Privacy Policy
Information on the processing and protection of personal data under the GDPR.
Controller: Ližnjan Apartman d.o.o., Smiljevac 83, 52204 Pula – Ližnjan, Republic of Croatia · OIB: 14127870769
01 The Controller
- Name: Ližnjan Apartman d.o.o.
- Registered office: Smiljevac 83, 52204 Pula – Ližnjan, Republic of Croatia
- OIB: 14127870769
- E-mail: info@lisignanoapartments.com
- Phone: +421 905 711 113, +421 901 711 167
The controller processes personal data of data subjects and is responsible for that processing under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “GDPR”). The controller has adopted all appropriate technical and organisational measures to protect personal data.
The controller has not appointed a data protection officer.
02 Purposes and Legal Bases of Processing
1. Customers
- Purpose: communication with the customer, delivery of goods or services. Legal basis: Article 6(1)(b) GDPR — processing is necessary for the performance of a contract and for steps taken prior to entering into a contract. Category: ordinary personal data.
- Purpose: issuing tax documents, handling complaints. Legal basis: Article 6(1)(c) GDPR and Act No. 222/2004 Coll. on value added tax. Category: ordinary personal data.
2. CCTV systems
Purpose: protection of rights and property by means of a camera system. Legal basis: Article 6(1)(f) GDPR — processing is necessary for the legitimate interests of the controller, namely the protection of rights, property and persons. Category: ordinary personal data.
3. Cookies
Purpose: correct functioning of the website, traffic analysis, personalisation of advertising and remembering user settings. Legal basis: Article 6(1)(a) GDPR — the data subject has given consent (through browser settings). Category: ordinary personal data.
4. Marketing
Purpose: marketing communication. Legal basis: Article 6(1)(a) GDPR — the data subject has given consent. Category: ordinary personal data.
5. Customer contacts
Purpose: marketing communication. Legal basis: Article 6(1)(f) GDPR. Category: ordinary personal data.
03 Recipients of Personal Data
We identify the following categories of recipients:
- public authorities or public institutions (for example courts, government offices, law enforcement bodies and similar),
- business partners in administration (for example accounting, human resources, legal services and others),
- IT business partners (for example server operation, information systems and others),
- business partners in advertising and marketing,
- business partners delivering postal and courier consignments.
04 Retention Periods
- Customers — communication with the customer: 5 years
- Customers — tax documents and complaints: as set by the act referred to in the legal basis or by related legislation
- CCTV systems: 14 days
- Cookies: as set in the browser
- Marketing: 5 years
- Customer contacts: 5 years
05 Rights of the Data Subject
The rights of the data subject are defined in the second title of Act No. 18/2018 Coll. on the protection of personal data. They are:
- the right to withdraw consent at any time,
- the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, tel. +421 2 3231 3214, e-mail statny.dozor@pdp.gov.sk,
- the right of access to personal data,
- the right to rectification,
- the right to erasure,
- the right to restriction of processing,
- the right to data portability,
- the right to object to processing,
- the right not to be subject to a decision based solely on automated processing, including profiling, and the right to be informed whether such decision-making exists.
06 Contact
For further information on personal data protection, or to exercise your rights as a data subject, please contact us using the details above.