PERSONAL DATA PROTECTION POLICY
Date 27.01.2022. City Coco Rent Poreč (from now on: City Coco Rent Poreč), represented by Robert Budimir, owner of the business, following Regulation (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals about the processing of personal data and the free movement of such data and the repeal of Directive 95/46 / EC (from now on: the Regulation)
POLICY ON THE PERSONAL DATA MANAGEMENT SYSTEM AND INDIVIDUAL PRIVACY PROTECTION
I. INTRODUCTORY PROVISIONS
Our websites (content, structure, texts, photos, videos) are protected by copyright. All copying, adaptations, translations, storage, and processing by other means, including storage or processing by electronic means, and all photographs or videos' processing on this website, in particular, are protected by copyright. Any reproduction of information or data, particularly the use of texts or parts of text or images and videos or any other exploitation or sharing, requires the prior written consent of Henkel. City Coco Rent Poreč has the right to distribute and reproduce. Any other unauthorized use will be considered a violation of copyright or intellectual property rights and is subject to a lawsuit.
II. TERMS
Personal data - is any data relating to a natural person (individual) whose identity has been established or can be established; an identifiable individual is a person who can be identified directly or indirectly, in particular, based on the name of the identification number, location data, network identifier or by one or more characteristics specific to his physical, physiological, mental, economic, cultural or social identity.
Respondent - is a natural person (individual) whose identity can be established directly or indirectly, primarily based on name, identification number, location data, network identifier, or with the help of one or more characteristics specific to his physical, physiological, mental, economic, cultural or social identity.
Processing of personal data - is any procedure or set of operations performed on personal data or on sets of personal data, whether automated or non-automated means such as collection, recording, organization, structuring, storage, adaptation or modification, retrieval, inspection, use, detection by transfer, dissemination or otherwise making available, harmonization or combination, restriction, deletion or destruction.
Processing manager - a natural or legal person who, alone or together with others, determines the purposes and means of personal data processing;
Information system - comprehensiveness of technological infrastructure, organization, people, and procedures for collecting, processing, generating, storing, transmitting, displaying, and distributing information and disposing of it. An information system can also be defined as the interaction of information technology, data and data processing procedures, and the people who collect and use the data. Supervisory body - an independent public authority established by the Republic of Croatia to control and ensure the implementation of the Regulation
Confidentiality - The property of information (data) that is not available or disclosed to unauthorized entities. Consent - any voluntary, particular, informed, and unambiguous expression of the respondent's wishes by which he gives support to the processing of personal data relating to him by a statement or explicit affirmative action;
Violation of personal data - breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed;
Profile creation - any form of automated processing of personal data that consists of personal data to assess certain unique aspects of the individual, especially for the analysis of desires and needs in the sale of real estate.
Third parties - natural or legal person, public authority, City Coco Rent Poreč or other body other than the respondent, controller, processor, or persons authorized to process personal data under the direct authority of the controller or processor
Distribution channels - represent the means and ways through which access, contracting, use of products and services of City Coco Rent Poreč and sending commercial information and offers related to products and services of City Coco Rent Poreč, and include the headquarters and website of City Coco Rent Poreč and the rest. Information on available distribution channels of City Coco Rent Poreč is open to the Client by telephone.
The respondent's consent is any voluntary, particular, informed, and unambiguous expression of the respondent's wishes by which he gives a statement or an explicit affirmative action consent to the processing of personal data relating to him.
Personal data protection is protected against a breach, which constitutes a breach of security. The breach leads to accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access to personal data transmitted, stored, or otherwise processed.
III. SCOPE AND OBJECTIVE
The personal data protection policy aims to establish a framework for personal data protection following the General Data Protection Regulation. The policy sets rules related to the security of individuals regarding the collection and processing of personal data and practices associated with the free movement of personal data.
The policy applies to all processing of personal data, except in cases where the processing is of such a nature that it is a statistical analysis from which it is not possible to identify an individual.
IV. PRINCIPLES OF DATA PROCESSING
The principles of data processing are the basic rules that City Coco Rent Poreč is guided by when processing the personal data of respondents, and the processing that is carried out following the following principles is considered legal.
1. legality, fairness, and transparency - personal data are legally, somewhat, and transparently processed about the respondent; In certain situations, City Coco Rent Poreč will have to look for respondents who are not needed to perform a specific service but are required by law to collect (e.g., the Law on the Prevention of Money Laundering and Terrorist Financing). Also, City Coco Rent Poreč ensures transparency of personal data processing. It will provide respondents with all necessary information and, upon request, give the respondents insight into their data, explanations of processing, basics, laws of processing, etc. City Coco Rent Poreč transparently informs respondents about the collection of their data and their use or processing, as well as the extent to which these personal data will be processed. The respondent will be informed on time, i.e., before the data collection, with all relevant information.
2. Purpose limitation - personal data must be collected for particular, explicit, and lawful purposes. They may not be further processed in a manner inconsistent with those purposes unless there is other processing required by law or necessary for the quality delivery of the service itself.
3. Reduction of the amount of data - the collection and processing of personal data is appropriate, relevant, and limited to what is necessary for relation to the purposes for which they are processed
4. Accuracy - personal data is accurate and up to date as required; City Coco Rent Poreč will take all reasonable measures to ensure that personal data that are inaccurate, taking into account the purposes for which they are processed, are deleted or corrected without delay; City Coco Rent Poreč ensures the application of this principle through communication with respondents through which correction of data may be requested if the respondent notices that some of his data is not correctly stated.
5. Integrity and confidentiality - personal data are processed in a way that ensures adequate security of personal data, including protection against unauthorized or illegal processing and accidental loss, destruction, or damage through the application of appropriate technical or organizational measures;
6. storage restriction - personal data are kept in a form that allows the identification of respondents only for as long as necessary for the purposes for which personal data are processed; personal data may be stored for more extended periods if the personal data will be processed exclusively for statistical purposes, subject to the implementation of appropriate technical and organizational measures or if there is a legitimate interest (e.g., in the event of litigation)
V. OBLIGATION TO KEEP CONFIDENTIALITY
All-City Coco Rent Poreč employees must adhere to the measures defined in this Policy. City Coco Rent Poreč will ensure that third parties who, in the framework of their cooperation with City Coco Rent Poreč, gain access to personal data are acquainted with the measures defined in this Policy to comply with them.
All persons under an employment contract or any employment contract who may directly or indirectly obtain personal data are obliged to respect the confidentiality and protect the privacy of the individual, which includes preventing unauthorized access to personal data and equipment used in processing data or their unauthorized use.
City Coco Rent Poreč will forward the respondents' data to state institutions if there is a legal basis for this (for example, forms for the Law on the Prevention of Money Laundering and Financing of Terrorism).
YOU. LEGALITY OF PERSONAL DATA PROCESSING
City Coco Rent Poreč considers the personal data of the respondents to be their property and treats them in the same way. However, for City Coco Rent Poreč to be able to provide a service to the respondent. Therefore, if the respondent refuses to provide the requested data set, City Coco Rent Poreč will not be able to provide the service. Following the laws below, it is necessary to process the minimum set of data needed for the quality of a particular service.
Accordingly, the personal data of the respondents are processed when one of the following conditions is met:
a) processing is necessary for the performance of the contract to which the respondent is a party or to take action at the request of the respondent before the conclusion of the contract
b) processing is necessary to comply with legal obligations - when the law authorizes or obliges City Coco Rent Poreč to perform specific processing, City Coco Rent Poreč will process the personal data of respondents based on that law.
Disputes and for a necessary and justified purpose to protect persons and property. c) processing is necessary for the needs of legitimate interests of City Coco Rent Poreč - except when these interests are more vital than the interests or fundamental rights and freedoms of respondents that require the protection of personal data, especially if the respondent is a child. The legitimate interest of City Coco Rent Poreč includes processing that serves to improve the process, product development, and business improvement, modernizing services, and offering products and services that are clear to facilitate its business with City Coco Rent Poreč, and in favour of resolving court cases.
d) the respondent has given consent to the processing of their data - the license must be provable and voluntary, written in easy-to-understand language, and the respondent has the right to withdraw their consent. As well as the offer of real estate that City Coco Rent Poreč communicates through available distribution channels. City Coco Rent Poreč considers part of the service and will not request the consent of the respondent's laws of processing.
e) processing is necessary to protect the critical interests of the respondents;
VII. RIGHTS OF RESPONDENTS
The respondent has the following rights:
1) Right of access - The respondent has the right to contact City Coco Rent Poreč at any time and obtain confirmation whether personal data relating to him is being processed and if such personal data are processed, request access to personal data and information to which he is entitled in connection protection of personal data.
City Coco Rent Poreč provides a copy of the personal data being processed. If the respondent submits the request electronically, the information shall be provided in the usual electronic form unless requested otherwise. For all additional documents requested by the respondent, the Company may charge a reasonable fee based on administrative costs.
2) The right to correction - The respondent has the right without undue delay to obtain from City Coco Rent Poreč correction of inaccurate personal data relating to him. Considering the purposes of the processing, the respondent has the right to supplement incomplete personal data, including by giving an additional statement. The Company communicates any correction of personal data to any recipient to whom personal data has been disclosed unless this proves impossible or requires a disproportionate effort. The Company shall inform the respondent of these recipients if the respondent so requests.
3) Right to erasure (right to forget) - The respondent has the right to submit a request for the erasure of personal data. A justified request for deletion of data must be met without undue delay. If the respondent has the right to delete data, but deletion is not possible or prudent, the data must be protected by blocking against unauthorized processing. The prescribed retention periods must be observed. City Coco Rent Poreč discloses any deletion of personal data to any recipient to whom personal data has been announced unless this proves impossible or requires a disproportionate effort. The Company shall inform the respondent of these recipients if the respondent so requests.
4) The right to restrict processing - The respondent has the right to obtain a restriction on processing from City Coco Rent Poreč for disputing accuracy, the illegality of processing, cessation of the need for processing, and exceeding legitimate rights for data processing. Following applicable regulations, City Coco Rent Poreč may process personal data even when processing is limited.
5) Right to data portability - The respondent has the right to receive personal data related to him, provided by City Coco Rent Poreč in a structured, commonly used, and machine-readable format and has the right to transfer this data to another controller without interference by City Coco Rent Poreč, if the processing is based on consent or contract and is carried out automatically.
6) Right to object - The respondent has the right to object to personal processing data relating to him if the processing is based on the legitimate interests of City Coco Rent Poreč, including profile creation and processing for direct marketing. City Coco Rent Poreč may no longer process personal data unless it proves legitimate reasons for processing beyond the respondents' interests, rights, and freedoms or to set, exercise, or defend legal claims. Furthermore, suppose personal data is processed for direct marketing. In that case, the respondent has the right to object to personal processing data relating to him for such marketing, which includes creating a profile related to such direct marketing.
7) The right to withdraw consent - The respondent has the right to withdraw his consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Withdrawing consent must be as simple as giving it.
8) Right to compensation and liability - the respondent who has suffered property or non-property damage due to violating prescribed legal provisions is entitled to compensation from the controller or processor for the injury sustained.
Manner of exercising the right - the respondent can exercise his rights stated in this article through the contact information published on the City Coco Rent Poreč website and the information received in the pre-contracting. Suppose he believes that there has been an irregularity in the processing of his data. In that case, the respondent has the right to contact City Coco Rent Poreč and the right to file a complaint to the national supervisory authority.
The respondent has the right not to be subject to a decision based solely on automated processing, including the creation of a profile, which produces legal effects that relate to him or similarly significantly affect him, unless that decision is necessary for the conclusion or execution contract between the respondent and City Coco Rent Poreč, permitted by law or based on the explicit consent of the respondent.
VIII. INFORMING
City Coco Rent Poreč ensures that the respondent is provided with all information if personal data are collected from the respondent or if personal data are not obtained from the respondent. The respondent is informed of his rights under the previous article. City Coco Rent Poreč will publish information on personal data protection on its official website.
IX. RECORDS AND STORAGE
City Coco Rent Poreč has established and maintains records of personal data. The processing is carried out on them and constantly ensures that only personal data are included in the processing, for which there is a legal basis.
Personal data is appropriate, relevant, and limited to what is necessary for the purposes for which the data are processed. Personal data are processed only if the purpose of the processing could not justifiably be achieved by other means. Therefore, it is ensured that the period in which personal data is stored is limited to a strict minimum.
City Coco Rent Poreč continuously implements appropriate technical and organizational protection measures, taking into account the nature, scope, context, and purposes of the processing and risks of different levels of probability and severity for the rights and freedoms of respondents.
The legality of processing. City Coco Rent Poreč does not allow unauthorized collection, processing, or use of personal data. The rule of restricting access to data applies only to those necessary data for the performance of specific business tasks. Employees of City Coco Rent Poreč are strictly prohibited from using the personal data of the respondents for any purpose that does not comply with the conditions defined in Chapter VI. Finally, City Coco Rent Poreč, following applicable laws (e.g., the Law on Prevention of Money Laundering and Terrorist Financing), has the right to inspect and process part of personal data, but only to the extent necessary to meet regulatory requirements or to enforce Contract with the respondent.
Personal data is protected from unauthorized access, use, alteration, and loss. Protection mechanisms are applied to personal data within City Coco Rent Poreč, regardless of the form in which they are stored - paper or electronic.
Personal data collected and processed by City Coco Rent Poreč in its work are considered confidential and must be treated with special care and may only be used following the reason they were collected.
City Coco Rent Poreč will collect and store personal data only to the extent necessary to fulfill the purpose of processing. City Coco Rent Poreč processes only personal data that is relevant, relevant, moderate, and limited to what is required about the purposes for which they are processed ("reduction of the amount of data"); City Coco Rent Poreč takes all necessary measures to ensure that your data is accurate, complete and, if necessary, updated, and undertakes to collect respondents' consents whenever they are needed and to inform respondents about the processing of their data.
Personal data will be stored in the least possible number of places where they must be adequately protected. Access to personal data may be provided solely based on business needs. It is forbidden to use personal data to develop or test IT systems. Personal data must be protected by encryption, pseudonymization, or anonymization.
X. LEGALLY BASED PROCESSING AND RIGHT OF COMPLAINT
City Coco Rent Poreč will process respondents' data following favorable legal and other regulations governing the prevention of money laundering and monitoring and preventing fraud, money laundering, etc., which is carried out following the European Union's rules, standards, and recommendations institutions or national supervisory authorities.
Following the Regulation, City Coco Rent Poreč gives respondents the right to object to the processing of data for direct marketing, whether about initial or further processing, at any time and free of charge.
XI. TRANSFER OF PERSONAL DATA
In the case of concluding a business cooperation agreement, there is a possibility that City Coco Rent Poreč forwards the personal data of the respondent to an external associate who has professional competencies and who provides sufficient guarantees to ensure appropriate individual data protection measures and with whom City Coco Rent Poreč has signed a cooperation agreement. All to deliver the fastest and highest quality service. The same applies to business cooperation agreements with other business entities registered for real estate brokerage, law offices, architectural offices, geodetic offices, etc.
City Coco Rent Poreč further, and in the part of providing advertising services, can provide access to your data to its partners, who act as executors of processing. These third-party service providers will only follow the instructions of City Coco Rent Poreč. They will only have access to your data to fulfil the purposes of collecting personal data and are subject to the same personal data protection and confidentiality regulations as City Coco Rent Poreč. City Coco Rent Poreč is obliged.
Furthermore, your data may be forwarded based on the following:
• in response to legal or administrative proceedings of any kind or enforcement measures requested by the competent authorities;
• following legal obligations, protect the rights and/or security of the individual, protect the rights and property of City Coco Rent Poreč, including the need to respect this Privacy Policy and prevent any technical, safety, or fraud issues.
XII. INCIDENT MANAGEMENT AND THE RIGHT TO COMPLAINT
City Coco Rent Poreč takes all measures within its capabilities to protect the personal data of respondents. In addition, all employees must notify the responsible person in a personal data protection incident and in the event of a personal data breach. City Coco Rent Poreč is obliged to report the incident to the Personal Data Protection Agency within 72 hours after learning of the violation, if feasible. Also, in the event of a personal data breach that is likely to pose a high risk to the rights and freedoms of individuals, City Coco Rent Poreč informs the respondent about the personal data breach without undue delay. The respondent has the right to file a complaint to the supervisory body (Agency for Personal Data Protection) in the event of an incident involving his data or if he considers that City Coco Rent Poreč violates his rights defined by the Regulation.
XIII. FINAL PROVISIONS
This Policy shall enter into force on the day of its adoption.
City Coco Rent Poreč, rental business
Owner Robert Budimir
52440 Poreč, Ul. Mate Vlašića 17
OIB: 71377686544
