Principles for Personal data protection
RFM Procuro Istria d.o.o., OIB: 03744219827, a company established by the laws of the Republic of Croatia, with its registered office in Zagreb, Ulica Jurja Križanića 1, 10000 Zagreb, contact e-mail address: reception@grandvillasadriatic.com (hereinafter referred to as the “Controller”), hereby informs all natural persons whose personal data may be processed by the Controller (hereinafter referred to as the “Data Subject”) about the circumstances pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as „GDPR“).
l. The scope, purpose, duration and legal basis of the processing of personal data
The Controller processes personal data of all natural persons who have contacted the Controller via e-mail to e-mail address provided for on the website www.grandvillasadriatic.cz or its derivatives www.grandvillasadriatic.com and www.grandvillasadriatic.eu, owned by the Controller and operated by Breezy, s.r.o., ID No.: 27733823, a company established under the laws of the Czech Republic, with its registered office at Plzeňská 157, 150 00 Prague 5, Czech Republic. The purpose of such processing is to (i) satisfy the interest of the Data Subject in further information about the project of the Controller or to (ii) resolve the request or answer the questions of the Data Subject which the Data Subject has sent to the Controller via e-mail.
The above-mentioned personal data is processed on the legal basis of the consent of the Data Subject, which the Data Subject has granted to the Controller by submitting a request or question to the Controller via e-mail to e-mail address provided for on the website www.grandvillasadriatic.cz or its derivatives www.grandvillasadriatic.com and www.grandvillasadriatic.eu.
Personal data will be processed for the time period necessary for resolving the request or answering the question, but always no longer than until the Data Subject’s consent is withdrawn.
The Data Subject has the right to withdraw their consent at any time by means of a written submission to the address of the Controller’s registered office or electronically to the following e-mail address: reception@grandvillasadriatic.com. The withdrawal of the consent does not affect the lawfulness of processing based on the consent granted before such withdrawal.
The provision of personal data is neither a legal nor a contractual requirement, nor a requirement which is necessary for the conclusion of any contract, and the Data Subject is under no obligation to provide such personal data. If The Data Subject fails to provide such personal data, it will not be possible to resolve their enquiry or request.
The information regarding the storage or processing of cookies, including the information on how to set them, is available in a separate document/website entitled “Cookies Policy”.
The Controller has not appointed a Data Protection Officer (DPO). The Controller does not transfer personal data outside the EU/EEA.
ll. Categories of recipients of personal data
Personal data may be transferred to processors – business partners of the Controller involved in the operation of the website, as well as to the Controller’s cooperating partners involved in the processing of requests obtained from Data Subjects. If necessary, the Controller may also transfer personal data of Data Subjects to its legal, accounting and tax advisors.
lll. Rights of Data Subjects in relation to the processing of personal data
Data Subjects whose personal data is processed are entitled to all the rights provided for the purpose of protection of personal data under applicable and effective legislation.
The Data Subject has the right:
- to ask the Controller for information about the processing of personal data;
- to request access to personal data;
- to ask for an explanation, restriction of processing, completion, rectification and erasure of personal data;
- to the portability of personal data;
- to raise objections against the processing of personal data on the grounds of legitimate interest of the Controller;
- to lodge a complaint with the supervisory authority.
The Data Subject may contact the Controller in connection with the exercising of their rights in writing at the address of their registered office provided for above or by means of electronic communication at reception@grandvillasadriatic.com.
In the event of unlawful processing of personal data, the Data Subject is entitled to lodge a complaint against such processing by the Controller with the Personal Data Protection Agency (AZOP) in the Republic of Croatia (www.azop.hr) or at any other competent public authority.
lV. Information on automated decision-making, including profiling
The processing of personal data does not involve any automated decision-making processes, including profiling, as referred to in Article 22(1) and (4) of the GDPR.
This Privacy Policy is written in Czech and English language.