Apartmani Mima, Ul. Zagrebačka 16, 23211 Drage (hereinafter: the Company) is a commercial company that operates the website www.apartmani-mima.com.

The Company pays special attention to the adequate protection of personal data to justify and retain your trust, in accordance with the General Data Protection Regulation (GDPR EU 2016/679 of April 27, 2016).

Personal data refers to any data related to you as an individual, based on which your identity is determined or can be determined. This Information provides you with details about how and why the Company collects and processes your personal data, under what conditions and circumstances, and what rights you have regarding your personal data.

Please read this information carefully to familiarize yourself with all relevant details regarding the handling of your personal data and to be fully aware of the rights you have under applicable national and European regulations.

Who is the data controller?

The legal term “data controller” refers to the Company that collects your personal data, determines the purposes and methods of its processing, and is responsible for ensuring that such data is processed in compliance with applicable European and national data protection regulations.

In conducting its business, the Company acts as the data controller, handling your data exclusively in accordance with applicable regulations and ensuring an adequate level of protection and security.

Certain personal data is necessary for the Company to sell you a product or provide you with a service. However, if for some reason you do not wish to provide your personal data to the Company, you may freely refuse, but the Company may then be unable to deliver the products or services you are interested in.

Contact Information of the Data Controller:

○ Apartmani Mima, Ul. Zagrebačka 16, 23211 Drage, Croatia
○ Contact email address: info@apartmani-mima.com

Contact Information of the Data Protection Officer:

○ Apartmani Mima, Ul. Zagrebačka 16, 23211 Drage, Croatia
○ Contact email address of the Data Protection Officer: privacy@apartmani-mima.com

What personal data does the Company collect and process?

In its business operations, the Company may collect, store, and use (process) the following types of your personal data:

○ General identification data and contact details related to the service and contract (name, surname, address, email address, and phone number)
○ IP address
○ Other data if there is a valid legal basis (e.g., sending a “newsletter”).

How does the Company collect your personal data?

The Company collects your personal data directly from you or from other sources.

When visiting the Company’s web application, the server automatically collects information about your IP address.

Our web server does not collect your email address or any other information by which we could identify you.

The website does not profile users or make automated decisions based on user profiles.

Purpose and legal basis for processing your data

The Company collects and processes your personal data for various permitted purposes, but always on a valid legal basis. The purposes for which the Company collects and processes your personal data may include:

○ Execution of the contract and provision of service.

We use your personal data to provide you with the service you requested. Emails you receive from us may relate to customer care to alert you to system unavailability or issues.

Transfer of personal data to third parties

The Company makes special efforts to ensure that your personal data is collected and processed in a manner consistent with the above-stated purposes.

Where is your personal data processed?

The Company processes your personal data within the EU/EEA.

If it is necessary to engage third parties for service purposes, the Company ensures that the legal framework for processing your personal data guarantees their security in accordance with applicable data protection regulations.

If it is necessary to process personal data outside the EU/EEA, the Company will take all necessary actions to protect your personal data in accordance with applicable data protection regulations before exporting the data.

The Company will not make your personal data available to third parties without a valid legal basis and purpose for processing.

Your rights

Every data subject whose personal data is processed by the Company as the data controller has the following rights:

○ Right of access (in accordance with Article 15 of the General Data Protection Regulation) – allows the data subject to find out whether their personal data is being processed and to receive confirmation from the Company about whether their data is being processed, the purpose of processing, categories of personal data, recipients or categories of recipients, the anticipated period for which data will be stored, etc.
○ Right to rectification (in accordance with Article 16 of the General Data Protection Regulation) – allows the data subject to request the correction of inaccurate or incomplete personal data related to them.
○ Right to erasure (in accordance with Article 17 of the General Data Protection Regulation) – allows the data subject to request the deletion of personal data, provided the Company is not obligated to retain the personal data if processing is necessary (e.g., compliance with a prescribed obligation to retain data or in case of establishing, exercising, or defending legal claims).
○ Right to restriction of processing (in accordance with Article 18 of the General Data Protection Regulation) – allows the data subject to request a restriction on the processing of personal data if they dispute the accuracy of personal data, believe the processing is unlawful and oppose the deletion of personal data and instead request a restriction on their use, and if the data subject has objected to the processing and is awaiting confirmation of whether the legitimate interests of the data controller override those of the data subject.
○ Right to data portability (in accordance with Article 20 of the General Data Protection Regulation) – allows the data subject to transfer their data to another data controller. Note that the right to portability only applies to personal data that the data subject has provided to the Company.
○ Right to object (in accordance with Article 21 of the General Data Protection Regulation) – allows the data subject to object to the processing of personal data if the processing is carried out in the public interest or is necessary for the legitimate interests of the Company or if the data subject’s data is processed for direct marketing purposes. The Company will refrain from further processing the data subject’s personal data unless it demonstrates compelling legitimate grounds for processing that override the interests, rights, and freedoms of the data subject or if processing is necessary for establishing, exercising, or defending legal claims.
○ Right to lodge a complaint with a supervisory authority (in accordance with Article 77 of the General Data Protection Regulation) – namely, the Agency for Personal Data Protection.

You can submit a request to exercise the aforementioned rights by:

○ Sending a mail to: Apartmani Mima, Ul. Zagrebačka 16, 23211 Drage, Croatia, attn: Data Protection Officer
○ Sending an email to: privacy@apartmani-mima.hr

The Company will inform you of the actions taken without undue delay, and at the latest within one month of receiving the request. Exceptionally, this period may be extended by an additional two months if necessary, taking into account the complexity and number of requests, of which the Company is obliged to inform you.

When can you object to the processing of your personal data?

You can object to the processing of your personal data at any time to the Company, after which the Company will no longer process your personal data, unless otherwise provided by applicable regulations.

If you believe that your personal data has been violated or your rights have been infringed, you have the right to contact the competent supervisory authority – the Agency for Personal Data Protection, www.azop.hr.

How long does the Company retain your personal data?

The Company retains your personal data for the duration of the contract or service provision.

In all other cases, the Company will not retain your personal data longer than necessary and lawful, processing them solely for the purposes for which the data was collected.

Changes to the data protection policy

The Company regularly updates this Information in accordance with changes and news based on applicable regulations and ensures that the latest version of the Information is always available on the website www.apartmani-mima.com/privacy-policy.

In case of a significant change in the content of the Information that may significantly affect your rights, freedoms, and/or interests, you will be directly informed.

Sending newsletters and notifications – data collection

If you have shared your email address with us via the form on the website to receive notifications about our promotional actions and news, you have given us your consent to send you such notifications via email. You can withdraw your consent at any time by unsubscribing.

We send notifications and newsletters to inform you about changes in our offer, special benefits, or promotional actions or generally about the offer on our website. We delete your email address as soon as you unsubscribe from our notification list.

User privacy

To ensure our website functions correctly and to continually improve your experience while using it, this site needs to store a small amount of information on your computer (cookies). Over 90% of all websites use this method, but according to European Union regulations from March 25, 2011, we are obliged to seek your consent. By using the website, you agree to the use of cookies. By blocking them, you can still browse the site, but not all its features will be available to you.

* We reserve the right to change or supplement this page over time, so we kindly ask visitors and users of our website to periodically review this page to stay informed about how we protect their privacy.

By continuing to visit our sites and use our services, we assume that you accept all described privacy terms.