PRIVACY POLICY

This Privacy Policy applies to the processing of personal data of visitors to www.kooglana.hr, users of contact and reservation forms, newsletter subscribers, guests and users of services at KOOGLANA RIJEKA.

Controller

The personal data controller is Klopa i cuga d.o.o., registered seat: Rijeka, J. P. Kamova 81a, OIB: 97289313530, MBS: 040266418, registered with Trgovački sud u Rijeci.

Location: KOOGLANA RIJEKA, Tower Center Rijeka, Janka Polića Kamova 81a, 51000 Rijeka. Location contact: +385 99 20 888 30 / +385 91 20 888 31; e-mail: rijeka@kooglana.hr.

Data protection contact: rijeka@kooglana.hr.

Personal data we process

Depending on the way you communicate with us and use our services, we may process: name and surname, company name where applicable, e-mail address, phone number, reservation details, information included in your note or message, data required for issuing invoices, complaint data, website usage data and cookies, and CCTV recordings where video surveillance is used to protect persons and property.

Purposes and legal bases

We process data to respond to enquiries, process reservations and organise visits, provide hospitality and entertainment services, organise birthdays, team building events and other events, issue and store invoices, handle written complaints and claims, send newsletters where consent has been given, protect persons and property, operate the website, and use analytics and advertising cookies where consent has been provided.

The legal bases include performance of a contract or steps prior to entering into a contract, legal obligations, legitimate interests, user consent and protection of vital interests in exceptional situations.

Recipients

Data may be shared with IT, hosting and e-mail service providers, reservation system providers, accounting providers, payment providers if online payment is used, competent authorities where legally required, and other processors acting under our instructions.

Transfers outside the EU/EEA

Where third-party tools involve transfers outside the EU/EEA, such transfers are made only where a valid legal basis and appropriate safeguards exist, such as an adequacy decision, standard contractual clauses or another GDPR-compliant mechanism.

Retention periods

Data is retained for as long as necessary for the purpose for which it was collected, or for the period required by accounting, tax, consumer protection and other applicable laws. Complaint data is retained for at least one year from receipt. Data processed based on consent is retained until consent is withdrawn or the purpose ends, unless another legal basis applies.

Your rights

You have the right to request access to your personal data, rectification, erasure, restriction of processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

You may exercise your rights using the data protection contact. If you believe that processing is unlawful, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency.

CCTV

Where CCTV is installed, it is used to protect persons and property. Areas under video surveillance must be clearly marked. Recordings are kept for a limited period unless they are required as evidence or for competent authorities.

Newsletter and marketing

Newsletters and electronic marketing communications are sent only where valid consent or another permitted legal basis exists. Users can unsubscribe at any time using the unsubscribe link or by sending a request to the published contact.

Updates

We may update this Privacy Policy from time to time to reflect changes in our services, website or applicable laws. The current version is published on the website.