GDPR
Home – GDPR
Statement on the protection of personal data
This Declaration on the protection of personal data from Croatia Yachting will apply from February 1, 2023. year, and is based on the Regulation on general data protection.
Sailing Spirit will process your personal data in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data and national laws based on the aforementioned Regulation, the application of appropriate technical and security measures to protect personal data from unauthorized access, misuse, disclosure, loss or destruction.
This statement describes what data we collect, how we process it and for what purposes we use it, as well as your rights related to your data.
Responsible for data processing:
Sailing Spirit d.o.o., S. Strahimira Kranjčevića 8, Novalja, Croatia,
Contact e-mail address: sailingspirit.hr@gmail.com
If we use the services of external service providers to process your personal data, this is (personal data) processing on order, in which case we are responsible for protecting your personal data.
Types of personal data we process
We use the following personal data:
Main data: Name and surname, date of birth, country of birth, nationality, personal identification number, tax number
Address and contact information: city, email address, mobile phone number
Other information: type of identification document, ID number, date of embarkation, port of embarkation, yacht or ship name, skipper’s license number, VHF license number, credit card number, reservation number, GPS navigation coordinates
Legal basis and purposes of personal data processing
All types of your personal data are processed on the basis of:
a) Legal obligations – We process your personal data in accordance with applicable regulations, as well as for the purpose of notification and registration, which we are obliged to carry out in accordance with applicable regulations (e.g. Regulation on the conditions for providing charter services with or without crew and accommodation of guests on the vessel, conclusion of contracts on the provision of vessels).
b) Fulfillment of contracts – We process your personal data for the purpose of fulfilling contracts and contractual obligations that we have entered into.
c) The consent you sent to us for the processing of your personal data for the purpose of sending promotional offers and other business-related information, for the purpose of assessing satisfaction after the charter period and for the purpose of contacting you.
d) The real interests of the controller – All your data is processed for the purpose of fulfilling the obligations of the legislative body (e.g. Rulebook on conditions for performing charter services with or without crew and accommodation of guests on the vessel) or to fulfill contractual obligations and conclude a contract, e.g. the Agreement on vessel charter.
We collect personal data from our customers in person, at fairs, through websites, e-mails and over the phone, or we receive them from other charter agencies.
Data retention period
We will delete your personal data upon termination of the contractual relationship and no later than the expiration of any legal requirements related to the retention of personal data.
Consent management
You can withdraw your consent at any time. You can also, at any time, object to our processing of your personal data.
You can change your consent by sending a written request to the following address: Sailing Spirit d.o.o. S. Strahimira Kranjčevića 8, Novalja, Croatia,
Contact e-mail: sailingspirit.hr@gmail.com. If you revoke the given consent, we will no longer use your data for the stated purposes. If you wish to give your consent again, you will be able to do so.
In the case of processing your personal data that do not require your consent and that are necessary to enter into a contract with us or to fulfill the concluded contract or due to legal obligations, if you do not provide us with this data, we will not be able to fulfill our contractual obligation towards you nor will we be able to enter into contract.
Rights of data subjects
Prijenos podataka trećim stranama
Čuvat ćemo Vaše osobne podatke i nećemo ih otkriti niti ih učiniti dostupnima trećim osobama osim u sljedećim slučajevima:
– ako izričito i pismeno pristajete na otkrivanje određenih povjerljivih podataka za određenu svrhu ili određenu osobu.
– ako Ministarstvo unutarnjih poslova ili nadležni državni odvjetnik zahtijevaju podatke u svrhu obavljanja poslova iz svoje nadležnosti.
– ako sud, odvjetnici ili javni bilježnik zahtijevaju podatke za njihov postupak, ako je podnošenje takvih podataka potrebno u pisanom obliku.
– Ako Porezna uprava, Hrvatski zavod za mirovinsko osiguranje i Hrvatski zavod za zdravstveno osiguranje zahtijevaju podatke na temelju zakonskih obveza koje kontrolor ima prema njima.
– Ako smo dužni podnijeti podatke Ministarstvu pomorstva, prometa i infrastrukture.
a) the right to access data and information about the processing of personal data, i.e. whether the controller processes personal data or not and if the data is processed, what is the purpose of its processing, categories of personal data in question, etc.
b) Right to rectification: If we process your personal data that is incomplete or incorrect, you can ask us to correct or supplement it at any time.
c) Right to deletion: You can request that we delete your personal data if we process them illegally or if this processing constitutes a disproportionate interference with your protected interests. Please note that for some reasons instant deletion is not possible. For example, due to archiving obligations prescribed by law.
d) Right to data transfer: You can ask us to provide you with the data you have entrusted to us in a structured form, in a standard machine-readable format: If we process that data on the basis of the consent you have given us which you can revoke or to fulfill our of the contract and if the processing is performed by automated processes.
e) The right to object: If we distribute your data for the purpose of performing tasks of public interest or tasks of public bodies or when we refer to our legitimate interests when processing your data, you can file an objection against such data processing if there is an interest in protecting your data.
f) The right to complain to the competent authority: If you believe that we have violated Croatian or European regulations on data protection after processing your data, please contact us in order to solve all problems. You certainly have the right to file a complaint with the Croatian Data Protection Agency, or in case of changes to the applicable regulations, with another authority that will take over that authority, and starting from May 25, 2018, with a supervisory authority within the EU
h) Exercising rights: If you wish to exercise any of the above-mentioned rights, contact us using our contact information from Article 1 of this Statement.
i) Identity confirmation: In case of doubt, we may request additional information to confirm your identity. This serves to protect your rights and private spheres.
j) Abuse of rights: If you exercise any of these rights too often without any apparent intent to abuse the data, we may charge you an administrative fee or refuse to process your request.
k) Right to restriction of processing: You can request restriction of processing of your data:
– If you dispute the accuracy of your information during the period that allows us to verify that information.
– If the processing of your data was illegal, but you refuse to delete it and instead request the restriction of the use of that data.
If we no longer need the data for the intended purposes, but you still need them to fulfill legal requirements or if an objection to the processing of this data has been submitted.
Data transfer to third countries
Data is transferred to third countries (countries outside the EU) only:
if there is a legal obligation
if the transfer is necessary to fulfill contractual obligations
if you have given express consent
Use of digital services (website, application)
We only collect personal information that visitors to our official website voluntarily make available when submitting contact information, applying for jobs, using invitations, and submitting appeal forms. This personal data is used confidentially and only for a specific purpose. The transfer of this personal data to third parties is not carried out, unless there is a legal obligation or an order of an official body when such personal data can be forwarded to the competent authority. Access to the website is a protocol and technical data such as website traffic, operating system used, screen resolution, visit time and size of data transferred are recorded on that occasion.
In order to improve our offer, websites contain “cookies” that are stored on the computers of website visitors. The saving of “cookies” can be prevented, but this may limit the offer of the website. “Cookies” make it possible to save the typical settings of website visitors, optimize technical processes and continuously improve the offer.
We have taken all technical and organizational measures to protect your data from loss, alteration or access by third parties. If you have any questions, please feel free to contact us and we will answer your requests and inquiries as soon as possible and help you exercise your rights.
Any changes to our privacy policy will be disclosed in our Privacy Statement and on our website, and you will be adequately notified.
Safety statement
We have taken all reasonable steps to take appropriate security measures to protect your information.
Changes to this policy
Any changes to this Policy will be posted on our website, brochure and/or available upon request.