Privacy Statement

​

Crish-Crush, a service company (obrt za usluge), is the owner of the website crish-crush.hr and responsible for the website https://vedranaligutic.wixsite.com/hiking-guide-croatia. This privacy statement contains information on how Crish-Crush takes care of user privacy and informs users about the methods of collecting and processing personal data on these websites.

Please read this Statement carefully to learn how Crish-Crush collects, processes, protects or otherwise uses your personal data.

By using these websites, you consent to the privacy policy explained in this privacy statement.

The privacy statement was prepared in accordance with Regulation (EU) 2016/679 of 27 April 2016, the General Data Protection Regulation and the Law on the Implementation of the General Data Protection Regulation (Official Gazette 42/18).

​

Data Protection Officer

If you want to contact the data protection officer for any questions or complaints related to the privacy policy or the handling of personal data, you can contact the data protection officer:

Crish-Crush, a service company (obrt za usluge),

Vedrana Ligutić, D. Gervaisa 13, Zagreb HR-10090, e-mail: usluge@crish-crush.hr phone: +385 91 538 38 54

 

Data collection

Personal data is any data relating to an individual whose identity is known or can be determined. An identifiable individual is a person who can be identified directly or indirectly, in particular with the help of identifiers such as name, identification number, location data, online identifier or with the help of one or more factors inherent to physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

Your personal information is collected by Crish-Crush only when you voluntarily provide us with such information.

We collect data about you when you contact us by e-mail, telephone, using the website and during direct communication (during the performance of the service).

You should be aware that non-personal information and data may be collected automatically through our online servers or through the use of "cookies", and please also read our cookie preferences.

 

Access to data

Access to the collected personal data is granted to the owner of the service company (obrt), processors, and recipients based on the processing of personal data.

Categories of processors are as follows:

1. Bookkeeping service

2. Network hosting company

3. Domain registration and renewal company

The recipient categories are as follows:

1. Tax administration

2. Court and other public authorities of the Republic of Croatia

​

Data processing

The data obtained about you is used by Crish-Crush for one or more of the following purposes:

To personalize your user experience (collected information helps us better respond to your individual needs);

To improve our website (we constantly strive to improve the offer of our website based on the feedback we receive from our visitors);

In order to establish the primary channel of communication with you;

Pursuing legal claims and resolving disputes to protect business and enforce and/or protect your rights. We will disclose your personal data only in the manner and under the conditions prescribed by law:

In order to issue an invoice for the service performed;

Possible acquisition of insurance;

Links to third parties;

 

Transfer of personal data to third parties

If a case of passing on personal data to third parties is in question, then your data will be transferred only when this is justified by the legal interest in ensuring safe and legal work and fulfilling legal obligations (e.g., in the case of tax obligations that may include passing on your personal data to the Tax Administration).

Your data is used to process your inquiry, and in exceptional cases, the data is processed by our partners (external collaborators or suppliers) based on our order. There is a possibility of forwarding data to partners for the purpose of processing inquiries sent to us.

When processing your personal data, we can use service providers from outside the EU (third countries) but only if there is a decision of the European Commission on suitability for that third country or if we have agreed with the service provider to comply with binding regulations on the protection of personal data.

When we process your personal data on the basis of consent, the withdrawal of consent on the basis of which we process your personal data will also be applied to our partners.

We will forward personal data to third parties in case of compliance with the law, at the request of authorities, court decisions, legal proceedings, obligations to report and inform competent authorities, and the like.

​

Data storage and retention period

We keep personal data for as long as is necessary for the purpose for which it is processed or to act in accordance with the law.

All data is stored in databases or servers located in the countries of the European Union or in third countries for which there is a level of protection that the European Commission considers appropriate.

Personal data of individuals interested in our services provided through this website, e-mail and telephone contact are deleted no later than 5 years after our last response.

If you were a user of our services, the data is deleted after the expiration of all legal storage obligations, except in the event that the procedure for forced collection of unpaid claims has been initiated or an objection to the service has been filed within the deadline, until the final completion of the procedures in accordance with the applicable regulations (e.g., Law on consumer protection, etc.).

 

Individual rights

If you want to know whether we own and process your personal data, or if you want to access the personal data we have about you, please contact us at usluge@crish-crush.hr .

You can also request information on: purpose of data processing, categories of personal data under processing; who else outside of Crish-Crush has received your personal data from us; what the source of the personal data is (if you have not directly provided it to us); and how long we will keep the data. You have the right to correct the personal data we hold if it is incorrect. You can also, with certain exceptions, request that we delete your data or stop processing it.

If you submit a request to us to send your personal data to usluge@crish-crush.hr we will comply with that request free of charge. If we cannot comply with your request within a reasonable time, we will notify you of the date when we will comply with the request. If for some reason we cannot fulfil your request, we will send you an explanation of why we did not fulfil your request.

 

Notification of personal data breach

In the event of a personal data breach, we will notify you and the competent supervisory authority by e-mail within 72 hours of the extent of the breach, the data covered, the possible impact on our services and our planned measures to secure data and limit any adverse effects on individuals.

We will not send you a notice of infringement in the case of:

if there are technical and organizational protection measures (such as encryption) that have been applied to the personal data affected by the personal data breach, which make that data unintelligible to any person who is not authorized to access it;

if we have taken follow-up measures to ensure that a high risk to the rights and freedoms of individuals is no longer likely to occur.

Personal data breach means a security breach that leads to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access of personal data transmitted, stored and processed in connection with the provision of our services.

At any time, you can send a complaint to the supervisory authority regarding our collection and processing of your personal data. In the Republic of Croatia, you can submit a complaint to the Agency for the Protection of Personal Data (AZOP).

​

Changes to our privacy policy

In the event of changes to our privacy policy, we will notify you on this page and update the privacy policy change date below as follows.

This privacy policy was adopted on 1 June 1 2018.