PRIVACY NOTICE

 

We are fully committed to protecting Your privacy and we responsibly assure You that the protection of Your personal data is a priority when conducting and organizing all business processes.

We respect the confidentiality of all your personal data and always act in accordance with the relevant provisions of laws and other regulations governing the protection of personal data and privacy provisions.

Passengers share their personal information voluntarily.

All information about the Traveler will be kept by the Agency as a business secret.

Without the approval of the Traveler, except in cases prescribed by law, Agency will not disclose to anyone: his address, place and time of travel, stay, price paid or the names of his companions.

The Agency will not provide personal data of the Traveler to any third party without the prior explicit and written consent of the Traveler, unless required to do so by law or a decision of the competent authority. The exception to the provision of personal data to third parties relates to the contracting of insurance, ie if the Traveler concludes an insurance policy, then his personal data will be forwarded to the insurance company. The Traveler's personal data will be stored in the database in accordance with the Decision of the Management Board on the manner of collecting, processing and storing personal data. The Traveler agrees that his personal data may be used for the purpose of implementing contractual arrangements and marketing actions of the Agency.

During its regular operations, the travel agency Away (hereinafter: the Agency) enters into a large number of relations, both with consumers and with business partners and its own employees. Therefore, it is necessary to differentiate to which these data protection provisions apply, ie the types of interaction.

These provisions apply only in the following cases:

- if you visit our website, including online booking of facilities or other services on our website

- if you use our services of booking facilities and other tourist services and for these purposes you communicate directly with us

- if you share reviews of your stay on applicable websites

- if you subscribe to our advertisements (newsletter)

- if you cancel the reservation and you need to return the paid amount

- if you pay the amount of the reservation by bank transfer and credit cards

- if you contact us for employment purposes.

 

Processing of personal data

During our business interaction with you, we process various personal data. Processing will depend on the type of interaction we have and the service we provide.

We display personal data that we process and for what purpose:

Name, surname and contact details (address, e-mail, telephone / mobile number):

1. Reservation request:

Use of data - We use this data to process your request for accommodation booking, find the accommodation option that suits you best, arrange your potential stay in the desired destination, as well as the transport or transfers to desired destination (ex. plane or train tickets). In order to be able to process subsequent claims related to your stay in the facility, sometimes we may store this category of data for a limited period of time after your stay in the facility has ended.

Why do we use data? – In order to provide you with the service you are looking for.

Legal basis - Execution of the contract, legal obligation and legitimate interest of the Agency.

2. Processing guest reviews

Use of data - We also use your contact information to ask you for your opinion and review of the facility you have used. If you give us permission to do so, we will make your review public.

Why do we use data? - We carry out this process in order to examine your satisfaction with our service, make certain changes in the future and for marketing purposes if you give us your consent.

Legal basis - Legitimate interest of the Agency and your consent.

3. Advertising notices

Use of data - If you give us your consent, we will send you an e-mail newsletter with information about our service, news and promotions.

Why do we use data? - The purpose of this process are marketing services.

Legal basis - Your consent.

4. Payment and refund

Use of data - we will also use your personal data for the purpose of processing the payment of the amount you are obliged to pay for your stay in the selected accommodation facility. Sometimes, you will be entitled to a refund, so we will use this personal information for that purpose as well.

Why do we use data? - The purpose of this process is the mutual fulfillment of obligations under the lease or travel agreement that we have concluded with you.

Legal basis - Execution of the services/contract

5. Testing of candidates for jobs in the Agency

Use of data - When you contact us as a potential candidate for a job at the Agency, we will use your personal data to process your application and conduct pre-employment testing.

Why do we use data? - The purpose of this process is to perform the actions that are necessary and precede the employment process.

Flat basis - Execution of actions required before concluding an employment contract.

Date of birth, place of birth and residence, citizenship, OIB and personal documents (identity card, passport):

1. Processing of reservations

Use of data - We use this data to process your request for accommodation booking, find the accommodation option that suits you best, arrange your potential stay in the desired destination, as well as the transport or transfers to desired destination (ex. plane or train tickets).

Why do we use data? – In order to provide you with the service you are looking for.

Legal basis - Execution of contracts and legal obligation of the Agency.

2. Testing job candidates

Use of data - When you contact us as a potential candidate for a job at the Agency, we will use your personal data to process your application and conduct pre-employment testing.

Why do we use data? - The purpose of this process is to perform the actions that are necessary and precede the employment process.

Legal basis - Execution of actions required before concluding an employment contract.

Payment data (IBAN, SWIFT number, credit card type data and anonymized card number data):

1. Payment and refunds

How We use your personal data - we will also use your personal data for the purpose of processing the payment of the amount you are obliged to pay for your stay in the selected facility, plane ticket or overall arrangement. Sometimes, you will be entitled to a refund, so we will use this personal information for that purpose as well. 

Why do we use data? - The purpose of this process is the mutual fulfillment of obligations under the lease agreement that we have concluded with you.

Legal basis - Execution of the contract.

Who processes your personal data?

Away d.o.o. for services, travel agency, based in Rijeka, Giuseppea Carabina 5, OIB 76103081867, MBS 040373695 (the Agency) is the processing manager within the meaning of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016. ("GDPR") on the protection of individuals with regard to the processing of personal data and on the free movement of such data.

Exchange of personal data

Depending on the type of your interaction with the Agency, we will share certain personal information with third parties. We guarantee that the purpose of the exchange is not the use of your personal data, but we exchange them in order to provide quality and timely service and compliance with legal and regulatory obligations.

As a result, the Agency will be able to provide certain personal data to the following entities, depending on the situation, or the data will be available to them due to the nature of the process:

- to the owners of the holiday facilities you have chosen so that your stay can be performed

- third party service providers that process personal data either on behalf of the Agency or on a separate legal basis, all in order to be able to effectively fulfill the requested service, or deliver products and packages based on joint business cooperation and / or using a joint service and / or legitimate interest (eg processing your booking and payment, processing your reviews and advertising). Such service providers may use personal data only to the extent and for the purpose of orders received from the Agency or according to rules set by them as heads of personal data processing (eg Facebook, Instagram, Booking.com, etc.). In any case, the Agency sets the privacy and protection of personal data that it processes as a priority and with a special decision on the selection of partners carefully and applying a high standard of professional care.

- to third parties and public bodies, as follows: (a) to comply with laws or regulations, (b) to comply with a mandatory instruction or order of a public institution, (c) to prevent and / or report abusive and illegal activities, (d) to protect the rights and personal security of our employees, or (e) if required by lawsuits and other legal requirements

- to all other persons in respect of whom we have received your express consent to exchange.

Exceptionally, in the event of status changes of the Agency's company (eg merger, amalgamation, separation, etc.), your personal data may be transferred to another legal entity.

The time period for storing your data

The period of storage of your personal data will depend on the purpose for which it was collected. We guarantee that we will not keep your data longer than is necessary to carry out the purpose for which it was collected.

Sometimes, in certain cases, we may have a legal obligation to keep certain data for a longer period than is necessary to achieve the purpose of the processing. In such case, we will store personal data only within the statutory minimum. Thus, for example, records and documents on daily cash transactions, business books and accounting documents and other records must be kept for a minimum of 10 years.

We would like to inform you that, in addition to fulfilling the preconditions prescribed by the GDPR, you have the right to request the deletion of your personal data in the possession of the Agency. Instructions on how to exercise your rights are detailed in the section below - Your rights.

Your rights

In order to control the processing of your personal data, you have a large number of rights that, in statutory cases, you can exercise directly to the Agency.

These are the rights:

- the right to request information on whether the Agency is processing your data and, if so, to request detailed information on the processing itself

- the right to request access to your personal data, in a way that the Agency makes a copy of it, in physical or digital form

- the right to request the correction of your incorrectly or incompletely stated personal data that we possess

- the right to request to delete your personal data that we possess

- the right to request to limit the processing of your personal data

- the right to object to the processing of your personal data by the Agency, in particular with regard to direct marketing based on the legitimate interest of the Agency and automated processing

- the right to withdraw consent for the processing of your personal data at any time, if the processing is based on consent

- the right to file a complaint to the supervisory body in Croatia, Personal Data Protection Agency, Selska cesta 136, Zagreb, azop@azop.hr, phone: 01 4609-000.

In case you want to activate any of the above rights (except the last one, AZOP), please contact us via official e-mail. Please note that in order to successfully process your request, we will first need to establish your identity (eg by sending a copy of your ID card). The stated personal data will be used exclusively for the purpose of identification and will be deleted immediately after identification.

The exercise of the above rights is completely free. However, in the event that your claims are manifestly unfounded or excessive (eg due to frequent repetition within a short period of time), we reserve the right to charge a reasonable fee for handling the request or to refuse to act on the request.

Children

The Agency is fully aware that children are a particularly vulnerable group and pays special attention to the protection of their personal data. The Agency's services are not intended for persons under 16 years of age. In some cases, for the purpose of booking a stay in the facility or plane ticket, it is necessary to collect and use data on children who will stay with their parents, legal representatives or guardians in the selected facility. We will only process this information if it is provided by or with the consent of a parent, legal representative or guardian. If we learn that we are processing data about a child under the age of 16 without the valid consent of a parent or guardian, we will delete the same data immediately.

Cookies

In order to make your visit to our website as pleasant as possible, this page stores a small amount of information on your computer, the so-called cookies. Cookies, among other things, serve to make the website work optimally and to enable us to make further improvements to the site in order to improve your browsing experience.

By using this website, you agree to the use of cookies. Blocking cookies is possible, after which you will still be able to browse the site, but some options will not be available to you.

What are cookies?

Cookies are small text files that are automatically saved on your computer, tablet or mobile phone (hereinafter: the Device) when you visit a particular website. This allows the website that sent the cookie or the website that recognizes the stored cookie to "remember" your Device.

Such "memory" performs various functions. It enables efficient navigation within the website, remembers your settings (eg language and currency) for future visits to the website, and generally upgrades its quality. Simply, the website allows you to display information tailored to your needs. In this regard, cookies allow advertisements to be displayed on the Internet to be related to your needs and interests.

There are various types of cookies, and our website uses these:

- technical cookies - these are cookies that are absolutely necessary in order for us to provide you with the service you have requested and for our website to be functional at all.

- analytical cookies - these are cookies that monitor the statistical traffic of the website in order to obtain the necessary information about the performance of the website and also uses a third party service - Google Analytics.

- functional cookies - these are cookies that allow our site to recognize you and remember your settings when you visit it again (eg page language and currency).

- marketing cookies - these are cookies through which we collect certain information (information about your visits to our site, content you have viewed, links you have followed, etc.), in order to present you marketing content tailored to your interests. They can be used both on the website itself and on the Display Networks, and through the use of remarketing on Google Analytics.

By using third-party cookies (including Google), they, in cooperation with the Agency, display Agency ads on websites across the Internet. In the event that the implementation of cookies processes some of your personal data, our processing is based on Article 6, paragraph 1 b and/ or f of the GDPR, or the need to fulfill the contract to which the respondent is a party or protect our legitimate interests for optimal and efficient functioning of the website.

Disabling cookies

By using our website, you consent to the storage of various types of cookies on your devices.

If you wish, you can disable the storage of cookies on your Device, but disabling all cookies could have a negative effect on the use of many websites, including this one. Cookie settings can be controlled, configured and disabled in your internet browser. If you want to delete or disable cookies on your computer, you need to update your Internet browser settings.

More information about cookies

If you want to know more about cookies, you can get additional information at the following links:

•http://ec.europa.eu/ipg/basics/legal/cookies/index_en.htm 

•http://www.allaboutcookies.org/

Privacy Notice Changes

In order to comply with the requirements of the GDPR and other applicable regulations and laws, this Privacy Notice was updated and amended on November 4, 2021.

In the case that we make significant changes, we will clearly and timely inform you so that you can study all the changes made and decide for yourself whether to continue to use the services of the Agency. Depending on the type of personal data processing, the notice will be published on the Agency's website.

How to contact us?

We are at your disposal at any time to contact us regarding the processing of personal data by the Agency in the event when:

- you want to accomplish any of your aforementioned rights;

- in general, you have any questions, comments or suggestions regarding the processing of personal data.

Feel free to contact us during the working hours of the Agency, through the following channels:

Contact person: Anja Ban

E-mail: info@away.hr