Privacy policy / Cookies policy

Privacy policy

Museums of Hrvatsko zagorje, Samci 64, Gornja Stubica, Personal Identification No. (OIB): 11298572202, (hereinafter: Data Controller) with this Privacy policy inform you about the way we handle your personal data, in accordance with the fundamental principles of data protection, primarily acting in accordance with Regulation of the European Parliament and Council 2016/679 of 27 April 2016 (General Data Protection Regulation), the regulations of the Republic of Croatia and the provisions stated in this privacy policy (hereinafter: Privacy policy).

The Privacy policy informs you about the data we collect, the way we collect data, the purpose for which we collect and use data, with whom we share your data, how long we keep it and about your rights.

DEFINITIONS
The definition of personal data is any data relating to an individual whose identity has been determined or can be determined. An individual whose identity can be determined is a person who can be identified, directly or indirectly, in particular by means of identifiers such as name, identification number, location data, network identifier or by means of one or more factors specific to physical, physiological, genetic, mental, economic, cultural or social identity of that individual.

When we use the term "processing" we mean any operation or set of operations which is performed on personal data or on a set of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

CONTACT DETAILS
Museums of Hrvatsko Zagorje
Samci 64, Gornja Stubica
Personal Identification No. (OIB): 11298572202
Phones: ++385 (0) 49 587 889, 587 888, 587 887
Fax: ++385 (0) 49 587 885
E-mail: mhz@mhz.hr
Web: www.mhz.hr

The Museums of Hrvatsko Zagorje have appointed a personal data protection officer, if you have any questions regarding the personal data you have provided, please contact us.

Personal data protection officer: Martina Ebner
e-mail: zop@mhz.hr
phone: ++385 (0) 49 587 881

DATA WE COLLECT
All our activities are based on strictly ethical principles and legal grounds, and we are committed to protecting the privacy of all our users and visitors to our websites.

DATA YOU PROVIDE
User personal data such as name, surname, address, telephone number, e-mail address, as well as other data will be collected only if the user voluntarily submits it via e-mail, telephone or in person for the purpose of providing information about services and/or using our service until the user requests deletion. The data collected in this way will not be made available or processed for any other purpose without the expressed consent of the user. We will try to protect the privacy and anonymity of the user as much as possible.

DATA THAT WE COLLECT IN AN AUTOMATED WAY
Various technologies may be used by our websites to improve performance and security. Such technologies may lead to automatic collection of personal data by us or third parties. Examples of such technologies are cookies, web analytics. Additional information on privacy protection and the collection of user data can be found in the Cookie Policy chapter.

LINKS
This website contains links to other websites (eg Facebook, Instagram). Accordingly, we warn and ask users to take into account that the Data Controller cannot be responsible for respecting privacy on the mentioned Internet pages. Therefore, we encourage users to read the Privacy Statement of each website they access.

PURPOSE OF DATA COLLECTION

• in order to provide services within the scope of performing registered activities,
• responding to your inquiry and providing information about services,
• reservations of group visits,
• event reservations and space rental,
• attending our workshops and educational programs,
• our internal statistical data processing,
• issuing invoices.

LAWFULNESS OF PROCESSING
The processing of personal data is lawful because it is based on legitimate interest, consent, contract and fulfillment of obligations prescribed by law. We collect data directly from you in a way that you voluntarily transfer it to us through correspondence (inquiries, appointment reservations, enrollment in educational programs, compliments, complaints about products and/or services), in which case the data is collected and processed based on the legitimate interests of the Data Controller.

DISCLOSURE OF YOUR DATA
We may share your personal information to the extent necessary to comply with our legal obligations and the laws and regulations that apply to us. The collected data is not delivered to other recipients or exported outside the European Union.

YOUR RIGHTS

• The right to request access to your personal data
• The right to change and/or delete your personal data
• The right to restrict the processing of your personal data
• The right to data portability

If you have any questions or concerns about privacy, please contact the Data Controller and see the information in this Privacy policy under the heading of contact details.

DATA STORAGE AND SECURITY
The Data Controller recognizes the importance of data protection, and continuously controls and encourages the improvement of technical, professional and organizational security measures and procedures. Personal data that you voluntarily submit to us via e-mail, telephone or in person are collected and processed exclusively for the purpose for which you submitted them to us and are kept until deletion is requested. Individual personal data are kept as long as the law requires and for the duration of the business cooperation or until the consent is withdrawn.

SUPERVISORY AUTHORITY
Supervisory authority for personal data protection:
Personal Data Protection Agency
Martićeva ulica 14, 10 000 Zagreb

Phone: 00385 (0)1 4609-000
Fax: 00385 (0)1 4609-099
E-mail: azop@azop.hr
Web: www.azop.hr

The Data Controller cooperates with the supervisory authority in the event of a violation of personal data, which he is obliged to inform the supervisory authority of at the latest within 72 hours of becoming aware of the violation. If it is certain that the violation will cause a high risk for an individual, the Data Controller is obliged to inform the supervisory authority about it without delay. If it is likely that some type of processing will cause a high risk for the rights and freedoms of individuals, the Data Controller is obliged to carry out an assessment of the impact of the planned procedures on the protection of personal data. One assessment is applicable to several similar processing procedures.

UPDATING THE PRIVACY POLICY
The Museums of Hrvatsko Zagorje are committed to complying with the basic principles of privacy and data protection, which is why we regularly review our Privacy policy in order to monitor and harmonize the data with the principles of privacy and data protection.
This Privacy policy may change from time to time to keep pace with new developments and opportunities related to the Internet and to comply with applicable laws.

Any future changes to the Privacy policy will be posted on this page.

Cookies policy