PRIVACY POLICY AND COOKIE POLICY

Data Controller

ZAVALA uslužni obrt, owned by Katarina Karajanov Tomić, Zavala 222, 21465 Jelsa, Zavala, OIB: 85896871709 Contact: info@zavala-zavala.com

Herein ‚Zavala 222 apartments‘, ‚Zavala 222‘, ‚us‘, ‚our‘, and ‚we‘ all refer to Zavala uslužni obrt, owned by Katarina Karajanov Tomić of Zavala 222, 21465 Jelsa, Republic of Croatia (hereinafter ZAVALA). ZAVALA, as the provider of the website services www.zavala-zavala.com and redirected www.zavala-zavala.hr, and as the provider of accommodation services for tourists, is committed to protecting your privacy and personal data.

Our website www.zavala-zavala.com and redirected www.zavala-zavala.hr is hosted on the WordPress platform. WordPress provides us with the online platform that allows us to sell our products and services to you. Your data may be stored through WordPress data storage, databases, and general WordPress applications.

This Privacy Policy applies to these websites, as well as to any other websites or mobile applications that we own or operate (specifically hereinafter the „Website“ and collectively „Websites“). „Websites“ include the websites themselves and all subpages, applications, interactive features, blogs, widgets, social networks, and links thereto or therefrom, as well as all other online, mobile, or wireless offers that are connected to this Privacy Policy, regardless of whether you access them through a mobile device, computer, or any other technology, means, or device. When providing our services, we may collect personal information about website visitors, users, individuals, or email addresses associated with our mailing list.

We recommend that you regularly review our Privacy Policy to stay informed about any changes we may make occasionally at our discretion that might affect you, as your continued use of the Website signifies your continuing consent to this Privacy Policy. All updates, revisions, and amendments will take effect immediately upon notice that we may provide in any manner, including but not limited to the posting of a revised version of this Privacy Policy or other notice on the Website.

Protection of Personal Data

As the data controller of personal data, ZAVALA protects your privacy and processes only such personal data that are necessary for the purpose for which they were collected, such as name, surname, personal identification number (OIB), date of birth, telephone number, email address, postal address, citizenship, age, gender, or any other information relating to you personally that can be considered personal data and that is necessary for a specific purpose. We collect and process personal data fairly, lawfully, and transparently, ensuring their accuracy, completeness, currency, and security.

1. Purpose of Data Collection

We collect and process data in order to respond to your request or perform the requested service.

Data We Collect and Process

The data we may collect through business communication for the purpose of providing our services include:

• Respondent identification data (e.g. name, surname, personal identification number)
• Contact information (e.g. residential/address, phone number, email address)

Other data (e.g. citizenship, age, gender, etc.).

2. Storage Period for Personal Data

We will keep your personal data for the periods prescribed by laws and regulations in force in the Republic of Croatia, within the period stated in the consent form, or until the withdrawal of such consent through a request to withdraw consent.

3. Data Subject Rights

Right of Access – You may request information about whether your personal data is being processed, and if so, you have the right to request access to and information about the processing.
Right to Rectification – You have the right to request and receive from us without undue delay the rectification of inaccurate and the completion of incomplete personal data. Right to Erasure – You have the right to request the erasure of your personal data. If the request is justified and there is no legal obligation for us to retain the data, such data will be deleted without undue delay. If there are reasons that prevent or restrict us from complying with such a request, we will inform you as soon as possible in response thereto.
Right to Restriction of Processing – You have the right to request from us the restriction of processing your personal data if you contest the accuracy thereof (for a period enabling us to verify the accuracy of the personal data), if the processing is unlawful and you oppose the erasure thereof if you have objected to the processing thereof, and if such data are no longer needed by us but are necessary for you to establish, exercise, or defend legal claims.
You have the right to restrict the processing of your personal data when it is based on your legitimate interest.
Right to Withdraw Consent – If we process data based on your consent, you can withdraw such consent at any time without affecting the lawfulness of such processing based on consent before such withdrawal.
Right to Complaint and Objection – You have the right to lodge a complaint and objection regarding the processing of personal data with the supervisory authority. In the Republic of Croatia, you can submit a complaint to the Croatian Personal Data Protection Agency (AZOP).

For any inquiries regarding your personal data that we possess or process, please feel free to contact us at: ZAVALA uslužni obrt, Zavala 222, 21465 Jelsa, or via email: info@zavala-zavala.com.

GENERAL INFORMATION FOR VISITORS OF THIS WEBSITE

1. Cookies

Your browser partially stores cookies on your computer’s hard drive. These are text files that you can delete at any time. Most web browsers automatically accept cookies. You can individually change your browser’s settings.

You can configure your browser to notify you about the installation of cookies and decide whether to accept them on a case-by-case basis or generally disable cookie acceptance. If you do not accept cookies, the functionality of our portal may be limited.

The following cookies are stored after your session:
-pid: This is a cookie that is only set if you come from a partner website that has a link to ZAVALA. Only the partner’s identification number is stored. Duration: 30 days.
-first: This is a cookie generated during your first visit to our website. It contains the URL of the page from which you accessed us, if you clicked on a link on an external website that directed you to our site. Duration: 90 days.
These cookies are used to track the success of marketing campaigns. Without providing this data, we are unable to analyze marketing campaigns and manage them appropriately. The processing of this data is based on Article 6(1), first sentence, item f) of the General Data Protection Regulation. ZAVALA follows the legal basis for evaluating the success of its advertising campaigns and accordingly controls them. As this involves processing the data of individuals who have expressed interest in our offers and services, it is not assumed that such individuals‘ fundamental rights are limited.
-lng: This is a cookie that stores the client’s language preference. Duration: 1 year.
-cookieconsent_status: This is a cookie that is set once you accept the use of cookies. It prevents the notification from appearing on each subsequent visit to the page. Duration: 1 year.
-XSRF-TOKEN: This cookie is used to protect data changes from third-party interference. This cookie is not tied to any fixed duration and is reset with each page visit.
These cookies are used to improve the usability of our website. The processing of this data is based on Article 6(1), first sentence, item f) of the General Data Protection Regulation. ZAVALA has a legitimate interest in having its services evaluated by customers to ensure quality and increase traffic. As this involves processing the data of individuals who have expressed interest in our offers and services, it is not assumed that the fundamental rights of those individuals are limited.

2. Local Storage
In order to make your use of our website as convenient as possible, in addition to cookies, we also use a technique called Local Storage (also known as „local data“ and „local memory“). Data is stored locally in the browser’s cache, so even after closing the browser window or ending the program – unless you clear the cache – the data will still exist and can be read. The following information is stored here:

appFileName: This stores the name of the included JavaScript file. This is necessary to clear local storage (and other browser memory) as soon as a new JavaScript file exists. This ensures that the memory in your browser is consistent with what we mention in the code.
appFileDate: Parallel to appFileName, the date is stored here. This is primarily intended for tracking during development so that we can quickly identify possible errors in the event of problems.
navBarFontSize: This is the font size of the main menu. Different languages have different word lengths, so the font size is dynamically set and remembered to ensure that the main menu always fits in one line.
Search: Your parameters are stored here.
The use of local storage serves to improve usability. The processing of this data is based on Article 6(1), first sentence, item f) of the General Data Protection Regulation. ZAVALA has a legitimate interest in optimizing the convenience of your online presence in order to increase the sales of its products and services. As this involves processing data of individuals who have expressed interest in our offers and services, it is not assumed that the fundamental rights of those individuals are limited.
If you do not want to use the local storage function, you can manage it in the settings of your respective browser depending on the platform in the operating system of the respective application.

3. Google Analytics
In order to further improve our offers, we collect statistical data on their usage. For this purpose, we use the Google Analytics service. This ensures that there is no connection to the aforementioned cookies. Google requires us to include the following statement:
This website uses Google Analytics, a web analytics service provided by Google Inc. („Google“). Google Analytics also uses cookies to help analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. We have activated IP anonymization, so your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be associated with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by cookies about your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en.
The collected data will be deleted after 26 months.

4. Google AdWords
This website uses Google Ads, an online advertising program provided by Google Inc. As part of this, conversion tracking is also used. Google Ads places a cookie on your computer if you access our website through a Google ad.
The cookie expires after 90 days and does not possess any personal tracking capabilities.
If you visit our website as a user and the cookie is still active, together with Google, we can recognize that you clicked on the corresponding ad and were redirected to our website.
Each Google Ads client has a different cookie, so cookies cannot be tracked across Ads client websites. By collecting data through conversion cookies, statistics about customer conversions can be generated. This allows us, as the client, to determine the total number of users who have responded to our ads and have been directed to our website. However, you do not provide us with any personal information.
If you do not consent to the tracking process, you can deactivate the Google Conversion Tracking cookie through your browser settings. In that case, we kindly ask you to use the browser’s Help function.
For more information about Google’s data protection policies, you can visit http://www.google.com/policies/privacy/.

5. Google Maps
This website utilizes the Google Maps mapping service via an API. The service provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
In order to use the features of Google Maps, it is necessary to store your IP address. This information is typically transmitted and stored on Google servers in the United States. The provider of this website has no influence over this data transmission.
The use of Google Maps is in the interest of presenting our online offers attractively and facilitating the easy location of the places we have indicated on the website. This represents a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.
For more information about the handling of user data, please refer to Google’s privacy policy: https://www.google.com/intl/en/policies/privacy/.

6. W3 Total Cache
W3 Total Cache primarily serves to distinguish whether an entry was made by a real person or if it is an abuse of machine or automated processing, in order to prevent forms from being filled out by spam robots. The rules and data usage apply only to ZAVALA, which uses W3 Total Cache, and not to website visitors. For more information, you can check the terms and conditions page of W3 Total Cache here.

7. Purposes of processing and legal bases for Google services
We use Google Ads services to monitor the success of our marketing campaigns and manage them. This would not be possible without providing data.
Google Analytics is used here to obtain information about the usage of our website, so that we can optimize the user experience on our website.
As the data controller, we have a legitimate interest in monitoring the success of our marketing actions, managing them, obtaining information about the usage of our website, protecting it from abuse, and promoting our products effectively to increase traffic. This would not be possible without providing data. The legal basis for data processing here is Article 6(1)(b) of the General Data Protection Regulation.

8. Link to other websites
ZAVALA does not take responsibility for the content of third-party websites that can be accessed through links on this website. ZAVALA explicitly waives any liability for unauthorized or ambiguous content.

9. Facebook Fanpage
If you visit our Facebook Fanpage, your personal data will be collected. If you are logged in, this includes your profile data as provided to Facebook. In any case, it includes your IP address and browser information. We process this data jointly with Facebook Ireland as joint data controllers. You can find the relevant agreement here: https://www.facebook.com/legal/terms/page_controller_addendum
The processing is carried out in accordance with Article 6(1)(f) of the EU General Data Protection Regulation (our legitimate interests of an economic and communicative nature in offering an informational and communicative channel on social media, in this case, Facebook). All rights, as stated in this Privacy Statement, also apply to the Facebook Fanpage.