PriVAcy PoLICy

Privacy Policy

SVPETRVS HOTELI d.d. respects your privacy and the security of your personal data. The processing of your data is carried out in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and the Croatian Act on the Implementation of the GDPR (Official Gazette 42/2018), applying appropriate technical and organizational measures to ensure the protection of your personal data against unauthorized access, misuse, disclosure, loss or destruction.

1. Data We Collect

• Employment and contractual relations: employee data (personal information, tax, pension and health insurance data, occupational safety documentation).
• Guests and service users: name, surname, contact details, identification documents, reservation and payment data.
• Online services: data collected through online reservations, newsletter subscriptions, job applications, use of websites and applications (cookies, log data, IP address).
• Video surveillance: video recordings for the purpose of protecting persons and property.

2. Legal Basis and Purpose of Processing

We process your personal data based on:

• Legal obligations (e.g. employment regulations, mandatory guest registration with authorities).
• Contract performance (reservation of accommodation, execution of employment and service contracts).
• Consent (newsletter subscription, marketing communications, use of non-essential cookies).
• Legitimate interest (property security, video surveillance, IT system security).

3. Online Services and Cookies

Our official websites www.waterman.hr, www.watermanresorts.com, www.gava-resort.com, www.watermanmilna.com, www.beach-village.com, www.hotel-osam.com, www.watermankaktus.com use cookies to improve user experience.

• Necessary cookies – essential for the functioning of the site (do not require consent).
• Analytical and marketing cookies (Google Analytics, YouTube, social media plugins) – used only with your consent.
• You can manage your cookie preferences at any time via the “cookie policy” page or in your browser settings.

4. Data Retention

Personal data is retained only for as long as necessary to achieve the purpose of processing or as required by law.Video surveillance data is retained for 15 days, except in cases of legal proceedings where longer retention is required.

5. Data Subject Rights

You have the right to: access your personal data, request correction or deletion, restrict or object to processing, request data portability, withdraw consent at any time, file a complaint with the Croatian Personal Data Protection Agency (AZOP).

To exercise your rights, please contact us at:

• E-mail: privacy@watermanresorts.com
• Address: SVPETRVS hoteli d.d., Put Vele Luke 4, 21 400 Supetar

6. Sharing of Data with Third Parties

Personal data will not be disclosed to third parties, except in the following cases:

• When required by law (MUP, Tax Administration, Pension and Health Insurance Institutes),
• Courts, attorneys or public notaries when legally requested,
• Contracted partners (IT maintenance, marketing agencies, security services), under strict data processing agreements.

7. Security

We apply technical and organizational measures (encryption, access control, employee training) to protect your data from unauthorized access and misuse.

8. Changes to the Privacy Policy

This Privacy Policy replaces all previous versions and is regularly updated.
The latest version is always available on our official web sites.