This policy relates to the processing of personal data that My Island Brač obtains: in conjunction with the performance of our services; through you/your organisation in its capacity as, for example, our cooperating partner; through visiting our website or our social media channels (primarily Facebook, Instagram, via electronic mail, SMS, telephone; or that we may receive from our cooperating partners, or from a third party.
We care about your personal privacy. This policy regulates how we collect, use and protect data about you and how you can exercise your rights. Please contact us if you have any questions or comments regarding this Personal Data Policy.
With reference to law, we refer below to the General Data Protection Regulation (GDPR) and other applicable data protection legislation.
‘Personal data’ means data relating to you that can identify you.
You can usually use our websites without providing us with any data. There may be a request for data about you on some pages. We use data about you that we have obtained from other sources provided by a third party.
The personal data about you that may be affected is:
Personal data and contact details (name, address, email address and telephone number, demographic information)
Technical data about your unit or Internet connection (IP address, cookies, electronic images and similar track and trace technologies on websites and in email communication and also your geographic location)
Information about your user behaviour (for example, your search patterns on the website, your response time for pages and how you use our services). Our websites and our email communication may include an electronic image (‘web signal’ or ‘pixel tag’)
User-generated information (content that you voluntarily register or publish)
It is a precondition for our processing of your personal data to be lawful that there is a legal basis for doing so, i.e. that it is necessary to perform a contract with you or a legal obligation to which we are subject, or that the processing is done following a balance of interests or that you have given your consent to specific processing. The following are examples of the purposes for which we process your personal data and the legal basis on which this is done.
One of our primary purposes for collecting personal data is to be able to perform and administer our services, such as to provide ourselves with information about the circumstances of a specific matter, protect the interests of you and your organisation, for reporting and invoicing purposes and also, as regards personal data from our cooperating partners, to administer or perform contractual obligations.
Another main purpose is to be able to offer you a good service through adapted services and to deliver better services with more relevant content. We use the data we collect to provide you with information about services you request but also to be able to better understand our customers and cooperating partners. We conduct, among other things, customer surveys to achieve this. Customer and market analyses and also processing for statistical purposes are performed at an amalgamated level and are not intended to identify individual customers.
We process your personal data with great caution, and your data is only used by us and by selected third parties.
Third parties that we engage to help us conduct our business only have permission to use your personal data on our behalf and for the specific tasks they have to perform following our instructions, acting as a data processor for us. They are obliged to keep your personal data confidential and secure. If and as stated by statutory you are entitled to get a list of any processors that process your personal data on our behalf.
We may also possibly disclose personal data for other special reasons, e.g. when we have reason to believe that the data is necessary to identify, contact or bring proceedings against someone who may have intruded into our website or in some other way infringed or encroached upon our rights or property, or the rights of other visitors, when we are acting in good faith and are convinced that legislation requires us to disclose personal data.
You are entitled to request information about processing of the personal data relating to you. You should clearly state in such a request what information you wish to receive (for example, what categories of specific personal data we process about you and for what purpose). The request must also be in writing and be personally signed. We will respond to your request as soon as possible and within one month. In the event that we cannot fulfil your request, we will notify you of this, stating the reasons why.
We will, at your request or on its own volition, rectify personal data about you that is incorrect and, when necessary, supplement the same and/or restrict the processing of your data.
If you consider that the data about you is incorrect or incomplete, you are entitled to ask for it to be rectified in the manner prescribed by law. We will rectify or update the data about you as quickly as reasonably possible.
You are also entitled, in the manner prescribed by law, to have the data about you removed or request that we restrict the processing of your personal data and also to withdraw any consent. You are also entitled, in the manner prescribed by law, to have the personal data you provided to us transferred (ported).
Please note that it may be required that we retain necessary personal data in conjunction with erasure, withdrawal of consent or porting to be able to fulfil our obligations by law or contract. It may also be permitted for us according to law to retain certain personal data to satisfy our business needs.
You are entitled to object to such processing of your personal data that we do pursuant to a balance of interests. We must then, after you have specified the processing to which you are objecting, demonstrate that there are overriding interests. You are also entitled to object at any time to the processing of your personal data carried out for direct marketing.
We will only save your personal data for as long as it is necessary for the purposes prescribed by this Personal Data Policy or for as long as is required by law. Your personal data is thinned out or rendered anonymous when it is no longer relevant for the purposes for which it has been collected or is no longer required according to law.
Please note that there may be links to other websites on My Island Brač website and channels in social media. If you follow such a link, this may mean that you visit other websites that have other rules for the protection of privacy than the provisions of this Personal Data Policy.
Our website may contain third-party content, such as applications, that third parties can independently download or create. We do not guarantee that such content is completely free from third-party rights, especially in terms of intellectual ownership. For these reasons, we are not responsible for damages that a user may incur by the use of third-party content in any form, regardless of whether it is the result of a request from a third party or of the incorrect functioning of the downloaded content.
This Personal Data Policy may be updated by us. If there are significant amendments to this Personal Data Policy, we will notify you by putting a clear message on our website or in some other appropriate way. We invite you to read through this Personal Data Policy to keep yourself informed about how we process your personal data.
Please notify us as soon as possible if you consider that the processing of your personal data has been dealt with incorrectly. You also have the option to make a complaint to the Croatian Data Protection Authority about our personal data processing.
You may be entitled to damages if you consider that you have suffered a loss because our processing of your personal data has taken place in violation of the law. You can then request damages from us or institute proceedings at a court.
My Island Brač is owned by Baras Marketing.