PROTECTION OF PERSONAL DATA

Based on Article 4, point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/ EZ, TRAKOSTYAN-TOURS Tourist agency, d.o.o. Kralja Zvonimir 8, 42223 Varaždinske Toplice; OIB: 03727633572, as data controller, on May 25, 2018, brings the following:

STATEMENT ON THE PROTECTION OF PERSONAL DATA

TRAKOSTYAN-TOURS d.o.o. cares about your privacy and advocates for the protection of your personal data. This document refers to the collection of data in our business premises and through the use of our website and defines the methods of collection and use of your personal data. This document will inform you how we handle your personal data, your privacy rights and how the law protects you. Your personal data that you send as a visitor to the website, provide as a client in the business premises or are automatically recorded, are used exclusively in accordance with this Statement or the General Regulation on the Protection of Personal Data, the Law on the Implementation of the Regulation on the Protection of Personal Data and the Law on Electronic Communications and procedures related to the protection of personal data of TRAKOSTYAN-TOURS d.o.o.

Please read this privacy statement carefully before using our services. By accepting the Personal Data Protection Statement, you give your consent to TRAKOSTYAN-TOURS for the collection and use of data in accordance with legal regulations and the following provisions.

COLLECTION OF PERSONAL DATA

The personal data that you provide to us includes data that you voluntarily submitted by phone, email or in person at our business premises or entered within our website when booking a trip, asking various questions, requesting an offer, signing up for our newsletter, participating in tenders, making objections to service, by requesting additional information, which may include: name and surname, email address, contact phone number, address, personal identification number.

We do not process personal data automatically recorded by technical devices when you visit our website and use our WI-FI service in business premises.

We do not collect or process special categories of personal data or sensitive personal data for any purpose.

PURPOSE OF COLLECTION OF PERSONAL DATA

We will process your data only if:

• we have your consent to do so;
• processing is necessary so that we can implement the contract with you;
• there are legally based reasons, ours or from third parties that do not conflict with your interests in the protection of personal data or fundamental rights and freedoms;
• we have a legal obligation to process your personal data.

Consent means any voluntary, specific, informed and unequivocal expression of the wishes of the data subject by which he gives his consent to the processing of personal data relating to him by a statement or a clear affirmative action. Consent is valid until revoked, and can be withdrawn at any time, which does not affect the legality of processing based on consent before its withdrawal.

TRAKOSTYAN-TOURS Tourist agency, d.o.o. will use your personal data for a number of purposes, including the following:

• Due to the previous actions necessary for the conclusion of the contract.
• For the purpose of concluding and fulfilling contracts on the use of our products and services.
• For the fulfillment of legitimate business interests.
• In order to fulfill legal obligations in accordance with positive legal regulations.
• To provide you with feedback on your inquiries, suggestions and complaints.

To send you marketing communications about the products and services of our trade. We will only do this if you give us your clear consent that you want it. The legal justification for sending you marketing communications about our products and services is that you have given your express consent for your personal data to be used for this purpose. You always have control over your data, and you can opt out of further receiving marketing communications in the same way as you agreed to.

We will keep your information within our company and our confidential third parties, except in cases where disclosure is required by law, eg to government authorities and law enforcement agencies.

Some of our trusted partners with whom we share your personal data are companies from our industry. Our legitimate interest in this type of transfer is to provide you with the best possible and complete service. Since we are responsible for your personal data, we always check that your data remains protected and secure during transmission.

Links to other web pages

Our website www.trakostyan.hr contains links to other websites and is not responsible for the privacy practices or content of other websites.

LIMITATION OF DATA PROCESSING AND STORAGE TIME:

We process and store data only for as long as is necessary to fulfill the purpose for which the data was collected or as required by the

Links to other web pages

Our website www.trakostyan.hr contains links to other websites and is not responsible for the privacy practices or content of other websites.

PROTECTION MEASURES FOR YOUR PERSONAL DATA:

TRAKOSTYAN-TOURS d.o.o. implements appropriate administrative, technical and organizational measures to protect your personal data in order to meet the requirements of the data protection regulation and to protect the rights of the persons from whom the data is collected. All information you provide to us is stored on secure and controlled servers. We educate our employees about the protection of personal data and procedures and allow only authorized employees access to your personal data. We also take the necessary measures to ensure that any service provider we engage in processing your personal data on our behalf takes technical and organizational measures to protect such personal data. We do not transfer your personal data to third countries. Other websites that can be accessed through our website have their own statements on privacy and data collection and the methods of their use and publication on them, and TRAKOSTYAN-TOURS d.o.o. is not responsible for the method and conditions of collection and processing by third parties.

YOUR RIGHTS:

In accordance with the General Data Protection Regulation, you have the following data protection rights:

1. The right to access data

You have the right to access collected personal data relating to you (if such personal data is processed) and the right to information about the purpose of processing, categories of personal data being processed, recipients of personal data (if any), storage time, right to correction and submitting a complaint.

2. Right to rectification

Every respondent whose personal data is processed has the right, at any time, to request correction or addition of data.

3. Right to erasure

Each respondent can request the deletion of their personal data in case of:

• when they are no longer necessary in relation to the purpose for which they were collected,
• withdrawal of consent,
• investment complaints, and there is no stronger legitimate reason for processing i
• illegal data processing,

in which case the data will be deleted without delay, unless the data is necessary for the purpose for which it was collected or it is necessary to keep it according to the applicable legal regulations

4. The right to restriction of processing

You can ask us to limit the distribution of your data if you: dispute the accuracy of the data during the period that allows us to verify the accuracy of the data; if the processing was unlawful, but you refuse the erasure and instead request the restriction of the use of the data; if we no longer need the data for the intended purposes, but we still need them to fulfill legal requirements and if you have filed an objection due to the distribution of the data.

5. The right to data portability

Each respondent has the right to receive personal data relating to him, which he has provided to the Agency, and transfer them to another data controller without restrictions

6. The right to object

If we distribute your data for the purpose of performing tasks of public interest or tasks of public bodies, or when processing them, we refer to our legitimate interests, you can file an objection against such data processing if there is an interest in protecting your data.

7. Right to appeal

If you believe that we have violated Croatian or European regulations on data protection when processing your data, please contact us about the same. You also have the right to file a complaint with the Croatian Agency for the Protection of Personal Data, that is, in the event of a change in the applicable regulations, to another authority that will take over its jurisdiction, and from May 25, 2018, to a supervisory authority within the European Union.

ACHIEVING RIGHTS:

In order to exercise the above-mentioned rights, please contact us using the following contact information:

• via email to: info@trakostyan.hr
• in writing – by regular mail to the address of the headquarters of TRAKOSTYAN-TOURS Turistička agencija, d.o.o., Kralja Zvonimira 8, 42223 Varaždinske Toplice

NOTICE OF STATEMENT CHANGES:

It is possible that there will be changes to this Statement from time to time in order to bring it into line with current changes in laws and business practices of the company, as well as user feedback. Any changes to our statement will be posted here so that you are always informed of the privacy protections we offer.

The contact details of the controller are: TRAKOSTYAN-TOURS Turistička agencija, d.o.o., Kralja Zvonimira 8, 42223 Varaždinske Toplice, web address: www.trakostyan.hr, e-mail: info@trakostyan.hr, phone: +385(0)42205555

The representative of the data controller is: Željko Gjud; phone: +385 42 205 555, e-mail: info@trakostyan.hr