Privacy Policy

Privacy Policy

ABOUT THE PRIVACY POLICY

The purpose of this Privacy Policy (“Policy”) is to explain how the MALI LOŠINJ TOURIST BOARD, Priko 42, 51550 Mali Lošinj, PIN (OIB): 05241851972 (hereinafter referred to as: “MALI LOŠINJ TB”) collects, uses and manages your personal data found on the website and made available to the MALI LOŠINJ TB through the use of the website  www.visitlosinj.hr, and obtained by the MALI LOŠINJ TB as part of the operations conducted within its scope of competence and in its ordinary course of business.

The MALI LOŠINJ TB is dedicated to the protection and respect of your privacy. Please read this Policy carefully in order to understand why and how we collect your personal data and how they will be used. The MALI LOŠINJ TB is the “Data Controller” with regard to the personal data we collect, i.e. it is the entity determining the purposes and the tools of personal data processing.

As the service provider for the website www.visitlosinj.hr, the MALI LOŠINJ TB is tasked with the protection of privacy and personal data.

If you wish to contact us about this Policy or your personal data, please use the following contact information:

TURISTIČKA ZAJEDNICA GRADA MALOG LOŠINJA

Priko 42

51550 Mali Lošinj

OIB: 05241851972

E-mail: losinj@visitlosinj.hr

How and when do we collect your personal data?

The MALI LOŠINJ TB collects personal data for the purpose of marketing, improving our business operations and enhancing your user experience. To that end, the MALI LOŠINJ TB developed a comprehensive privacy programme designed to respect and protect rights to data privacy, project analysis and implementation, marketing, as well as other forms of technical support.

We treat your personal data as confidential and they are duly protected by the MALI LOŠINJ TB and/or our trusted partners. 

What data do we collect directly from you?

When the user engages in certain activities on the website www.visitlosinj.hr, such as exploring the services provided by the MALI LOŠINJ TB, and/or when the user wishes to submit an inquiry and/or a curriculum vitae, the MALI LOŠINJ TB may ask the user to provide certain additional personal data. In that case, the user undertakes to examine this Privacy Policy and accept its application with regard to personal data before providing personal data.

Depending on the types of activities, some of the requested data are designated as mandatory, and other as voluntary. In case the user does not wish to provide mandatory data required for the activity, the user shall be banned from engaging in such an activity.

The MALI LOŠINJ TB collects and uses personal data to enable the users to engage in activities via the website www.visitlosinj.hr, enhance the performance of the website www.visitlosinj.hr, create a user database for the purpose of improving services and/or marketing and enhance marketing and promotional activities. Furthermore, personal data may be used for troubleshooting, carrying out administrative tasks and establishing contact with users.

On the website www.visitlosinj.hr, the MALI LOŠINJ TB collects subjects’ personal data, such as: name, surname, address, sex, e-mail address or other means of contact, preferences relating to language settings, place of work and IP address.

Apart from the aforementioned data we process upon visits to the website, below you can find a detailed list of other types of personal data, along with the purposes of their collection and use, which we collect and process in our ordinary course of business in connection with the registered activities of the MALI LOŠINJ TB:

o    The MALI LOŠINJ TB collects and processes personal data of its employees and other associates for the purpose of executing the employment contracts concluded with the employees and consultation contracts and/or service contracts concluded with the associates, relating to personnel, administrative or other business/contractual purposes. In the latter case, we collect and process data such as: name, surname, sex, marital status, citizenship, place of residence, date and place of birth, personal identification number; title, occupation, data on professional development and training, data related to health insurance, work experience; data on the account number (IBAN), photo and signature.

o    We collect and process data from suppliers, sponsors and other clients, for the purpose of meeting contractual obligations, such as: name and surname of the authorised person in the legal entity; contact details of the person authorised for communication and execution of contractual obligations; academic and professional qualifications of authorised persons in the legal entity and signature of the authorised person.

o    Data of job candidates collected and processed by the MALI LOŠINJ TB, all for the purpose of potential employment, may include: name, surname, address, contact information (e-mail address, telephone number, mobile phone number), photo, level of education, citizenship, title and occupation, data on previous work experience, data on professional development and training, as well as test results that may also reflect the ability of the candidate to perform all work duties that the specific position applied for requires from the candidate.

o    Data of accommodation service provider collected and processed by the MALI LOŠINJ TB, for the purpose of improving the service and/or marketing, may include: name, surname, address and contact information (e-mail address, telephone number, mobile number).

o    Data of members of the MALI LOŠINJ TB, members of the monitoring work group, members of the general assembly of the MALI LOŠINJ TB, members of the tourist council, president of the MALI LOŠINJ TB, collected and processed by the MALI LOŠINJ TB, all for the purpose of meeting obligations pursuant to relevant regulations and by-laws, may include: name, surname, address, personal identification number, contact information (e-mail address, telephone number, mobile phone number), signature, level of education, citizenship, title and occupation.

o    We collect and process e-mail address information from legal entities, i.e. potential business partners, institutions, media, etc., for the purposes of inclusion on the mailing list and sending notifications about events and activities, which e-mail address may contain the name and surname of the employees or the authorised person in the subject-matter legal entity.

The following persons may have access to personal data while performing their scope of work: legal entities that participate in the execution of legal relations with users, such as IT support and other companies that are connected to the MALI LOŠINJ TB, public entities that require the delivery of personal data in accordance with regulations that bind the MALI LOŠINJ TB and about which the MALI LOŠINJ TB keeps proper records of processing activities.

What privacy rights do you have?

The MALI LOŠINJ TB respects that every user should be able to ensure the accuracy, completeness and updating of their personal data. If the user believes that his or her personal data are incomplete, incorrect or not up to date, the user can contact the MALI LOŠINJ TB by sending an e-mail to losinj@losinj.hr.

Please note that at any time, you have the right to request the following from the MALI LOŠINJ TB:

In order to exercise any of the aforementioned rights, please use the contact information provided at the beginning of the Privacy Policy.

If you are not satisfied with how we have collected or used your personal data, you can file a formal complaint with the Personal Data Protection Agency.

Where are your personal data stored?

We store the personal data we collect about you in a secure environment. Your personal data are protected from unauthorised access, disclosure, use, alteration or destruction by any organization or individual.

The processed data are stored in our premises and IT systems, but sometimes we store the data on the servers of our trusted service providers.

The MALI LOŠINJ TB will ensure that personal data are kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorised use, access, disclosure, copying or modification of personal data), which can only be accessed by authorised persons.

Data collected for the purposes specified in this Policy will be stored only for as long as it is necessary to meet the specified purposes. Your personal data will not be stored in a form that allows you to be identified for longer than the MALI LOŠINJ TB reasonably considers necessary to achieve the purpose for which they were collected or processed. The MALI LOŠINJ TB shall keep certain personal data for the time period stipulated by the law or regulations that oblige MALI LOŠINJ TB to store data.

If you have given us your consent, we will process your personal data until you withdraw your consent. If you declare a well-founded objection to the processing of personal data based on a legitimate interest, we will not process your personal data in the future.

In addition to all of the aforementioned, it is important to point out the following: if judicial, administrative or extrajudicial proceedings have been initiated, personal data may be stored until the end of such proceedings, including the possible period for filing legal remedies. The MALI LOŠINJ TB shall store certain personal data for the time period stipulated by the law or regulations that oblige the data controller to store data.

Does the MALI LOŠINJ TB exchange data with third parties?

Privacy protection is important to us, so we never share your personal data with third parties except for the purposes described in this Policy.

The MALI LOŠINJ TB cooperates with other companies. This means that we sometimes share your personal data using secure IT systems. When we act in this way, the data are transferred to servers located in the EU or in a country that provides an adequate level of protection in accordance with the EU legislation.

As the controller of personal data processing, the MALI LOŠINJ TB can transfer personal data outside the EU if they are necessary for the performance of the contract between the MALI LOŠINJ TB and the processor and/or another data controller or to meet legal obligations. In the latter case, the MALI LOŠINJ TB transfers personal data only to the countries that provide an adequate level of protection through model contracts containing binding provisions or through binding corporate rules; or in accordance with an approved certification mechanism and/or privacy protection framework when transferring personal data from the European Union and Switzerland to the United States.

In addition to all of the aforementioned, we may provide your personal information to our trusted partners who maintain our IT system or provide services on behalf of the MALI LOŠINJ TB, for example, for the purposes of marketing, finance, advertising and other services inside and outside the MALI LOŠINJ TB. These service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose that we have strictly determined. We also oblige them to adequately protect your data and to consider them a business secret.

How long does the MALI LOŠINJ TB keep your personal data?

The MALI LOŠINJ TB shall not keep your personal data longer than for the period for which the data are necessary to meet the purpose of their use.

What do we use your data for?

We use the data for the purposes stated in the aforementioned points, and we can also use them in other ways and/or for other purposes, mainly to perform our contractual and other obligations towards you, but sometimes also to improve the experience of website use, direct marketing and security reasons. In the case of processing for other purposes that are not specified in this Policy, we shall specifically inform you.

Cookies

In order to maintain the website and ensure that its functionality is at the expected level, the MALI LOŠINJ TB uses technology known as “cookies”.

Cookies are small files that we send to your computer and can access them later. They can be temporary or permanent. Thanks to cookies, you can easily search our pages and display results that are relevant to you. Cookies show us what interests you and other visitors to our website, which helps us improve it.

Find out more about cookies on the Rules for Using Cookies.

Other websites

This Privacy Policy applies only to the use of data that the MALI LOŠINJ TB collects from users (subjects). Other websites that can be accessed via the website www.visitlosinj.hr have their own statements on confidentiality and data collection, as well as ways of using and publishing them.

The MALI LOŠINJ TB is not responsible for the methods and conditions of work of third parties.

The MALI LOŠINJ TB collects and processes personal data through user interactions on social networks such as Facebook and Instagram. The MALI LOŠINJ TB, i.e. responsible persons appointed by the MALI LOŠINJ TB, have access to messages and/or posts on the aforementioned social networks, however, personal data collected through them, especially those contained in messages, are not stored or additionally processed by the MALI LOŠINJ TB, except for the purposes specified in this Policy.

The MALI LOŠINJ TB uses a business profile via the services of Facebook, Instagram, YouTube and TikTok, and you can view their Privacy Policy, i.e. confidentiality statements, as well as the way they use your personal data at:

In case you have questions regarding the collection and the processing of data by Facebook, Instagram, YouTube and TikTok, or in case you want to exercise one of your rights guaranteed by the General Data Protection Regulation, please contact:

FOR FACEBOOK:

FOR TIKTOK:

Entry into force and changes to the Privacy Policy

This Policy shall enter into force upon its publication on the website.

The MALI LOŠINJ TB reserves the right to amend the Privacy Policy, which will be published on the website.