1. We care about your Personal data

Data protection is our special interest. This privacy notice explains which personal data we collect, why we collect them, how we use them, with whom we share your personal data, how we keep it safe and which rights do you have. When we use your data, we use them according to this Privacy notice. This Privacy notice is related to our clientele and website visitors. If you have any questions regarding your Personal Data, please feel free to contact us on e-mail: info@hvarpoint.com or in writing on our official address.

2. What is Personal data?

Personal data means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

3. Types of personal data we use

Depending on the purpose, we collect the following type of Personal data:

• Your identification data (Name and Surname, Personal identification number, Passport or ID Number)
• Contact details (email, telephone number)
• Information about your activities on the website, IP address, geographical location
• Payment details (the type of credit card, credit card number, bank account)
• Information about the services you have used
• Details about your hotel/accommodation
• Other information you voluntarily provide to us

4. When we collect your Personal data?

We collect your Personal data:

• Directly from you; when you contact us when you use our services and the contact form on our website
• Indirectly (from third parties- subcontracts acting on our behalf who provide us various services, from our business partners and advertising providers)
• Automatically (when you visit this website)
• Our website uses cookies. About cookies read more in the cookie policy.
• When you engage with us through social media (when you tag us, mentioned us or contact us through social media)

5. Am I obligated to obtain you my Personal data?

No, you are not obligated to provide your data to us. However, where your Personal data is required for us to provide you our service, we may not be able to offer you are services or enter into a contract with you.

6. Children’s Personal data

Our online services are not intended for children under 16 years. We advise parents/guardians to inform their children about the safety and use of personal data on the Internet.

7. Why we collect your Personal data?

We use your Personal data for various purposes, which include:

• Fulfilling our obligations under the contract
• We use your data to make a booking and to provide you the services you asked for and communicate with you regarding that booking or/and services. We rely on the contract we have entered with you as a lawful basis for processing.
• We use your data to make a booking and to provide you the services you asked for and communicate with you regarding that booking or/and services. We rely on the contract we have entered with you as a lawful basis for processing.
• To collect payments under the contract we have entered with you.
• We rely on the contract we have entered with you as a lawful basis for processing.
• Sending you communication which you have requested and that might be interested in you.
• We use your data to provide you information about our services in the area in which you expressed your interest. It is our legitimate interest as a business to use your data for this purpose.
• We use your data to provide you information about our services in the area in which you expressed your interest. It is our legitimate interest as a business to use your data for this purpose.
• Analysis and market research to better understand how to improve our services and how to be better.
• It is our legitimate interest as a business to use your data for this purpose.
• Fulfilling our legal obligations.
• Sometimes we will use your personal data because it's necessary for us to comply with a legal obligation.
• Conduct fraud checks and prevent illegal activity.
• It is our legitimate interest as a business to use your data for this purpose.
• It is our legitimate interest as a business to use your data for this purpose operate our website.
• It is our legitimate interest as a business to use your data for this purpose keeping records.
• We keep records about your previous tour reservations for our internal purposes. It is our legitimate interest as a business to use your personal data for this purpose

8. Sharing your data with third persons

We don’t sell or rent your Data. In order to achieve purposes set out in this policy to the third parties which may include:

• Third parties service providers who work on our behalf or who we are working with (We work with carefully selected third parties, such as our marketing agencies and advertising partners, IT service providers, accountants, legal advisors, payment services, hire companies and etc.)
• Public authorities and other bodies
• We may disclose your Personal data to the third party as a part of a sale or merger or reorganization of our business assets.
• We will always take care that your Personal data are protected.

9. For how long we keep your data?

We keep your Personal Data only as is necessary for the purpose it was collected. The retention period depends on the following criteria:

• In which purpose we process personal data?
• What is a lawful basis for such processing?
• Are we legally required to hold some types of Personal Data?

10. Data protection and transfers of Personal data outside of EEA

We take all necessary organizational and technical measures in order to protect your personal data. We store your Personal data inside the European Economic Area (EEA), except in the case that is your personal data stored on the servers in the country outside the EEA. For communicating with website visitors, we use [npr. Mailchimp] server which is in the [USA]. Please note that the other countries may have different privacy regulations and standards that the EU. However, we will take care that is your personal data are subject to the same safeguard measures as inside the EEA.

11. Link to Social media

Our website contains a link to social media (Facebook and Instagram). Please note that Facebook and Instagram have their own privacy rules, so we advise you to read FB or Instagram Privacy rules. We are not responsible for the privacy rules of the FB or the Instagram even you access to them through our link.

12. Your rights

• Right to be informed about processing your Personal data
• Right to withdraw a consent
• If we process your Personal data based on the consent, you have right in any time to withdraw your consent.
• Right of access your Personal data or to ask for the copy of your Personal data
• Right to correct your Personal data
• If your Personal data that we hold are incorrect or unaccrued, you have the right to correct or up to date them.
• Right to erasure (“Right to be forgotten”)
• This is not your absolute right and only applies in certain circumstances.
• Right to restrict the use of the Personal data
• This is not an absolute right and only applies in certain circumstances.
• Right for your information to be portable (Personal data portability)
• If are your Personal data processed based on your consent or to fulfill contractual obligations or
• Right to object in case we are processing your personal data based on legitimate interest, for direct marketing or statistical/research purposes
• Right to complain to the Data Protection Authority
• Croatian DPA: Data Protection Agency, Martićeva 14, 10000 Zagreb, Croatia
• If you have any questions about your rights or you want to exercise them, you can contact us via email info@hvarpoint.com or on the address: Hvar, Braće Buzolić 1, 21450 Hvar. We might ask for you additional information to verify your identity. In most cases, we will respond to your request within 30 days of receipt of your request. We may extend the time to respond by a further two months if the request is complex or we have received several requests from you. In such a case, we will inform you about the reasons of the delay.

13. Changes to this Policy

We have right to make changes to this policy. Any changes we make will be published on this website. This Policy was last updated in October 2020.