SUMMER ADVENTURES activity of tourist services, maritime and coastal transport and catering (hereinafter: the company G.M.KORPORACIJA D.O.O.); OIB: 53307105846, in its business unit PRVA ULICA 7, MURINE, 52470 UMAG, as the manager of the processing of your personal data, uses and protects all information that Users submit to it when using the website www.sportndiving.hr as well as our other services, especially with regard to the processing of personal data in the provision of their services.
Personal data is any information relating to a specific natural person or a identifiable natural person. In particular, personal data are all data that establish the identity of the user (for example, name and surname, e-mail address, residential address, etc.).
The processing of personal data is any action or set of actions performed on personal data, whether by automatic means or not, such as collecting, recording, organizing, storing, adapting or modifying, withdrawing, inspecting, using, disclosing, publishing or otherwise made available, sorting or combining, blocking, deleting or destroying, and performing logical, mathematical and other operations with that data.
How we collect personal information
G.M.Korporacija d.o.o./Summer Adventures collects your personal information in the following cases:
- if you contact us directly through any of our company’s websites
- to request information or an offer for our services, via our contact form
- if you purchase the service directly from us
- if you respond to our direct marketing campaigns, for example by filling out a contact form to enter data on our website
- if our partners provide us with your information in a permitted manner
- if you are under the age of 16, please do not provide us with any information without the consent of a parent or guardian.
How your data can be used
The use of personal data in accordance with the regulations on personal data protection must be justified on the basis of one of the legal “bases”, and we determine the basis for any use of personal data by this Ordinance.
Justified grounds for data processing are, inter alia, legitimate interest, contractual obligation, legal basis and consent. Processing based on the legitimate interest of the company G.M.Korporacija d.o.o, / Summer Adventures uses to promote and provide information about its services, in order to maintain the highest standards of sales of services from its offer. The fundamental rights and freedoms of existing and potential customers are weighed against the interest of G.M.Korporacija d.o.o, / Summer Adventures to process data for this purpose.
G.M.Korporacija d.o.o, / Summer Adventures will collect contact information, information about services rendered, warranty, as well as information about the history of you, as a customer, when you use our services for the purpose of processing claims based on warranty or technical support for services rendered.
Personal data may be transferred to third parties provided there is a reasonable basis for the transfer, such as the fulfillment of a service or transport.
The company G.M.Korporacija doo, / Summer Adventures uses direct marketing based on your personal data to inform you about news and promotions in our offer, special shopping benefits, presentations of new products, as well as our appearances at fairs, conferences and other events solely with your consent.
Consent for direct marketing can be withdrawn at any time. Any person may also at any time object to the processing of data for the above purpose.
G.M.Korporacija doo, / Summer Adventures is subject to the laws of the Republic of Croatia, as well as supranational regulations, and is obliged to comply with them, including providing your data to law enforcement, regulatory and judicial bodies and third parties related to proceedings or investigations anywhere in the world, where required. Where permitted, we will make such a request to you directly or notify you prior to a response, unless it could affect the prevention or detection of a crime.
Providing personal information for the purpose of complying with binding requirements for your data is a legal obligation that depends on the specific request.
How we keep your data secure
We use a variety of security measures, including encryption and authentication, to protect and maintain the security, integrity, and availability of your data.
Among other things, we use the following measures:
- Strictly restricted personal access to your data on a “necessary access” basis
- secure transfer of collected data,
- installing firewalls on IT systems for the purpose of prohibiting unauthorized access
- Continuous monitoring of access to IT systems to detect and prevent misuse of personal data.
All your data is stored on our secure servers and the secure servers of our partners and is accessed and used in accordance with our security policies and standards. The protection of the privacy of your data is permanent, and the company G.M.Korporacija d.o.o, / Summer Adventures takes all measures necessary for their protection. We process personal data in a secure manner, including protection against unauthorized or illegal processing and against loss.
By registering or filling out the contact form on the website www.sportndiving.hr or some other pages owned by us, you give us separate consent (consent) to process your personal data listed in the registration or contact form for a specific purpose (s), as well as data available in the process of submitting documentation in the form of an orthopedic image or simirarly. The purposes that G.M.Korporacija d.o.o, / Summer Adventures may point out in the registration or contact form require the separate consent of each one separately.
We undertake to protect the privacy of your personal data and to treat it in accordance with the EU General Data Protection Regulation (679/2016), the Act Implementing the General Data Protection Regulation (OG 42/2018) and other applicable regulations. The collected personal data of users and visitors of the website, as well as other users or potential users, may not and will not be used or made available to third parties, except when permitted by special law, if it constitutes our legal obligation or is necessary for the purpose realization of contractual obligations.
We undertake not to misuse personal data from the registration or other form or collected through cookies, nor to leave them to third parties without your permission, except in cases where so expressly prescribed by law and in cases where it is necessary to fulfill obligations. Personal data are all data that establish the identity of the User (ex. name and surname, e-mail address, residential address, etc.), and which are used to answer user inquiries, statistics and the possible sending of special offers and newsletters, and especially obtained consent.
All user data is strictly kept and is available only to employees who need this data to do the job. All employees of G.M.Korporacija d.o.o, / Summer Adventures as well as business partners are responsible for respecting the principles of privacy protection. We undertake to protect your personal data by collecting only the basic information necessary to fulfill the purpose of the given consent or legitimate interest, contractual or legal basis. We will use the data that is automatically recorded when accessing the website (IP address, domain name, type of browser, number of visits, time spent on the site, etc.) exclusively to assess website traffic and to improve its content and functionality, or for statistical purposes.
The company G.M.Korporacija d.o.o, / Summer Adventures informs its Users about the use of the collected data and uses the same for marketing campaigns only with specially obtained consent. In the event of a change in any of the personal data (ex. place of residence, delivery address) that are recorded during registration, the User is obliged to make a change in the user data.
According to the applicable national and supranational legislation, in order to protect the confidentiality of personal data, we undertake to treat your data in accordance with the law and good faith, collect data exclusively for specific and lawful purposes, do not pass the data to any third party without your prior consent , not to transfer personal data to countries outside the EU if that country does not ensure an adequate level of data protection; ensure adequate, secure storage of personal data, in such a way that it does not exceed the purpose for which the data was collected and for which it is processed; ensure the accuracy of personal data; ensure the processing of personal data only for the time and purpose for which it is necessary; take all necessary and appropriate technical and organizational measures to prevent the destruction, damage or loss of personal data of the User.
In the event that you no longer wish us to process your data in any way, you request the deletion, correction or transfer of your data, please notify us by e-mail to the e-mail address of the Data Protection Officer: firstname.lastname@example.org.
G.M.Korporacija d.o.o, / Summer Adventures may contact the User to verify the authenticity of the request.
A user who is a natural person may at any time request that he / her Company G.M.Korporacija d.o.o, / Summer Adventures:
- Provide access to the personal data collection catalog;
- Confirm whether the data are processed in relation to the User and enable the review of personal data contained in the personal data storage system and to copy them;
- Forward personal data contained in the data storage system;
- Provide a list of third parties to whom personal data have been transferred, when they were transferred, on the basis of what and for what purpose;
- Provide information on the sources on which the records that the personal data storage system contains about the individual and the method of processing are based;
- Provide information on the purpose of processing and the type of personal data being processed, as well as all necessary explanations in this regard;
- Explain technical or logical-technical decision-making procedures to performs automated decision-making by processing an individual’s personal data.
The retention period of the User’s data by the company G.M.Korporacija d.o.o, / Summer Adventures lasts for life or until the receipt of the request for deletion by the individual to whom the personal data relates, after which the personal data is deleted. The company G.M.Korporacija d.o.o, / Summer Adventures keeps personal data longer than the specified period only if it is binding by the applicable regulations in the Republic of Croatia or supranational legislation.
Personal data that is no longer needed is either irreversibly anonymized or revoked in a secure manner.
If the User has objections to the processing of his data by the company G.M.Korporacija d.o.o, / Summer Adventures, he may file a complaint to the competent state authority, in accordance with the General Regulation on Personal Data Protection and the Law on Implementation of the General Regulation on Data Protection.