Privacy policy
Museums of the Croatian Zagorje, Samci 64, Gornja Stubica, Personal Identification Number (OIB): 11298572202 (hereinafter: the Data Controller), hereby informs you, through this Privacy Policy, about the manner in which your personal data are processed, in accordance with the fundamental principles of data protection, primarily Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), the applicable regulations of the Republic of Croatia, and the provisions of this Privacy Policy.
This Privacy Policy provides information about the personal data we collect, the ways in which we collect them, the purposes for which we collect and use them, the recipients with whom we may share them, how long we retain them, and your rights in relation to your personal data.
DEFINITIONS
Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, or to one or more factors specific to the person's physical, physiological, genetic, mental, economic, cultural or social identity.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
CONTACT DETAILS
Museums of the Croatian Zagorje
Samci 64, Gornja Stubica
Personal Identification Number (OIB): 11298572202
Telephone: +385 (0) 49 587 889, 587 888, 587 887
Fax: +385 (0) 49 587 885
E-mail: mhz@mhz.hr
Web: www.mhz.hr
The Museums of the Croatian Zagorje have appointed a Data Protection Officer (DPO). If you have any questions regarding the processing of your personal data, please contact the Data Protection Officer.
Data Protection Officer: Martina Ebner
e-mail: zop@mhz.hr
Telephone: +385 (0) 49 587 881
DATA WE COLLECT
All our activities are based on ethical principles and legal requirements. We are committed to protecting the privacy of our users and visitors to our websites and to processing personal data in accordance with applicable data protection legislation.
DATA YOU PROVIDE
Personal data such as your name and surname, address, telephone number and e-mail address, as well as other data, are collected only when you voluntarily provide them to us by e-mail, telephone or in person, for the purpose of providing information about our services and/or providing our services.
The personal data collected in this manner will not be used or processed for purposes other than those for which they were collected, unless otherwise permitted by law or based on your consent where required.
We will make reasonable efforts to protect the privacy and confidentiality of your personal data.
DATA COLLECTED AUTOMATICALLY
Our websites may use various technologies to improve their performance, functionality and security. Such technologies may result in the automatic collection of certain personal data by us or by third parties. Examples of such technologies include cookies and web analytics tools.
Additional information about the protection of privacy and the collection of user data can be found in the Cookie Policy section.
LINKS TO OTHER WEBSITES
This website may contain links to other websites, such as Facebook and Instagram. The Data Controller is not responsible for the privacy practices or content of those websites.
We therefore recommend that you review the privacy policies of any external websites you visit.
PURPOSES OF DATA COLLECTION
Personal data may be collected and processed for the following purposes:
- providing services within the scope of our registered activities;
- responding to your enquiries and providing information about our services;
- making reservations for group visits;
- making event reservations and reservations for the rental of premises;
- participation in our workshops and educational programmes;
- internal statistical processing and analysis;
- issuing invoices.
LAWFULNESS OF PROCESSING
The processing of personal data is carried out on the basis of one or more lawful grounds provided for by the GDPR, including the legitimate interests of the Data Controller, your consent, the performance of a contract, and compliance with legal obligations.
We collect personal data directly from you when you voluntarily provide them to us, including through correspondence relating to enquiries, reservations, enrolment in educational programmes, compliments and complaints concerning our products and/or services.
Where applicable, personal data are collected and processed on the basis of the legitimate interests of the Data Controller.
DISCLOSURE OF YOUR DATA
We may disclose your personal data where necessary to comply with our legal obligations and applicable laws and regulations.
The collected personal data are not disclosed to other recipients or transferred outside the European Union, except where such disclosure or transfer is permitted or required under applicable data protection legislation.
YOUR RIGHTS
Under the GDPR, you have, subject to the applicable legal conditions and limitations, the following rights:
- the right to request access to your personal data;
- the right to request rectification of inaccurate or incomplete personal data;
- the right to request erasure of your personal data;
- the right to request restriction of the processing of your personal data;
- the right to data portability;
- the right to object to certain processing of your personal data, where applicable;
- the right to withdraw consent where processing is based on consent.
If you have any questions or concerns regarding the processing of your personal data or wish to exercise your rights, please contact the Data Controller using the contact details provided in this Privacy Policy.
DATA RETENTION AND SECURITY
The Data Controller recognises the importance of protecting personal data and continuously monitors and promotes the improvement of appropriate technical, professional and organisational security measures and procedures.
Personal data that you voluntarily provide to us by e-mail, telephone or in person are collected and processed for the purposes for which they were provided and are retained for as long as necessary for those purposes, unless a longer retention period is required or permitted by law.
Certain personal data are retained for as long as required by applicable law and, where applicable, for the duration of the business relationship or until consent is withdrawn.
SUPERVISORY AUTHORITY
The supervisory authority responsible for the protection of personal data in the Republic of Croatia is:
Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16
10 000 Zagreb
Croatia
Telephone: +385 (0) 1 4609 000
Fax: +385 (0) 1 4609 099
E-mail: azop@azop.hr
Web: www.azop.hr
The Data Controller cooperates with the supervisory authority and complies with its obligations in the event of a personal data breach. Where required by the GDPR, a personal data breach is notified to the supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach.
Where a personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the Data Controller will notify the affected data subjects without undue delay, where required by the GDPR.
Where processing is likely to result in a high risk to the rights and freedoms of natural persons, the Data Controller carries out a data protection impact assessment where required by the GDPR.
UPDATES TO THE PRIVACY POLICY
The Museums of the Croatian Zagorje are committed to respecting the fundamental principles of privacy and personal data protection. We therefore regularly review this Privacy Policy in order to ensure that it remains consistent with applicable data protection principles and requirements.
This Privacy Policy may be amended from time to time to reflect changes in applicable legislation, our practices, or the development of our website and related services.
Any future changes to this Privacy Policy will be published on this page.
Cookie policy
In order for this website to function properly and to provide an improved browsing experience, it may store a small amount of information on your device in the form of cookies.
Cookies are small text files that are stored on your device when you visit a website. They can make websites easier to use by remembering your settings and preferences, such as your language or other preferences, and applying them when you return to the website.
Cookies may store various types of information. Depending on their purpose and configuration, some cookies may involve the processing of personal data. Cookies cannot access files on your computer or device simply because they are stored there.
You can manage, accept or reject cookies and delete stored cookies through the settings of your internet browser. Please note that disabling certain cookies may affect the functionality of some features of this website.
How to disable cookies?
You can configure and change your cookie settings through the settings of the internet browser you use. Most browsers allow you to accept or reject cookies, delete existing cookies and manage other cookie-related settings.
If you disable certain cookies, some functionalities of this website may not work properly.
What are session cookies?
Session cookies are temporary cookies that are deleted from your device when you close your internet browser. They are used to store temporary information necessary for the operation of a website during your browsing session.
What are persistent cookies?
Persistent cookies remain stored on your device after you close your internet browser. They are used to remember information and preferences in order to make subsequent visits easier. Persistent cookies remain stored for a predefined period or until you delete them manually.
What are first-party cookies?
First-party cookies are cookies set by the website you are visiting. They may be either session cookies or persistent cookies and are used to store information that facilitates your use of the website.
What are third-party cookies?
Third-party cookies are cookies set by domains other than the website you are visiting. They may be used, for example, by external services embedded in a website or by services used to analyse website traffic.
Does this website use cookies?
Yes. This website uses cookies to provide a better user experience, ensure the proper functioning of the website and, where applicable, analyse website traffic.
What cookies does this website use?
This website may use:
- Session cookies – cookies that are automatically deleted when you close your internet browser;
- Persistent cookies – cookies that remain stored in your internet browser until they expire or you delete them manually.
Where applicable, information collected through cookies is processed in accordance with the purposes described in this Cookie Policy and the Privacy Policy.
Are there any third-party cookies on the website?
Certain external services may place cookies on your device when their features are used on this website. These cookies are not set directly by the Museums of the Croatian Zagorje.
This website may use third-party services for:
- website traffic statistics.
Google Analytics
This website uses Google Analytics, a web analytics service used to measure and analyse website traffic.
If you wish to disable Google Analytics cookies, you can use the Google Analytics Opt-out Browser Add-on provided by Google or click on the following link.
