Privacy Notice
Scope of this Notice
This Notice on the processing of personal data refers to the processing of personal data which the company Dragon & Hare d.o.o. with registered seat in Pazin, Rebici 35, personal identification number (OIB): 62655178409, (“Dragon & Hare” or “we” or “our”), phone: 385 91 504 3309, email: frank@casafam.eu, conducts as the data controller over personal data of data subjects who have made inquiries in relation to booking the Villa, made booking or are registered as guests in the Villa based on the Rental Terms, as well as personal data of visitors to our website available at www.casafam.eu.
THE PURPOSE AND LEGAL BASIS FOR THE PERSONAL DATA PROCESSING:
The personal data of the persons who either visited our website, made an inquiry in relation to booking the Villa, booked stay in the Villa or are registered for stay in the Villa (“Guest”, “you”, “your”) are processed only to the extent and as long as the same is permitted by the applicable personal data protection regulations. Specifically, we process your personal data provided that one of the below described legal basis exists:
- processing is necessary for the performance of the Rental Agreement or to take steps at your request prior to entering into the Rental Agreement (e.g., to deal with queries about the Villa or about booking the stay in the same);
- processing is necessary for compliance with our legal obligation as the data controller (e.g., Aliens Act, Tourist Tax Act and other applicable laws and bylaws);
- processing is necessary for the purposes of legitimate interests pursued by us as the data controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data (e.g., to monitor the use of or manage our website).
a) Booking & Rental Agreement performance
We collect and process your data if you have sent booking inquiry or made reservation of our Villa, which is necessary for us in order to respond to your inquiry, complete the booking process and act in accordance with the Rental Agreement concluded with you. In the event that you are not willing to give us this information, we may not be able to complete your booking.
Specifically, for the purpose of responding to your booking inquiries, we would normally process your name and surname and contact data such as email address or telephone number, as well as any other personal information that you have provided us in this respect, and which is relevant for the query.
Furthermore, for the purpose of concluding Rental Agreement and fulfilling our obligations under the same, we process personal data provided by you directly to us, which include, inter alia: name and surname, residence address, personal identification number, contact e-mail, place and date of birth, gender, pets and dates of your availability for renting our Villa.
We may also process information which may relate to your fellow travellers, in which case please make sure that you are entitled to share all the information which pertains to other natural persons who are also instructed to make sure that they have read and understood this Notice.
Please note that generally we do not require you to provide us with any information which is considered as a special category of personal data (such as information revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, health data etc.). However, if we receive such information from you, we will process it only to the extent that we have a valid legal ground in accordance with Article 9 of the GDPR.
If you provide us any additional information, we will process it only to the extent strictly necessary to respond to or to deal with your request.
b) Legal obligations to process your data
We also collect and process your personal data to the extent necessary to comply with our legal obligations (such as to register your stay with the competent Tourist Board or to comply with local accounting and tax laws).
c) Legitimate interest
When processing is necessary for the purposes of legitimate interests pursued by us or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, we may process your personal data.
Amongst other, this may include our legitimate interests of establishing, exercising or defending against legal claims,
It also includes processing of your personal data through our website. Namely, we use technology to automatically collect information about the use of our web site. For example, our web server automatically logs when visitors view our website, their IP addresses and which web browsers our visitors use. We use this information understand how visitors navigate through our website, enhance your experience on our website and improve our services. In order to automatically collect the data described in the preceding paragraph, we use “cookies”. A cookie is a small piece of information which is sent to your browser and stored on your computer’s hard drive. Please see our Cookie Notice available at www.casafam.eu for more information about cookies and how you can change your settings to delete or reject cookies.
TO WHOM ARE YOUR PERSONAL DATA DISCLOSED?
We may disclose personal data to trusted third parties who will process that data on our behalf (data processors).
We use a third-party payment processor to process your payments. In connection with the processing of such payments, you will be asked to provide your personal data by our third-party payment processor. We encourage you to familiarize yourself with their privacy policies, since we do not control how they process your personal data. Such third-party payment processors are data controllers in their own name. We may process the payment information regarding the transactions made to you on our behalf by our third-party payment processor only if this is our legal obligation (such as our tax obligations) or if we are required to do so for the purpose of establishing, exercising and defending legal claims arising from Rental Agreement. If you do not provide the third-party payment processor with the required data, we may not be able to complete the booking process.
We may also share your personal data with our service providers, such as the accountants, if this is required to fulfil our legal obligations arising from tax and accounting laws and regulations.
In addition, we are required under the law to disclose your personal data to the local authorities, such is the case with registration of your stay with the local Tourist Board.
Finally, we may disclose your personal data to our legal advisors or courts, if this is required for the purpose of establishing, exercising or defending against legal claims.
THE PERIOD FOR WHICH THE PERSONAL DATA ARE STORED:
We will keep your personal data until the fulfilment of the purpose for which they were collected and fulfilment of all contractual rights and obligations or until the expiration of the statutory deadlines.
WHICH RIGHTS DO YOU HAVE?
- the right of access to personal data – you have the right to contact us at any time and obtain confirmation on whether your personal data has been processed and, if such data is processed, to request access to personal data and information to which you are entitled in connection with the protection of personal data.
- the right to rectification – if we process any of your personal data which are inaccurate, you are entitled that we rectify such inaccurate personal data concerning you and you are entitled to have incomplete personal data completed, taking into account the purposes of processing.
- the right to erasure – you have the right to obtain from us the erasure of personal data concerning you, provided that the personal data have been unlawfully processed or are no longer necessary for the purposes for which they were collected. Kindly note that there are reasons that prevent immediate deletion, for example to establishment, exercise or defence of legal claims, on which we will inform you in detail concerning each claim;
- the right to restriction of processing – you have the right to obtain from our restriction of processing where one of the following applies:
- you contest the accuracy of your personal data, for a period enabling us to verify the accuracy of the personal data;
- the processing is unlawful and you are opposing the erasure of the personal data and requesting the restriction of their use instead;
- we no longer need the personal data for the processing, but you are requiring it for the establishment, exercise, or defence of legal claims;
- you have objected to processing which is pending the verification whether our legitimate grounds as the controller override those of the data subject
- the right to data portability – you have the right to request that we furnish you the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without our hindrance, if applicable;
- the right to object - you have the right to object, at any time to processing of your personal data, when personal data are processed based on our legitimate interests, including profiling, or when the processing of your personal data is used for direct marketing purposes.
- the right to lodge a complaint – to Croatian Personal Data Protection Agency via email: azop@azop.hr or by regular post to the address:10000 Zagreb, Selska cesta 136.
