Privacy policy

1. RULES ON THE USE OF COOKIES AND PRIVACY RULES

1.1. Processing manager
Spicules Resort d.o.o., Krasica, Krasica 35, OIB: 71703005475
Contact: info@staraskola.hr.

1.2. Protection of personal data
As the manager of personal data processing, Spicules Resort d.o.o., Krasica, Krasica 35 protects your privacy and only processes personal data that is necessary for the purpose for which it was collected, such as name, surname, e-mail address, postal address or any other information that relates to you personally, that is, that can be considered personal data and that is necessary for a specific purpose. We collect and process personal data fairly, legally and transparently, and take care of their accuracy, completeness, up-to-dateness and security.

1.3. Purpose of data collection
We collect and process data to respond to your request or perform the requested service.
Data we collect and process The data we may collect through business communication for the purpose of performing our services are: - identification data of the respondent (e.g. name and surname) - contact data (e-mail address, telephone number).

1.4. A period in which personal data will be stored
We will store your data indefinitely, i.e., for the periods prescribed by the laws and regulations in force in the Republic of Croatia, during the period specified in the consent, or until the withdrawal of the signed permission through a request for withdrawal of consent.

1.5. Information sharing and transmission
We do not share or transfer your personal data with third parties to other countries. We will disclose your data to third parties only expressly specified in the consent or to third parties explicitly prescribed in the laws and regulations in force in the Republic of Croatia.

1.6. Rights of respondents
Right to access - you can request information about whether your personal data is being processed, and if it is, you have the right to request access and information about the processing.
Right to rectification - you have the right to obtain from us, without delay, the correction of inaccurate personal data and the completion of incomplete personal data.
Right to erasure - you have the right to request the erasure of your personal data. If the request is justified and the law does not oblige us to store data, the data will be deleted without delay. If there are reasons that prevent or limit us from complying with the request, we will inform you of this as soon as possible in response to the request.
The right to restriction of processing - you have the right to ask us to restrict the processing of your data if you dispute the accuracy of that data (for the period that allows us to check the accuracy of personal data) or if the processing is illegal. You object to deleting the data if you have lodged an objection to processing your data and if we no longer need the data. We can extract it, but you need it to establish, exercise or defend legal claims and therefore, you want us to continue storing it. You have the right to restrict the processing of your personal data where it is based on our legitimate interest.
Right to withdraw consent - in the event that we process data on the basis of consent, you can withdraw the same consent at any time without affecting the lawfulness of the processing that was based on consent.
Right to complain and object - you have the right to file a complaint and objection regarding the processing of personal data with a supervisory authority. You can complain to the Agency for the Protection of Personal Data (AZOP) in the Republic of Croatia.
For all inquiries about your personal data that we possess or process, please feel free to contact us at:
Spicules Resort d.o.o., Krasica, Krasica 35 ili putem e-maila: info@staraskola.hr.

2. General information for visitors to this website

2.1. Cookies

Your browser partially stores cookies on your computer’s hard drive. These are text files that you can delete at any time. Most web browsers automatically accept cookies. You can also change your browser settings individually.
You can set your browser so that it informs you about the setting of cookies and that you decide on a case-by-case basis whether to accept or exclude the acceptance of cookies in principle. If cookies are not accepted, the functionality of our portal may be limited.
The following cookies are stored after your session:
-pid: This is a cookie that is set only if you come from a partner site that has a link to Spicules Resort d.o.o. Only the identification number of the partner is stored. Duration: 30 days
-first: This cookie is generated when you first visit our website. The content is the URL of the page from which you reached us if you previously clicked on a link on an external website that directs you to our page. Duration: 90 days
These cookies are used to control the success of marketing campaigns. Without this data, we cannot analyze and manage marketing campaigns appropriately. The processing of this data is therefore based on Article 6, paragraph 1, 1. the sentence, letter f) of the General Regulations on Personal Data Protection. Spicules Resort d.o.o. follows the legal basis for evaluating the success of its advertising campaigns and accordingly controlling them. As the data of persons who have expressed interest in our offers and services are processed here, it should not be assumed that the fundamental rights of the persons in question are limited.
-lng: This is a cookie that stores the client’s language. Duration: one year
-cookieconsent_status: This cookie is set as soon as you accept cookies. This prevents the notification from being displayed when the page is called up again. Duration: one year
-seen_on: This cookie is used if you have reached our website through one of our advertisements on another website and is then placed there. In doing so, the code of the corresponding website from which you came to our site is stored. If you make a reservation, then on the reservation page, it will be decided based on cookies whether the so-called conversion tracking code should be executed. In this way, we can determine which advertisements result in a reservation. However, no personal data is referenced. Duration: 30 days
-XSRF-TOKEN: This cookie is used to protect data from being modified by third parties. This cookie is not bound to any fixed duration and is reset each time the page is accessed.
These cookies serve to improve the ease of use of our website. The processing of this data is therefore based on Article 6, paragraph 1, 1. the sentence, letter f) of the General Regulations on Personal Data Protection. Spicules Resort d.o.o. has a legitimate interest in having its service services evaluated by customers for quality assurance purposes to increase traffic. As the data of persons who have expressed interest in our offers and services are processed here, it should not be assumed that the fundamental rights of the persons in question are limited.

2.2. Local Storage

In order to make your use of our website as easy as possible, in addition to cookies, we also use the so-called Local Storage technique (also called “local data” and “local memory”). In doing so, the data is stored locally in the browser cache so that even after closing the browser window or ending the program - if you do not delete the cache - they still exist and can be read. The following information is stored here:
appFileName: The filename of the included JavaScript file is stored here. This is needed to flush local storage (and other browser memory) when there is a new JavaScript file. This ensures that the memory in your browser is identical to what we mention in the code,
appFileDate: The date is stored here in parallel to the appFileName. This is primarily intended for tracking in development, so that in case of problems we can localize possible errors more quickly.
navBarFontSize: This is the font size of the main menu. Different languages have different word lengths, so the font size is set dynamically and remembered, so that the main menu is always on one line.
search: Your parameters are stored here.
Using local storage serves to improve usage. The processing of this data is therefore based on Article 6, paragraph 1, 1. the sentence, letter f) of the General Regulations on Personal Data Protection. Spicules Resort d.o.o. has a legitimate interest in optimizing the ease of your Internet presence to increase the sale of its products and services. As the data of persons who have expressed interest in our offers and services are processed here, it should not be assumed that the fundamental rights of the persons in question are limited.
If you do not want the local storage function to be used, then you can manage this in the settings of your respective browser, depending on the platform in the operating system of the application in question.

2.3. Google Analytics
To improve our offer further, we collect statistical data on its use. For this purpose, we use the Google Analytics service. This ensures that no connection to the above cookies can occur. Google obliges us to provide the following statement:
This website uses Google Analytics, a Google Inc. web analysis service (“Google”). Google Analytics uses the so-called &cookies& (Cookies), text files stored on your computer and enable the analysis of your website use. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Based on the IP anonymization that we have activated, your IP address will be shortened, so it is impossible to connect with the user based on the IP address alone. At the behest of the operator of this website, Google will use this information to analyze your use of the website, compile reports on activities on the website, and provide the website operator with further services related to the use of the website and access to the Internet. The IP address provided by your browser as part of Google Analytics will not be combined with other Google data. You can prevent the storage of cookies by adjusting your browser software accordingly; however, we draw your attention to the fact that, in this case, you may not be able to use all the functions of this website to their full extent. In addition, you can prevent the collection of data generated by cookies related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing a browser plug-in that is available at the following link. The current link is http://tools.google.com/dlpage/gaoptout?hl=de. - we must just check this link if its okay?
Collected data is deleted after 26 months.

2.4. Google Ads
This website uses Google Ads, an online advertising program of Google Inc. In connection with this, conversation tracking (Conversion-Tracking) is also used. Google Ads uses the program to leave a cookie on your computer if you visit our website via a Google ad. After 90 days, the cookie expires. The cookie does not have any personal tracking capability. If you use our website as a user and the cookie is still working, then we, together with Google, can recognize that you have clicked on the corresponding ad and been forwarded to our website. Each Google Ads client has a different cookie. In this way, cookies cannot be tracked through the websites of Ads clients. Customer conversion statistics can be created with the help of data collected by conversion cookies. In this way, we, as a client, find out the total number of users who reacted to our ads and who were forwarded to our website. However, you do not provide us with any personal data. If you disagree with the tracking process, you can deactivate the Google-Conversion-Tracking cookie via your browser. In this case, please use the browser’s Help function. You can find out more about Google’s data protection provisions at http://www.google.de/policies/privacy/.

2.4. All-In-One Image CAPTCHA plugin - are we using this?
To sufficiently take care of data security when submitting forms, we use the All-In-One Image CAPTCHA plugin when registering as a travel agency in the agency application and the form for the contact service. This serves, above all, to distinguish whether a real person made the entry or whether it is an abuse of machine or automated processing so that robots do not fill the forms with spam messages. The service includes sending IP.

2.5. Processing purposes and legal bases for Google services
We use Google Ads services to control and manage the success of our marketing campaigns. This will not be possible without making the data available to us.
Google Analytics is used here to obtain information about the use of our website so that we can optimize the ease of use of our website.
We use the All-In-One Image CAPTCHA plugin to protect forms from abuse or even hacker attacks, so it also protects the security of your data.
We have a legitimate interest in controlling the success of our marketing campaigns and managing them, obtaining information about the use of our website and protecting it from misuse, and promoting our products as best as possible and increasing traffic. This will not be possible without making the data available to us. The legal basis for data processing here is Article 6, Paragraph 1, 1. sentence, letter b) of the General Data Protection Regulation

2.6. Link to other pages
Spicules Resort d.o.o. is not responsible for the content of third parties that can be reached through links from this website. Spicules Resort d.o.o. expressly excludes illegal or ambiguous content.

3. Facebook Fan page
If you visit our Facebook Fanpage, your data will be included there. If you are logged in, this is your profile information provided to Facebook. In any case, it is your IP address and browser information. Facebook Ireland processes this data and us as joint controllers. You can read the relevant contract here:
https://www.facebook.com/legal/terms/page_controller_addendum
Processing is carried out by art. 6., paragraph 1., subparagraph 1., t. f) EU General Data Protection Regulation (our predominant justified interests of an economic and communication type for offering an information and communication channel in social media, here Facebook). All rights, as stated here in the Data Protection Statement, also apply to the Facebook Fan page.