Privacy

PRIVACY STATEMENT – PERSONAL DATA PROTECTION FOR AD EXPERIENCE D.O.O.

AD EXPERIENCE d.o.o., (hereinafter AD EXPERIENCE) respects your privacy and bases its website on technologies that provide a better and more secure online experience. This Statement on personal data protection for AD EXPERIENCE (hereinafter: the Statement) refers to the services provided by AD EXPERIENCE d.o.o., Gornji Sroki 122D, 51216 Viškovo. Applied from 20.04.2022. and in case of discrepancies will take precedence over other provisions relating to the processing of personal data, which are contained in the General Terms and Conditions of AD EXPERIENCE.
By browsing and using the website www.excursioncroatia.com, as well as sending inquiries, signing contracts or direct contact, you entrust us with your personal data. This Statement describes what personal information we collect, how we process it and for what purposes we use it, as well as your rights regarding that information.
Responsible for data processing:
AD EXPERIENCE d.o.o.
Gornji Sroki 122D,
51216 Viškovo, Croatia
Telephone: +385 91 577 5607
Phone2: +385 99 685 0900
E-mail: info@excursioncroatia.com

TYPES OF PERSONAL DATA WE COLLECT
AD EXPERIENCE d.o.o. collects only those data that you want to give us or those that are necessary for the execution of contracted services. We collect personal information such as: name and surname, mobile or telephone number, e-mail address.

COLLECTION PERIOD OF COLLECTED DATA
AD EXPERIENCE d.o.o. stores and processes data for as long as necessary to fulfill the purpose for which the data were collected or as required by applicable regulations. Some of the regulations that determine the retention period are: General Data Protection Regulation (Regulation (EU) 2016/679).

PURPOSE OF COLLECTING PERSONAL DATA
All types of your personal data AD EXPERIENCE d.o.o. processed for the following purposes:
• realization of a transaction related to the sale of tickets – we collect personal data so that we can fully perform the contracted service to the client or so that we can compile the required offer for the client.
• contacting – during the contractual relationship, as well as after the termination of the contractual relationship, we may contact you through the following communication channels for which you have given us consent: call, e-mail, social networks, in writing by mail. If the client has given consent, we may use the client’s data to inform clients about our services and news.
• fulfillment of legal obligations – AD EXPERIENCE is obliged to provide and provide access to certain personal data of its clients to the competent national and international bodies, in certain situations.

METHODS OF COLLECTING PERSONAL DATA
We may collect your information in the following ways:
• collection of data through our website – directly from you when booking or purchasing our excursions, we collect information about passengers through our reservation system where the client enters the required information.
• data collection through direct channels – we may collect customer data via e-mail communication, telephone conversation, SMS conversation or third parties who enter into a contract with us on your behalf. The collected data are needed for the purpose of making an offer, selling tickets or are needed to perform our services.
• Consent – the consent of the passenger means any voluntary, special, informed and unambiguous expression of the wishes of the respondent by which he gives a statement or clear affirmative action consent to the processing of personal data relating to him. Without the consent of the passenger, we will never use the personal data of the passenger for any purposes for which consent is required according to the applicable regulations.

INFORMATION COLLECTIVELY COLLECTED ON OUR WEBSITE
We automatically collect information in server log files, such as your IP address, browser type, redirect / exit pages, and operating system. We use this information to better manage our website, understand how you navigate our website and to improve your experience while using it.

SECURITY OF PERSONAL DATA
We take all appropriate technical and organizational measures to protect your personal data from unauthorized or unlawful handling and from accidental loss, destruction or damage. When providing personal information through our website, this information is sent over the Internet (using high quality encryption) and stored on our servers.

FORWARDING OF PERSONAL DATA
AD EXPERIENCE ensures that your personal data is collected and processed in a manner consistent with the aforementioned purposes. In order to achieve these purposes and to provide the selected service in full, AD EXPERIENCE in some cases needs to make your personal data available to third parties, who with your personal data continue to act as managers of personal data processing and fulfillment of our obligations to you or our legal obligations (e.g. to other travel agencies at home and abroad, the tour guide for whom the ticket was purchased, insurance companies). We may also offer your information to partner companies that help us maintain our website excursioncroatia.com Some of these business partners may be located outside the country in which you accessed this website. Our partner companies must at all times provide the same level of security for your personal information as AD EXPERIENCE. They are obliged to respect the legal agreement on the protection of your personal data, which they process exclusively according to the instructions of AD EXPERIENCE.

PRINCIPLES OF PERSONAL DATA PROCESSING
AD EXPERIENCE processes your personal data according to the following principles:
• accuracy, completeness, up-to-dateness, processing of data in a fair manner – the data that AD EXPERIENCE collects and processes must be accurate, complete, up-to-date and processed in a fair manner.
• confidentiality – personal data must be protected from unauthorized access and use and kept in a form that allows the identification of a natural person for as long as it takes to achieve the purpose of data collection.
• legality – personal data collected and further processed by AD EXPERIENCE are in accordance with the Personal Data Protection Act and special laws.
• Purposefulness – AD EXPERIENCE collects personal data only for the purpose for which the data were collected, ie for a purpose that coincides with the purpose of collection.
CUSTOMER RIGHTS

• the right to rectification – if we process your personal data that is incomplete or inaccurate, you may at any time ask us to correct or supplement it
• the right to delete – you can ask us to delete your personal data if we have processed it illegally or that processing constitutes a disproportionate interference with your protected interests. Please note that there are reasons that prevent immediate deletion, for example with statutory archiving obligations.
• right of access – the client has the right to receive confirmation whether we process his personal data, and if we process, he has the right to provide the following information: information on the purpose of processing, the category of personal data we process, recipients or categories of recipients in which the data will be stored or the criteria for determining that period, the right to request correction, deletion and restriction of data processing, the right to sue the supervisory authority, information on the automated decision-making system, such as profiling, safeguards if the data transferred to a third country.
• the right to withdraw consent – in cases where such data is collected and processed solely on the basis of your consent for a specific purpose
• the right to transfer – you can ask us to provide you with the data entrusted to us for archiving in a structured form, in the usual machine-readable format: – if we process this data on the basis of consent given to us and – if processing is performed using automated processes.
• right to object – the client has the right to object to the processing of personal data at any time.
• The right to appeal – if you think that we have violated Croatian or European data protection regulations during the processing of your data, please contact us to clarify any issues. You certainly have the right to lodge a complaint with the Croatian Data Protection Agency, or in the event of a change in the applicable regulations to another body that will take over its competence, and from 25.05.2018. and the EU Supervisory Authority. If you wish to exercise any of these rights, please contact us using our contact information provided in the introductory article of this Statement.
When a client wants to exercise any of the above rights, he needs to contact us; via e-mail: info@excursioncroatia.com

ENTRY AND TRANSMISSION OF CREDIT CARD DATA
Entry and transfer of personal and credit card data protected by encryption provided by Stripe and PayPall online credit card authorization system in accordance with the requirements of cardholders and card brands and PCI DSS standards. Credit card authorization and payment is done using the Stripe and PayPall systems for real-time card authorization and payment.
AMENDMENTS TO THIS STATEMENT
AD EXPERIENCE may amend or supplement this Statement in accordance with changes based on applicable regulations, of which you will be informed in a timely manner by an updated Statement available on the AD EXPERIENCE website www.excursioncroatia.com.