing or if the processing is not necessary for the establishment, exercise or defense of legal claims,
restrict the processing of your data or object to the processing of such data
to have the data we have collected about you transferred to you or to third parties ("right to data portability"), in accordance with applicable legal regulations,
if the data was provided based on consent, you can always withdraw that consent without negative consequences,
the right to file a complaint with the supervisory authority – the Personal Data Protection Agency (more about this at www.azop.hr)
Please send your written request to the contact address of the personal data protection officer: info@tzmetkovic.hr or by mail to the address TZG Metković, Ante Starčevića 3, Metković, Republic of Croatia.