Privacy Policy

Pursuant to General Regulation (EU) 2016/679, which entered into force on 25 May 2016 and which will apply in the Republic of Croatia from 25 May 2018.

Owner Ivica Turkalj, Ugostiteljski obrt Sedra Vl. Ivica Turkalj, Irinovac 155, 47245 Rakovica, OIB: 98671838489, passed the following RULEBOOK on personal data protection – application of GDPR (General Data Protection Regulation).

Article 1.
This Ordinance regulates the protection, collection, processing and use of personal data in accordance with the implementation of g.n. Decree and the Personal Data Protection Act (hereinafter: GDPR), which is subject to the application Catering trade Sedra Vl. Ivica Turkalj, Irinovac 155, 47245 Rakovica, OIB: 98671838489 (hereinafter: “Ugostiteljski obrt Sedra Vl. Ivica Turkalj, Irinovac 155, 47245 Drežnik grad, OIB: 98671838489”), which monitors the collection, processing, use and protection of personal data of all-natural persons collected and processed.

Article 2
“Ugostiteljski obrt Sedra Vl. Ivica Turkalj collects and processes personal data for the purpose of fulfilling legal obligations, and for the purpose of fulfilling contractual business obligations to the extent necessary to achieve the established purpose.

Personal data must be kept in a form that allows the identification of respondents no longer than is necessary for the purpose for which the data are collected or further processed. This refers to the personal data of employees, business partners and guest data.

Personal data of employees are collected, processed and used to the extent defined by laws and regulations, and for the purpose of execution of the employment contract, processing in accounting for the calculation and payment of wages, and occupational safety – according to law.

The employee is aware of the reason for collecting this data and this data is kept permanently. Data are name-surname, residence – address, date of birth, place of birth, name of father or mother, health insurance number, MIO insurance number, MIO II insurance, type of employment, job, education, occupation, OIB, bank number account, length of service, date of employment, working hours, employment rights.

Before collecting personal data, the respondent will be informed about the purpose of the processing for which the data is intended. Personal data are taken directly from the respondents orally and in writing.

Personal data of guests – the names of guests – are in the so-called. guest lists (Zimmerliste / Roominglist), sent by the business partner – agency, and forwarded to the accommodation facility to fulfill contractual obligations – this information is stored for 3 years.

Personal data of business partners – for the purpose of contacting, contracting services, and issuing invoices – according to the Law. Data are name and surname, headquarters – address, telephone-fax-mail, tax number.

Article 3
Director Ugostiteljski obrt Sedra Vl. Ivica Turkalj is obliged to make a decision on appointing persons in charge of personal data protection who take care of the legality of personal data processing and exercise the right to personal data protection, as well as persons who are authorized to supervise whether collected, processed, used and delivered to third parties. personal data in accordance with the Law. It is; Owner Ivica Turkalj, Ugostiteljski obrt Sedra Vl. Ivica Turkalj, Irinovac 155, 47245 Rakovica, OIB: 98671838489.

Article 4
Ugostiteljski obrt Sedra Vl. Before collecting any personal data, Ivica Turkalj is obliged to inform the person whose data are collected, the purpose of processing for which the data is intended, the existence of the right to access data and the right to correct data relating to him, the recipients or categories of recipients of personal data and whether it is a voluntary or compulsory provision of data and the possible consequences of denial of data. In the case of mandatory provision of personal data, the legal basis for data processing is also stated. Personal data is collected directly from respondents orally or in writing.

Personal data relating to minors may be collected and further processed in accordance with the Law / GDPR and with special protection measures prescribed by special laws.

Article 5
To avoid unauthorized access to or loss of personal data, data stored in paper form shall be kept in files or binders, in locked cabinets or rooms accessible only to authorized workers, and data stored in electronic form on a special computer protected by security programs. Malwarebytes Premium, Windows defender, Firewall and assigning a special username and password, known only to the worker who processes this data. It is regularly backed up to external memory and kept dislocated from the computer.

Article 6
Ugostiteljski obrt Sedra Vl. Ivica Turkalj is authorized to provide personal data to other recipients on the basis of a written request, ie the Agreement if this is necessary for the performance of activities within the activities of the recipient established by law. The written request must contain the purpose and legal basis for the use of personal data and the type of personal data requested.

Article 7
Ugostiteljski obrt Sedra Vl. Ivica Turkalj is obliged to take technical, personnel, and organizational measures to protect personal data necessary to protect personal data from accidental loss or destruction and from unauthorized access, unauthorized change, unauthorized publication, and any other misuse, and determine the obligation of employees in data processing, maintaining the confidentiality of data or signing a statement of confidentiality. In the event of an illegal breach of personal data within the organization, we must react immediately and notify the competent supervisory authority of the threat to the data, within 72 hours of learning that the breach has occurred. In addition, all users whose data are compromised must be informed of this risk without delay.

Article 8
Ugostiteljski obrt Sedra Vl. Ivica Turkalj is obliged, no later than the legal deadline from the submission of the request, to each respondent at his request, or to his legal representatives or proxies.

– Provide confirmation of whether personal data relating to him or her are being processed or not

– Provide information within a reasonable time on the data related to him whose processing is in progress and on the source of this data

– Provide insight into personal data related to him

– Submit excerpts, certificates, or printouts of personal data relating to him, which must include an indication of the purpose and legal basis for the collection, processing, and use of such data

– Submit a printout of data on who and for what purposes and on what legal basis received the use of personal data relating to him

At the request of the person, ie his legal representatives or proxies, and in the event that he only determines that, “Ugostiteljski obrt Sedra Vl. Ivica Turkalj “is obliged to supplement, amend or delete personal data if they are incomplete, inaccurate, or out of date and if their processing is not in accordance with the Law, and to notify the person to whom the data relates and the recipient of the supplement, change or deletion personal data. The request is submitted in writing to the persons in charge of personal data protection in Ugostiteljski obrt Sedra Vl. Ivica Turkalj. If the respondent believes that his rights have been violated, he can complain to the competent institution for personal data protection.

Article 9
The provisions of the GDPR Regulation and the Law shall directly apply to all issues of protection, collection, processing, and use of personal data that are not regulated by this Ordinance.

Article 10
This Ordinance shall enter into force on the day of its adoption.