PRIVACY POLICY

Croatian National Tourist Board, Iblerov trg 10/IV, 10000 Zagreb, tel. +385 (0)1 4699 333, fax +385 (0)1 4557 827, email info@htz.hr, web www.htz.hr, www.croatia.hr. www.eurovelo8.hr
This privacy policy describes and provides information on how the Croatian National Tourist Board (hereinafter referred to as: the CNTB) processes your personal data as the controller.
The CNTB is a national tourist organisation which, pursuant to the Act on Tourist Boards and the Promotion of Croatian Tourism (Official Gazette Nos 52/19 and 42/20) was established with the aim of creating and promoting the identity and reputation of Croatian tourism both domestically and abroad. CNTB activities include both planning and implementing the promotional strategy, as well as proposing and implementing promotional activities that are of common interest to all entities in tourism, and raising the level of quality of the entire Croatian tourist offer.
1 CONTACT DETAILS OF THE DATA PROTECTION OFFICER
Regarding questions about personal data protection, you can contact the personal Data Protection Officer by phone at +3851 4699 328, or email: zop@htz.hr.
2 PURPOSE AND LEGAL BASES FOR PERSONAL DATA PROCESSING
2.1  We process your personal data that are necessary for the purpose of performing the activities and powers of the Croatian National Tourist Board in terms of Article 6(1)(e) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as: General Data Protection Regulation or GDPR). These activities and powers are prescribed by the provisions of the General Data Protection Regulation and the Act on the Implementation of General Data Protection Regulation, namely:
  • responding to inquiries received;
  • taking action to check compliance with the General Data Protection Regulation;
  • handling complaints and grievances received.
2.2  We process your personal data in compliance with our legal obligations under Article 6(1)(c) of the General Data Protection Regulation for the purpose of:
  • responding to requests for exercising the right to access information;
  • employment with the Croatian National Tourist Board.
As part of the performance of legally prescribed activities in the field of CNTB activities, personal data are collected via the eVisitor system. All information on data processing via eVisitor can be found at the following link:  https://www.evisitor.hr/eVisitorWiki/Javno.Opci-uvjeti-koristenja.ashx#HB_Vrste_podataka_18.
2.3  We process your personal data on the basis of a legitimate interest within the meaning of Article 6(1)(f) of the General Data Protection Regulation, for the purpose of:
  • participation in our training and lectures;
  • inclusion in the business partners database;
  • participation in fairs, study trips, and events organised by the CNTB;
  • audio and video recording of sessions of CNTB bodies for the purpose of organising and monitoring sessions.
2.4  We process your personal data on the basis of consent within the meaning of Article 6(1)(a) of the General Data Protection Regulation, for the purpose of:
  • better functioning of all website features and enabling a better user experience.
The CNTB may publish certain decisions within its scope (for example, contract award decisions, decisions on granting aid, etc.) on its website, and if such decisions contain personal data of natural persons, care shall be taken to publish only the necessary scope of personal data to achieve the purpose for which the data were given or collected.
The CNTB may publish individual reports in which statistical data can be found but without the possibility of identifying the parties themselves.
3 PROCESSING OF PERSONAL DATA THROUGH AUDIO AND VIDEO RECORDING OF SESSIONS OF CNTB BODIES
  • purpose: organisation and monitoring of sessions
  • legal basis: legitimate interest of the CNTB as the controller for the processing of personal data
  • recipients: video recordings can be submitted on request to the competent authorities (police, court) if necessary for the implementation of proceedings under special regulations
  • retention: we retain the data for a maximum of three months after the acceptance of the minutes from the session to which the audio and video recording refers or longer if they are exempt as evidence in court, administrative, arbitration or other proceedings.
4 USE OF COOKIES
The CNTB may collect and process anonymous data on access to its website and searches conducted by visitors. Such anonymous data is used for internal purposes to improve products and services, as well as to produce internal statistics.
For this purpose, the official websites  www.htz.hr , www.croatia.hr , www.eurovelo8.hr use cookies – text files hosted on the user's computer by an Internet server through which the Internet Service Provider (ISP) displays a web page, which collects information about your e-mail address, domain name, and the date and time of access to the pages. Cookies cannot be used to reveal your identity. /div>
Cookies are created when the browser loads the visited network destination on the user's device, which then sends the data to the browser and creates a text file (cookie). The browser retrieves and sends a cookie to the website server when the user returns to it.
Our website uses se technical cookies (necessary cookies, cannot be turned off) that are necessary for the functioning of the website.
You can find more information about the use of cookies in the second Chapter of this Privacy Policy.
5 YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA
The General Data Protection Regulation regulates the processing and protection of personal data, as well as, inter alia, the rights that the data subject may exercise.
Your rights under the General Data Protection Regulation are:
5.1 Right of Access to Personal Data
The data subject shall have the right to access their personal data that we process and they may request detailed information, in particular on the purpose of their processing, on the type or categories of personal data processed, including access to their personal data, on recipients or categories of recipients and on the envisaged period for which the personal data will be stored. Access to personal data may be restricted only in cases prescribed by EU law or our national law, or where such restriction respects the fundamental rights and freedoms of others.
5.2 Right to Have Personal Data Rectified
The data subject shall have the right to request the rectification or completion of their personal data if the collected data are not accurate, complete and up-to-date. To exercise this right, the data subject should send their request to us as the controller in writing, including by e-mail.
We note that in the request it is necessary to specify which data are not accurate, complete or up-to-date and in what sense the above should be corrected and submit the necessary documentation in support of their statements.
5.3 Right to Erasure
The data subject shall have the right to request the erasure of personal data concerning him or her where one of the following grounds applies:
  • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • the data subject has withdrawn consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
  • the data subject has objected to the processing pursuant to Article 21(1) of the General Data Protection Regulation and there are no overriding legitimate grounds for the processing by the CNTB;
  • the personal data have been unlawfully processed;
  • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
  • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1).
5.3.1 Exceptions to the exercise of this right are provided for in Article 17(3) of the General Data Protection Regulation
The above rights shall not apply to the extent that processing is necessary:
  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
  • for the establishment, exercise or defence of legal claims.
5.4 Right to Restriction of Processing of Personal Data
The data subject shall have the right to obtain the restriction of processing where:
  • the accuracy of the personal data is contested by the data subject;
  • the processing is unlawful and the data subject opposes the erasure of the personal data;
  • the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims
  • the data subject has objected to the processing of their personal data.
5.5 Right to Object
The data subject shall have the right to object to the processing of personal data concerning him or her unless the processing is necessary for the performance of a task carried out for reasons of public interest or unless we demonstrate compelling legitimate grounds for the processing.
5.6 Right to Lodge a Complaint
If the data subject believes that his or her right guaranteed by the Act on the Implementation of General Data Protection Regulation (Official Gazette, No 42/2018) and the General Data Protection Regulation has been violated, he or she may submit a request to the Personal Data Protection Agency to establish the violation.
6 RECIPIENTS OF PERSONAL DATA
The CNTB hereby explicitly declares that it shall not sell, share or otherwise disclose your personal data to third parties, except as provided and in the manner set forth in this Privacy Policy. The CNTB reserves the right to occasionally provide your personal data for further processing to third parties hired to provide certain services on behalf of or for the account of the CNTB or in connection with other business activities, solely and exclusively for the purpose that coincides with the original purpose of data collection for which you have given your consent, of which the CNTB will take particular care.
In certain cases, access to your personal data may be provided to providers of ICT services in the capacity of data processors, providing IT solutions support services for the controller. We have entered into agreements with data processors in which the handling of personal data is prescribed in detail, rendering them unable to process your personal data without our order or pass it on to third parties.
Under certain circumstances, we are obliged to submit your data to the competent authorities (police, court) on the basis of a lawful request if this is necessary for the purpose of carrying out proceedings prescribed by law. The legal obligation may arise from national or EU law.
For example, when organising trade fairs, it is necessary to provide your personal information to other recipients to the extent necessary to achieve the specified purpose.
Your personal data will not be shared with third parties for direct marketing purposes.
7 SECURITY OF THE PROCESSING OF PERSONAL DATA
We collect and process personal data in a way that ensures adequate security and confidentiality in their processing and enables the effective application of data protection principles, reducing the amount of data, the scope of their processing, storage period and their availability.
We take all appropriate technical and organisational safeguards to prevent accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data, and all employees of the controller are bound by secrecy or confidentiality of personal data by signing a confidentiality statement.
8 RETENTION PERIOD FOR PERSONAL DATA
We shall process your personal data until the purpose of the processing is met. After the cessation of the purpose for which they were collected, we shall no longer use your personal data, they shall remain in our storage system and we shall retain them as long as we are obliged to by legal regulations on the preservation of archival material.
Data collected on the basis of consent are stored in the controller’s system while consent is active. After the consent is withdrawn, the data are deleted from the system.
9 CONTACT INFORMATION
If you have any questions regarding the processing of your personal data, you can contact us by e-mail or the following contact details:
E-mail: info@htz.hr; Tel: +3851 4699 333,  E-mail: zop@htz.hr ; Tel: +3851 4699 328,
10 AMENDMENTS TO THE PRIVACY POLICY
We shall regularly update the Privacy Policy to ensure that it is accurate and up-to-date, and we reserve the right to change its content if we deem it necessary. You will be informed in a timely manner about any changes and amendments through our website in accordance with the principle of transparency.
By accessing our website and profiles managed by the Croatian National Tourist Board on social networks (LinkedIn, Facebook, Instagram, YouTube, etc.) and communication channels available to the general public, you agree to the collection and use of your personal data in accordance with this Privacy Policy.

COOKIE POLICY

On this website, you can determine whether you want to accept or disable cookies. Some cookies are necessary for the website to function properly so they cannot be disabled.
Use of Cookies
We need your consent in order to use cookies in accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), the Act on Implementation of General Data Protection Regulation and the Electronic Communications Act.
Necessary cookies
Cookies that enable the website to function properly. These are mandatory cookies necessary for the website to work properly. These cookies do not require consent, so we do not ask for your consent to use them.
Advertising cookies
These cookies are used to perform a more advanced website analysis. We use them to analyse your interests and preferences and they help us to provide you with information you are interested in and create customised content based on your use of the croatia.hr website. We will ask for your consent to use these cookies. Marketing cookies are used to keep track of visits and traffic sources, which enables us to measure and improve our website performance. They help us understand which web pages are the most and least popular, and see how visitors navigate within the page. All of the information collected by the cookies is accumulated and remains anonymous. Marketing cookies can be disabled, in which case we won’t be able to know when you visited our website or track its performance. They do not store your preferences directly, but they are based on a unique identifier assigned to your browser and Internet device. If you don’t enable these cookies, the ads you see will be less targeted.
We use cookies from:
Company: Google Inc.
Domain: .google.hr, .google.com, .gstatic.com, .tagmanager.google.com, .doubleclick.net
Google Analytics is Google’s powerful and widely used traffic analytics tool that allows website owners to get deep and real-time insight into how their site is being used, how much, and by whom. As such, Google Analytics is essentially a user data processing tool.
Google Tag Manager is a tool that allows website owners to manage and deploy marketing tags (snippets of code or tracking pixels) on their website without having to modify the code.
Google operates Google Ads, Display & Video 360, and Google Ad Manager. These services allow advertisers to plan, execute and analyse marketing programs with greater ease and efficiency, while enabling publishers to maximize their returns from online advertising.
Google can transfer data to third parties where required by law or when third parties process the data on Google’s behalf. Google will not link your IP address to other data in Google’s possession. Please read Google’s Privacy Policy by visiting the following link: http://www.google.com/analytics/learn/privacy.html.
Google has developed a browser add-on that can prevent the use of your data for the Google Analytics JavaScript (ga.js, analytics.js, dc.js). It can be downloaded here: http://tools.google.com/dlpage/gaoptout
Company: Facebook Inc.
Domain: .facebook.com
Facebook is an online social networking service that enables its users to connect with friends and family as well as make new connections.
List of cookies we use:
The croatia.hr website (hereinafter: Website) is maintained and developed by the Croatian National Tourist Board (hereinafter: HTZ).
The first time you use the Website, you are deemed to be fully aware of, and agree to these Terms, which you accept. If you do not agree with these Terms, please do not access the Website or use its content. If you have any questions or need further clarification of the Terms of Use, please contact web@htz.hr.
We reserve the right to change the look and content of the Website and the Terms of Use, so please review them from time to time to be aware of any changes. We will consider that your subsequent use of the Website constitutes your acceptance of all possible changes.
The Terms of Use refer to the following segments:

  1. How to use.
  2. Copyright and other intellectual property rights.
  3. Guarantees and denials.
  4. Cookies
  5. Statistics
  6. Links
  7. Changes and termination.
1. How to use
Allowed usage

Downloading and printing, as well as reviewing materials and content from the Website is only allowed for personal purposes. It is forbidden to publicly display, transmit, publish, modify, reproduce, distribute, and participate in the transfer or sale, copying, uploading and any other use of the entire content of the Website or a part thereof, and to select and coordinate their content without the explicit written permission of the Croatian National Tourist Board and other holders of copyright and other intellectual property rights. If such permission has been granted, it is not allowed to delete or modify existing data related to copyright and/or trademark or other intellectual property rights.
Use for commercial purposes

It is forbidden to use the Website for trade, sale and other commercial purposes. Any advertising or solicitation of services is not permitted without the written approval of the Croatian National Tourist Board. It is forbidden to transmit and publish obscene, abusive, vulgar, threatening or indecent or otherwise unacceptable or unlawful content, as well as those which violate any of the rights of any party, especially content containing viruses or other harmful materials. Users assume responsibility for any damage resulting from their activities which do not comply with the aforementioned, as well as for any other type of damage that may result from it. The Croatian National Tourist Board reserves the right (but not the obligation) to delete, in whole or in part, the materials and content that users have published on the Website.
Delivering content and materials

By submitting content and materials (including, but not limited to, suggestions, ideas, drawings) to this address, you automatically grant (or guarantee that the owner of the material expressly permits) the Croatian National Tourist Board irrevocable, permanent and exclusive rights and licenses to use, adapt and modify, integrate in other works, translate, publish, transmit and distribute the aforementioned materials worldwide, in any form, using the media available now or in the future, for any purpose and without charge. The terms of this item shall continue to apply even upon termination of these Terms.
2. Copyright and other intellectual property rights
The content of the Website is protected by copyright owned by the Croatian National Tourist Board, or ceded to the Croatian National Tourist Board, whose authors are third parties. HTZ also owns the copyright to edit, select and coordinate the Website’s content. Furthermore, the Website contains trademarks, names of individuals and other intellectual property content owned by HTZ or third parties, and HTZ is the owner of the rights to their use. No content on the Website is free to use without restriction. It is necessary to contact the Croatian National Tourist Board for any potential use of the Website’s content.
Images and videos

All photographs, images, videos, biographical data of persons and/or other material appearing on the Website are the sole property of HTZ. Copyright and other intellectual property rights for all materials contained on the Website belong to HTZ. All rights reserved. Permission for the use of these materials shall be granted to entities solely for advertising, editorial and informational purposes relating to publication in newspapers, magazines and electronic media. Any other use of materials from the Website is not allowed. Also, the use of any material from the Website in connection with the sale or offering for sale of products or services of any kind is not permitted. The defined permission and method of use for the Website may not be transferred, subcontracted or assigned, and any intended and attempted transfer, subcontracting or assignment shall be deemed null and void. By using the materials from the Website, media users agree to fully comply with the restrictions, conditions and requirements set out herein.
3. Guarantees and denials
HTZ is making a reasonable effort to publish accurate and up-to-date information on the Website, but we do not assume responsibility for its accuracy and completeness, especially in the part where such information is taken over by public services or registers, or provided by third parties whose task is to collect and process them. HTZ cannot guarantee that the Website will always be available and accessible, and that it will not contain errors or viruses. Every user explicitly accepts the use of the Website at his/her own risk.
HTZ is not responsible for any damage or violation (including, but not limited to, special or consequential damages) that may result from the use or inability to use any part of the Website, or from content posted or uploaded by other users.
Media entities and other users using the site explicitly agree to indemnify HTZ for any and all claims, costs, damages or liabilities arising from the negligent use of materials from the site by the same user, including any direct, indirect, incidental, special or consequential damage.
Furthermore, HTZ assumes no legal responsibility for the accuracy, completeness or usefulness of the information, devices, products or processes presented herein, and does not guarantee that the use of the information, devices, products or processes will not violate private rights.
Denial of advertising rights

The mention of any particular product, process, or service bearing a trade name, trademark, manufacturer, or the like, does not necessarily mean that it is being advertised, recommended or favoured by HTZ or any of its employees and suppliers.
Denial of the right to external links

Any appearance of external hyperlinks does not imply that HTZ or its patrons are advertising such external sites, or the information, products or services they contain. HTZ, or any of its patrons and suppliers, has no control over the information contained on such external sites. External links on the Website are in accordance with HTZ's policy, and HTZ is not responsible for the content of any linked site received from its servers. Links may include text links, small images, icons, or thumbnails that illustrate the link and do not promote products or services.
4. Privacy, confidentiality, cookies
Cookies are miniature files that are stored on a computer or mobile device when we visit a website. Cookies allow the website to ”remember” visitors' activities or settings from previous visits so that they can be automatically applied during the next visit. In this way, the website already ”knows” that you have been here before and in some cases adjusts what you see on the screen. Cookies are most commonly used to remember specific user preferences, to facilitate the input of information already entered during previous visits, to collect analytical data, or for advertising purposes. The www.croatia.hr website uses cookies – a set of data that serves as an anonymous individual identifier – by sending them to your browser and storing them on your computer. Cookies are used to make sure all features of the Website are fully functioning, and provide a better user experience.
There are two types of cookies: session cookies and persistent cookies. Session cookies are temporarily stored on your computer and are automatically deleted after you close your web browser. They are used to obtain temporary information such as the status of your shopping cart in a web shop.
Persistent cookies remain stored on your computer even after you close your web browser, but they usually have an expiration date. Such cookies are used to facilitate access for registered users and store information such as usernames and passwords, which enables the ”remember me” function during login, so that you do not have to enter your username and password every time you visit the website. Persistent cookies can remain stored on your computer for up to 18 months.
Cookies can also be categorised as first and third-party cookies. First-party cookies come from the site you are currently browsing, while third-party cookies come via ads or through external services from other websites. First-party cookies are used for, in addition to the proper functioning of websites, statistical monitoring of website activity. Information collected for this purpose includes the user's IP address, browser, language and operating system information, and other standard statistical data which is collected and analysed exclusively in anonymous and mass formats. Third-party cookies are mostly used by advertisers to analyse user behaviour on various websites. The purpose of the analysis is to profile users by demographical data, interests, etc. - which is most commonly used for advertising purposes.
But how do cookies actually work?

Cookies store information in the form of ”key” and ”value” pairs within text files.
For example, cookies may store the language in which you are currently browsing the page. If the language is English, the record will most often look like this: language=en
When you first select your language, the website will create and save a cookie containing language information through your browser. Then, during every subsequent visit, if that cookie still exists, the site will know your choice and show you the content in the language you prefer.
When accessing the site, croatia.hr cookies identify the search engine parameters but not the users themselves. In short, the purpose of cookies is well-intentioned, they are not harmful and do not contain viruses. They provide a better user experience when you browse websites.
If you do not agree to the use of cookies, you can easily delete them from your computer (or prevent them from being stored) in your browser’s settings. For more information about managing cookies visit your browser’s pages or www.allaboutcookies.org.
Because the purpose of cookies is to improve and maximize the user’s experience of using our Website and its processes to their fullest potential, please note that preventing or deleting cookies may disable the Website’s features or cause it to appear and function differently in your browser.
5. Statistics
The www.eurovelo8.hr website uses Google Analytics to track user activity for statistical purposes. User activity is monitored to ensure that the Website functions properly and to improve the site and the user’s experience. Google Analytics does not allow user identification, although it does handle some forms of private information such as IP addresses. This is achieved through data aggregation and anonymisation techniques such as IP masking.
To ensure a better user experience and plan your future activities efficiently, we use the Google Analytics Advertising Reporting Features tool, which provides insight into the user’s gender, age and interests. This data is based on third-party cookies, it is anonymous and cannot be used to identify users.
Detailed information about this service and the cookies it uses, as well as the user’s options to regulate how their activity is being monitored, is available at https://www.google.com/analytics/learn/privacy.html.
6. Links
We are doing everything we can to ensure that all links from our website direct you and/or your child to websites with high-quality content, meaning that they do not encourage negative behaviour. However, websites and web addresses are changing all the time, and we cannot always guarantee the content of every address we direct you to.
7. Changes and termination of the Terms of Use
The Croatian National Tourist Board reserves the right to change or discontinue all or any part of this Website and its Terms of Use at any time. Changes take effect when posted at this address or when users have been notified of them. The Terms of Use apply until terminated by you or HTZ. Your termination, possible at any time, signifies the termination of your use of the Website and the cancellation of all use of downloaded materials and content.