Data Privacy & Security PolicyData Privacy & Security Policy

NOTICE ON THE COLLECTION AND PROCESSING OF PERSONAL DATA

In accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), and the Act on the Implementation of the General Data Protection Regulation, the following information is provided regarding the collection and processing of personal data:

First of all, we would like to point out that AMADRIA PARK represents a Croatian hotel brand, i.e. the following companies providing services in the hotel industry: Milenij hoteli d.o.o. Opatija and Solaris d.d. Šibenik.

Data Controller:

Milenij hoteli d.o.o., Ulica Viktora Cara Emina 6, 51410 Opatija, VAT ID (OIB): 78796880101
E-mail: info@amadriapark.com; phone: +385 51 278 021 (for hotel accommodation in Opatija, Zagreb and Lovran)

Solaris d.d. Hoteli Solaris 86, 22 000 Šibenik, VAT ID (OIB): 26217708909, info@amadriapark.com, phone: +385 22 361 001 (for hotel accommodation in Šibenik and Trogir)

(hereinafter jointly: AMADRIA PARK)

Data Protection Officer:

This information is always available on the website www.amadriapark.com
E-mail: szop@amadriapark.com, phone: 051/323 605

Personal data processed by AMADRIA PARK, purpose and legal basis of processing, legitimate interests of the controller:

1) Personal data processed on the basis of law:

• first and last name
• place, country and date of birth
• citizenship
• type and number of identification document
• residence (domicile) and address
• date and time of arrival at and departure from the facility
• gender
• data on exemption from payment of the tourist tax, or reduction thereof: degree of disability, education, employment status, immediate family members of residents of the tourist municipality or city, use of social welfare services, membership in international youth organizations, etc.

The purpose of processing the above personal data is:

• monitoring the fulfilment of the obligation to register and deregister tourists by the person responsible for registration and deregistration, on the basis of the Tourist Tax Act and the Ordinance on the Manner of Keeping Records of Tourists and on the Form and Content of the Tourist Registration Form for the Tourist Board
• keeping records, calculation and collection of the tourist tax on the basis of the Tourist Tax Act and the Customs Service Act
• keeping a guest book or guest list by the accommodation service provider and monitoring compliance with this obligation by inspection bodies, on the basis of the Hospitality Industry Act, the Ordinance on the Form, Content and Manner of Keeping the Guest Book and Guest List, and the Tourism Inspection Act
• reporting of foreign nationals to the Ministry of the Interior and monitoring compliance with this obligation by inspection bodies, on the basis of the Aliens Act and the Police Duties and Powers Act
• keeping a list of tourists by the tourist board, as well as statistical processing and reporting, on the basis of the Tourist Tax Act and the Act on Tourist Boards and the Promotion of Croatian Tourism
• supervision of the operations of accommodation service providers with regard to the legality of conducting business, i.e. the provision of registered services and compliance with tax and other regulations on public levies, on the basis of the Customs Service Act, the General Tax Act, and the Road Traffic and Road Inspection Act

For the purpose of identifying guests and collecting the above data, we inspect an identification document, but we do not retain a copy of it.

2) Personal data processed for the purpose of communication with the guest:

• telephone number and/or e-mail address

This data is processed for the purposes of communication related to the hotel accommodation service, as data necessary for the performance of the contract between AMADRIA PARK and the guest.

3) Personal data related to the fulfilment of the guest's financial obligations:

• depending on the method of payment, data on the credit card or the account from which the payment is made

This data is processed by the accounting department to ensure payment. This processing is necessary for the performance of the contract between AMADRIA PARK and the guest, as well as for compliance with obligations prescribed by the laws governing accounting.

Recipients/categories of recipients of personal data:

In order to fulfil legal obligations, certain personal data of the guest is submitted to, and for the purposes of supervision under legal authority, disclosed to the tourist boards in whose area the accommodation facility is located, the Croatian Tourist Board, and public bodies – the Ministry of the Interior, the Customs Administration, the Tax Administration, the Ministry of Tourism, and the Ministry of the Sea, Transport and Infrastructure.

Personal data retention period:

Personal data processed on the basis of law is kept for 10 years, or 11 years if the data is kept together with an issued invoice in accordance with the Accounting Act and relates to invoice and credit card data. Statistical data and information are stored permanently.

Data processed for communication purposes is stored for at least five years from the end of the year in which it was collected, i.e. from the end of the guest's stay at the hotel.

If there are no specific factual or legal grounds justifying a longer retention period than provided for, the data is deleted in the year following the minimum retention period.

Providing personal data is a prerequisite for the provision of services for which the processing of personal data is a legal obligation of AMADRIA PARK, i.e. a prerequisite for exercising certain rights when such rights are related to personal data disclosed to competent authorities. If the guest does not provide the necessary personal data, AMADRIA PARK will not be able to fulfil its legal obligations or ensure the exercise of certain rights of the guest.

AMADRIA PARK does not apply automated decision-making procedures.

Rights related to the processing of personal data:

You are guaranteed the following rights at all times:

• Right of access to personal data – you have the right to request confirmation from AMADRIA PARK as to whether your personal data is being processed, information on the purpose of such processing, categories of data processed, recipients, retention period, and additional rights that exist should you request rectification, erasure, restriction of processing or objection.
• Right to rectification – you have the right to request the correction of inaccurate data or the completion of incomplete data concerning you.
• Right to erasure – you have the right to request that AMADRIA PARK erase personal data concerning you under certain conditions, unless the retention of such data is legally mandatory.
• Right to restriction of processing of personal data – you have the right to request that AMADRIA PARK restrict the processing of data concerning you under certain conditions.
• Right to lodge an objection to processing – you have the right to lodge an objection to the processing of your personal data.
• Right to data portability – you have the right to transfer your personal data to another controller. Where technically feasible, the transfer will be carried out automatically.
• Right to lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka), Martićeva ulica 14, HR – 10 000 Zagreb, phone: 00385 (0)1 4609-000, fax: 00385 (0)1 4609-099, e-mail: azop@azop.hr, web: azop.hr

You may exercise all of the above rights at any time in writing by sending a letter to the AMADRIA PARK address, using the contact details provided in this notice, or to the address of the Data Protection Officer.