Privacy policy

Website Visitors

Like most website operators, KRUPA d.o.o. (Marvie Hotel and Health) collects non-personally identifying information of the sort that web browsers and servers typically make available, such as the browser type, language preference, referring site, and the date and time of each visitor request. KRUPA d.o.o. (Marvie Hotel and Health)’s purpose in collecting non-personally identifying information is to better understand how KRUPA d.o.o. (Marvie Hotel and Health)’s visitors use its website. From time to time, KRUPA d.o.o. (Marvie Hotel and Health) may release non-personally-identifying information in the aggregate, e.g., by publishing a report on trends in the usage of its website.

Gathering of Personally-Identifying Information

Certain visitors to KRUPA d.o.o. (Marvie Hotel and Health)’s websites choose to interact with KRUPA d.o.o. (Marvie Hotel and Health) in ways that require KRUPA d.o.o. (Marvie Hotel and Health) to gather personally-identifying information. The amount and type of information that KRUPA d.o.o. (Marvie Hotel and Health) gathers depends on the nature of the interaction. For example, we require visitors who wish to submit a question via the contact form to state their name, surname, address and e-mail in order for us to send them the answer to the question.

Security

The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

Advertisements

Ads appearing on our website may be delivered to users by advertising partners, who may set cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. Learn more about advertising and advertising cookies in the section entitled „Cookies“.

Links To External Sites

Our Service may contain links to external sites that are not operated by us. If you click on a third party link, you will be directed to that third party’s site. We strongly advise you to review the Privacy Policy and terms and conditions of every site you visit.

We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites, products or services.

Aggregated Statistics

KRUPA d.o.o. (Marvie Hotel and Health) may collect statistics about the behavior of visitors to its website. KRUPA d.o.o. (Marvie Hotel and Health) may display this information publicly or provide it to others. However, KRUPA d.o.o. (Marvie Hotel and Health) does not disclose your personally-identifying information.

Cookies

Cookies are small files that our website stores on the visitor’s computer and that the visitor’s browser provides to our website each time the visitor returns in order to provide the users with personalized experience while navigating our website.

Cookies may be temporary (for the current session), meaning that they are only used during your visit to your website and shall be deleted at the moment you close your Internet browser, and serve for loading other scripts and codes on our website. Cookies may be permanent, which means that they remain on your computer or mobile device after you close your Internet browser, until you delete them or until your browser deletes them after a certain period, which may be 1 day, two days, 3 months or two years.

Cookies may be first-party cookies issued by our website. Third-party cookies are cookies posted by other websites, such as Facebook, Google, etc. With these cookies, other websites can track your Internet use for marketing purposes. We do not have access to these cookies and we do not control them. Therefore, read the appropriate privacy rules of these third parties.

According to the function of cookies, our website uses the following cookies:

Necessary cookies: are always active and necessary for the functioning of our website and cannot be turned off in our system. However, you can set your browser to block these cookies; in this case, some parts of our website will not function properly.

Statistical cookies: are used for collecting information and reporting on the statistics of the use of our website. These cookies collect information anonymously, they do not store any personal data and do not reveal the identity of a user. Our website uses these cookies only after the user accepts them.

Marketing cookies: provide the possibility of tracking user behaviour for the purpose of optimising future advertisements. The collected information is anonymous, so our website cannot make any conclusions about the user’s identity. However, third-party websites (e.g. Facebook) can use these cookies to link the collected information to the appropriate user profile on third-party websites. Our website uses these cookies only after the user accepts them.

Privacy Policy Changes

Although most changes are likely to be minor, KRUPA d.o.o. (Marvie Hotel and Health) may change its Privacy Policy from time to time, and in KRUPA d.o.o. (Marvie Hotel and Health)’s sole discretion. KRUPA d.o.o. (Marvie Hotel and Health) encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

Personal Data Privacy Statement Marvie Hotel and Health

1. General information: This Personal Data Privacy Statement for Marvie Hotel and Health is applicable from 25 May 2018. By using our services, you entrust your data to us. This Statement describes what data we collect, how we process it and for which purposes we use it, as well as your rights associated with your data. The responsible entity for data processing is: Controller: Krupa d.o.o., Dračevac 11, 21 000 Split, Tel: 021/279 800, Contact e-mail: info@marviehotel.com

2. Types of personal data: We use the following personal data in relation to our employees, associates, business partners and guests, namely: first and last name, personal ID number, sex, address of residence, citizenship, type, number and date of issue of identification documents, date, place and country of birth, education information, account number, salary information, credit card number and date of expiry, e-mail address; contact number, employment information, video of the person, photo, etc.

3. Purposes of personal data processing and legal basis for processing: The legal basis for processing the employee’s personal data is the Labour Act, Ordinance on the content and manner of keeping records of workers and working hours, the employment contract, and legitimate interest in relation to video surveillance recordings, as well as in relation to the publication of photos and/or videos for the purpose of advertising the hotel on the website and/or social networks, as well as in relation to the name tags on business clothes. The purpose of processing in accordance with the law and by-laws is to comply with the legal obligations of the controller. The purpose of processing in accordance with the employment contract is to comply with the right and obligations referred to in the employment contract. In relation to the processing through the video surveillance system based on legitimate interest, it is stated that the purpose of the processing is to protect the life and health of employees, guests and property of the hotel. The legal basis for processing the personal data of our contractual partners is a business cooperation agreement and/or an established business contractual relationship, all with the purpose of fulfilling rights and obligations from the contractual relationship. The legal basis for processing Guest’s personal data (first and last name, sex, address of residence, citizenship, type, number and date of issue of identification documents, date, place and country of birth) is the Act on the Provision of Tourism Services, namely the Ordinance on Keeping a List of Tourists and the layout and content of the tourist registration form at the tourist board. These regulations establish the purpose, i.e. the obligation to submit the aforementioned data to the Croatian Tourist Board via the eVisitor system. The legal basis for processing the aforementioned data, as well as for processing additional data (personal ID number, credit card number and date of expiry, email address, contact number (telephone/mobile phone, fax) is the contract concluded for the purpose of providing and charging hotel accommodation services as well as other related services. Guest’s personal data, namely e-mail address, is used for the purpose of sending newsletters, both for guests who currently use the hotel’s service, and for guests who have already used the hotel’s service, or they just intend to use it. Sometimes we use consent as a legal basis for processing the e-mail address of visitors to our website. We use the e-mail address exclusively for the purpose of delivering newsletter content and personalized ads. Consent can be withdrawn at any time in the simple way in which it was given, by using the unsubscribe option that is an integral part of every notification. At the same time, we made the registration of consent in a layered and yet simple way to the subject of this Privacy Policy.

4. Personal data transmission: Please keep in mind that we must send your personal data (first and last name, sex, address of residence, citizenship, type, number and date of issue of identification documents, date, place and country of birth) to the Croatian Tourist Board via the eVisitor system, all under the Act on the Provision of Tourism Services, namely the Ordinance on Keeping a List of Tourists and the layout and content of the tourist registration form at the tourist board. In certain situations, we are obliged to submit the personal data of employees to labour inspectorates, the tax administration or other similar authorities within the scope of their official authority.

5. Transfers to third countries: We do not transfer your personal data to countries outside the EU.

6. Retention period: We keep employee personal data as documentation of enduring value, with the exception of processing based on legitimate interest or data that ceases to have a purpose upon termination of the employment relationship (contact information, etc.). We keep personal data processed through cooperation with business partners until the end of the cooperation or until the end of certain procedures in case they are conducted for any reason related to business cooperation. Our Guest’s personal data i.e., first and last name, personal ID number, sex, address of residence, type, number and date of issue of identification documents, date, place and country of birth, credit card number and date of expiry, e-mail address; contact number (telephone/mobile phone, fax) until due fulfilment of all rights and obligations under the contract for the provision and charging of hotel accommodation services as well as other related services. We keep the number and expiration date of the guest’s credit card for 30 days after the end of the use of the hotel accommodation, because this time represents a reasonable time in which we can calculate the use of unreported other services related to the hotel accommodation services and/or calculate any damage to the property of Marvie Hotel & Health. The calculation of the previously mentioned additional costs related to the hotel accommodation contract is performed according to the consent obtained in the communication with the guest. At the end of a period of 30 days from the date of termination of use of hotel accommodation, the credit card number and expiration date will be automatically deleted from the storage system of Marvie Hotel & Health, while the physical system will be manually destroyed at the end of the same period of time. Please also note that we will not delete your data in case of enforcement of unpaid claims and/or court or other corresponding proceedings regarding the provided service, until the final completion of the proceedings in accordance with the applicable regulations. Additionally, we emphasize that the personal data indicated on the invoice for provided services (first and last name, address, personal ID number) must be kept for a period of 11 years in accordance with the Accounting Act. Likewise, personal data
disclosed from a filed complaint must be kept for one year in accordance with the Act on the Provision of Tourism Services and the Hospitality Act. The e-mail address used by us for email marketing will be retained until an objection to processing for marketing purposes is filed. You can file an objection at any time in any demonstrable form through the contact information referred to in point 1 of this Statement.

7. Obligation to provide personal data: The processing of personal data (first and last name, sex, address of residence, type, number and date of issue of identification documents, date, place and country of birth, e-mail address; contact number (telephone/mobile phone, fax) is regulated by the Act on the
Provision of Tourism Services, namely the Ordinance on Keeping a List of Tourists and the layout and content of the tourist registration form at the tourist board. Without receiving the above mentioned information (as well as additional personal data such as the personal ID number, credit card number and date of expiry, e-mail), we will not be able to provide you with hotel accommodation services or other related services. You do not have to provide your e-mail address for additional marketing purposes, but you will not be able to receive the latest news and offers which may fit your interests and preferences. The processing of personal data from the contract with our partners is necessary because without it we could not be able to conclude a business contract or fulfil the rights and obligations arising therein.
The processing of personal data of our employees is based on the obligation to comply with legal and contractual obligations, therefore the failure to process personal data would lead to a violation of the law or the impossibility of fulfilling rights and obligations from the employment relationship.

8. Data subject rights: Right to rectification: If we process your personal data which are incomplete or inaccurate, you may request to rectify or supplement the data at any moment. Right to access: You have the right to receive confirmation on whether we are processing your personal data or not and if that is the case, pursuant to the conditions of Article 15 of the General Data Protection Regulation, you have the right to request access to said data. Right to erasure: You may request us to delete your personal data if the data has been processed unlawfully or if such processing represents a disproportionate interference with your protected interests. Please take into consideration that there are reasons which prevent momentary erasure, for example, the retention obligation pursuant to legal requirements.
Right to restriction of processing: You may request us to restrict the processing of your personal data: if you contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data, if the processing is unlawful and you oppose the erasure of personal data and request the restriction of their use instead; if we no longer need the personal data for the purposes of processing, but they are required by you for the establishment of legal claims or if you have lodged a complaint. Right to data portability: You may request us to provide you with the personal data you have given us for archiving purposes in a structured form, in a commonly used and machine-readable format: if this data is processed by us based on your consent which you can withdraw or for the purpose of contract fulfilment and if the processing is done through automated processes. Right to object: If we are processing your personal data for the purpose of fulfilling tasks of public interest or executing official authority or if the processing is based on our legitimate interests, you may file a complaint against such data processing if there is the interest to protect your personal data. Right to lodge a complaint: If you believe that we have violated Croatian or European data protection regulations during the processing of your personal data, please contact us to resolve any unclear issues. In any case, you have the right to lodge a complaint with the competent supervisory authority. Exercise of rights: If you want to exercise any of the above rights, please contact us at the contact information under item 1 of this Statement.
Identity confirmation: In case of doubt, we may request additional information to verify your identity. This serves to protect your rights and private spheres. Abuse of rights: If you use any of the above rights too often and with obvious intent of abuse, we may charge an administrative fee or refuse to process your request.

9. Automated decision-making: We do not apply automated decision-making with regard to your personal data.

10. Amendments to this Statement: We may amend this Statement and will inform you about in in a timely manner, including among other things, publication at the website www.marviehotel.com.