GDPR

PRIVACY STATEMENT OF THE TOURIST BOARD OF THE CITY OF VINKOVCI

This Privacy Statement:TOURIST BOARD OF THE CITY OF VINKOVCI, Trg bana Šokčevića 4, 32100 Vinkovci, OIB: 34765765190 (Data Controller) is made in accordance with the General Data Protection Regulation (EU) No 2016/679 of the European Parliament and of the Council of April 27, 2016, which applies from May 25, 2018.

The Data Controller will process your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, the Act on the Implementation of the General Data Protection Regulation, or other national law based on the said Regulation, with the application of appropriate technical and security measures to protect personal data from unauthorized access, misuse, disclosure, loss, or destruction.

GENERAL INFORMATION

This Statement describes the data we collect, how we process it, and for what purposes we use it, as well as your rights related to your data.

The entity responsible for data processing is:

TOURIST BOARD OF THE CITY OF VINKOVCI, Trg bana Šokčevića 4, 32100 Vinkovci, OIB: 34765765190 (Data Controller) The contact information through which you can obtain all information regarding the processing and use of personal data are:

Phone number: 032/334653
e-mail: info@visitvinkovci.com
adress: Trg bana Šokčevića 4, 32100 Vinkovci.

A Data Protection Officer/Official has been appointed for the procedure of data protection.

CATEGORY OF PERSONAL DATA BEING PROCESSED

Employees: Name and surname, Personal Identification Number (OIB), date of birth, address, number of children, education, phone number, email address, bank account number, length of work experience, registration number with the Croatian Health Insurance Fund (HZZO) and Pension Insurance Institute (HZMO) for the purpose of entering into an employment relationship, signing an employment contract, and payment of benefits arising from the employment relationship.
Competition participants: name and surname, phone number, email address; the personal data collected is used for the purpose of candidate selection.
Poslovni partneriMobile phone numbers, landline numbers, and email addresses are collected for the purpose of contacting partners, with their consent.
Tourists: name and surname, place of birth, nationality, type and number of identity document, residence (domicile) and address, date and time of arrival/departure, gender, basis for exemption/reduction of tourist tax payment for the purpose of recording accommodation.
Private renters: accommodation services – name and surname, Personal Identification Number (OIB), date of birth, address, object address for vacation, phone number, email address, number of beds, number of stars, categorization resolution for the purpose of recording accommodation.
Third parties: taxi drivers, beekeepers, winemakers, olive growers, tourist guides, hospitality establishments, and similar – name and surname, phone number, email address for the purpose of promotion and publication on websites.
Tourism association authority: name and surname, residence, Personal Identification Number (OIB), email address, mobile phone number for the purpose of work, contacting, and publication on websites.

LEGAL BASIS AND PURPOSES OF PROCESSING PERSONAL DATA

All types of your personal data are processed for the following purposes and on the basis of:

a) Legal obligations
b) Contract execution
c) Legitimate interests of the Data Controller
d) Consent

STORAGE PERIOD

Your personal data is generally deleted upon termination of the employment relationship, and no later than the expiration of all legal obligations related to the storage of personal data.

MANAGING CONSENTS

You can withdraw your consent at any time. Similarly, you can object to our processing of your personal data at any time.

You can make changes to your consent (complete or partial withdrawal, or re-giving of consent) by contacting us.

via email: info@visitvinkovci.com
via mail to the address: Trg bana Šokčevića 4, 32100 Vinkovci

If you wish to give your consent again, you can do so in the same way as when revoking it.

In the case of processing your personal data for which consent is not required but is necessary for concluding a contract with us or fulfilling the concluded contract or due to legal obligations, if you do not provide us with such data, we will not be able to fulfill our contractual obligations to you nor will we be able to conclude a contract with you.

DATA SUBJECT RIGHTS

a) Right to information about the processing of personal data

b) Right to rectification: If we process your personal data that is incomplete or inaccurate, you can request us to correct or supplement it at any time.

c) Right to erasure: You can request the erasure of your personal data from us if we have processed it unlawfully or if such processing constitutes a disproportionate interference with your protected interests. Please note that there are reasons that may prevent immediate erasure, such as legal obligations for archiving.

d) Right to restriction of processing:You can request the restriction of the processing of your data from us:

If you contest the accuracy of the data during the period that allows us to verify the accuracy of the data,
if the processing of the data was unlawful but you oppose erasure and instead request the restriction of data use,
if the data are no longer needed for the intended purposes but are still required by you for the establishment, exercise, or defense of legal claims, or
if you have objected to the processing of those data.

e) Right to data portability:You can request us to provide you with the data you have entrusted to us for archiving in a structured, commonly used, and machine-readable format:

if we process that data based on the consent you gave us, which you can withdraw, or for the fulfillment of our contract, and if the processing is carried out by automated means.

f) Right to object:If we distribute your data for the performance of tasks carried out in the public interest or in the exercise of official authority or if we invoke our legitimate interests in the processing, you can object to such data processing if there is an interest in protecting your data.

g) Right to lodge a complaint:If you believe that we have violated Croatian or European data protection laws during the processing of your data, please contact us to clarify any questions. You also have the right to lodge a complaint with the Croatian Data Protection Agency or, in the case of changes in applicable regulations, with another body that will assume its competence, and as of May 25, 2018, with the supervisory authority within the EU.

h) Exercising the rights:If you want to exercise any of the mentioned rights, please contact us using the contact information provided in Article 1 of this Statement.

i) Confirmation of identity:In case of doubt, we may request additional information to verify your identity; this is for the protection of your rights and privacy.

j) Abuse of rights:If you were to exercise any of the mentioned rights too frequently and with an apparent intention of abuse, we may charge an administrative fee or refuse to process your request.

k) Right to restrict processing: You can request the restriction of processing of your data: - if you dispute the accuracy of the data during a period that allows us to verify the accuracy of that data - if the data processing was unlawful, but you refuse deletion and instead request a restriction on the use of the data - if the data is no longer needed for the intended purposes, but is still required by you to assert legal claims or if an objection has been filed against the processing of this data.

TRANSFER OF DATA TO THIRD PARTIES

We commit to protecting your personal data and will not disclose or make them available to third parties except in the following cases:

if you expressly consent in writing to disclose certain confidential data for a specific purpose or to a specific person
if the data is required by the Ministry of the Interior or the competent State Attorney's Office for the purpose of performing tasks within their jurisdiction
if the data is required by the tax authority, the Institute for Pension and Health Insurance, based on the legal obligations we have towards them
If the data is required by the tax authority, the Institute for Pension and Health Insurance, based on the legal obligations we have towards them
if the data is required by the Ministry of Finance or the tax authority in the process they are conducting within their jurisdiction

We have implemented all necessary technical and organizational measures to protect your data from loss, alteration, or unauthorized access by third parties. In case of any questions, feel free to contact us, and we will respond to your requests, inquiries, or concerns as soon as possible, assisting you in asserting your rights.

Any changes regarding our personal data protection policy will be published in the privacy statement on our website, and you will be adequately informed about them.