Why we need your personal information? Your data we need to (1) the organization of travel (eg. Air tickets are being made on the name of the person) and (2) communicate with you because of pay arrangements and elaborate details and services that you plan to use as part of package tours. We collect only the information that we use for these purposes. We respect the privacy rights of our customers and we recognize the importance of protecting the information collected. We have established procedures in order to ensure safe processing of your personal data. Who processes the data? The collected data about customers, employees and associates are strictly guarded. Only the head of data processing and the processing of data may get your information. If you have any inquiry concerning the personal information provided to us, please contact us personally or by e-mail at info@stupica-excursions.com. Defining terms personal data and data processing Personal Information is any information concerning the identification or recognition of individuals. The recognizable person is a person who can be identified, directly or indirectly, in particular by reference to recognition as name, identification number, information on the location or using one or more factors specific to the physical, psychological, genetic, mental, economic, cultural or social identity of that person. When we use the term “treatment”, we mean any procedure or set of procedures that are performed upon personal data, or on a set of personal data, any automated means, such as collection, recording, organization, use, disclosure by transmission, dissemination or making available classification and combination, restriction, erasure and destruction. What personal information is collected and how to define? All our activities are based on strict ethical principles and legal requirements, and we are committed to protecting the privacy of all our customers, our employees and external floor exercise. For the purpose of travel organization collect the following information: name, last name, gender, date of birth, address, city, type of travel document, travel document number, where and when it issued travel document and it is valid travel document. In order to communicate with you collect e-mail address and contact phone / cell phone. Under the communication consider arranging payment, update information about flights (for example, if the changed schedule of the year you are using), and contact phone / cell phone use while traveling in case you become separated from the group and needed assistance leader travels. E-mail address used for sending notifications about discounts, promotions and new products. The approval of the marketing use (only by us, but not third parties) give when applying for travel or if you voluntarily enroll in our newsletter list. We are very important to just you have full control over this service and receive notification only if you want. In every marketing communication open you clearly discernible option of removing their contact with the same. Cookies – On our website we use cookies, a visitor to the page it is recommended to find out more about our use of cookies and privacy policy side from which we use tools for website analysis or in which we have integrated additions to our website. How to handle the data collected? The collected personal data is used only within the legal framework, and forwarded to carriers, accommodation facilities, embassies (if it is to realize trips require a visa) and for the fulfillment of all legal obligations towards the Republic of Croatia. After traveling data is archived and stored as long as required by law. You are able to request the deletion of your data after the deadline storage that we prescribed. This request shall be made in writing (1) The letter sent by mail, (2) the e-mail address info@stupica-excursions.com. Legal Basis When you buy one of our package tours or get in any other form of contract with us, we will process your conventional personal information for that particular purpose. You can cultivate your conventional personal information if you have a query or the like prior to your decision on the conclusion of the contract with us. The legal basis for which we can process your personal data listed in Article 6, paragraph 1, b) of the EU Regulation on personal data (EU) 2016/679 (GDPR), because the processing of your data necessary for the fulfillment of our contract with you or us how to deal with your issues and the like, before concluding the contract. You can cultivate your usual personal information on the basis of the rules in Article 6, paragraph 1, f), if you are not our interests surpassed your rights to privacy and legal freedom. We have a legitimate interest in the processing of your personal data (name and email address) for marketing and analytical purposes. Our legitimate interest based on your preferences so we can better adapt our offer and eventually offer products and services that better meet your needs and wishes. Also, we have a legitimate interest in the processing of personal data for analytical purposes. Disclosure of personal data processing of your data with the utmost care and confidentiality is one of our core values. If so required by law, your data may be disclosed to third parties. We employ service providers and data processors to process data on our behalf. These services include authentication services, hosting and maintenance, service analysis, service of sending e-mail messages, service delivery, processing payment transactions, solvency, address and email checks. These third parties are our processors and data may only process personal data to the extent necessary to provide their own services. Our data processors are the contractual obligation that the data is treated in the strictest confidence. They are prohibited to use the data in any other way than is necessary. The necessary steps to ensure that our data processors, including service providers and other processors who work for m/b Stupica, support and protect the confidentiality of your information. Some of our data processor located outside the EU / EAA. Consequently, we will share your personal information with countries outside the EU / EEA. However, the information we provide only if the recipient meets the applicable requirements, including:

• The country in question is considered a safe third country.
• The supplier in question will begin on the model contract of the European Commission for the transfer of personal data to third countries.
• The supplier is certified according to Art. 40 of GDPR; or
• supplier in question has a set of approved binding corporate rules.

There are times when we discover non-personal information to our partners in an anonymous form. Such non-personal data may contain information about the number of visitors to the website during a specified time period. Note that all information that you post or disclose through interaction with m/b Stupica (for example, personal information contained in photographs, stories, comments and videos that you submit) will become public information and may be available to visitors to the website, as well as wider public. We may disclose your information to the extent that the obligation or share your personal information in order to comply with any legal obligation or the instructions of the Court or any other body of competent jurisdiction, or that we used or apply our privacy policy and other contracts; or to protect the rights, property or safety of m/b Stupica , our employees, our customers or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction. Your Rights If you give us personal information on our website or through other channels, this is done on a completely voluntary basis. If you choose not to provide the requested information is part of our services might not be available. We provide a number of options, depending on the exact circumstances, to help you keep control of your data. Your personal data you can access and edit them at any time or by sending an e-mail or in person at the premises of the Agency. Please note, the validity of the data is your responsibility and if you encounter problems while traveling and teaching on false information submitted to the Agency, we do not bear no legal or financial responsibility. If any of the information you provided has changed, for example. If you change your email address or other contact details, let us know in due time to avoid any inconvenience during their trip. Generally, you have the following rights: 8.1 The right to request access to your personal information – You have the right to access their personal information you provide m/b Stupica 8.2 The right to modify and / or delete your personal data – You have the right to request correction, updating, deleting or blocking stored personal data. To do so, send your request to info@stupica-excursions.com. Upon receipt of your application we will satisfy to the required extent. If for any reason we can not grant your request, we will contact you. 8.3 The right to restrict the processing of your personal data – In special circumstances, you have the right to limit the processing of your personal data. To request a restriction, please contact us at info@stupica-excursions.com 8.4 The right to data transfer – You have the right to receive their personal information (concerning only you) in a structured, conventional form and machine-readable format ( “data portability”) and you have the right to transfer this data to another controller data. To request the portability of data, please contact us at info@stupica-excursions.com 8.5 The right to refuse the processing of personal data and unsubscribe – You have the right to request not to process your personal data when the processing is based on the legitimate interest of m/b Stupica eg. For marketing purposes. We’ll tell you in this privacy policy if you intend to use your data for such purposes or intend to disclose your information to third parties for such purposes. At any time you can exercise its right to objection by contacting us at info@stupica-excursions.com or in writing to the mailing address listed at the end of this document. E-mails sent to you by m/b Stupica and containing newsletter or marketing content including the option to cancel your subscription by following the instructions in the email. If you do not want to receive emails from us, simply click on the hyperlink to unsubscribe, and we will stop sending e-mails. 8.6 The right to withdraw your consent at any time – at any time have the right to withdraw your consent to the processing of your personal data. The withdrawal of consent, however, will not affect the lawfulness of the processing based on consent before its withdrawal. Contact us at info@stupica-excursions.com to withdraw their consent. If you wish to withdraw your consent to receive promotional information and offers in general, including the postal service, e-mails, you may do so at any time in writing by sending an email to info@stupica-excursions.com 8.7 Conditions and / or restrictions on your rights – Can there conditions or restrictions for the above rights. For these reasons, we are unable to guarantee your right to transmit data, because it depends on the specific circumstances of the processing activities. Information security and data integrity We take appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure or access, in particular when the processing involves the transmission of data online, as well as against all other unlawful forms of processing and Abuse . M/b Stupica processing data, but occasionally used processors third party for collection and processing of your personal data. All the data processor which engages m/b Stupica handle only your personal information in accordance with our instructions and are legally obliged to adhere to strict safety procedures when handling personal data. 9.1 Keeping data security m/b Stupica may hire a third party for the collection of personal data on its behalf. In such cases, these third parties are subject to confidentiality agreements and data processing. Unfortunately, data transmission over the internet is not completely secure. While we strive to maximally protect your personal information, we can not guarantee the security of your data transmitted to our website; any transmission is done at your own risk. Once we have received your information, we use strict procedures and rigorous security measures to prevent unauthorized access. 9.2 Social Networks If you choose to interact with social networks like Facebook, Instagram and Twitter can not prevent data collection and transmission of information via social supplements. Carefully read the privacy policies of their social network for detailed information about their collection and transfer of personal data, your rights and how to achieve satisfactory privacy settings. In addition, to improve your user experience and branding, your data may be forwarded to a third party (eg. Facebook) for processing in accordance with the rules on data protection and privacy. Facebook: http://www.facebook.com/about/privacy/ Twitter: http://twitter.com/privacy Google: http://www.google.com/intl/en/policies/privacy/ Consequences of non-disclosure of personal data It is not possible to make an application for one of our trips without logging on www.stupica-excursions.com provided that the application for the trip is not necessary to create an account. After logging contact you by e-mail or by calling (telephone / mobile phone) to confirm your intention of going on a trip – only when you make the reservation payment application is valid. In the case of fraudulent applications submitted data on passenger is deleted from the register and take further legal steps. Contact Information: If you have questions about our privacy policy or the processing of personal data, please contact us. PROTECTION OF PERSONAL DATA PASSENGERS When the Contract traveler personal information given voluntarily, but they are necessary to the Agency in the process of carrying out the requested service or services. The Agency agrees that the personal information of passengers will not be given to third parties except for the purposes of realization of the required services. The exception of passing on personal information to third parties passengers are insurance companies which will be forwarded to the personal data of passengers if the traveler completes a travel insurance policy. Personal data will be kept in the database of the Agency and can be used for promotional offers of the Agency. Highlighted from conditions of the organization of package tours Item No. 9. Updated November 2018th