Privacy policy

Data Protection Processing Manager

We respect your privacy, and we are committed to protecting your personal data. In this document (“Privacy Notice”), we would like to provide you with clear and transparent information about which personal data we collect, as well as the legal basis we rely on when processing your personal data. 

Pjaca Rosa d.o.o. (Heritage hotel Santa Lucia) implements a policy of respecting your privacy regarding any information we may collect while operating our website. This Privacy Policy applies to www.hotelsantalucia.com/ (hereinafter, “we”, or “www.hotelsantalucia-central.com”). 

Please read this document carefully; it contains our Privacy Policy and information on how we use your personal data when you visit our website, book accommodations, stay in our property or if you communicate with us for other reasons. 

This Privacy Notice applies in all cases of processing your personal data, except in certain particular cases, in which case we will inform you about the way your personal data is processed by providing you with a special Privacy Notice on the processing of personal data, which will contain a Privacy Policy relating to these particular cases of personal data processing. 

Pjaca Rosa d.o.o. has appointed a Data Protection Processing Manager who can be contacted at the following e-mail address: uprava@pjacarosa.com.

Type of data processed

Through the Site, we collect and store certain personal information about you (e.g. information that can directly or indirectly identify you, in particular by identifiers such as name, personal identification number, location information, online identifier,.. (“Personal Data”)). In certain cases, we may ask you to provide Personal Data, such as when you use the order form and service we provide, comment or ask questions, request information or use other features or functions of our Site. 

Pjaca Rosa will not collect any Personal Information when you visit our Site unless you provide them voluntarily, except for certain items of Personal Data collected through information systems and programs used for the operation of a Web Site whose transfer is inherent to the use of Internet Communication Protocols (e.g. IP addresses) and will not require more information than is required to participate in the activities on our Site. If you do not want to provide us with Personal Data (except Personal Data relating to the use of Internet Communication Protocols that are usually collected when visiting the Website) you can still access our Site but you will not be able to participate in certain promotions, create login credentials to use certain functions on the Site, activate or use the service, fill in orders or get product information.

Security

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Links to other sites

The site may contain links to other websites that are not owned, managed, or maintained by Pjaca Rosa d.o.o. When you leave the Site, you should notice and read the terms and privacy policy of each website you visit. Also, you should independently assess the authenticity of any website that appears or claims to be one of our Sites (including those linked by email). Despite any links that may exist on the Site, unless otherwise stated, we do not control, recommend, or support, and are not affiliated with, or subject to, these web sites, products, services or privacy policies. Downloading material from certain websites may result in a violation of intellectual property rights or the bringing a virus into your computer system.

Cookies

Cookies are small files that our website stores on the visitor’s computer and that the visitor’s browser provides to our website each time the visitor returns in order to provide the users with personalized experience while navigating our website. 

Cookies may be temporary (for the current session), meaning that they are only used during your visit to your website and shall be deleted at the moment you close your Internet browser, and serve for loading other scripts and codes on our website. Cookies may be permanent, which means that they remain on your computer or mobile device after you close your Internet browser, until you delete them or until your browser deletes them after a certain period, which may be 1 day, two days, 3 months or two years. 

Cookies may be first-party cookies issued by our website. Third-party cookies are cookies posted by other websites, such as Facebook, Google, etc. With these cookies, other websites can track your Internet use for marketing purposes. We do not have access to these cookies and we do not control them. Therefore, read the appropriate privacy rules of these third parties.

According to the function of cookies, our website uses the following cookies:

Necessary cookies: are always active and necessary for the functioning of our website and cannot be turned off in our system. However, you can set your browser to block these cookies; in this case, some parts of our website will not function properly. 

Statistical cookies: are used for collecting information and reporting on the statistics of the use of our website. These cookies collect information anonymously, they do not store any personal data and do not reveal the identity of a user. Our website uses these cookies only after the user accepts them. 

Marketing cookies: provide the possibility of tracking user behaviour for the purpose of optimising future advertisements. The collected information is anonymous, so our website cannot make any conclusions about the user’s identity. However, third-party websites (e.g. Facebook) can use these cookies to link the collected information to the appropriate user profile on third-party websites. Our website uses these cookies only after the user accepts them.

Appropriate Law

For all matters related to the Site and / or this Privacy Policy, the law of the Republic of Croatia (jurisdiction applicable to Pjaca Rosa d.o.o.) is applicable without reference to the principles of international private law. You agree that the exclusive jurisdiction and venue of any legal proceedings pertaining to the Site and / or this Privacy Policy will be in the appropriate courts located in the Republic of Croatia. We do not warrant or imply that the Site or content on this Site is suitable for use outside the Republic of Croatia. The information listed on the Site regarding any products or services is only applicable in the Republic of Croatia. If you are outside the Republic of Croatia, you are solely responsible for compliance with all applicable local laws.

Privacy Policy Changes

Pjaca Rosa d.o.o. reserves the right to modify or update this Privacy Policy at any time and without prior notice. Pjaca Rosa d.o.o. (Heritage hotel Santa Lucia) encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

Personal Data Privacy Statement Heritage hotel Santa Lucia

This Personal Data Privacy Statement for Heritage hotel Santa Lucia describes what data we collect, how we process it and for which purposes we use it, as well as your rights associated with your data. The responsible entity for data processing is: Data Processing Officer, Narodni trg 1, 21 000 Split, Tel: 021/317-835, Contact e-mail: uprava@pjacarosa.com

Types of personal data

We use the following personal data in relation to our employees, associates, business partners and guests, namely: first and last name, personal ID number, sex, address of residence, citizenship, type, number and date of issue of identification documents, date, place and country of birth, education information, account number, credit card number and date of expiry, e-mail address; contact number, employment information, video of the person, etc.

Purposes of personal data processing and legal basis for processing

The legal basis for processing the employee’s personal data is the Labour Act, Ordinance on the content and manner of keeping records of workers and working hours, the employment contract, and legitimate interest in relation to video surveillance recordings, as well as in relation to the publication of photos and/or videos for the purpose of advertising the hotel on the website and/or social networks, as well as in relation to the name tags on business clothes. The purpose of processing in accordance with the law and by-laws is to comply with the legal obligations of the controller. The purpose of processing in accordance with the employment contract is to comply with the right and obligations referred to in the employment contract. In relation to the processing through the video surveillance system based on legitimate interest, it is stated that the purpose of the processing is to protect the life and health of employees, guests and property of the hotel. The legal basis for processing the personal data of our contractual partners is a business cooperation agreement and/or an established business contractual relationship, all with the purpose of fulfilling rights and obligations from the contractual relationship. The legal basis for processing Guest’s personal data (first and last name, sex, address of residence, citizenship, type, number and date of issue of identification documents, date, place and country of birth) is the Act on the Provision of Tourism Services, namely the Ordinance on Keeping a List of Tourists and the layout and content of the tourist registration form at the tourist board. These regulations establish the purpose, i.e. the obligation to submit the aforementioned data to the Croatian Tourist Board via the eVisitor system. The legal basis for processing the aforementioned data, as well as for processing additional data (personal ID number, credit card number and date of expiry, email address, contact number (telephone/mobile phone) is the contract concluded for the purpose of providing and charging hotel accommodation services as well as other related services. Guest’s personal data, namely e-mail address, is used for the purpose of sending newsletters, both for guests who currently use the hotel’s service, and for guests who have already used the hotel’s service, or they just intend to use it. Sometimes we use consent as a legal basis for processing the e-mail address of visitors to our website. We use the e-mail address exclusively for the purpose of delivering newsletter content and personalized ads. Consent can be withdrawn at any time in the simple way in which it was given, by using the unsubscribe option that is an integral part of every notification. At the same time, we made the registration of consent in a layered and yet simple way to the subject of this Privacy Policy.

Personal data transmission

Please keep in mind that we must send your personal data (first and last name, sex, address of residence, citizenship, type, number and date of issue of identification documents, date, place and country of birth) to the Croatian Tourist Board via the eVisitor system, all under the Act on the Provision of Tourism Services, namely the Ordinance on Keeping a List of Tourists and the layout and content of the tourist registration form at the tourist board. In certain situations, we are obliged to submit the personal data of employees to labour inspectorates, the tax administration or other similar authorities within the scope of their official authority.

Transfers to third countries

We do not transfer your personal data to countries outside the EU.

Retention period

We keep employee personal data as documentation of enduring value, with the exception of processing based on legitimate interest or data that ceases to have a purpose upon termination of the employment relationship (contact information, etc.). We keep personal data processed through cooperation with business partners until the end of the cooperation or until the end of certain procedures in case they are conducted for any reason related to business cooperation. Our Guest’s personal data i.e., first and last name, personal ID number, sex, address of residence, type, number and date of issue of identification documents, date, place and country of birth, credit card number and date of expiry, e-mail address; contact number (telephone/mobile phone) until due fulfilment of all rights and obligations under the contract for the provision and charging of hotel accommodation services as well as other related services. We keep the number and expiration date of the guest’s credit card for 30 days after the end of the use of the hotel accommodation, because this time represents a reasonable time in which we can calculate the use of unreported other services related to the hotel accommodation services and/or calculate any damage to the property of Heritage hotel Santa Lucia. The calculation of the previously mentioned additional costs related to the hotel accommodation contract is performed according to the consent obtained in the communication with the guest. At the end of a period of 30 days from the date of termination of use of hotel accommodation, the credit card number and expiration date will be automatically deleted from the storage system of Heritage hotel Santa Lucia, while the physical system will be manually destroyed at the end of the same period of time. Please also note that we will not delete your data in case of enforcement of unpaid claims and/or court or other corresponding proceedings regarding the provided service, until the final completion of the proceedings in accordance with the applicable regulations. Additionally, we emphasize that the personal data indicated on the invoice for provided services (first and last name, address, personal ID number) must be kept for a period of 11 years in accordance with the Accounting Act. Likewise, personal data disclosed from a filed complaint must be kept for one year in accordance with the Act on the Provision of Tourism Services and the Hospitality Act. The e-mail address used by us for email marketing will be retained until an objection to processing for marketing purposes is filed. You can file an objection at any time at the following e-mail address: uprava@pjacarosa.com.

Obligation to provide personal dana

The processing of personal data (first and last name, sex, address of residence, type, number and date of issue of identification documents, date, place and country of birth, e-mail address; contact number (telephone/mobile phone) is regulated by the Act on the Provision of Tourism Services, namely the Ordinance on Keeping a List of Tourists and the layout and content of the tourist registration form at the tourist board. Without receiving the above mentioned information (as well as additional personal data such as the personal ID number, credit card number and date of expiry, e- mail), we will not be able to provide you with hotel accommodation services or other related services. You do not have to provide your e-mail address for additional marketing purposes, but you will not be able to receive the latest news and offers which may fit your interests and preferences. 

The processing of personal data from the contract with our partners is necessary because without it we could not be able to conclude a business contract or fulfil the rights and obligations arising therein. The processing of personal data of our employees is based on the obligation to comply with legal and contractual obligations, therefore the failure to process personal data would lead to a violation of the law or the impossibility of fulfilling rights and obligations from the employment relationship.

Data subject rights

Right to rectification

If we process your personal data which are incomplete or inaccurate, you may request to rectify or supplement the data at any moment.

Right to access

You have the right to receive confirmation on whether we are processing your personal data or not.

Right to erasure

You may request us to delete your personal data if the data has been processed unlawfully or if such processing represents a disproportionate interference with your protected interests. Please take into consideration that there are reasons which prevent momentary erasure, for example, the retention obligation pursuant to legal requirements.

Right to restriction of processing

You may request us to restrict the processing of your personal data: if you contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data, if the processing is unlawful and you oppose the erasure of personal data and request the restriction of their use instead; if we no longer need the personal data for the purposes of processing, but they are required by you for the establishment of legal claims or if you have lodged a complaint.

Right to data portability

You may request us to provide you with the personal data you have given us for archiving purposes in a structured form, in a commonly used and machine-readable format: if this data is processed by us based on your consent which you can withdraw or for the purpose of contract fulfilment and if the processing is done through automated processes.

Right to object

If we are processing your personal data for the purpose of fulfilling tasks of public interest or executing official authority or if the processing is based on our legitimate interests, you may file a complaint against such data processing if there is the interest to protect your personal data. Right to lodge a complaint: If you believe that we have violated Croatian or European data protection regulations during the processing of your personal data, please contact us to resolve any unclear issues. In any case, you have the right to lodge a complaint with the competent supervisory authority.

Amendments to this Statement

We may amend this Statement and will inform you about it in a timely manner, including among other things, publication at the website www.hotelsantalucia-central.com