Izjava o zaštiti privatnosti

Izjava o zaštiti privatnosti

Informacije o zaštiti podataka prema čl. 13. i 14. Opće uredbe o zaštiti podataka EU (GDPR)

With this privacy policy we inform you about the processing of your personal data by us as well as about the rights to which you are entitled in the context of guest services. All information is valid as of June 2022, subject to change.

1. Tko je odgovoran za obradu podataka i kome se možete obratiti?

DERTOUR Destination Services AG Korporationsweg 9b 8832 Wilen bei  Wollerau Switzerland dataprivacy.guestservice@dertouristik.com If you have any questions on the subject of data protection, you can contact the following e-mail address: dataprivacy.guestservice@dertouristik.com.

2. Koje podatke i koje izvore koristimo?

We process data that we receive in the course of supporting your travel or on the basis of your consent. We receive the data directly from you, e.g. as part of the travel order or other order. If you provide us with personal data of other persons (e.g. fellow travellers) as a travel applicant, including special personal data from which e.g. health, religion or sex life may be revealed (Art. 9 (1) GDPR), you must ensure that they agree to this and that you may transmit the data. You must ensure that these individuals know how their personal data can be processed by us and what rights they have. As far as necessary, we process the following categories of data

  • Identifikacijski/autentifikacijski podaci (npr. prezime i ime, broj rezervacije)
  • Demografski podaci (npr. dob i datum rođenja)
  • Fizičke karakteristike (npr. spol)
  • Komunikacijski podaci (npr. e-mail adresa, korespondencija telefonskog broja, korespondencija putem e-pošte)
  • Podaci o putovanju (npr. rezervirani proizvodi/usluge)
  • Ponašanje (npr. ponašanje na našim web stranicama, lokacija, …)
  • Osjetljivi podaci (npr. zdravlje, vjera, ...)
  • Postavke

3. Na kojoj pravnoj osnovi iu koju svrhu se vaši podaci koriste?

3.1 Neophodno za provedbu predugovornih mjera koje se provode na vaš zahtjev ili ispunjavanje ugovornih obveza s vama (čl. 6. st. 1. lit. b GDPR)

  • Organizirati i izvršiti putovanje/rezervirane usluge, uključujući pritužbe i krizni menadžment
  • Za pružanje mogućnosti kontakta s nama (npr. putem kontakt obrazaca)

3.2   Due to legal requirements (Art. 6 para. 1 lit. c GDPR) We are subject to various legal obligations and statutory requirements (e.g. tax laws). The purposes of processing include the fulfilment of tax law/official control and reporting obligations as well as storage under financial and tax law. 3.3   Data processing for the protection of vital interests (Art. 6 para. 1 lit. d GDPR) We process your data in individual cases to protect your vital interests, e.g. to be able to provide emergency services with an evacuation list in emergency situations. The data is deleted after the required retention periods have expired. 3.4   To safeguard legitimate interests (Art. 6 para. 1 lit. f GDPR) Within the framework of a balancing of interests, to safeguard legitimate interests, your data may be used by us or by legitimate third parties. This is done for the following purposes:

  • Pružanje mogućnosti kontakta (kontakt obrazac)
  • Daljnji razvoj putničkih usluga i dodatnih proizvoda
  • Isticanje pravnih zahtjeva i obrana u pravnim sporovima
  • Prevencija i otkrivanje prijevara i kriminala
  • Obrada upita i davanje potrebnih informacija
  • Osiguravanje IT sigurnosti i dostupnosti IT operacija

Our interest in the respective processing results from the respective purposes and is otherwise of an economic nature (profit generation, avoidance of legal risks, efficient task fulfilment, provision and security of our services). As far as the specific purpose allows, we process your data pseudonymously. 3.5   Based on your consent (Art. 6 para. 1 lit. a GDPR) If you have given us consent to process your personal data, this consent is the legal basis for the processing mentioned there. In particular, you may have consented to the transmission of information by e-mail. You can revoke your consent at any time with effect for the future. To do so, please contact us at our contact address. The revocation only applies to future processing, not to processing that has already taken place.

4. Tko dobiva moje podatke?

Vaši osobni podaci bit će proslijeđeni samo u skladu sa zahtjevima GDPR-a i samo ako je to dopušteno zakonskom osnovom. Vaši podaci bit će otkriveni samo onim tijelima kojima su potrebni za ispunjavanje naših ugovornih i zakonskih obveza ili za obavljanje njihovih zadataka, npr.

  • Interni uredi kojima je povjereno posredovanje, realizacija putne podrške/obrada Vašeg upita
  • Destinacijska agencija (transfer i eventualna organizacija izleta)
  • Pružatelji usluga prijevoza (npr. autobusne tvrtke, tvrtke za iznajmljivanje automobila)
  • Operateri smještaja (npr. hoteli)
  • Usluga pružatelja ostalih rezerviranih usluga ili partnera za provedbu potpore putovanju (npr. pružatelji usluga izleta)
  • Osim toga, sljedeća tijela mogu primiti vaše podatke:
    • Obrađivači koje koristimo (čl. 28 GDPR), posebno u području IT usluga, koji za nas obrađuju vaše podatke u skladu s vašim uputama
    • Javni uredi i institucije (veleposlanstva odredišne ​​zemlje) u slučaju pravne ili službene obveze (obaveze skladištenja, nabava VISA, zahtjevi za dobivanje ulaska) kao i
    • Ostale pozicije za koje ste nam dali privolu za obradu podataka

5. Koliko dugo će moji osobni podaci biti pohranjeni?

To the extent necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract and to defend our rights. In addition, we are subject to various retention and documentation obligations resulting from national laws. Unless otherwise stipulated by special law, the retention obligation lasts 10 years in accordance with the Swiss Code of Obligations, beginning at the end of the financial year. Your personal data will be deleted on the basis of your consent as soon as the purpose has been fulfilled or until revocation.

6. Hoće li moji podaci biti preneseni u treću zemlju?

We only transfer your data to recipients outside the scope of the regulation of the GDPR if this is necessary for the implementation of pre-contractual measures or the implementation of services or is required by law or if you have given us your consent. This data processing is a permitted exemption  from Art. 49 GDPR. Insofar as a third country transfer takes place when using processors, this is secured, among other things, with EU standard contractual clauses in accordance with Art. 46 Para. 2 lit. c GDPR. If necessary, the EU standard contractual clauses are supplemented by further contractual assurances.

7. Imam li određena prava?

You have the right of  information (Art. 15 GDPR), correction (Art. 16 GDPR), deletion (Art. 17 GDPR),  restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR) under the respective legal conditions. In addition, you have the right to object at any time on reasons relating to your particular situation to the processing of personal data relating to you that is carried out on the basis of Article 6 (1) (f) of the GDPR, in accordance with Article 21 of the GDPR. This also applies to so-called „profiling“ based on this provision within the meaning of Art. 4 No. 4 GDPR. If a justified objection is made, we will no longer process this personal data for these purposes. An objection can be made informally to our contact address. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). A current list of the competent supervisory authorities can be found at https://www.ldi.nrw.de/ https://www.edoeb.admin.ch

8. Imam li obvezu dati svoje podatke?

U okviru realizacije putovanja morate dati samo one osobne podatke koji su potrebni za realizaciju ili koje smo zakonski dužni prikupljati. Bez tih podataka obično ćemo morati odbiti sklapanje ugovora ili izvršenje narudžbe ili više nećemo moći izvršiti postojeći ugovor i možda ćemo ga morati raskinuti.

9. Postoji li automatizirano odlučivanje u pojedinačnim slučajevima?

Za uspostavljanje i provedbu poslovnog odnosa općenito ne koristimo automatizirano donošenje odluka u skladu s čl. 22. GDPR-a. Budemo li koristili ove postupke u pojedinačnim slučajevima, bit ćete posebno obaviješteni, u mjeri u kojoj je to propisano zakonom.

10. Hoće li se moji podaci na bilo koji način koristiti za profiliranje?

Korištenje u svrhe profiliranja nije moguće.