Privacy Policy

LASTAVICA NEW d.o.o. (hereinafter referred to as Lastavica New) gives great importance to your privacy and has fully implemented European Parliament General Data Protection Regulation (GDPR).

This Privacy Notice explains how we collect, use, process and store your personal data, and what are your rights regarding your personal data.

This Privacy Notice is accessible on our website www.lastavica.hr.

The controller responsible for data processing is:

LASTAVICA NEW d.o.o.
Matije Gupca 27
Betina, Croatia

Phone: +385 22 436 552
Mobile: +385 91 514 9265
Fax: +385 22 436 551

e-mail: info@lastavica.hr
web: www.lastavica.hr

1. Personal data we collect about you

Personal data is defined as any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

You may provide us with your personal data yourself, for example when you contact us in any way, either by telephone, email or by regular mail, and when you talk to our personnel in person or fill in forms intended for us.

Your personal data may also be received from other chartering agencies.

Types of personal data we collect about you include:

• your personal details (name, address, date, place of birth, personal ID, gender, occupation);
• contact data (address, e-mail address, telephone number)
• the so-called access logs (access log: IP address of the visitor's computer, date and time of the visit, URL (address of the visited page), version of the browser used), and cookies listed in the "purpose of collection" section of the table below.
• data created by our processing of your personal data listed here.

2. Why we collect your personal data and what is the legal basis for that

When processing your personal data, the provisions of the GDPR, local data protection laws and other relevant legal provisions are always observed.

The information we collect through the contact form on our website or directly via e-mail has been used to answer your inquiry, make a proposal for the desired service or product and occasional business related information. Personal data is collected and processed only for certain and legitimate purposes and we do not process them further in a manner that is not in accordance with the purpose for which it was collected unless otherwise provided by law or on the basis of consent.

Your personal data is exclusively processed based on:

Legal obligations – we process your personal data in accordance with the regulations in force. Also, for the purposes of notification and registration which we are obligated to perform in accordance with the regulations in force (e.g. the provision of guest accommodation services on vessels, concluding an agreement on the provision of chartering of vessels, etc.).

Fulfilment of agreement – for the purpose of fulfilling the agreement and contractual obligations we have concluded.

Consent – for purposes of personalizing your experience and sending promotional offers and other business-related information, for the purpose of ratings and reviews of services and assessing satisfaction, and for the purpose of contacting you.

Legitimate Interest of the controller – for the purpose of meeting the obligations of the legislative body or for fulfilling contractual obligations and concluding agreements.

We do not use any automated decision-making or profiling.

3. Who we share your personal data with

We do not sell, trade, or otherwise transfer to outside parties your personal data unless we provide you with advance notice. This does not include website hosting partners and other parties who assist us in operating our website, conducting our business, or serving our users, including, not limited to, accountancy services providers, chartering agencies, legal services providers, IT services providers, employment agencies, etc., so long as those parties agree to keep this information confidential.

We may disclose your personal data:

• to the extent that we are required to do so by law,
• in connection with any ongoing or prospective legal proceedings,
• in order to establish, exercise, or defend our legal rights,
• to any person who we reasonably believe may apply to a court or other competent authority for disclosure of that personal information where, in our reasonable opinion, such court or authority would be reasonably likely to order disclosure of that personal information.

We may disclose your personal data to any of our employees as reasonably necessary for the purposes set out in this Privacy Notice.

Except as provided in this Privacy Notice, we will not provide your personal information to third parties without your expressed consent.

A transfer of data to third countries (outside the European Union or the European Economic Area) only takes place if this is necessary for the execution of the underlying relationship or required by law or if you have given us your consent.

4. How long will we keep your personal data

In principle, we delete your personal data upon termination of the contractual relationship and no later than the expiration of any legal requirements related to the retention of personal data.

In relation to your personal data used to perform any contractual rights and/or obligations with you, we may retain that personal data whilst the contract remains in force and until you or we completely fulfil our obligations, allowing for reasonable time after that for updating of our records.

In relation to any personal data where we reasonably believe it will be necessary to defend, prosecute and/or make a claim against you or a third party, we may retain that personal data for as long as the claim could be pursued under the applicable law or otherwise needed in such legal proceedings.

In relation to any personal data used to comply with tax, audit or similar data retention requirements, we shall not store and use such personal data longer than we are required to do so under the specific retention requirement.

5. Your rights

Below is the summary of rights that you, as the subject to the processing of personal data, have under the law.

1. Right to confirmation

You have a right to demand confirmation by us regarding whether we are processing data related to you.

2. Right to information

You have a right to obtain information at any time from us and at no cost regarding the personal data relevant to you as well as a copy of that information.

3. Right to rectification

You have a right to demand immediate rectification of inaccurate personal data connected to you. Moreover, taking into account the purposes of the processing, you have the right to demand that incomplete personal data be completed, including by means of providing a supplementary statement.

4. Right to erasure (right to be forgotten)

You have a right to demand that we immediately erase personal data connected to you to the extent that any of the following reasons applies and provided processing is not required:

• your personal data are no longer necessary for the purposes we processed or collected them for;
• if you withdraw your consent to process your personal data – but only in cases where we have no other legal basis to do so apart from your consent;
• if you object to the processing of your personal data and there are no overriding legitimate grounds for the processing;
• it turns out your personal data have been unlawfully processed;
• your personal data must be erased because the law requires us to.

5. Right to restriction of processing

You have a right to demand that we restrict the processing of the data where any of the following prerequisites apply:

• if you want us to establish the data’s accuracy; we will restrict processing for the time needed to establish accuracy;
• where our use of the data is unlawful but you do not want us to erase it;
• where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or
• you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it; we will restrict processing for the time needed for such verification.

When we restrict processing only temporarily, we will let you know when the restriction is lifted. Note that we are permitted to process your personal data in certain cases even if the processing is restricted, for example for establishment, exercise or defence of legal claims, protection of rights of other persons or for reasons of important public interest.

6. Right to data portability

You have a right to receive the relevant personal data made available by you to us in a structured, current and machine‐readable format. You have the right to transfer such personal data to a different company (data controller), or ask us to do so directly. We will send you such personal data in case:

• we have been processing your personal data because you gave us your consent to do so or to perform a contract you have with us; and
• we process your personal data by automated means (this means for example that we cannot give you your personal data in this form if we only have it in paper files).

7. Right to object

When the legal basis for us to process your personal data is our legitimate interest, and you feel that because of your particular situation you no longer wish us to do so, you can at any time object to further processing of your personal data. In this case, we will stop processing your personal data. Note however that we are still allowed to continue to process your personal data even if you object, if our legitimate interests in a particular case outweigh your interests, rights and freedoms (meaning that your rights are not affected disproportionally, while it is important to us if we can continue processing), as well as for the establishment, exercise or defence of legal claims.

8. Automated decisions in individual cases including profiling

You have a right not to be subjected to decisions supported by automatic processing, including profiling, that carry legal effect against the data subject or that has a significant adverse effect, to the extent that the decision (1) is not required for the conclusion or fulfilment of a contract between the you and us or (2) is permitted based on the legal provisions of the EU or the Member States to which we are subject and these legal provisions contain reasonable measures to safeguard the rights and freedoms as well as your legitimate interest, or (3) takes place with your express consent.

9. Right to revoke consent under data protection law

If we process your personal data on the basis of your consent but you change your mind later, you have the right to withdraw your consent at any time, and we will stop processing your personal data. If you withdraw your consent, our processing prior to your withdrawal will remain lawful.

10. Right to complain

If you are not satisfied with the way we process your personal data, you can contact us via e-mail: info@lastavica.hr and you have the right to complain to a personal data protection supervisory authority if you believe our processing of your personal data may be against the law. You may complain either to a supervisory authority in the place of your habitual residence (where you live most of the time), in the place where you work or in the place where you believe infringement may have happened.

Supervisory body in the Republic of Croatia: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb

6. How do we secure your data?

To protect your data, we will take appropriate technical and organizational measures in line with the applicable data protection and data security laws, including requiring our service providers, business partners or professional advisors to use appropriate measures to protect the confidentiality and security of your data. We put in place measures to prevent risks such as destruction, loss, alteration, unauthorized disclosure of, or access to your data.

7. Personal data of children

Our website is not intended for minors. We advise parents and guardians to teach children safety and the use of personal information on the Internet.

8. Amendments

We may update this Privacy Notice from time to time by publishing a new version on our website. You should check this page occasionally to ensure you understand any changes to this Privacy Notice. We may notify you of changes to this Privacy Notice by email or through the private messaging system on our website.

9. Third party websites

We do not include or offer third-party products or services on our website.

Google, as a third-party vendor, uses cookies to serve ads on our site. Google’s use of the DART cookie enables it to serve ads to our users based on previous visits to our site and other sites on the Internet. Users may opt-out of the use of the DART cookie by visiting the Google Ad and Content Network privacy policy.

We have implemented the following:

• Remarketing with Google AdSense
• Demographics and Interests Reporting

We, along with third-party vendors such as Google use first-party cookies (such as the Google Analytics cookies) and third-party cookies (such as the DoubleClick cookie) or other third-party identifiers together to compile data regarding user interactions with ad impressions and other ad service functions as they relate to our website.

10. Cookies

A cookie is a file that is stored on your computer or mobile device when you visit websites. Cookies allow websites to remember your actions and preferences, such as login, language, font size, and other display preferences, so you don't have to re-enter them each time you return to the website or browse different pages of a specific website.

The cookies we use do not collect personal data such as name, surname, email address, etc.

We use functional cookies to recognize when users visit our website, to remember your preferences in order to improve and provide a personalized user experience.

You can remove cookies by deleting them or you can block them by changing the settings for each individual browser.

We also use the following cookies:

• temporary user input cookies (session-id) or persistent cookies limited to a few hours in some cases,
• authentication cookies, which are used for authentication services, for the duration of the browsing session,  
• user security cookies, which are used to detect authentication abuse, of limited duration,
• multimedia content cookies, such as flash player cookies, for the duration of the browsing session,
• third-party cookies for sharing social media add-ons for logged-in social media members, and
• analytical cookies.

We only process cookies with your consent. You can accept, partially accept, or reject the use of cookies. However, please note that some of the features of our website may not work without cookies. By requesting consent, we will present the purpose for which we will process this type of information and we will inform you of your rights. You can adjust your cookie selection at any time through a pop-up window. Lastavica New is not responsible for any loss or damage caused by virus attacks or any other malicious software that may affect computer equipment, data or materials, and is a consequence of using the Lastavica New website.