loading

Privacy policy

This privacy policy (“Policy”) explains how company  Hosteli i turizam d.o.o., Vlaška 44, 10000 Zagreb, OIB: 88335152103 (hereinafter: " HOSTELI I TURIZAM ") collects, uses and manages your personal data that are located on the website and that are available to Hosteli i turizam due to your use of the website: www.obrok.hr 

HOSTELI I TURIZAM is committed to protecting and respecting your privacy. Read this Policy carefully to understand why and how we collect your personal data and how they will be used. In terms of personal data that we collect, HOSTELI I TURIZAM is the "Controller", i.e. the one who determines the needs for which and the means by which personal data are processed.

HOSTELI I TURIZAM, as the service provider of the website www.obrok.hr, is committed to protecting personal data privacy.

If you wish to contact us regarding this policy or regarding your personal data, please use the following contact details:

Hosteli i turizam d.o.o.
Vlaška 44
10000 Zagreb
OIB: 88335152103

You can contact the Personal Data Protection Officer at: ured@presido.hr

How and when do we collect your personal data?

HOSTELI I TURIZAM collects personal data for the purpose of improving our business operations and your user experience. For these reasons, HOSTELI I TURIZAM has a comprehensive privacy program designed to respect and protect the right to data privacy, project analysis and implementation, marketing and other types of technical support.

We treat your personal data as confidential data and they are properly protected by HOSTELI I TURIZAM  and/or our reliable partners.

We process your personal data in order to comply with legal obligations, if this is necessary for the performance of the contract to which the data subject is a party, or to take action at the request of the data subject before concluding a contract, or for legitimate interests, except when interests or fundamental rights and freedoms of data subjects that require personal data protection are stronger than those interests.

What data do we collect directly from you?

When a user engages in certain activities on the website www.obrok.hr such as researching HOSTELI I TURIZAM’s projects, and/or when you want to send us an inquiry, and/or when you want to send us your CV, HOSTELI I TURIZAM may ask the user to provide certain additional personal data. In this case, before providing personal data, the user is obliged to study this Privacy Policy and agree to its application in relation to additional data.

Depending on the types of activities, some of the requested data are defined as mandatory and some as voluntary. If the user does not want to provide mandatory data for the activity that requires them, he/she will not be allowed to engage in that activity.

HOSTELI I TURIZAM collects and uses personal data in order to enable users to use the activities via the website www.obrok.hr, improve the work of the website www.obrok.hr, create a user database for the purpose of improving the service and/or marketing, and improve advertising and promotional activities. Also, personal data can be used to solve problems, perform administrative tasks and establish contact with users.

On the website www.obrok.hr, HOSTELI I TURIZAM collects personal data of data subjects such as: name, surname, gender, e-mail address or other contact, working place and IP address.

In addition to the personal data we process when you visit the website, below is the list of other types of personal data, purposes of their collection and use, all of which we collect and process during the performance of our regular obligations related to the registered activities of HOSTELI I TURIZAM:

  • HOSTELI I TURIZAM collects and processes personal data of its employees and other associates for the purpose of performing employment contracts signed with employees and consulting contracts and/or work contracts signed with associates, which relate to personnel, administrative or other business/contractual business purposes. In the latter case, we collect and process data such as: name, surname, gender; marital status, citizenship, residence, date and place of birth, personal identification number; vocation, occupation, data on professional training and courses, data related to health insurance, work experience; data on the account number (IBAN), photograph and signature.
  • From suppliers, sponsors and other clients, for the purpose of fulfilling contractual obligations, we collect and process data such as: name and surname of the responsible person in the legal entity; contact details of the person in charge of communication and performance of contractual obligations; academic and professional qualifications of the responsible persons in the legal entity and the signature of the responsible person.
  • From job candidates, all for the purpose of possible employment, the data collected and processed by HOSTELI I TURIZAM may include: name, surname, address, contact data (e-mail address, telephone number, mobile phone number), photograph, level of education, citizenship, vocation and occupation, information on previous work experience, information on professional training and courses, and test results that may reflect the candidate's ability to perform all job responsibilities that a particular position for which he/she is applying requires from him/her.
  • when you  send us any inquiry related to our offer, we will process your contacts and / or other information that you provide to us when you are calling or sending an inquiry,
  •   when you want to reserve a place, we collect and process, for the purpose of fulfilling contractual obligations, data such as: name and surname, telephone and e-mail

The following persons may have access to personal data in the performance of their scope of work: legal entities participating in the execution of legal relations with users such as IT support and other companies related to HOSTELI I TURIZAM, public bodies that require the submission of personal data in accordance with regulations binding on HOSTELI I TURIZAM, of which HOSTELI I TURIZAM keeps the prescribed records of processing activities.

What privacy rights do you have?

HOSTELI I TURIZAM respects that every user should be able to ensure the accuracy, completeness and up-to-dateness of their personal data. If a user believes that his/her personal data are incomplete, inaccurate or not updated, he/she can contact HOSTELI I TURIZAM by sending an e-mail to ured@presido.hr 

Please note that at any time you have the right to request the following from HOSTELI I TURIZAM:

 

 

 

  • To give you access to your personal data

 

 

 

You can ask HOSTELI I TURIZAM which of your personal data it uses, and you can also request access to that personal data. You have the right to know the purpose of processing, which categories of your personal data we store, the authorities or categories of authorities with whom we share your personal data, the data retention period, as well as the source of data in case the data are collected indirectly.
You can contact us if you want a copy of some or all of your personal data we are keeping.

 

  • To request correction of incorrect data

 

We want your personal data to be accurate and up to date. You can ask us to correct or remove data you believe are inaccurate or out of date.

 

  • To request erasure of personal data

 

You can ask HOSTELI I TURIZAM to stop processing or even erase your personal data. If we need your personal data to perform a contractual obligation towards you, HOSTELI I TURIZAM may cease to be able to perform such contractual obligations. Also, if your personal data are necessary in order to be able to fulfill certain legal obligations (e.g. tax liabilities), your request may not be able to be fulfilled. 

 

  • To restrict access to your data (to us and/or third parties) in certain processes or in full

 

If you wish to challenge the accuracy of the data, or we no longer need personal data for the purpose of processing, but you need them to establish, implement or process legal claims or you have objected to processing on grounds we deem legitimate, you have the right to request a restriction of personal data processing.

 

  • To file an objection to the manner in which we use your data

 

Remember that you have the right to object to the processing of personal data based on a legal basis that OBROK considers legitimate

 

  • To request data transfer to another processor (portability of rights)

 

If the processing is based on your consent or is performed by automatic means, you have the right to request from HOSTELI I TURIZAM the transfer of data to another processor.

To exercise any of the above rights, please use the contact information provided at the beginning of the Privacy Policy. 

If you are not satisfied with how we have collected or used your personal data, you can lodge a formal complaint to the Personal Data Protection Agency.

Where are your personal data stored?

We store the personal data we collect about you in a secure environment. Your personal data are protected from unauthorized access, disclosure, use, alteration or destruction by any organization or individual. The processed data are stored in our premises and IT systems, but sometimes we store the data on the servers of our trusted service providers.

HOSTELI I TURIZAM will ensure that personal data are kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons.

The data collected for the purposes specified in this Policy will be stored only for as long as is necessary to fulfill the stated purposes. Your personal data will not be kept in a form that allows you to be identified for longer than HOSTELI I TURIZAM reasonably deems necessary to achieve the purpose for which they have been collected or processed. HOSTELI I TURIZAM will store certain personal data for a period of time prescribed by law or a regulation obliging HOSTELI I TURIZAM to keep data.

In the event that you have given us consent, we will process your personal data until the consent is withdrawn. If you make a founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.

In addition to all of the above, it is important to point out the following; if judicial, administrative or extrajudicial proceedings have been initiated, personal data may be stored until the end of such proceedings, including a possible period for declaring legal remedies. HOSTELI I TURIZAM will store certain personal data for a period of time prescribed by law or a regulation obliging the Controller to keep data.

Does HOSTELI I TURIZAM exchange data with third parties?

Privacy protection is important to us, so we will never share your personal data with third parties except for the purposes described in this Policy.

HOSTELI I TURIZAM cooperates with other companies. This means that we sometimes share your personal data, using secure IT systems. When we do so, the data is transferred to servers located in the EU or in a country that provides an adequate level of protection in accordance with EU legislation.

In some cases, our partners providing services on behalf of or for HOSTELI I TURIZAM may process your data outside the European Union. However, the contracts we enter into with such entities oblige them to treat your data with special security measures in accordance with the regulations in force in the Member States of the European Union. In the event of a transfer of data to the United States, we will ask for your permission in view of the consequences of the "Schrems II" judgment and the invalidation of the Privacy Shield. Also, if our contract partner is based in the US, we will review existing contracts and check the security standards that our partner guarantees to ensure the protection of all our respondents with the latest standards approved and suggested by the relevant institutions.

In addition to all of the above, we may provide your personal data to our trusted partners who maintain our IT system or provide services on behalf of HOSTELI I TURIZAM, for example, for the needs of marketing, financial, advertising and other services inside and outside HOTELI I TURIZAM. However, these service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. We also oblige them to adequately protect your data and to consider them a trade secret.

How long will HOSTELI I TURIZAM keep your personal data?

HOSTELI I TURIZAM will not keep your personal data for longer than the period for which the data is needed to fulfill the purpose of their use, but for a maximum period of 3 years.

What will we use your data for?

We may use your personal information in several different ways, mainly to perform our contractual and other obligations to you, but sometimes to improve your experience of using the website, direct marketing and security reasons.

Cookies

To maintain the website and ensure that its functionality is at the expected level, HOSTELI I TURIZAM uses technology known as "cookies".

Cookies are small files that we send to your computer and that we can access later. They can be temporary or permanent. Thanks to cookies, you can easily search our website and display results that are relevant to you. Cookies show us what interests you and other visitors to our website, which helps us improve it.

You can read more about the name and purposes of the cookies we use in our Cookies Policy.

Other websites

This Privacy Policy applies only to the use and utilization of data collected by HOSTELI I TURIZAM from users (data subjects). Other websites that can be accessed via the website www.obrok.hr have their own data confidentiality and collection statements, and the manners of data use and publication.

HOSTELI I TURIZAM shall not be responsible for the methods and working conditions of third parties.

HOSTELI I TURIZAM collects and processes personal data via user interactions on social networks such as Facebook and Instagram. HOSTELI I TURIZAM or responsible persons appointed by HOSTELI I TURIZAM have access to messages and/or publications on the mentioned social networks, however, personal data collected through them, especially those contained in messages, are not stored and further processed by HOSTELI I TURIZAM, except for the purposes specified in this Policy.

HOSTELI I TURIZAM uses a business profile using Facebook and Instagram services, and you can review the Privacy Policy or privacy statements, as well as the way they use your personal data at:

 

FACEBOOK ONLINE

https://www.facebook.com/policy.php

INSTAGRAM ONLINE

https://help.instagram.com/519522125107875

If you have any questions regarding the collection and processing of data by Facebook and/or Instagram or you wish to exercise any of your rights guaranteed by the General Data Protection Regulation, please contact:

FACEBOOK IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

 

Contact of the Data Protection Officer:

https://hr-hr.facebook.com/policy.php

https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with the way your personal data are being collected and processed, you can contact the lead supervisory authority for Facebook, the Irish Data Protection Commissioner or the Croatian Data Protection Agency.

FOR INSTAGRAM:

FACEBOOK IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

 

Contact of the Data Protection Officer:

https://hr-hr.facebook.com/policy.php

https://www.facebook.com/help/contact/540977946302970

 

If you are not satisfied with the way your personal data are being collected and processed, you can contact the lead supervisory authority for Instagram, the Irish Data Protection Commissioner or the Croatian Data Protection Agency.

On the HOSTELI I TURIZAM website, as the Controller of personal data processing, he installed Facebook components. Facebook is a social network.

A social network is a place of social networking on the Internet, an online community that typically allows users to communicate with each other in a virtual space. The social network serves as a platform to share opinions and experiences, or to provide the Internet community with personal or business-related information. Facebook allows its users to create private profiles, upload images and connect through friend requests.

Facebook is owned by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If the person using Facebook lives outside the United States or Canada, the Controller of personal data processing is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA is a independent Controller.

By opening www.obrok.hr, the respondent's browser will display the appropriate Facebook component, which is a consequence of using the Facebook plugin. An overview of all Facebook plugins can be found at https://developers.facebook.com/docs/plugins/. During this technical procedure, Facebook was provided with information about a specific subpage visited by the respondent.

In case you are registered as a respondent on Facebook, at the same time Facebook can detect every review of your website www.obrok.hr. This information is collected through the Facebook component and credited to the respondents Facebook account. If the respondent clicks on any Facebook button integrated on the OBROK website, for example the "Like" button, or if the respondent sends a comment, then Facebook transfers the information to the respondent's personal Facebook account and thus saves personal data.

Each time the respondent is logged in to Facebook and at the same time accesses the OBROK website, Facebook will receive information about it via the Facebook component. This will happen regardless of whether the respondent clicks on the Facebook component or not. If the respondent does not want to transfer this type of information, he can also prevent it by logging out of his Facebook account before accessing the OBROK website.

Entry into force and change of the Privacy Policy

This Policy shall enter into force upon its publication on the website.

HOSTELI I TURIZAM reserves the right to amend the Privacy Policy and it will be published on the website.