Personal Information Protection Policy
Apfel sport d.o.o.
21000 Makarska, Hrvatska
Phone: +385 (0)99 6078 417
PERSONAL INFORMATION PROTECTION POLICY
Updated on 16/08/2022
Apfel sport d.o.o. respects your privacy and protects your personal data in accordance with the applicable laws and regulations. Our aim is to exceed our guests’ expectations with the quality of our products and services, and we always strive to provide our customers with an experience that will meet their needs, while also using the information provided to us in a responsible manner.
This document will explain how we collect and use your personal data when you use our website and during your stay in our establishments, who we share the data with and why, your rights regarding your personal data that we use, and how we protect the said data.
Our Personal Data Protection Policy applies to all business units of Apfel sport d.o.o., the website www.apfelarena.hr, and our social media profiles.
THE PURPOSE OF COLLECTING PERSONAL DATA
The main purpose for which we collect our users’ personal data is to provide and improve our services and fulfil our legal obligations. Personal data are collected for the following purposes:
- Improving the functionality of our website
- Booking services or communicating with clients (in order to respond to their inquiries about our services via our website, email or phone)
- Performance of contracts with users during their use of our services
- Purchase of additional services
- Billing for services
- Internal statistical processing of data and of the preferred services of our users, and informing our users on our services, namely based on our legitimate interest, and with the aim of improving the quality and sales of our services
- Publication and collection of job applications via email and on the website www.apfelarena.hr
THE INFORMATION WE COLLECT
When you visit our website, apply for a job, or book your accommodation in our establishments, we may collect data that can identify you (directly or indirectly) for the above purposes. The personal data we collect include:
- Your name and surname
- Your date of birth and address
- Your contact information
- Your credit card number
- Video recordings from the video surveillance system at the establishments
- Your IP address when you visit our website
STORAGE AND DELETION OF YOUR PERSONAL DATA
Your personal data will be stored in a form that can identify you as long as they are required for the purpose they are being processed for. Once they are no longer required, the data will be deleted or made unavailable for further processing, excluding the cases when processing is regulated by local regulations obliging us to retain data for a longer period of time.
TRANSFER OF DATA TO THIRD PARTIES
In certain data processing cases, the data you provide to us may be transferred or made available to third parties. In no case do we sell, borrow, or transfer your data to unauthorized third parties. The transfer of data or access to data takes place in the following cases:
- When we receive your consent for such a transfer (e.g. purchase of certain services from a third-party organization)
- When companies or service providers that Apfel sport d.o.o. uses for certain processing purposes access data in a manner regulated by their contractual relationship with Apfel sport d.o.o. (e.g. billing of services, technical maintenance of certain software tools, archiving, and reporting)
- To fulfil our contractual and legal obligations
When we need to transfer your data due to one of the above reasons, we try to only transfer the minimum data required. The third parties receiving your data have undertaken to protect them in accordance with the applicable laws and regulations on the protection of personal data.
RIGHT TO ACCESS, CORRECT, OR DELETE YOUR PERSONAL DATA
You can request information on what personal data are processed by Apfel sport d.o.o., as well as on the purpose of processing, the recipients of such data, and the entities we transfer your personal data to, namely at any time. Additionally, you have the right to update, correct, block, or delete your data in accordance with the relevant legal provisions. We will be happy to delete your personal data at your request in the following cases:
- if your personal data are no longer necessary for the purposes they were collected or otherwise processed for
- if you withdraw the consent the processing is based on
- if you object to the processing and there are no overriding legitimate grounds for the said processing, or if you object to the processing of data for direct marketing purposes.
You can request access to your personal data by sending an email to [email protected] or by sending a letter via snail mail to our address (Apfel sport d.o.o., Dubrovačka 35, 21300 Makarska, Croatia). Please include your contact information and the following note: “Request for access to personal data”. We cannot provide access to your personal data via telephone. In order to prevent the misuse of your personal data, we will send you a predefined form and ask you to fill it out and send it back to us. We may also ask for additional proof of your identity. We will not be able to provide you with access to your personal data if we are unable to verify your identity.
NOTIFICATIONS REGARDING APFEL ARENA SERVICES AND OFFERS
If you are currently using our services or have used them in the past, we would like to keep you informed about all the services and benefits we offer. In order to be able to do that and to inform you about our special offers and discounts, we reserve a legitimate interest to occasionally contact you via email to the address you provided us with when booking or using our services. You will only receive information about the services offered by Apfel Arena that we believe will be of interest to you as our customer. If you do not want to receive our notifications, you can contact us at [email protected] at any time, and we will immediately stop sending them.
USE OF SOCIAL MEDIA AND OUR WEBSITE
Our Personal Data Protection Policy is regularly updated on our website and available to anyone who visits it. By using our website, filling out an online job application form, or posting your own content on our pages, you agree to our Personal Data Protection Policy and consent to us processing your personal data in line with the processing purpose and the published Personal Data Protection Policy.
Apfel sport d.o.o. manages and edits social media profiles (such as Facebook, Instagram, or Twitter). People who visit our social media profiles can post content, photos or comments about our establishments, services, or their stay. Apfel sport d.o.o. does not encourage nor prevent such posts. They are based solely on the interest and consent of the people visiting our profiles. Apfel sport d.o.o. will not be held liable for any direct, indirect, accidental, material, or immaterial damage or cost incurred as a result of using Apfel Arena’s website and social media profiles or in relation to the content our visitors post on our pages and profiles.
We may ask for your consent to publish your publicly available content regarding our services on our website or social media profiles. The content we can publish includes only publicly available images and comments posted on Facebook, Instagram, or Twitter for which you have given us your consent. By consenting to such publishing, you agree to our right to use your content. This will be specified to you when asking for your consent.
Cookies are information saved on your computer by the websites you visit. Cookies usually store your preferences for a website, such as your preferred language or address. When you open the same website later, the Internet browser sends back the cookies belonging to that site. This allows the site to display information tailored to your needs.
There are several types of cookies:
- First-party cookies
- Non-persistent cookies (Session cookies)
- Persistent cookies
- Third party cookies
First-party cookies come from the website you are viewing and can be persistent or non-persistent. These cookies are used by websites to store data that will be used again upon your next visit to the same website (e.g. language selection). Non-persistent cookies or per-session cookies are removed from the computer when the Internet browser is closed. Persistent or saved cookies remain on the computer after the Internet browser is closed. They are used by websites to store information, such as your login name and password, so you don’t have to log in every time you visit the same site. Persistent cookies will remain on your computer until you as a user disable/delete them or until your browser deletes them (as defined in browser settings).
Third-party cookies come from advertisements from other websites (such as pop-ups or other advertisements) displayed on the website you are viewing. These cookies are used by websites to track your Internet usage for marketing purposes.
We do not have access to individual user data. The data we process are anonymous and include statistical and aggregated demographic data. We use these data to analyse trends, for marketing purposes, and to effectively manage our website, as they help us learn more about user behaviour on our pages, the efficiency of our marketing campaigns, and the primary interests of the people visiting our website.
PROTECTION OF PERSONAL DATA OF CHILDREN
Apfel sport d.o.o. advises parents and guardians to teach children about being safe and responsible when it comes to disclosing their personal data on the Internet. Although Apfel Arena does not want or intend to collect information regarding minors without parental or guardian consent, we cannot always know the age of the person accessing our website. As a parent or guardian, you always have the right to request access to all personal data regarding your child we have collected on our website or during your stay. Apfel sport d.o.o. also guarantees the protection of personal data of children provided for by special laws governing the said matter.
SAFETY MEASURES FOR PERSONAL DATA PROTECTION
Apfel sport d.o.o. recognizes the importance of information security, and we thus continuously evaluate and upgrade our technical, physical, and organizational security measures and procedures. We provide booking system users with the highest level of data protection. We use the SSL technology with strong encryption for secure data transfer between your PC and our servers. Your data being processed in our systems is accessed only by authorized employees, namely based on business process needs requiring the processing in question. In some cases, the data is also processed by third parties who have undertaken to protect the said data in accordance with the applicable laws and regulations on the protection of personal data. All our employees have been trained to handle personal data in accordance with legal provisions.