INTRODUCTORY PROVISIONS

Taika Travel d.o.o. Heinzelova 80, 10 000 Zagreb, Croatia, VAT id: 93599445629, (hereinafter: the Agency) respects your privacy and the security of your personal data. The collection, use and processing of your personal data is carried out in accordance with these Privacy Policy and applicable legal provisions, including Regulation (EU) 2016/679 of 27 April 2016 (hereinafter: the “General Regulation”) and the General Implementation Act on data protection (OG 42/2018).

In accordance with the principle of transparency, these Rules are intended for respondents to have accurate and complete information on what their personal data is collected, used, made available or otherwise processed by the Agency, as well as the extent to which this personal data is measured. are being processed or will be processed. Also, the purpose of these Rules is to acquaint individuals who use this Internet portal with the risks, rules, safeguards and rights related to the processing of personal data and how to exercise their rights regarding the processing.

These Rules apply to and apply to the collection, processing and protection of your personal data and the use of cookies and other similar analytical tools when visiting, registering and using the Agency’s website www.taikatravel.com with all sub-domains, websites and applications for mobile phones belonging to the above domains owned by the Agency (hereinafter collectively or individually: Internet portals of the Agency), software applications that we provide for use via computer or mobile devices (hereinafter “Applications”), when sending e-mail that has a link to this Privacy Policy, and when registering and communicating with you (hereinafter collectively “On-line services”).

The general rules and conditions of use of the Agency’s Internet portal are determined by separate rules and conditions of use, and the stated rules and conditions will apply in everything not determined by these Rules, provided that they do not contradict the provisions of this Privacy Policy.

PERSONAL INFORMATION

Personal information is all information that can be used to identify you. By providing Online Services, the Agency may collect some of the following personal information:

– Name, surname, residence, date of birth, personal identification number, ID card number or other identification document, citizenship;

– Information about your stay, including information about the facility where you stayed, date of arrival, date of departure, purchased products or services, information about your preferences for services (room type, etc.);

– Data on ordered services (eg via the website);

– Information on the loyalty program;

– Additional information about you that we may receive from third parties with whom we do business (eg agencies, tour operators, hotels, airlines);

LEGAL BASIS FOR COLLECTION OF PERSONAL DATA

The Agency collects and processes your personal data only if one of the following assumptions is met

We have your consent

Example: receiving a newsletter

If you want to receive the newsletter, you will subscribe to it on the Agency’s web portal and enter the e-mail address to which you want to receive the newsletter.

Processing is necessary for the execution of the contract to which the respondent is a party or in order to take action at the request of the respondent before concluding the contract

Example: online booking

When booking accommodation on the Agency’s website, in order to be able to provide the requested service

processing is necessary to comply with the legal obligations of the processing manager

Example: forwarding data to the eVisitor system

The Agency is obliged to register each guest in the eVisitor system in order to pay the residence tax and register the stay in the Republic of Croatia.

Processing is necessary for the legitimate interests of the processing manager or a third party

Example: to personalize your experience

The agency may use your personal information to better understand your interests in order to offer you other services or products that may be of interest to you. This allows us to tailor communication in a way that is relevant and interesting to you.

It may happen that the Agency collects personal data for other reasons provided by law, such as processing is necessary to protect the key interests of respondents or other natural persons.

PERSONAL DATA COLLECTED

The Agency collects data when using the services or accessing the Agency’s Internet portal:

(I) When booking accommodation and purchasing other products or services, the following are collected:

Name, surname, address of residence, e-mail address, telephone number, personal identification number. Information on purchased services (or products)

(II) The Agency’s Internet portal collects:

Information about your accommodation interests;

Information on the use of the website;

Information about clicks on our ads, including those posted on other websites;

Notice how you access digital services eg operating system, browser, IP address;

(III) By sending inquiries and providing support, consultation or answers to complaints, questionnaires and research, the following are collected:

Information that you normally provide to us when booking or purchasing services, including first name, last name, email address, or if you connect via social media then name and username and contact information. The content of digital communication, but also the links you clicked on during communication. The content of your remarks

(IV) By subscribing to the newsletter, the following are collected:

Email address

(V) Guest registration in the accommodation facility, collected:

Name, surname, address of residence, e-mail address, telephone number, personal identification number, data on personal identification document

Information about purchased services (or products) Comments and remarks of guests

(VI) By accessing and using the Agency’s internet application, the following are collected:

Information on ordered and canceled services

Information about the accommodation facility where you are staying

Apart from directly from the respondents, the Agency may also collect personal data from other excerpts in the following cases:

– from specialized companies that provide information (eg credit rating agencies), business partners (eg tour operators) and public registers (register of craftsmen);

– if the registration is done through social networks such as Facebook, Google+, you agree that we use your user data such as name, surname, email address or any other information you have approved to share;

In a situation where you provide the Agency with personal data of other persons, the following should be taken into account:

– The agency uses information about other persons you provide to us, such as persons involved in booking accommodation;

– When you provide information about other people, you must be sure that they have agreed to it and that you have the authority to do so on their behalf. Wherever possible, you should make sure that you also familiarize them with the processing of personal data from this Privacy Policy.

HOW YOUR PERSONAL INFORMATION IS USED

The Agency collects the collected data for the purpose for which they were given and / or for a purpose based on the relevant regulation or legitimate interest arising from or related to the use of the Blue Lagoon Internet portal and the provision of desired services.

Therefore, the Agency may use your personal information to:

– Provided the services you requested, eg accommodation reservation;

– Provided the information you request regarding the services we offer;

– Facilitate the use of the Agency’s Internet portal by eliminating the need for frequent entry of the same data;

– Help to customize the content most relevant to your interests, or to tailor the Internet portal to your personal preferences and interests – if you do not want to receive personalized content, you always have the opportunity to object to change your online settings, or call us or email to update our information;

– Send notifications of important news about the Internet portal;

– Prevent fraud or other prohibited or illegal activities;

– Protect the security and integrity of the Agency’s Internet portal;

– For marketing and promotional purposes:

In order to better understand you as a client and to adapt our services and marketing communication to you, the Agency may combine personal data collected during the sale of services with data collected on our websites, applications or other sources,

To send you notifications about new services, service updates, events and special offers that we think may be of interest to you;

To send notifications about other companies and products that we think may be of interest to you, but only if you have previously agreed to such communication,

Marketing research to improve our services where you always have the opportunity to refuse participation;

WHO CAN SEE YOUR DATA

The agency does not sell, rent or lease your personal information to third parties, and may share information with trusted partners who perform certain functions for us, such as maintaining IT systems and applications, marketing campaigns, payment processing.

We forward certain personal data to the competent authorities on the basis of legal obligations, such as registration of guests in the eVisitor system for the purpose of paying the residence tax, guest list and registration of the residence of foreigners.

In any case, when the Agency needs to share the collected personal data then we demand that it be protected and not used for marketing purposes.

HOW TO PROTECT YOUR RIGHTS

You have the right to request a copy of all your personal information we have collected, and the information we have collected when booking accommodation can be seen from the booking itself. You can write to us if you would like a copy of other information we have collected from you, providing all the details to help us identify and locate your personal information. Delivery of data is free of charge, but the Agency reserves the right to charge a reasonable fee in the case of special requests, such as multiple copies, a special format or the like.

We want all of your information to be accurate and up to date, and if you notice that some of the information we hold is inaccurate, please let us know.

We also remind you that you have the right to request the correction or deletion of your personal data, as well as the right to object to the processing of personal data. The Agency will correct or delete your personal information unless we need to retain it for legitimate legal or business interests.

If you have any objections to the processing, use or storage of your personal data, please feel free to contact us. If you are not satisfied with our answer, you have the opportunity to contact the supervisory body of the Personal Data Protection Agency.

Any requests or remarks regarding personal data collected by the Agency shall be submitted in writing to the Personal Data Protection Officer. The request must include the email address you provided at the time of registration as well as the email address to which you would like to receive a response (if it is not the same as the email address from which you submitted the request). The Agency will provide you with the information, within a reasonable time, by e-mail to the e-mail address specified in the request.

The address of the Personal Data Protection Officer of the Agency is info@taikatravel.com Please note that before acting on your request, we may request more information from you in order to establish your identity. We may also ask you for more information to determine if you have permission to apply if you are doing so on behalf of someone.

SECURITY OF YOUR PERSONAL DATA

We are fully committed to protecting data from unauthorized access, disclosure or deletion, regardless of the place of storage or processing, as well as the format in which they are located. The agency uses the services of reliable IT partners who are obliged to apply high standards of IT protection.

The Agency applies recognized information security standards:

– we implement technical and organizational protection measures based on risks,

– we implement technical and organizational protection measures based on risks,

– we minimize data exposure,

– we check the collection of information, storage and processing methods,

– where possible, we protect, pseudonymize and anonymise data,

– we test organizational and technical protection measures,

– we restrict access to personal data to employees, contractors and agents who have been granted limited and controlled permission to use personal data on the basis of user tasks, and who are required to comply with strict confidentiality obligations.

The Agency takes all measures that can identify problems, as well as measures to minimize potential damage.

Remember that you are also our partner in security. We urge you to take steps to make your personal information secure (including your password) and to always log out of the Internet portal after use.

If the personal data we process are transferred outside the European Union and the European Economic Area because it is necessary to technically perform the service requested by the user, then the Agency will take reasonable steps to ensure that the data subjects outside the EU take appropriate measures to protect the said data and to provide protection in accordance with these Privacy Policy.

PERSONAL DATA RETENTION PERIOD

The period in which the Agency keeps personal data is limited to a strict minimum, and accordingly the Agency prescribes deadlines for keeping or periodically reviewing certain personal data so that they are not kept longer than necessary to fulfill the purpose for which they were collected.

After the deadline, the Agency will delete personal data, and if the data is needed for the purpose of statistical indicators, analysis or archiving, or any other legitimate interest of the Agency, all measures will be taken to anonymize personal data.

APPLICATION OF COOKIES

The Agency uses tools to analyze the use of the Agency’s Internet portal and through which we can collect certain information about you and thus gain insight into the needs of its visitors and / or users whose purpose is to improve the quality of our offer.

In this regard, so-called cookies are used, as well as some other tools.

The user and / or visitor may reject or delete cookies via the appropriate settings on their computer, using the settings of the browser you are using. However, this may lead to some functions of the Agency’s Internet portal no longer being able to be fully utilized.

These tools collect and store some technical data, including the IP address of the user and / or visitor.

LINKS TO OTHER WEBSITES

This website may contain links to other websites operated by the Agency or another organization that has its own special privacy policy, so we draw your attention to their terms of use and privacy policy before providing them with any personal information as the Agency does not take responsibility for these websites or organizations that manage them.

SOCIAL NETWORKS

This website may use certain elements of social networks such as Facebook, Google+, Instagram and others, which have their own privacy policies, so please note that you are familiar with their terms of use and privacy policies before providing any personal information to them because The Agency does not take responsibility for these websites or the organizations that manage them

CHANGES TO THE PRIVACY RULE

These Privacy Policy supersedes all previous versions.

Privacy policy was last updated on January 1, 2021

The Agency reserves the right to change, modify and / or amend these Privacy Policy at any time. All changes to the Rules will be published on the Agency’s Internet portal, and in the event of significant changes, we will inform you in a clear and understandable manner.