I. DATA COLLECTION AND PROCESSING

1. Personal Data Collection

ĆURKOVIĆ UGOSTITELJSTVO d.o.o. (hereinafter: "We") is the owner and operator of the website: www.maminsan.hr. We inform all our users about the methods of collecting and processing personal data on the mentioned website.

Questions and complaints related to privacy policy and personal data protection can be sent to the email address: [email protected] or by mail to the address: ĆURKOVIĆ UGOSTITELJSTVO d.o.o., Skalnica 2, 51557, Cres, Croatia.

2. Definition of Personal Data

Personal data refers to any information relating to an individual, a natural person, whose identity is known or can be identified. Your personal data is collected only when you voluntarily provide such information. We collect information about you through newsletter subscription or by filling out forms in hotels if you give consent for such information. Additionally, non-personal information and data may be automatically collected through our web servers or by using "cookies".

Examples of website usage information include: most visited pages and links on our website, time spent on the website, and the most popular keywords that lead users to our website, your IP address, information collected through cookies, device information such as hardware settings, system activities, browser type, etc.

3. Data Processing

We use the collected data for one or more of the following purposes:

• Personalizing user experience (collected information helps us respond better to individual needs)
• Improving the website
• Establishing primary communication channel
• Periodically sending emails related to occasional news (if you opt for it), updates, service information, etc.

II. LINKS TO THIRD PARTIES

We do not offer or provide services or products from third parties on our website (except when suggesting offers related to a better hotel experience and surroundings).

III. USE OF COOKIES

To learn how we use cookies, please read our Cookie Policy.

IV. DATA PROTECTION

To protect the personal data you submit through this website, we implement physical, technical, and organizational security measures. We continuously upgrade and test our security technology. Access to your personal data is restricted to employees who need to know this information in order to provide benefits or services to you. Additionally, we educate employees about the importance of data confidentiality and privacy, and we protect your data.

ĆURKOVIĆ UGOSTITELJSTVO d.o.o. is committed to protecting the personal data of its customers by collecting only necessary, basic information about customers/users essential for fulfilling our obligations. We inform customers about the way their collected data is used and regularly give them the choice to opt-in for the use of their data, including the option to decide whether they want their name to be removed from marketing campaign lists. All user data is strictly kept and accessible only to employees who require this information to perform their job duties. All employees of ĆURKOVIĆ UGOSTITELJSTVO d.o.o. and business partners are responsible for adhering to the principles of privacy protection.

V. DATA STORAGE AND RETENTION PERIOD

All data is stored in databases and repositories in the European Union. Personal data will not be stored in countries outside the European Union. We retain and protect personal data during the business relationship and in accordance with positive regulations.

VI. INDIVIDUAL RIGHTS

If you wish to know if we possess or process your personal data or if you want access to the personal data we have, please contact us at: [email protected].

Additionally, you can request information about the purpose and manner of data processing. You have the right to correct inaccurate personal data we hold. With certain exceptions, you can request the deletion of data or cessation of their processing, or you can request that we stop processing personal data for direct marketing purposes.

There is no fee for submitting a request for personal data. If we cannot meet your request within a reasonable time, we will notify you of the date when we will fulfill your request. If we cannot fulfill your request, we will provide an explanation of the reasons why we cannot fulfill your request.

VII. PERSONAL DATA BREACH NOTIFICATION

In the event of a personal data breach, we will notify you and the supervisory authority within 72 hours via email about the scope of the breach, the data involved, any impact on our services, and our planned measures to secure data and limit adverse effects on individuals.

Notification of a breach will not be sent if:

• There are technical and organizational protection measures (such as encryption) applied to personal data affected by the breach, making them unintelligible to anyone unauthorized to access them.
• We have taken subsequent measures to ensure that there will no longer be risks to the rights and freedoms of individuals.
• It would involve disproportionate effort (in this case, we will notify you through public means of notification or take some other equally effective measure).

A personal data breach is a security breach that leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed in connection with the provision of our services.

VIII. CONSENT

By using this website, you agree to our Privacy Policy.

IX. CHANGES TO PRIVACY POLICY

In case of changes to our Privacy Policy, the notice will be posted on our website, and the privacy policy modification date will be updated.

This Privacy Policy was last modified on 11.02.2023.

X. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

You can lodge a complaint regarding the collection and processing of data at any time. In the Republic of Croatia, the complaint is submitted to the Croatian Personal Data Protection Agency (AZOP).