PRIVACY POLICY
INTRODUCTION
This Privacy Policy, based on the General Data Protection Regulation (Regulation, GDPR) and other regulations that determine the rules for the protection of personal data, explains which personal data are collected in connection with our activities, how we process, use, and protect such data, the purposes for which we use them, as well as your rights related to the protection of your privacy and your personal data.
DEFINITIONS
ABOUT THE TRAVELEXPERIENCEMUSEUM.COM WEBSITE
COLLECTION, PROCESSING, AND STORAGE OF PERSONAL DATA
GENERAL INQUIRY VIA EMAIL
NEWSLETTER SUBSCRIPTIONS
YOU INITIATED COMMUNICATION WITH US VIA SOCIAL MEDIA PROFILES
WHEN YOU BROWSE OUR WEBSITE
LINKS TO OTHER WEBSITES
WITH WHOM WE SHARE PERSONAL DATA
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
DONATIONS – MEMORABILIA COLLECTION PROGRAM
YOUR RIGHTS
RIGHT TO OBJECT TO THE USE OF YOUR DATA
HOW TO EXERCISE YOUR RIGHTS
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
CHANGES TO THE PRIVACY NOTICE
1. DEFINITIONS
“travelexperiencemuseum.com” refers to the website owned by
TRAVEL EXPERIENCE d.o.o., OIB: 03857142786, Frankopanska ulica 11, Zagreb, MB: 05836905, OIB: 03857142786, while the website hosting service is provided by Plus d.o.o.
GDPR – General Data Protection Regulation (EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).
PERSONAL DATA – means any information relating to an individual whose identity is established or can be established (data subject); an individual whose identity can be established is a person who can be identified directly or indirectly, especially with the help of identifiers such as name, identification number, location data, online identifier, or with the help of one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual. Accordingly, personal data include, for example, name and surname, personal identification number (PIN), residential address, email address, information contained in a court or other file of the data subject as a party, photograph, etc.
DATA SUBJECT is an individual whose identity can be directly or indirectly determined, especially with the help of identifiers such as: name, identification number, location data, online identifier, or with the help of one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that individual.
PROCESSING means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
DATA CONTROLLER means a natural or legal person who determines the purposes and means of processing personal data, and who is responsible for processing such personal data in accordance with the GDPR and other applicable European laws and the laws of Member States relating to the protection of personal data.
PROCESSOR refers to a natural or legal person who processes personal data on behalf of the Data Controller.
SUB-PROCESSOR refers to a natural or legal person who processes personal data on behalf of the Data Controller, as stated in the contract and in accordance with our instructions.
YOU refer to an individual whose personal data is collected and processed by TRAVELEXPERIENCEMUSEUM.COM.
2. ABOUT THE TRAVELEXPERIENCEMUSEUM.COM WEBSITE
We, TRAVEL EXPERIENCE d.o.o., OIB: 03857142786, Frankopanska ulica 11, Zagreb, will be responsible as the Data Controller for all personal data you provide to us in connection with the offering of our Services.
We act as the Data Controller in situations where we process personal data for our own purposes and in the manner described in this Privacy Notice.
Contact details:
TRAVEL EXPERIENCE d.o.o.,
Frankopanska ulica 11, Zagreb
Croatia
Email: info@travelexperiencemuseum.com
3. COLLECTION, PROCESSING, AND STORAGE OF PERSONAL DATA
Unless otherwise agreed, we will only collect basic data necessary to fulfill our Service or data related to our business relationship. In the event of conducting business cooperation and establishing a business relationship, we will also collect data related to the business, which may include information about purchases, services, and other business activities, feedback, and any other information you may provide us, necessary for the realization of the business relationship.
We may collect your personal data directly from you or indirectly for one of the following reasons:
- General inquiry via email;
- Newsletter subscriptions;
- You initiated communication with us via social media profiles;
- When you browse our website;
- Links to other websites;
- Donations – memorabilia collection program
- We collect personal data depending on the above-mentioned specific situation. We collect only necessary data.
GENERAL INQUIRY VIA EMAIL
General Inquiry via Email – When you contact us with inquiries about our services or when seeking new business opportunities.
Personal data we collect: name, email, phone number, country, and related data such as the name of your company, business role, phone number.
Legal basis for data collection: consent (GDPR Article 6.1. (A), contract performance (GDPR Article 6.1. (B).
Data retention period: until you withdraw consent. If we do not conclude a contract, we will delete your personal data within 6 (six) months after our last communication.
NEWSLETTER SUBSCRIPTIONS
Personal data we collect: email.
We will send you email updates and information about new products and services, upcoming events, or other advertising campaigns or news. We also collect statistics on email open rates and click-through rates.
Legal basis for data collection: consent (GDPR Article 6.1.) (A).
Data retention period: until you withdraw consent – until you unsubscribe (i.e., withdraw consent). *
TRAVELEXPERIENCEMUSEUM.COM may store your email address for the purpose of sending promotional and educational newsletters. Your email address is stored in Zagreb, on the company’s server, and will be forwarded to the Mailchimp service we use to send newsletters. We will keep your email address until you unsubscribe from the newsletter. You can withdraw your consent at any time. Such withdrawal will not affect the lawfulness of processing based on consent before withdrawal. You can unsubscribe from receiving our newsletter at any time by clicking on the Unsubscribe icon provided in each individual edition of the newsletter. . By withdrawing consent, you will no longer receive our newsletters, but you will still be able to use our website and other services.
INITIATED COMMUNICATION WITH US VIA SOCIAL MEDIA PROFILES
Personal data we collect: name, email.
Legal basis for data collection: consent (Article 6.1. (A) of the GDPR). (A) of the GDPR).
Data retention period: until you withdraw consent.
TRAVELEXPERIENCEMUSEUM.COM has the following pages/profiles on social media:
Instagram:
Facebook:https://www.facebook.com/profile.php?id=61558463224028
WHEN YOU BROWSE OUR WEBSITE
When you browse our website – third-party service (i.e., Google Analytics)
Personal data we collect: We usually collect IP addresses, browser type, pages you visited and the sequence in which you visited them, and whether you are a new or returning visitor. This data is processed only in a way that does not identify anyone but helps us maintain and improve our website and business. For more information, please read our Cookie Policy.
Legal basis for data collection: consent (Article 6.1. (A) of the GDPR). (A) of the GDPR).
Data retention period: until you withdraw your consent – for more information, please read our Cookie Policy.
LINKS TO OTHER WEBSITES
This website contains links to other websites. Please note that TRAVEL EXPERIENCE cannot be responsible for the privacy practices of other websites. We encourage our users to read the privacy statements of each website that collects personal information. This Privacy Notice applies solely to information collected on the TRAVELEXPERIENCEMUSEUM.COM website.
WITH WHOM WE SHARE PERSONAL DATA
‣ Third parties as Data Processors, if necessary or permitted by applicable law;
‣ Third parties as Data Processors to provide specific functionalities such as targeted marketing and other tools necessary to provide our Services (Mailerlite for advertising and direct marketing, web and mobile analytics Google Analytics, agency Jedinica d.o.o. as a company organizing marketing campaigns on social networks);
‣ Third parties legally authorized to process credit decisions, prevent fraud, and prosecute debtors;
‣ Third parties are legally authorized to request access to and sharing of your personal data for the purposes of criminal proceedings or threats to public safety.
Otherwise, no third party will have access to your personal data unless there is a legal requirement or unless you give us permission.
TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
In cases where the purpose of processing personal data or a legal obligation requires it, we may transfer personal data to a third country only in accordance with the provisions of the General Data Protection Regulation (GDPR), and we will always inform the data subject about the intention of such transfer. Personal data may only be transferred to those third countries for which an adequacy decision has been issued (transfers based on an adequacy decision). The European Commission compiles and publicly publishes a list of third countries that provide an adequate level of protection for personal data and to which personal data may be transferred without further restrictions.
If it is necessary to transfer personal data to a third country not listed on the European Commission’s list, then the transfer is possible only and exclusively in a manner determined by the GDPR.
When fulfilling our obligations under the “right to access personal data and additional information,” we provide specific information, among other things, about any transfer of personal data to third countries, as well as about the appropriate safeguards that have been implemented.
Donations – memorabilia collection program
Personal data we collect: name, contact mobile or phone number and contact email, and city. This data will be used solely to provide our services to you. Legal basis for data collection: consent (GDPR Article 6.1.) (A), contract performance (GDPR Article 6.1. (B). Data retention period: until you withdraw consent. We will delete your personal data within 6 (six) months after the end of the competition and our last communication.
GOOGLE ANALYTICS
Website analysis using Google Analytics: We use the Google Analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”) on our website to continuously improve our website. The Google Analytics service uses cookies stored on your computer to analyze website usage. Information collected by the cookie about your use of this website is mainly sent to a Google server in Europe (or in a member state of the European Economic Area) for IP address anonymization to prevent personal identification.
Only after the IP address is anonymized, the shortened IP address is transmitted to a Google server in the USA where it is stored. In exceptional cases, the full IP address may be transmitted to a Google server in the USA and then shortened. This website uses Google Analytics with IP anonymization (so-called IP masking). Google uses the collected data on our behalf to analyze your use of the website, compile reports on website activity, and provide us with other services related to website usage. The IP address sent by your browser as part of Google Analytics is not merged with other Google data.
You can refuse the use of cookies by selecting the appropriate settings in your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by downloading and installing the browser add-on available at the following link: http://tools.google.com/dlpage/gaoptout?hl=en. In this case, an opt-out cookie will be set to prevent future collection of your data when you visit this website.
Alternatively, you can prevent data from being sent to Google and processed by Google through the link below. To opt-out, click here. Additional information about data protection when using Google Analytics can be found here https://www.google.com/analytics/terms/ and here http://www.google.com/intl/de/analytics/privacyoverview.html.
COOKIE POLICY
Our visited websites use cookies. Cookies are small files temporarily stored on your hard drive, which enable our website to recognize your computer during your next visit to the website www.nomiadigital.hr.
These tools may collect and store technical data such as cookies, user and/or visitor IP address, mobile device identifier, browser information, and similar, without identifying the person.
The stored cookies are used for analytical and statistical purposes and for the functioning of all features of the website and for a better user experience. These cookies can be permanent cookies that remain stored on the user’s computer even after visiting the website and temporary cookies that are stored only during the visit to the website.
Third-party cookies are used to obtain statistical data about the visitation and usage of our website. The collected data includes user IP address, browser information, language, operating system, and other standard statistical data collected and analyzed only in anonymous and aggregate form.
Depending on the settings of your internet browser, cookies may be automatically accepted. If you do not agree to their use, you can easily delete and/or permanently disable cookies on your computer or mobile device at any time using the browser settings you use.
For more information on managing cookies, please refer to the pages of the browser you are using. Please note that the purpose of cookies is to improve and enable the use of our website, and by preventing or deleting cookies, you may disable the functionality of our website or cause different operation and appearance in your browser.
YOUR RIGHTS
In accordance with the EU General Data Protection Regulation, you have the right to:
‣ The right to be informed about the collection and use of your personal data is a key transparency requirement under the GDPR;
‣ The right to access personal data, meaning to request a copy of your personal data that we have about you;
‣ The right to rectification of your personal data if the data is incomplete or inaccurate;
‣ The right to erasure (right to be forgotten) when your personal data is no longer necessary or when your personal data has been unlawfully used, in accordance with your request for deletion;
‣ The right to restriction of processing of your personal data in certain circumstances as an alternative to the right to erasure of your personal data;
‣ The right to data portability means that your personal data can be obtained and reused for our own purposes;
‣ The right to object to the processing of your personal data in a way that will stop or prevent us from processing your personal data in accordance with our legitimate interests, e.g., for direct marketing purposes;
‣ Rights related to automated decision-making and profiling;
‣ The right to lodge a complaint with the national data protection authority.
You can exercise the above rights in accordance with the EU General Data Protection Regulation and national data protection laws.
RIGHT TO OBJECT TO THE USE OF YOUR DATA
You have the right to object, i.e., the right to stop or prevent us from using your data in certain circumstances, and we may not have to stop processing your personal data if we present compelling legitimate reasons to continue using your data.
You can only object to processing when we use your data:
‣ For our legitimate interests;
‣ For direct marketing purposes.
In cases where we rely on legitimate interest as the legal basis for processing your data, you can object to such processing at any time. In that case, we are obliged to demonstrate to you (1) that there are compelling legitimate reasons for processing the data on our or a third party’s behalf, which override your interests, rights, or freedoms, or (2) that the processing of data is necessary for us to establish, exercise, or defend legal claims.
On the other hand, in the case of direct marketing, we cannot refuse your objection, and we will cease to use your data for direct marketing purposes. You can exercise this right by unsubscribing from the subscription.
HOW TO EXERCISE YOUR RIGHTS
If you have any concerns about how we handle your personal data or wish to file a complaint about how we have handled your personal data, you can contact us by sending an email to info@travelexperiencemuseum.com.
RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
In the Republic of Croatia, this authority is the Croatian Personal Data Protection Agency (www.azop.hr). If your habitual res In the Republic of Croatia, this authority is the Croatian Personal Data Protection Agency (www.azop.hr).
If your habitual residence, place of work, or the If you believe that we are processing your personal data unlawfully, you have the right to lodge a complaint with the supervisory authority for personal data protection. place of the alleged infringement is in another EU Member State, or if you believe that your rights have been infringed in another EU Member State, in any case, you can lodge a complaint with the supervisory authority of that country.
CHANGES TO THIS PRIVACY NOTICE
The last update to this Privacy Notice was in May 2024. From time to time, you may wish to check whether this Privacy Notice has changed or been amended in accordance with applicable data protection rules.
If you have any questions regarding your privacy or wish to withdraw your consent for the processing of your personal data or exercise any of your rights arising from this Notice, you can do so at any time by sending an email to info@travelexperiencemuseum.com.