Jadran hoteli d.o.o. – Privacy policy
Notice on the processing of personal data through the website www.jadran-hoteli.hr
The General Data Protection Regulation 2016/679 (GDPR) has set an imperative for the protection of personal data in the legal systems of the Member States of the European Union. Respecting the requirements of the General Regulation and other applicable regulations, Jadran hoteli d.o.o. applies recommended security standards and best practices that ensure a high level of personal data protection and privacy. This privacy policy provides notice of the collection and processing of personal data through this website and informs about the processing carried out on the basis of an established legitimate interest.
CONTROLLER
JADRAN HOTELI D.O.O.
Strossmayerova 1, Rijeka 51000
OIB: 45875673150
Contact: +385 (0) 51 373 536
E-mail: pravna@jadran-hoteli.hr
DATA PROTECTION OFFICER (DPO)
The controller has appointed a professional data protection officer. They can be contacted for further information on the processing of personal data, request access to their data, object or complain about processing, or request other information regarding the processing of their personal data.
Contact: feralis@feralis.hr
Web address: www.feralis.hr
INFORMATION ABOUT THE DATA BEING PROCESSED
Purpose of collecting personal data
Personal data through this website may be collected for the following purposes:
1. Responding to a query/request,
2. receiving notifications about special offers,
3. to book accommodation,
4. to apply for employment,
5. to better function the features of this website’s website and to provide a better user experience.
Categories of personal data
The following categories of personal data may be collected through this website:
1. identification data;
2. contact information;
3. data on residence;
4. payment information;
5. data on professional experience for the purpose of employment;
6. Other information that you provide to us.
Lawful basis for the processing of personal data
This website uses lawful bases to collect personal information as follows:
1. Performance of a contract/service: The data is processed to enable the performance of the requested service or to take measures at your request before providing the requested service.
2. Legitimate interests: The data is processed on the basis of our legitimate interests or those of third parties, except where the interests, rights and freedoms of the data subject override those interests. (e.g. newsletter)
3. Consent: The data is processed on the basis of your prior consent. (for example, cookies)
Data collected for the purpose of responding to an inquiry/request, for the purpose of booking accommodation or for the purpose of applying for employment are considered necessary data. That is, such data processing is necessary in order to perform the requested service or to take actions prior to the provision of the requested service, which makes that processing lawful in accordance with the provisions of the GDPR (Article 6(1)(b) of the GDPR). Please note that in case of failure to provide the necessary information, we will not be able to comply with your request.
LEGITIMATE INTERESTS
In certain situations, personal data may be processed on the basis of an established legitimate interest. Where processing is based on this basis, an objection to such processing may be filed. Processing may not be restricted or suspended where there are compelling legitimate grounds for such processing which override the interests, rights and freedoms of the data subject or where such processing is necessary for the establishment, exercise or defence of legitimate claims. Such processing complies with Article 6(1)(f) of the GDPR.
The processing we carry out on the basis of legitimate interest is as follows:
VIDEO SURVEILLANCE
Purpose of processing: video surveillance is carried out for the purpose of protecting persons and property.
Storage period of recordings: up to 20 days. A longer storage period is also possible if they are evidence in judicial, administrative, arbitration or other proceedings.
Other recipients: we can only provide video recordings on request to the competent authorities (police, court) when this is necessary for the conduct of official proceedings and cannot be provided to other persons.
The collected data is not processed for other purposes.
NEWSLETTER
Data that may be processed: e-mail address
Purpose of processing: marketing. The newsletter may provide information about our services and may include information about our special offers and benefits.
Method of collection: directly from the respondent. In the event that the e-mail address to which the newsletter is delivered is collected in another way, the data subject will be informed of such a source at the first contact.
An objection to the processing of the e-mail address for marketing purposes can be raised at any time and the processing can be limited or completely prohibited.
INTERNET COOKIES
GENERAL TERMS
What are cookies?
Cookies, also known as HTTP cookies, are small text files that websites store on a user’s device (such as a computer, mobile phone or tablet) when they visit a particular website. These cookies allow the website to remember the user’s actions and preferences over time. When a user visits the same website again, cookies are sent back to the web server, allowing the website to recognize the user and provide a personalized
experience.
What information can cookies store?
Internet cookies can store different types of information relating to the user and how the user uses a particular website. This includes identification data, user preferences, the contents of the shopping cart on e-commerce websites, user account login data, information about user activities on the website, user interests in personalizing content and ads, the duration of visits (sessions), and user security and authentication data. Cookies are a tool that allows websites to improve the user experience and provide personalized services.
What is the purpose of cookies?
The purpose of cookies is to optimize and improve the user experience when visiting websites.
Cookies by function:
I Technical Cookies
(always active) – necessary for the functioning of the Website and cannot be switched off. These cookies do not store information that could identify you.
II Functional cookies
(can be turned off) – allow the Website to provide enhanced functionality and personalization.
III Statistical cookies
(can be switched off) – enable the recording of visits and traffic sources for the purpose of measuring and improving the effectiveness of the Website
IV Marketing cookies
(can be turned off) – are used to track users through websites and display targeted ads.
HOW TO DISABLE COOKIES
In the control window, you can manage cookies that are not necessary on this website. By disabling cookies, the user decides whether to allow cookies to be stored on their computer. Additionally, you can accept or decline some or all cookies by adjusting your browser settings. Cookie settings can also be controlled and configured in the Internet browser. On the following links you can find information on how to change the settings for some of the most commonly used Internet browsers:
ADDITIONAL INFORMATION ON HOW TO DISABLE COOKIES
Some browsers allow you to navigate the Website in “incognito” mode, limiting the amount of data placed on your computer and automatically deleting persistent cookies placed on your computer or mobile device when you end your browsing session. There are also many third-party apps that you can add to your browser to block or manage cookies. You can also delete cookies that were previously placed in your browser by selecting the option to delete your browsing history and turning on the option to delete cookies. More detailed information about cookies and setting your browser settings can be found at the following links:
- http://www.allaboutcookies.org/
- http://www.youronlinechoices.eu/
- http://www.aboutads.info/choices/ne.
RECIPIENTS OF PERSONAL DATA
The collected personal data may be forwarded for use to providers of information and communication solutions and services who act as our processors.
Those processors provide reasonable assurances and have taken appropriate technical and organisational safeguards to adequately ensure data protection and compliance with the requirements of the GDPR. An agreement/contract on the processing of personal data has been concluded with such processors pursuant to Commission Implementing Decision (EU) 2021/915 on standard contractual clauses between the controller and the processor as a separate part of the contract. The aforementioned agreement/contract prescribes in detail the handling of personal data, so they are not able to process personal data without our order and forward them to third parties.
Personal data is not passed on to third parties for direct marketing purposes.
DATA RETENTION PERIOD
Personal data collected through this website is processed until the purpose for which the data was collected is fulfilled. Once the purpose has ceased to exist, personal data is no longer processed. However, certain personal data (e-mail address) may continue to be processed on the basis of an established legitimate interest (for the purpose of marketing to send you information about our services) as long as the purpose of the processing exists or until such processing is restricted or completely prohibited from raising objections or by unsubscribing from the list of recipients. We store the data that we process on the basis of consent until the purpose of the processing is achieved or until you withdraw your consent yourself. Your privacy and trust are extremely important to us, and we make sure that personal data is treated with care and responsibility.
DATA COLLECTED THROUGH SOCIAL NETWORKS
The pages and profiles we manage on social networks (Facebook, Instagram, etc.) are always under the exact and full name of the controller.
We use the personal data about our contacts that we collect using them only in the case of responding to an inquiry or comment, and the data is not processed for other purposes.
SECURITY OF PERSONAL DATA PROCESSING
We collect and process personal data in a manner that ensures appropriate security and confidentiality in their processing and enables the effective application of data protection principles, reducing the amount of data, the scope of their processing, the storage period and their availability. To this end, we have put in place appropriate technical and organisational safeguards that ensure a level of security appropriate to the risks posed by data processing and the nature of the personal data being protected, bearing in mind the characteristics and costs of their implementation.
We provide the users of the reservation system with the highest level of data protection. For the secure transfer of data between the user’s computer and our servers, we use the “AWS” certificate and SSL technology with 128-bit encryption. All personal data, ID numbers, credit cards or other means of payment provided by users through the reservation system are transmitted exclusively through a secure connection with 128-bit data encryption
We regularly review processing operations that may pose a risk to an individual’s rights and freedoms and have taken appropriate measures to protect personal data against accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, in particular where the processing involves the transmission of personal data over a network, and from any other unlawful forms of processing.
EXERCISING RIGHTS
Right of access
You can request confirmation at any time whether your personal data is being processed and detailed information about the processing, in particular about the purpose of their processing, about the type/categories of personal data that are being processed, including insight into your personal data, about the recipients or categories of recipients and about the anticipated period in which the personal data will be stored.
Right to rectification
We ensure the right to rectification and you can obtain the correction of inaccurate personal data and the completion of incomplete personal data without delay.
Right to erasure
You have the right to request the deletion of your personal data. If the request is justified and if we are not obliged by law to store the data, the data will be deleted without undue delay.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data in the cases provided for in the General Regulation. In particular, we would like to point out that you can restrict the processing of personal data based on legitimate interest as a lawful basis for processing.
Right to withdraw consent
You have the right to withdraw your consent at any time. It is important to note that the withdrawal of consent does not affect the lawfulness of the processing of personal data that has been carried out until the moment of its withdrawal.
Right to object
You have the right to object to the processing of your personal data in all cases provided for in the GDPR. In particular, we would like to point out that you can object to processing based on a legitimate interest as a lawful basis for processing, and restrict or completely prohibit the processing.
Right to complain
In the event that you believe that the processing has resulted in a violation of your personal data and a violation of the provisions of the General Regulation, you can file a complaint with the supervisory authority, the Personal Data Protection Agency from Zagreb, Ulica grada Vukovara 54.
CONTACT INFORMATION
For other information about the processing of personal data or to exercise your rights, you can contact us through the Data Protection Officer or our other contacts.
Data Protection Officer: feralis@feralis.hr and www.feralis.hr
After your identification, we will deliver a response within 30 days in the usual electronic form, unless otherwise requested.
OTHER INFORMATION
This privacy policy is regularly reviewed, supplemented and amended in order to always reflect the actual state of the collection and processing of personal data through this website. Please check back regularly for such changes to stay fully informed about our privacy and data processing practices. In the event of changes that may affect your rights as a data subject or substantially alter the prior notice of processing, in particular if there is a change in the purposes of the processing, disclosure of data or transfer to third countries, a notice of this will be displayed in a pop-up window when you arrive at this website. In this way, we want to ensure that all our users are informed of any significant changes.
The protection and lawful processing of all personal data stored in our systems is extremely important to us. Therefore, we continuously monitor best practices and regulations to ensure that the privacy of our users remains at the highest level.
Last updated: March/2025
