Villa Olive Tree
108 Gospe U Siti, 21312 Podstrana, Croatia
T: 0038641388388
E: villaolivetree.luxury@gmail.com
Cookies
Terms and conditions
Privacy policy
Our company acknowledges the responsibility of handling personal data of our clients, potential customers, website visitors, and all individuals who disclose their personal data when contacting us (hereinafter referred to as "users"). We guarantee and commit that we will use users' personal data exclusively for the purposes stated in this document (Privacy and Personal Data Protection Policy).
This Privacy and Personal Data Protection Policy (hereinafter referred to as the "Policy") defines the methods of collecting personal data from users, the purposes for which we collect them, security measures we implement to protect them, the parties with whom we share them, and your rights regarding the protection of personal data. The protection and handling of personal data is fully in accordance with the provisions of the General Data Protection Regulation (Regulation (EU) 2016/679, hereinafter: GDPR), and other legal regulations governing personal data protection. Our activities comply with European legislation and conventions of the Council of Europe (ETS No. 108, ETS No. 181, ETS No. 185, ETS No. 189) as well as the legislation of the Republic of Slovenia (Personal Data Protection Act (ZVOP-1, Ur. l. RS, No. 94/07) and the Electronic Commerce Act (ZEPT, Ur. l. RS, No. 96/09 and 19/15)).
1. Personal Data
Personal data refers to any information about the characteristics, state, behavior, or relationship related to an identified or identifiable natural person, i.e., an individual, in the form in which it is expressed. An identifiable natural person is one who can be directly or indirectly identified by means of identification numbers (e.g., personal ID number, tax number, health insurance number, telephone number, vehicle registration number), or by referencing factors that are characteristic of their physical, physiological, mental, economic, cultural, or social identity (e.g., employment, address, position, role, or status in a certain entity, etc.).
The website owner, in line with the purposes defined below in this privacy policy, collects the following personal data:
2. Purposes of Data Processing and Legal Grounds for Data Processing
Data processing means any operation or set of operations performed on personal data, whether automated or manual, involving any action such as collection, acquisition, registration, editing, storage, adjustment, modification, retrieval, consultation, use, disclosure by transmission, communication, dissemination, or otherwise making available, classification, or linking, blocking, anonymization, deletion, or destruction. Data processing can be manual or automated.
The website owner collects and processes users' personal data based on the following legal grounds:
The website owner does not collect or process users' personal data unless the users enable it or consent to it:
The duration for which the website owner stores the collected data is specifically defined in the "Data Retention" section.
2.1. Processing Personal Data Based on Consent
In our company, we collect and process personal data for the following purposes:
2.2. Processing Based on Laws and Contractual Agreements
In cases where providing personal data is a contractual obligation necessary for the conclusion and execution of a contract with a service provider, or a legal obligation, we will need to ask for your personal data. If personal data is not provided, you will not be able to conclude a contract with the provider, and the provider will not be able to perform the services or deliver the products according to the contract.
3. Personal Data Controller and Authorized Person for Data Protection
Our company is also the data controller. We process data in accordance with the General Data Protection Regulation.
The authorized person for personal data protection in our company can be reached through the main email address.
4. Disclosure of Personal Data to Third Parties or Third Countries
Our company does not disclose collected personal data to third parties or third countries.
Data Retention
Personal data that you have entrusted to us with personal and explicit consent during registration, newsletter subscription, download of e-publications, or submission of inquiries will be stored until you withdraw your consent.
Consent for collecting and processing personal data can be revoked at any time. Withdrawal of consent does not affect the lawfulness of data collection and processing before the withdrawal. All other personal data within contractual cooperation are kept in accordance with the applicable legislation.
We implement multi-layer protection for safeguarding personal data. Personal data are stored digitally, and our computer systems are protected by technical and organizational measures to prevent accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access to your personal data.
Data we collect is stored on secure servers until you withdraw your consent, but no longer than the maximum retention period. Business premises, equipment, and system software, including input-output units, are also appropriately protected.
6. Retention Period of Personal Data
Personal data collected based on consent may be processed and stored until the purpose is achieved or until the consent is withdrawn by the individual.
Personal data processed based on a contract may be processed and stored for up to 5 years after fulfilling the contractual obligations of both parties.
Invoices, in accordance with the VAT Act, are retained for an additional 10 years after the year to which the invoice relates.
Personal data may be processed for internal purposes until consent is revoked by submitting a request for removal of personal data from the database, or only as long as necessary to achieve the purpose for which the data was collected, i.e., 10 years for registered users and 5 years after fulfilling the contractual obligations of both parties, or for all other users until the newsletter subscription is canceled or until the controller ceases activity in the market.
During data management, the individual may request access to and updating of the data in the database. Invoices in accordance with the VAT Act are kept for 10 years after the year of issue.
Rights of the Individual
In accordance with the applicable legislation, individuals have the right to withdraw consent at any time, request access to, correction, restriction of processing, or deletion of personal data.
Consent for processing personal data can be withdrawn at any time. To do so, you may send your request to our email address or by regular mail to the company address.
The individual may also file a complaint regarding the processing of their personal data.
Individuals may submit complaints regarding the processing of their personal data directly to the competent supervisory authority, the Information Commissioner of the Republic of Slovenia.
Handling Violations
In the event of a violation of personal data protection, our company will immediately take all internal and external measures (technical, organizational) to protect the rights and interests of individuals. We will inform all affected parties of any potential violations and notify the competent supervisory authority in Slovenia.