What information will we collect?
If you choose to make an enquiry or booking through us we will collect details that you provide in relation to that enquiry or booking. Information held may include your name, address, contact details, payment details, IP address, information about people travelling with you, information about your booking and any additional information we may need to help meet your specific travel requirements. In addition, we may need to collect your passport or national identity card details, date of birth and nationality for the purposes of payment and registration of tourist tax ("Sojourn tax") with the Croatian authorities.
You are responsible for ensuring that other members of your party are aware of the content of this Policy and consent to your acting on their behalf in all your dealings with us.
Some of the information we collect may be considered sensitive personal data under the Data Protection Act 1998. We collect it to cater to your needs or act in your interest, and we are only prepared to accept sensitive personal data from you on the condition that we have your positive consent. We will seek this consent when necessary.
How will we collect this information?
We will only collect personal information from you by specifically asking for it:
When you enquire or purchase a product or service from us
When you subscribe to our newsletters or complete a survey
What legal basis do we have for processing your personal data?
We use the following basis for processing your data:
Contract: where you have initiated or completed a transaction for the purchase of one of our products or services
Consent: where you have given consent to process your personal data for a specific purpose, for example you agreed to receive our general e-mailings
Legitimate interests: where it enables us to :
enhance, modify or personalise our services for the benefit of our customers
to identify and prevent fraud
to better understand how people interact with our website
to determine the effectiveness of promotional campaigns and advertising.
What will we do with the information?
We will use your name, address, contact information and payment details to complete your purchase with us. We will also use your details to manage your arrangements, send you notifications and communicate with you generally.
For the purpose of providing you with our services, we may have to disclose some of your information to the providers of the services making up your arrangements (who could be located outside the UK/EEA). We may also have to disclose some information to third parties in relation to customer services, credit or debit card processing, or other services.
We may need to disclose your information where required by law, where such a request is made by a legal authority.
We may need to disclose our customer list including any personal information relating to you to a third party who acquires, or considers acquiring, all or substantially all of our company or our website, including the assets, goodwill and intellectual property of our company.
We may also disclose information to organisations who act as "data processors" on our behalf, or to other organisations that perform business functions on our behalf, some of whom are outside the UK/EEA. These functions include administration, providing services (and contacting you where necessary), customer care, business management and operation, re-organisation/structuring/sale of our business (or our group companies), risk assessment, security and crime prevention/detection, research and analysis, marketing, monitoring, measuring and assessing customer purchasing preferences and trends, dispute resolution, credit checking and debt collection.
If you have provided your consent, we may from time to time contact you with information about special offers, brochures, new products and forthcoming events. If you do not wish to receive such information, you may ask us in writing or by email not to receive it or click on the unsubscribe link at the bottom of these emails.
We have taken all reasonable steps to have appropriate security measures in place to protect your information. Outside the European Economic Area, controls on data protection may not be as wide as the legal requirements in this country. The transmission of information via the internet is never completely secure. We exclude our liability for personal data lost in transmission to the website.
How long do we keep your personal data for?
We retain personal information where we have an ongoing legitimate business or legal need to do so. Our retention periods will vary depending on the type of data involved including whether we have a legal or contractual need to retain the data or the data is necessary to provide our services.
When we have no ongoing legitimate business need to process your personal information, we will either delete it or if this is not possible, for example because your information has been stored in backup archives, then we will securely store your information until deletion is possible.
What can I do?
You are entitled to view, amend, or delete the personal information that we hold. You can also choose not to provide us with some of the information we request, however as a result we may not be able to complete your arrangements.
You can contact us in writing at Croatian Villa Holidays, 73 Penn Road, Beaconsfield, Buckinghamshire, HP9 2LW or by email at firstname.lastname@example.org. We aim to respond to you within 21 days from the date of request.
We utilise appropriate security systems to protect any financial transactions carried out on our computer systems or website. Information, such as credit card details, is automatically protected using a Secure Socket Layer (SSL) between your computer and ours and/or our computer and the card processing company's computer which prevents impersonation. SSL also encrypts data between these computers, so there is almost no chance of your details being stolen or hijacked as it travels over the internet.
We do not, however, guarantee the security of your personal information when processed through the site and the internet and we cannot accept liability for loss or theft of your personal details when processed on the site and/or over the internet.
Subscribers can opt out of receiving further information from us at any time. Email us at email@example.com and include "unsubscribe" in the subject or click on the unsubscribe link at the bottom of our general marketing emails.