PRIVACY POLICY

INTRODUCTORY PROVISIONS

Plava laguna d.d., R. Končara 12, Poreč, Croatia, PIN: 57444289760, (hereinafter: Plava laguna) respects your privacy and the safety of your personal data. The collection, use and processing of your personal data is carried out in accordance with these Privacy policy and with the applicable legal provisions, including Regulation (EU) 2016/679 as of 27 April 2016 (hereinafter: General Regulation) and the Croatian Act on the Implementation of the General Data Protection Regulation (Official Gazette NN 42/2018).

In accordance with the principle of transparency, these Policy are intended to provide respondents with accurate, complete information about which of their personal data is collected, used, provided or otherwise processed by Plava Laguna, as well as to which extent this data is processed or will be processed. Likewise, the aim of these Policy is to introduce individuals who use this internet portal to the risks, rules, protective measures and rights related to the processing of their personal data and the manner in which to exercise their rights as regards its processing.

These rules are valid and applicable regarding the collection, processing and protection of your personal data, as well as the use of cookies and other similar analytical tools when visiting, registering and using internet portals www.plavalaguna.com and www.istracamping.com and all of their sub-domains, web pages and mobile phone applications that belong to the aforementioned domain names owned by Plava Laguna (hereinafter, collectively or individually: Plava Laguna Internet Portals), software applications we provide you for use on personal computers or mobile devices (hereinafter: Applications), when sending e-mail containing a link to these Privacy Rules, and during the registration process and when communicating with you while you are a guest at one of our facilities (hereinafter, collectively: Online Services).
The general rules and conditions of the Plava Laguna Internet Portals are defined by separate rules and general conditions of use, and these rules and conditions shall be applied in everything not covered by the current Rules, under the condition that they are not in opposition to the provisions of these Privacy policy.

PERSONAL DATA

Personal data is any data that can be used to confirm your identity. Through its online services, Plava Laguna can collect some of the following personal data:
- First name, last name, home address, date of birth, gender, personal identification number, personal ID number or number of other identification documents, citizenship, e-mail address, telephone and/or mobile phone number;
- Data on your stay, including data on the facility in which you are staying, date of arrival, date of departure, products or services purchased, information on your preferences for services (room type, etc.);
- Data on ordered services (e.g. via the ISTRA CAMPING mGUEST application);
- Data collected for the purpose of implementing the loyalty program (e.g. family status, interests, hobbies)
- Additional information about you that we might receive from third parties with whom we do business (e.g. travel agencies, tour operators).

LEGAL BASIS FOR THE COLLECTION OF PERSONAL DATA

Plava Laguna collects and processes your personal data only if one of the assumptions listed below is fulfilled:
We have your consent

Example: receiving our newsletter
If you wish to receive our newsletter, you will click the check box on the Plava Laguna Internet Portal indicating that you wish to receive the newsletter, and you will enter the e-mail address to which you wish to receive the newsletter.
Processing is necessary to execute an agreement to which the respondent is a party, or to take measures at the request of the respondent prior to concluding an agreement

Example: on-line booking
When booking accommodation at one of Plava Laguna's facilities via the Plava Laguna Internet Portal in order for us to offer the services required.
Processing is required in order to fulfil the legal obligations of the data processor

Example: forwarding data to the eVisitor system
Plava Laguna is required to register every guest with the eVisitor system in order to pay sojourn tax and register their stay in Croatia.
Processing is required for the legitimate interests of the data processor or a third party

Example: in order to inform you about the facts related to the use of the service
Plava Laguna may use your personal data to inform you of specific situations related to the use of the service, such as an e-mail notice on the unavailability of certain hotel amenities due to ongoing works, etc.
Plava Laguna may collect personal data for other legally expected reasons, such as e.g. when processing is required in order to protect key interests of the respondent or other physical persons.

PERSONAL DATA THAT IS COLLECTED

Plava Laguna collects data during the use of its services or during access to the Plava Laguna Internet Portals:

(I) When booking accommodation and purchasing other products or services, the following are collected:
First name, last name, home address, e-mail address, telephone number, personal identification number. Information about services (or products) purchased

(II) When accessing the Plava Laguna Internet Portals, the following are collected:
Data on your accommodation interests;
Information on the use of the web page;
Information on clicks on our advertisements, including those published on other web sites;
Information on how you access digital services, e.g. operating system, web browser, IP address;

(III) When sending inquiries and offering support, consultations or answers to complaints, surveys and research, the following are collected:

The data you provide us when booking or purchasing services, including your first name, last name, and e-mail address, or if you are logged in via a social network, then your name, user name and contact data. The content of digital communications, as well as which links you clicked on during communication
The content of your complaints

(IV) When registering for our newsletter, the following is collected:
Name, surname, home address (country), e-mail address, date of birth, special interests of the guest, family status, gender, language of communication and hobbies

(V) When registering for our newsletter, the following is collected:
First name, last name, home address, e-mail address, telephone number, personal identification number, data on personal identification document
Information on services (or products) purchased
Guest complaints and comments

(VI) By accessing and using the ISTRA CAMPING mGUEST application, the following is collected:
Information on ordered and cancelled services
Information on the Plava Laguna accommodation facility you are staying at

(VII) When joining the loyalty programme, the following is collected:
Name, surname, home address (country, city, postal code, street and house number), mobile phone number, e-mail address, date of birth, special interests of the guest, family status, gender, password, language of communication and hobbies

In addition to directly from respondents, Plava Laguna can collect personal data from other sources under the following circumstances:
- From specialised firms that offer information (e.g. credit rating agencies), business partners (e.g. tour operators) and public registers (trade register);
- If booking is carried out via a social network e.g. Facebook, Google+, you accept that we may use your user data, e.g. first name, last name, e-mail address or other information you have chosen to share;
- Via video surveillance at Plava Laguna facilities.

In situations in which you give Plava Laguna the personal data of other persons, the following must be taken into account:
- Plava Laguna uses the data of other persons you provide to us, such as e.g. persons included in your booking;
- When you provide data on other persons, you must be sure that they have consented to this and that you have the authority to do so in their name. Whenever possible, you must make sure that they are familiar with the processing of personal data from these Privacy rules.

HOW YOUR PERSONAL DATA IS USED

Plava Laguna processes the data collected to fulfil the purpose for which the data was provided, and/or to fulfil relevant regulations or legitimate interests arising from or tied to the use of the Plava Laguna Internet Portal and the offering of desired services.

In accordance with this, Plava Laguna may use your personal data:
- To offer services you have required, e.g. booking accommodation;
- To offer information you seek related to the services we offer;
- To simplify the use of the Plava Laguna Internet Portal by eliminating the need to frequently enter the same data;
- To aid in making content as relevant as possible to your interests, or to adjust the internet portal to your personal tendencies and interests – if you do not wish to receive personalised content, you are always able to complain by changing your online settings, or by contacting us via telephone or e-mail to update our data;
- To Sent notifications related to the use of your service;
- To prevent fraud or other forbidden or illegal activities;
- To protect the safety and integrity of the Plava Laguna Internet Portal or those of other Plava Laguna companies;

- For marketing and promotional purposes:

• In order to send you notifications about new services, updates to services, events and special offers we believe you may be interested in;
• Marketing research to improve our services, in which case you are always free to refuse to cooperate.

WHO CAN SEE YOUR DATA

Plava Laguna does not sell, rent or lend your data to third parties.
Plava Laguna may share your data with trusted partners who perform particular functions for us, such as e.g. IT systems maintenance and applications, marketing campaigns, payment processing.
Particular personal data is provided to government bodies on the basis of legal requirements such as e.g. registering guests with the eVisitor system to pay sojourn tax, create guest lists and register foreign visitors.
In any case, when Plava Laguna must share collected personal data, we demand that it is protected and not used for marketing purposes.

HOW TO PROTECT YOUR RIGHTS

You have the right to ask for a copy of all the personal data of yours we have collected, while the data we have collected during your booking is visible in the booking itself. You may write to us if you wish for a copy of the other data we have collected from you, in which case you should list all details in order to help us identify and locate your personal data. Delivery of this data is free, but Plava Laguna retains the right to charge a reasonable fee for special requests, such as extra copies, special formatting, etc.
We want all your data to be correct and updated. If you notice that some of your data is inaccurate, please inform us.
Also, we would like to remind you of your right to ask for your personal data to be corrected or deleted, as well as your right to oppose the processing of your personal data. Plava Laguna will correct or erase your personal data, unless we are required to retain it out for legal, legitimate legal or business interests.
If you have a complaint about the processing, use or storage of your personal data, feel free to contact us. If you are not satisfied with our response, you may contact the Croatian Personal Data Protection Agency.
All requests or complaints related to personal data collected by Plava Laguna are to be submitted in writing to the personal data protection agent. The request must contain the e-mail address you provided during check-in, as well as the e-mail address to which you wish to receive a response (if it is different from the e-mail address from which you sent the request). Plava Laguna will e-mail your data within a reasonable time frame to the e-mail address provided in the request.
The e-mail address of Plava Laguna's personal data protection agent is:dpo@plavalaguna.com
We must point out that, prior to responding to your request, we may ask you for more information to confirm your identity. Also, we may ask you for more information to confirm whether you have approval to file a request if you are doing so in someone else's name.

SAFETY OF YOUR PERSONAL INFORMATION

We are completely dedicated to protecting data from unauthorised access, distribution or erasure, regardless of where it is stored or processed or of the format in which it is stored. Plava Laguna uses the services of trusted IT partners, who are required to apply high IT protection standards.

Plava Laguna applies recognised data security standards:
- We carry out technical and organisational protection measures based on risk,
- We minimise data exposure,
- We check collected information, storage and processing methods,
- Whenever possible, we pseudonymise and anonymise data,
- We test organisational and technical protection measures,
- We limit access to personal data to our employees, contract workers and representatives, for whom the use of personal data is limited and controlled on the basis of user tasks, and who are required to respect strict contractual confidentiality obligations.

Plava Laguna takes all measures to identify problems, as well as measures to minimise potential damages.

Please do not forget that you are also our partner in data security. We invite you to take steps to make your personal data safe (including your password), and to always log out of our internet portal after use.

If the personal data we process is transferred outside the European Union and the European Economic Community as a necessity for the technical completion of services sought by users, then Plava Laguna will take reasonable measures to ensure that the persons outside the EU with whom the data is shared take appropriate measures to protect this data and to offer protection in accordance with these Privacy Rules.

PERIOD FOR WHICH PERSONAL DATA IS STORED

The period for which Plava Laguna stores your personal data is limited to a strict minimum, and in accordance with this, Plava Laguna defines the periods for which it stores or periodically checks particular personal data in order for it not to be kept longer than is necessary to fulfill the purposes for which it was collected.

After this period is over, Plava Laguna will erase the personal data. However, if this data is necesary to create statistical indicators, analyses, archiving or some other legitimate interest of Plava Laguna, all measures will be taken to ensure that this personal data is anonymised.

USE OF COOKIES

Plava Laguna uses tools to analyse the use of the Plava Laguna Internet Portal, through which we may collect particular data about you, thus gaining insight into the needs of our visitors and/or users, the goal of which is to improve the quality of our services.
Cookies are used for this purpose, as are some other tools.
The user and/or visitor may refuse or erase cookies through the relevant settings on their computer and the web browser they are using. However, this may prevent some functions of the Plava Laguna Internet Portal from being fully usable.
The aforementioned tools collect and store some technical data, including user and/or visitor IP addresses.
For more information on cookies and the other tools we use, click here.

VIDEO SURVEILLANCE

Plava Laguna facilities implement video surveillance measures for the protection of people and property (legitimate interest) and, in some cases, to comply with legal obligations (for example, video recording of currency exchange office premises pursuant to the Act on the Protection of Monetary Institutions).
Plava Laguna displays appropriate signage at all locations under video surveillance.
Plava Laguna takes due care of personal data collected through video surveillance and implements a system of security, availability and a deletion policy governed by the Rules on the Use of Video Surveillance and Handling of Video Surveillance Recordings.
Data collected through video surveillance are kept for 15 days on a special server separate from the main server, to which only authorised persons have access, and destroyed after the expiry of the said period.
As an exception, data collected through video surveillance may be kept for a period of time longer than 15 days, if so required by law or if the data in question are being used as evidence in court, administrative, arbitration or other proceedings.
Access to personal data collected through video surveillance may be granted to third parties, processors and contractual partners of Plava Laguna registered and qualified for providing video surveillance services and services relating to protection of people and property and the company renting the currency exchange office premises and performing activities of currency exchange offices therein.

LINKS TO OTHER WEB SITES

This web site may contain links to other web sites managed by Plava Laguna or other organisations that have their own special privacy rules, so we inform you that you must familiarise yourself with their terms of use and privacy rules prior to providing them with any personal data, as Plava Laguna cannot assume any liability for these web sites or the organisations that manage them.

SOCIAL NETWORKS

This web site may use particular elements of social networks such as Instagram, Facebook, Google+, Pinterest, etc, each of which have their own privacy rules, so we inform you that you must familiarise yourself with their terms of use and privacy rules prior to providing them with any personal data, as Plava Laguna cannot assume any liability for these web sites or the organisations that manage them.

CHANGES TO THE PRIVACY POLICY

These Privacy Policy replace all prior versions.
The Privacy Policy were last updated in: April 2023.
Plava Laguna retains the right to change, modify and/or amend these Privacy Rules at any time. All changes to the Rules will be published on the Plava Laguna Internet Portal; in the case of significant changes, you will be informed in a clear and understandable manner.