PRIVACY POLICY
General Provisions
We understand that your privacy is important to you and that you care about how your personal data is used and shared online. We respect and value the privacy of everyone who visits this website and want you to be assured that any personal data collected from this website will continue to be used in accordance with our obligations and your rights under applicable law such as the Personal Data Protection Act and the EU GDPR Regulation. This Privacy Policy explains what data will be collected, how the data will be used, and how you can control the collection, correction, and/or deletion of data.
By visiting our website https://exquisitequality.com you accept and agree to the practices described in this Privacy Policy. If you do not accept and agree with this Privacy Policy, you must immediately stop using our website.
Ova Pravila privatnosti odnose se samo na vaše korištenje naše web stranice i naših usluga. Naša web stranica može sadržavati poveznice na druge web stranice. Imajte na umu da nemamo kontrolu nad načinom na koji se vaši podaci prikupljaju, pohranjuju ili koriste od strane drugih web-mjesta i savjetujemo vam da provjerite pravila privatnosti bilo koje takve web stranice prije nego im pružite bilo kakve podatke.
What personal data do we collect?
We collect data from you when you visit our websites or premises, purchase something from us, inquire about our services in person, contact us by phone, email, or otherwise, or respond to our communication.
Our website will collect and use personal data only in ways that are described in this Privacy Policy and in a manner that is consistent with our obligations and your rights under applicable law. When you use our website, you provide certain personal data about who you are and how you use our services. The data collected are the data you give us, including but not limited to your full name, address, and email address.
Through the reservation process, we collect your full name, address, email address, phone number, and credit card information. Depending on the reservation, we may also request your gender, nationality, personal ID or passport number, date and place of birth, and the same information from any guests traveling with you.
Furthermore, when you visit our website, we automatically receive and store information from your computer and browser via “cookies,” including your IP address, operating system, browser type, software and hardware information, the requested page, language settings, and the date and time of access to the website.
Why do we use your personal data?
We use your personal data:
for the purpose of performing our services in accordance with the contract and applicable terms and conditions;
for direct marketing, market research, customer segmentation, statistical processing,
for website analytics,
to provide you with updates,
to invite you to our events,
to manage any promotions in which you have chosen to participate,
to communicate with you about products, services, offers, promotions,
to monitor the technical performance of our services,
to offer better services to future visitors,
to protect our premises and property.
What is the legal basis for collecting your personal data?
We collect and store your personal data on several legal bases:
Contractual obligation: whenever processing your personal data is necessary for the performance, execution, and management of a contract concluded with us.
Legal obligation: in some cases, the law requires the collection and storage of your personal data.
Legitimate interest: for some data, we have a legitimate and fair reason to use it in a way that does not harm your interests and rights.
Consent: when you intentionally enter your data (for example, your email address), you should expect that our systems will store and use that information in accordance with this Privacy Policy.
How do we ensure the security of your personal data?
We understand that the security of your personal data is especially important, and therefore we take various security measures to protect your personal data.
All personal data are processed and stored securely, no longer than necessary in light of the reason(s) for which they were initially collected. We will observe our obligations and keep your personal data in accordance with the Personal Data Protection Act and the EU GDPR Regulation at all times.
Our use of your personal data will always have a legal basis as mentioned above.
Only authorized personnel may access your personal data.
In the event that personal data is compromised as a result of a security breach, we will immediately notify those individuals whose personal data has been compromised, in accordance with the Personal Data Protection Act and the EU GDPR Regulation or as otherwise required by applicable law.
As we develop our business, we may buy or sell assets or business offers. Customer and visitor information is generally one of the transferred business assets in these types of transactions. Such information may also be transferred during a corporate sale, merger, or dissolution.
We do not rent or sell your personal data to others.
Disclosure of Your Data to Third Parties
We may share your personal data with relevant third parties.
For example, when you use a credit card for a reservation, we must share certain reservation details with the payment service provider and the relevant financial institution to process this payment.
We may also need to disclose your personal data to competent authorities or law enforcement agencies where required by law or strictly necessary to prevent, detect, or prosecute criminal offenses or fraud, or if we are otherwise legally obliged to do so. We may need to further disclose personal data to competent authorities to protect and defend our rights or the rights of our business partners.
We may transfer data to trusted third-party service providers (such as management companies or mail houses) to provide us with services, assist in developing our website, marketing activities, or business operations.
Moreover, we may also share your personal data with relevant third parties such as boat providers with whom you have booked. The primary purpose is to process your boat reservation, share your data relevant to your trip, or verify accuracy (e.g., the email address you provided during booking).
All third-party service providers are bound by confidentiality clauses and may not use your personal data for any purpose other than to follow our instructions. These third-party providers will only be given the personal data necessary to fulfill the above purposes.
Transfer of your data outside Europe
As part of the services we offer you through our website, the information you provide may be transferred to countries outside the European Union, and therefore we may not be able to provide the same level of security as that envisaged by EU regulations and its Member States.
How long and where do we store your personal data?
We keep your personal data only as long as necessary to use it as described above and/or while we have your permission to retain it. Some of your personal data will be stored as long as required by the various laws we must comply with.
After the service ends, we will store and use the email address only for communication purposes for the purposes listed in Section III of this policy. All other personal data will be deleted.
What are your data rights?
Under the EU GDPR you have certain legal rights, which are briefly summarized below, concerning any personal data we hold about you. If you wish to exercise any of these rights, you may contact us at any time (contact details below). Exercising these rights is free of charge, unless your request is “manifestly unfounded or excessive” (for example, if you make repetitive requests). In that case, a fee may be charged to cover our administrative costs in responding.
a. Right of access
If you wish to know whether your personal data is being processed and what personal data we hold about you, you may request details of it and a copy. You can request to view your personal data by sending a message to info@alfamario.com. Where possible, you should specify the type of information you wish to see to ensure that our disclosure meets your expectations.
b. Right to rectification
You may always inform us of any changes to your personal data or request us to correct any of the personal data we hold about you. We encourage you to inform us of any changes to your personal data as soon as they occur, including changes to your contact details. When exercising this right, please be as specific as possible.
c. Right to erasure (“right to be forgotten”)
This means the right to request that we delete, block, restrict, or otherwise dispose of any of your personal data that we hold in the following situations: • if the personal data are no longer necessary for the purpose for which they were collected or processed; • if the consent on which the data processing is based is withdrawn and there is no other legal basis; • if the personal data have been unlawfully processed; • if the personal data must be erased to comply with a legal obligation.
Please note that we may not be able to delete your personal data if, for example, we need to fulfill a legal obligation or exercise or defend legal claims.
d. Right to restrict processing
You have the right to request that we restrict the processing of your personal data. This right applies when our processing of your personal data is necessary for our legitimate interest.
e. Right to object
You have the right to object to certain processing of personal data, including for example processing your personal data for marketing purposes or when we otherwise base our processing of your personal data on legitimate interest.
f. Right to data portability
This means the right to obtain a copy of your personal data for reuse with another service or organization.
If you request access to personal data about you that you have provided to us, and if the personal data is processed automatically and in accordance with a contract between you and us, you may request that the personal data be provided in a structured, commonly used and machine-readable format and you may also request that the personal data be transmitted to another data controller where technically feasible. If you exercise this right, you should specify the type of information you wish to receive where possible to ensure that our disclosure meets your expectations. This right only applies if the processing is based on your consent or on our contract with you and when the processing is carried out by automated means.
g. Right to withdraw your consent
If our processing of your personal data is based on your consent, you have the right to withdraw your consent at any time. If you choose to withdraw your consent, we will stop processing your personal data for that purpose. Your withdrawal of consent will not affect our processing up to that point.
h. Right to avoid automated decision-making
Changes to our Privacy Policy
From time to time we may change this Privacy Policy. All changes will be posted immediately on our website and will be deemed to have been accepted by you when you first use our website after the changes. However, we will not make changes that result in significant additional use or disclosure of your personal data without informing you of such changes via your email address at least 14 days before the changes take effect. If any immaterial changes to this Privacy Policy are unacceptable to you, you must contact us immediately and cease using our website or any services we provide until the issue is resolved.
We kindly recommend that you regularly check this page to stay informed.
This Privacy Policy was last updated on 14 April 2022.
