Privacy policy

Intro

This Privacy Policy informs you about the data we collect about you, how we use it, and with whom we share it. It is essential for us that you read the following Privacy Policy to be informed about the processing of your data and your rights under applicable data protection.

1. DEFINITIONS

2. ABOUT SAN SERVOLO

3. COLLECTING, PROCESSING, AND KEEPING PERSONAL DATA

3.1. BOOKING ACCOMMODATION

3.2. GENERAL INQUIRY VIA WEB CONTACT FORM

3.3. GENERAL INQUIRY VIA EMAIL

3.4. YOU INITIATED COMMUNICATION WITH US OVER SOCIAL MEDIA PLATFORMS

3.5. WHEN YOU BROWSE OUR WEBSITE

3.6. LINKS TO OTHER WEBSITES

4. WHO DO WE SHARE PERSONAL DATA WITH

5. TRANSFERRING PERSONAL INFORMATION IN THIRD COUNTRIES

6. YOUR RIGHTS

6.1. THE RIGHT TO OBJECT TO THE USE OF YOUR DATA

6.2. HOW TO EXERCISE YOUR RIGHTS

6.3. THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

7. CHANGES TO THIS PRIVACY NOTICE

1. DEFINITIONS

SAN SERVOLO or US or WE refers to the SAN SERVOLO WELLNESS CAMPING & RESORT located at Momjanska ulica 7, 52460 Buje, which Brolex d.o.o owns., OIB 99214387010, Momjanska ulica 2, 52460 Buje.

GDPR – the EU General Data Protection Regulation (the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC).

SERVICES means gastronomic offers and accommodation services in a luxury resort and a wellness campsite provided by SAN SERVOLO.

PERSONAL DATA / PERSONAL INFORMATION is any information related to an identified or identifiable living individual.

CONTROLLER means the natural or legal person who determines the purposes and means of processing personal data. That person is responsible for processing such personal data following the GDPR and other applicable personal data protection European laws and the laws of the Member States on the protection of personal data.

PROCESSOR refers to a natural or legal person who processes personal data on behalf of the controller.

SUB-PROCESSOR refers to a natural or legal person who processes personal data on behalf of the controller, as specified in the agreement and follows our instructions.

YOU refers to an individual, a natural person, whose personal information is collected and processed by SAN SERVOLO.

2. ABOUT SAN SERVOLO

We, SAN SERVOLO, will be held responsible as a Controller for all personal data you provide us in connection with our services offer.

SAN SERVOLO, in addition to the gastronomic offer, we offer our visitors accommodation services in a luxury resort and a wellness campsite. As we provide Services to our Visitors and process personal data, we act either as the controller or the processor, depending on the situation.

We act as the controller in situations when we process personal information for our purposes, and we are committed to processing that information as described in this Privacy Policy.

Contact details:
SAN SERVOLO WELLNESS CAMPING & RESORT
Momjanska ulica 7, 52460 Buje
Croatia
n/p Data Protection Officer
or
E-mail: [email protected]

3. COLLECTING, PROCESSING, AND KEEPING PERSONAL DATA

Unless otherwise agreed with you, we will collect only the primary personal data required in connection with our business relationship. While doing business with you, we will also collect business-related data, including information on purchases, services, other business activities, product feedback and any other information you may provide.

We might collect your personal data directly by you or indirectly for one of the following reasons:

1. Booking accommodation;
2. General inquiry via the web contact form;
3. General inquiry via email;
4. You initiated communication with us over the website contact form of social media contacts;
5. When you browse our website – third party service (i.e., Google Analytics);
6. Links to other websites.

We collect personal data depending on the above-mentioned specific situation. We collect the only necessary information.

3.1. Booking accommodation through a third-party Phobs service

Personal data we collect: full name, city, country, email, and telephone number. This data will be used exclusively for implementing the Accommodation Reservation Service through a third-party service – Phobs. Payment information (such as card numbers, etc.) is unavailable to us. Still, it is specially protected by the highest security protocols and will only be available to banks to authorize payments.

Legal basis for collecting the data: performance of a contract – GDPR article 6.1. (B).

Time period for keeping the data: if we do not enter into a contract, we will delete your personal data within 6 (six) months after our last communication. Also, based on a legitimate interest, if you no longer wish to be contacted, you may object by sending an email to: [email protected].

3.2. General inquiry via the web contact form - when you contact us with a question about our services and when we are looking for new business opportunities

Personal data we collect: full name, email address.

Legal basis for collecting the data: performance of a contract – GDPR article 6.1. (b), legitimate interest according to GDPR article 6.1. (f) in the sense of providing our Services to you.

Time period for keeping the data: if we do not enter into a contract, we will delete your personal data within 6 (six) months after our last communication. Also, based on legitimate interest, if you no longer wish to be contacted, you can object by sending an email to: [email protected].

3.3. General inquiry via email - when you contact us with a question about our services and when we are looking for new business opportunities

Personal data we collect: full name, email address, telephone number, country, and related information such as your company name, business role, and phone number.

Legal basis for collecting the data: performance of a contract – GDPR article 6.1. (b), legitimate interest according to GDPR article 6.1. (f) in the sense of providing our Services to you.

Time period for keeping the data: if we do not enter into a contract, we will delete your personal data within 6 (six) months after our last communication. Also, based on legitimate interest, if you no longer wish to be contacted, you can object by sending an email to: [email protected].

3.4. You initiated communication with us over social media platforms

Personal data we collect: name, email address, and telephone number.

Legal basis for collecting the data: consent (GDPR article 6.1. (a), legitimate interest according to GDPR article 6.1. (f).

Time period for keeping the data: in the event that you have not used our Services, when based on the legitimate interests we will keep the data until you object to the processing of your personal data for this purpose, or, in the case of the given consent until you withdraw your consent.

The company has the following pages/profiles on social networks:

Instagram: @sanservolocampingresort

Facebook: sanservolocampingresort

3.5. When you browse our website

Personal data we collect: usually, we collect IP addresses, browser type, the pages you’ve visited and the order you visited them, as well as whether you’re a new or returning visitor. This information is only processed in a way that does not identify anyone but helps us to maintain and improve our website and business. For more information, please read our Cookie Policy

Legal basis for collecting the data: consent (GDPR article 6.1. (a).

Time period for keeping the data: until you withdraw your consent – for more information, please read our Cookie Policy

3.6. Links to other websites

This website contains links to other websites. Please note that SAN SERVOLO cannot be held responsible for respecting other websites’ privacy. We encourage our users to read each website’s privacy statements that collect personal information. This Privacy Policy applies solely to information collected on the sanservoloresort.com website.

4. WHO DO WE SHARE PERSONAL DATA WITH

We may share your personal information with:

  • third parties as sub-processors, where required or permitted by applicable law;
  • third parties as sub-processors in order to provide specific functionalities such as targeted marketing, eCommerce, and other tools necessary for providing our services (e.g. Google Analytics, PHOBS d.o.o, accommodation reservation service, Synet, obrt za računalne usluge, vl. Denis Tomljanović which maintains the website);
  • third parties who are legally authorized to process credit decisions, fraud prevention, and pursue debtors; and
  • third parties who are legally authorized to request access and sharing of your personal information for criminal procedures or because of threats to public security.
    Otherwise, no third parties will have access to your personal information unless there is a legal requirement or you permit us to do so.

5. TRANSFERRING PERSONAL INFORMATION IN THIRD COUNTRIES

Considering the above, we may share your personal information with third parties outside the European Economic Area. However, all personal information transfers are done per EU GDPR data protection standards.

6. YOUR RIGHTS

Following EU General Data Protection Regulation, you have the right to:

  • The right to be informed about the collection and use of your personal information is a key transparency requirement under the GDPR;
  • The right of access to personal information, which means to request a copy of your personal information we hold about you;
  • The right to rectification of your personal information if the information is incomplete or inaccurate;
  • The right to erasure (the right to be forgotten) when your personal information is no longer needed or when your personal data has been used unlawfully, following your request for erasure;
  • The right to restrict the processing of your personal information in certain circumstances as an alternative to the right to erasure of your personal information;
  • The right to data portability means that we can obtain and reuse your personal information for our purposes;
  • The right to object to the processing of your personal information in a way that will stop or prevent us from processing your personal information on our legitimate interest, e.g. for direct marketing purposes;
  • Rights in relation to automated decision-making and profiling; and
  • The right to file a complaint with your national Data Protection Authority (DPA).

You can exercise the rights mentioned above per the EU General Data Protection Regulation and national regulations on personal data protection.

6.1. The right to object to the use of your data

You have the right to object, i.e. to stop or prevent the organization from using your data in certain circumstances, and we may not need to stop processing your personal data if we give you solid and legitimate reasons to continue using your data.

You can only object to processing when we are using your data:

  • For our legitimate interests; and
  • For direct marketing purposes.

In cases where we invoke a legitimate interest as a legal basis for processing your data, at any time you may lodge an objection against such processing. In that case, we are obliged to prove to you (1) that there are convincing legitimate reasons for data processing on our or third party’s side, which go beyond your interests, rights or freedoms, or (2) that data processing is necessary for us to establish, exercise or defense of legal claims.

On the other hand, in the case of direct marketing purposes, we cannot refuse your objection, and we will stop using your data for direct marketing purposes. You can exercise this right by using the unsubscribe link.

6.2. How to excercise your rights

Suppose you have any concerns about how your personal data is handled by us or wish to raise a complaint on how we have handled your personal data. In that case, you can contact our Data Protection Officer by sending an email to: [email protected].

6.3. The right to lodge a complaint with a supervisory authority

If you believe we are processing your personal data illegally, you have the right to complain to the personal data protection supervisory authority. In the Republic of Croatia this body is Agencija za zaštitu osobnih podataka (www.azop.hr).

If your habitual residence, place of work, or place of the alleged infringement is in another EU Member State, or you believe that your rights have been violated in another EU Member State, in any case, you can complain with a supervisory authority of that country.

7. CHANGES TO THIS PRIVACY NOTICE

This Privacy Policy’s last update was in June 2021. You may check if this Privacy Policy has changed or amended as required to comply with applicable data protection law.

Suppose you have any questions about your privacy, wish to withdraw your consent for processing your personal data or exercise any of your rights arising from this Policy. In that case, you can do that at any time by sending an email to: [email protected].