We in Heritage Hotel Tisno highly respect your privacy and we recognize that privacy protection as well as protection of your personal data is an important issue.
We take this opportunity to inform you how we process your personal data we collect directly from you or third parties. Special measures are taken to ensure all your data are protected in safe and transparent way in accordance with the General Data Protection Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 ( hereinafter referred to as „GDPR“ ) and the Law on the Implementation of the General Data Protection Regulation ( official gazette „ Narodne Novine „ issue 42/18, hereinafter refferred to as: „Law“ .
Regardless, all the employees are bound to keep confidentiality and protect all personal data processed douring their work.
Company name: Male Vole d.o.o.
Address: Zapadna Gomilica 8, 22 240 Tisno
Phone Number: +385 22 438 182
E-mail: info@hoteltisno.com
VAT: 56729239979
The policy applies to all personal data of users that we collect and process, directly or through our partners. Personal data is any data relating to a natural person whose identity we have established or can be established, directly or indirectly. Data processing is any action performed on personal data, such as the collection, storage, use, insight and transfer of personal data.
This Policy does not apply to anonymous data. Anonymous data is data that cannot be linked to a specific individual.
We respect the privacy of its users and visitors to its premises and website.
We may, under the law, collect certain user data got during the use of the website via cookies, which do not contain personal data, and IP addresses that are automatically recorded in the access records. They serve to make the website work optimally. It is possible to block cookies, after which you will still be able to browse the site, but some of its features will not be available to you.
We collect personal data of guests primarily for:
- Booking accommodation units and other amenities based on your request or purchase. The information from passport which you submit during check-in is saved in our Property Management Software.
- Setting up personalised service and to be aware of any potential health issues or other preferences while you stay on the property.
- Accounting/ controlling/ finance / payment guarantee based on legal or contractual basis.
- Complying to all applicable legislation connected with the service based on legal demands. The evidence of tourists is shared with the Information System of Tourist Boards of the Republic of Croatia – eVisitor the purpose of police tracking and city tax payment. The personal data is collected for statistic processing and is used by the Tourist boards, public authorities and Ministries relating to this procedure (Ministry of tourism and Tourist inspection, Ministry of internal affairs and Ministry of finances – Customs authorities)
- Direct marketing by sending you promotional materials and specific offers, based on your consent.
Most of the personal information we process is provided to us directly by you. For above-mentioned purposes we collect the following data:
- Name,
- Surname,
- Address
- Nationality,
- Date of birth (for purpose of organising events and special surprises for guests)
- Gender,
- Country and city of birth,
- Country and city of residence,
- Passport/ID number,
- Credit card information ( credit card data held as a guarantee or mean of payments – type number, owner, expiration date, CVC).
- Email address,
- Phone/mobile number,
- Allergies, to ensure safe consummation of food.
- Health condition, to be aware of the issues and to avoid any health problems while staying on the property and to adjust the service accordingly,
We also receive personal information indirectly, from the following sources:
- Booking.com, Expedia.com, Hotelbeds,
- travel agents,
- travel agencies,
- PR agencies.
Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
- Your consent. You can remove your consent at any time. You can do this by contacting us
- We have a contractual obligation,
- We have a legal obligation,
- There is a vital interest,
- We need it to perform a public task,
- We have a legitimate interest.
We do not further process personal data in a manner that is not in accordance with the purpose for which they were collected, unless otherwise prescribed by law or based on the consent of the user.
Under the General Data Protection Regulation (GDPR), at your request, you will be given access to all your personal data at our disposal, the method of processing and the possibility of restricting the processing, modification, or deletion of the same.
The protection of the privacy of your data is permanent, and we take all measures necessary to protect them under the applicable regulation and good practices. We process personal data securely, including protection against unauthorized or unlawful processing and against loss.
Protection of children’s personal data
The Company collects the following information about persons under the age of 16 from parents or guardians:
- Name, Surname, Citizenship, Date of birth, Gender, Country and city of birth, Country and city of residence, Passport / ID number, e-mail address, telephone number.
The Company may sometimes process data on persons under the age of 16 for the following processing purposes:
- Front Office, Experiences and Transfers – The information from passport which you submit during check-in, the data is stored in real estate management software – Milenij. The data is shared with the Croatian National Tourist Board via the eVisitor for the purpose of police monitoring and payment of city taxes.
- Reservation of accommodation in hotel – Collection of personal data of guests who have booked accommodation in hotel in order to provide a personalized service.
- The process of booking rooms – Collection of personal data of guests for the purpose of booking accommodation can be done by e-mail, telephone, from travel agencies, PR agencies.
Protecting your personal information means that:
- We will not use your information for any purpose other than that stated or agreed here,
- We will not give your contact and personal information to any third party that is not connected with the service,
- Your contact and personal data may be disclosed to another third party only at your request or with a court order,
- You can unsubscribe from the email list at any time.
We collect only those personal data that are voluntarily provided to us or through booking sites. We do not condition access to our site by submitting data, and we do not ask you to disclose more data than is necessary to execute the ordered services and products.
Video surveillance
Male Vole d.o.o., as a data owner, has a legitimate interest in implementing security and technical measures of video surveillance, in order to protect property, guests and employees, which is why we have installed surveillance cameras that record everyone moving in the surveyed areas. We mark all areas where video surveillance cameras are installed. The recordings obtained through the video surveillance system are considered a business secret and access to them is strictly regulated. Videos are automatically deleted after a maximum of 60 days from the date of recording. Exceptionally, videos are kept longer if the evidence is needed for pending investigation or court case.
Data retention time
We store and process personal data only for as long as is necessary for the execution of a certain legitimate purpose unless the applicable regulations provide for a longer period of storage for a particular purpose. With giving consent to receive notifications and useful information, we keep the data until the consent is withdrawn.
Your data protection rights
Under data protection law, you have rights including:
- Your right of access – You may ask us for copies of your personal information.
- Your right to rectification – You may ask us to rectify personal information you think is inaccurate. You also may ask us to complete information you think is incomplete.
- Your right to erasure – You may ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You may ask us to restrict the processing of your personal information in certain circumstances.
- Your right to object to processing – You may object to the processing of your personal information in certain circumstances.
- Your right to data portability – You may ask that we transfer the personal information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us in context of personal data protection at info@hoteltisno.com or call us at +385 22 438 182.
Legality of processing
We will process your data in a lawful and secure manner. If you believe that we are handling your data illegally and you cannot resolve it in cooperation with us, you may file a complaint with the Supervisory Body. To submit official complaint
Submit official complaint to governmental bodies if you believe your data have been collected, processed, used or archives in inappropriate and/or unauthorised ways. Governmental body that will handle your complaint is available at:
Agencija za zaštitu osobnih podataka
Selska cesta 136
10 000 Zagreb
azop@azop.hr