This Privacy Policy explains how your personal data is collected, processed, and protected when using this website: opatija21.hr.
OPATIJA 21 d.o.o. (hereinafter: Opatija 21) is committed to protecting your personal data and processing it in accordance with the General Data Protection Regulation (GDPR), the Act on the Implementation of the General Data Protection Regulation, as well as all other applicable laws and regulations relating to personal data protection. Please read this Privacy Policy carefully to understand why and how we collect your personal data and for what purposes we process it.
Opatija 21 acts as the data controller, meaning that it determines the purposes and means of processing the personal data of the Data Subject.
If you wish to contact us regarding this Privacy Policy or the processing of your personal data, please do so using the following contact details: OPATIJA 21 d. o. o., Stubište Lipovica 3, 51410 Opatija, OIB (PIN): 24313544105.
You can contact the Data Protection Officer via email at: .
A link to this Privacy Policy is available on the homepage and every sub-page of our website.
Download PDF document: Privacy Policy214.10 KB
Purposes of Processing Personal Data
Opatija 21 respects the confidentiality of personal data and the privacy of its users, taking all necessary measures to protect them from any unauthorised access, misuse, or other forms of breach. User personal data is an area to which Opatija 21 dedicates special attention and care, fully aware of its sensitive nature.
Your personal data is processed on the basis of legal obligations, when processing is necessary for the performance of a contract or to take steps prior to entering into a contract, as well as for the purpose of protecting our legitimate interests, except where such interests are overridden by the rights and freedoms of the data subject which require protection of personal data.
If the processing of personal data is not possible based on the aforementioned legal grounds, we will request your explicit consent. You have the right to withdraw your consent at any time, and the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. You may notify us of the withdrawal of consent at any time via the email address: or by post to: OPATIJA 21 d.o.o., Stubište Lipovica 3, 51410 Opatija.
Your personal data is processed exclusively for the purpose of exercising our rights and obligations within business relationships, as well as for improving our business operations and enhancing your user experience.
We collect personal data directly from you, for example, when you fill out a form on our website, as well as through our video surveillance system.
In each of the stated cases, you will receive clear and understandable information regarding the purpose of processing your data, and in certain situations, we will also request your explicit permission for its processing.
Download PDF document: User request for access, provision, rectification, modification, completion, restriction of collection, portability, erasure, or objection to the processing of personal data245.03 KB (in Croatian)
Categories of Personal Data
OPATIJA 21 collects and uses personal data to enable users to access and use activities via our website opatija21.hr, and for the purpose of improving the performance of the opatija21.hr website. Personal data may also be used to resolve complaints, perform administrative tasks, and establish contact with users.
On the website opatija21.hr, OPATIJA 21 collects personal data of data subjects such as: visitors language preference settings, and, upon submitting an inquiry, complaint and/or reclamation via the website form, the user's name, surname, email address, IP address and, if provided, the telephone/mobile number.
In addition to the aforementioned personal data processed during website visits, below we outline in detail other types of personal data, the purposes of their collection, and their use, which we collect and process during the performance of our regular duties:
- We process data collected through video surveillance exclusively in accordance with legal regulations and in justified cases, with the aim of protecting the personal safety of you and our associates, safeguarding property, and ensuring the security of IT systems and mobile devices.
Information regarding the personal data processed by Opatija 21 is obtained either from you as the data subject or from another source, depending on the type of business relationship, i.e., the basis and purpose of processing, but only to the extent necessary (for example, for the performance of a contract, for compliance with a legal obligation of Opatija 21 under a specific regulation, for the purposes of the legitimate interests of Opatija 21, or based on your consent).
What privacy rights do you have?
Opatija 21 respects that every user should have the opportunity to ensure the accuracy, completeness, and up-to-date status of their personal data. If a user considers that their personal data is incomplete, inaccurate, or not up to date, they may contact Opatija 21 by sending an email to .
Please note that you have the right to request the following from Opatija 21 at any time:
|
You have the right to request information about which of your personal data we process and to access that data. You also have the right to know the purpose of the processing, the categories of personal data processed, the authorities or categories of authorities with whom we share your data, their retention period, as well as the source of the data if it was collected indirectly. You may contact us if you wish to receive a copy of some or all of the personal data we hold about you. |
|
We want your personal information to be accurate and up to date. You may ask us to correct or remove information that you believe is inaccurate or outdated |
|
You have the right to request that the processing of your personal data be restricted or that the data be erased. However, if your personal data is necessary for the performance of contractual obligations towards you, the restriction or erasure of processing may make the performance of those contractual obligations difficult or impossible. Furthermore, if your data is required for compliance with legal obligations (e.g. tax requirements), it may not be possible to fully grant your request. |
|
If you wish to contest the accuracy of your personal data, or if the data is no longer needed for the purpose of processing but is required by you for the establishment, exercise, or defence of legal claims, or if you have objected to processing based on legitimate interests, you have the right to request the restriction of the processing of your personal data. |
|
Please remember that you have the right to object to the processing of personal data which is carried out on a legal basis that Opatija 21 considers legitimate. |
|
If the processing is based on your consent or is carried out by automated means, you have the right to request Opatija 21 to transfer the data to another data controller. |
To exercise any of the rights mentioned above, please use the contact details provided at the beginning of this Policy. If you are not satisfied with how we have collected or used your personal data, you can lodge a formal complaint with the Croatian Personal Data Protection Agency (AZOP), Ulica Metela Ožegovića 16, 10000 Zagreb, email: , tel. 00385 (0)1 4609-000.
Where is your personal data stored?
The personal data we collect about you is stored in a secure environment. Your personal data is protected from unauthorised access, disclosure, use, alteration, or destruction by any organisation or individual.
Processed data is stored on our premises, within our IT systems, and on the servers of our trusted service providers. Opatija 21 will ensure that personal data is kept in a secure place (which includes reasonable administrative, technical, and physical safeguards to prevent unauthorised use, access, disclosure, copying, or modification of personal data), accessible only to authorised persons.
Data collected for the purposes specified in this privacy policy will be stored only for as long as necessary to fulfil those purposes. Your personal data will not be kept in a form which permits your identification for longer than Opatija 21 reasonably considers necessary to achieve the purpose for which it was collected or processed. Opatija 21 will retain certain personal data for the period prescribed by the law or regulation that mandates data retention.
If you have given us your consent, we will process your personal data until that consent is withdrawn. In addition to all the above, it is important to highlight the following: during our review, we will ensure that you renew your consent and/or cookie preferences one year after the date they were granted. In the event of judicial, administrative, or out-of-court proceedings, personal data may be stored until the conclusion of such proceedings, including the period for lodging legal remedies.
Opatija 21 will retain certain personal data for the period prescribed by the law or regulation that obliges the data controller to retain data.
Does OPATIJA 21 share data with third parties?
Opatija 21 cooperates with other companies and service providers, which may involve sharing your personal data through secure IT systems. In such cases, data is transferred exclusively to servers located within the European Union or in countries that, according to the decision of the European Commission, ensure an adequate level of personal data protection, in accordance with applicable EU legislation.
The aforementioned processors provide reasonable guarantees and have implemented appropriate technical and organisational protection measures to properly ensure data protection and compliance with the requirements of the General Regulation. We have concluded data processing and sharing agreements with these data processors as a specific part of our contracts, which lay down the handling of personal data in detail. Consequently, they are not permitted to process your personal data without our instructions or forward it to third parties, except in the event of a statutory obligation.
Cookies
Our website does not use tracking or advertising cookies, nor does it collect your personal data. Since the website does not use a user login system, we exclusively use technical (strictly necessary) and functional cookies that are essential for the basic operation of the website and for providing the services you requested.
A cookie is a small text file that a website stores in the browser on your computer, tablet, or mobile device when you visit it. Cookies enable the website to "remember" your actions and preferences (such as language, font size, and other display preferences) over a period of time, so you do not have to re-enter them every time you return to the site or browse from one page to another. This includes: remembering your selected language, remembering your customised accessibility settings (contrast, font size), and saving your decision regarding cookie acceptance.
If you are not yet familiar with this concept, it is advisable to read some basic information about the types of cookies, their purpose, and erasure options, for example, on the official EU websites.
To monitor website traffic, we use local statistical software that allows us to determine which information interests our users most or least, adapt the pages for individual web browsers, assess the efficiency of our site structure, and evaluate overall website traffic. We use this data exclusively for these purposes and do not share it with third parties.
| Naziv kolačića | Trajanje | Svrha |
|---|---|---|
| axbxcx... (randomly generated number) | Session (until the browser is closed) | A technical cookie that maintains your current browsing session and ensures stable data transmission between your browser and the server. This anonymous "session cookie" is deleted after leaving the website, closing the browser, or after 60 minutes of inactivity. |
| session_locale and language | Session (until the browser is closed) | A functional cookie that temporarily stores your selected language or regional settings. It ensures that the website remains in the language you have selected while you browse our pages. |
| n3t_cc and cookieconsent_status | up to 1 year max. | Necessary cookies used to remember whether you have consented to the use of cookies on this website, so that the cookie notice is not continuously displayed to you. |
| dj-acc-cookie | up to 1 year max. | A necessary functional cookie used to remember the visitor's customised accessibility settings (e.g. high contrast, enlarged text) selected via the accessibility toolbar. |
How to adjust cookie settings?
By adjusting your cookie settings, you decide whether to allow them to be stored on your computer. The management and adjustment of cookie settings can be pre-configured in your web browser.
For information on cookie settings, please click on the name of the web browser you are using. Some settings may also depend on the device you use to access the internet (desktop computer, tablet, or mobile phone):
Other websites
This policy applies only to the use and management of data that OPATIJA 21 collects from visitors to the website at opatija21.hr. Other websites that can be accessed via the opatija21.hr website have their own privacy and data collection statements, as well as their own methods for data use and disclosure (e.g. City of Opatija, Bmove portal, Rao d.o.o., Electronic Public Procurement Classifieds of the Republic of Croatia, Official Gazette, Croatian Employment Service, Official Gazette of the City of Opatija, Official Gazette of the Primorje-Gorski Kotar County, etc.).
We endeavour to carefully select the websites to which we redirect users, ensuring that they provide relevant and high-quality content. However, we cannot provide any guarantees regarding personal data protection on those websites, nor can we accept any liability for their content.
Opatija 21 is not responsible for the terms, conditions, and operations of third parties.
Entry into force and amendments to the privacy policy
This Privacy Policy enters into force on the day of its publication on the opatija21.hr website.
Opatija 21 reserves the right to amend and supplement this Privacy Policy, and any changes will be published on the website.
Data Controller
OPATIJA 21 d. o. o.
Member of the Management Board, Igor Štok