1 Privacy Policy

 

This privacy policy informs you about the nature, scope and purpose of the collection and use of personal data on our website www.vilasan.net (hereinafter the “Website”) by Vila San d.o.o. (hereinafter “we” or “us”) and provides information about your rights. These rights are governed by the applicable data protection laws.

 

 

2 Controller responsible for data processing

 

The controller responsible for data processing on this Website and the contact person for data protection matters is:

 

Vila San d.o.o.

Heiko Gartenmeier

Vladimira Nazora 7

52440 Poreči

 

nfo.villazora@gmx.net

 

 

3 Data collection on this Website

 

 

3.1 Log files

 

Our Website is hosted by wix.com (www.wix.com).

 

In order to optimize and maintain our Website, we log technical errors that may occur when accessing our Website. In addition, when you use this Website, information is automatically collected that your browser transmits to our hosting provider.

 

This includes:

 

• IP address and operating system of your device,

• browser type, version, language,

• date and time of the server request,

• file accessed,

• the website from which access was made (referrer URL),

• status code (e.g. 404), and

• the transmission protocol used (e.g. HTTP/2).

 

This data is collected and stored by our hosting provider in order to optimize processes and procedures, in particular in connection with the use of our Website and the security and stability of the computer system.

 

Further information can be found in Wix.com’s privacy policy at https://de.wix.com/about/privacy.

 

If the GDPR applies, the legal basis for this data processing is Art. 6(1)(f) GDPR.

 

 

3.2 Contact form

 

If you use our contact form, the information you provide in the inquiry form will be processed by us to handle your request and in case of follow-up questions. As a rule, we require the following details:

 

• First and last name

• Company

• Email address

• Address

• Telephone number

• Subject

• Message content

 

We use the data you provide to respond to your inquiry. If the GDPR applies, the legal basis for this data processing is Art. 6(1)(f) GDPR.

 

 

3.3 Cookies

 

We use cookies on our Website. Cookies are small files that are stored on your device and saved by your browser. Some of the cookies we use are deleted automatically when you leave our Website. Other cookies remain stored on your device until you delete them or they expire. These cookies enable us to recognize your browser the next time you visit our Website.

 

You can configure your browser to inform you in advance about the setting of cookies and to decide in individual cases whether to accept cookies for certain cases or generally, or to exclude cookies entirely. This may restrict the functionality of the Website.

 

Cookies that are necessary for the electronic communication process or for functions you request, or that optimize your user experience, are stored—if the GDPR applies—on the basis of Art. 6(1)(f) GDPR.

 

If you allow the use of cookies via your browser settings or consent, the following cookies may be used on our Website:

 

• Session cookies for the duration of the session

 

If these cookies (also) involve personal data, we will inform you about this in the following sections.

 

You can delete individual cookies or the entire cookie inventory via your browser settings. In addition, you can find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information at the following links:

 

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-loeschen-daten-von-websites-entfernen

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Google Chrome: https://support.google.com/accounts/answer/61416?hl=de

Opera: http://www.opera.com/de/help

Safari: https://support.apple.com/kb/PH17191?locale=de_DE&viewlocale=de_DE

 

 

3.4 Registration on our Website

 

If you create an account on our Website, the information you enter will be stored. We collect the following details:

 

• First and last name

• Company

• Email address

• Address

• Telephone number

 

We use the data to provide you with the account. If the GDPR applies, the legal basis for this data processing is Art. 6(1)(b) and (f) GDPR.

 

If the registration serves the performance of a contract to which the data subject is party or the implementation of pre-contractual measures, the additional legal basis for processing is Art. 6(1)(b) GDPR.

 

Recipients of the data may include technical service providers who act as processors for the operation and maintenance of our Website.

 

Data in this context is processed only as long as the corresponding consent exists. It will then be deleted unless statutory retention obligations prevent this. To contact us in this context, please use the contact details provided at the end of this privacy policy.

 

Provision mandatory or required:

The provision of your personal data is voluntary and based solely on your consent. Without providing your personal data, we cannot grant you access to the content and services we offer.

 

 

3.5 Provision of paid services

 

To provide paid services, we request additional data, such as payment details, in order to fulfill your order.

 

The processing of data required to conclude the contract is based on Art. 6(1)(b) GDPR.

 

Recipients of the data may include processors.

 

We store this data in our systems until the statutory retention periods have expired. These are generally 6 or 10 years for proper accounting and tax law requirements.

 

Provision mandatory or required:

The provision of your personal data is voluntary. Without providing your personal data, we cannot grant you access to the content and services we offer.

 

 

3.6 Contact form

 

The data you enter is stored for the purpose of individual communication with you. This requires providing a valid email address and your name. This is used to assign the request and subsequently respond to it. Providing additional data is optional.

 

The processing of data entered into the contact form is based on a legitimate interest (Art. 6(1)(f) GDPR).

 

By providing the contact form, we want to enable you to contact us easily. Your details will be stored for the purpose of processing the inquiry and for possible follow-up questions.

 

If you contact us to request an offer, the processing of the data entered into the contact form is carried out to implement pre-contractual measures (Art. 6(1)(b) GDPR).

 

Recipients of the data may include processors.

 

Data will be deleted at the latest 6 months after processing the inquiry.

 

If a contractual relationship arises, we are subject to statutory retention periods under the German Commercial Code (HGB) and delete your data after these periods expire.

 

The provision of your personal data is voluntary. However, we can only process your request if you provide your name, your email address and the reason for your inquiry.

 

 

3.7 Newsletter

 

We offer a newsletter that you can subscribe to. If you sign up for the newsletter, we collect at least your email address. Our external newsletter service provider may collect additional data; we refer you to its privacy policy (see below).

 

We use your email address to send you the newsletter by email. If the GDPR applies, the legal basis for the data processing is Art. 6(1)(f) GDPR.

 

 

3.8 Newsletter analytics

 

We use an analytics service to measure the reach of our newsletter. We measure how often the newsletter is opened and which links the recipient clicks.

 

If the GDPR applies, the legal basis for the data processing is Art. 6(1)(f) GDPR.

 

 

3.9 Comment function

 

For the comment function on this Website, in addition to your comment, information about the time the comment was created, your email address and—if you do not post anonymously—the username you choose are stored.

 

As a user of the site, you can subscribe to comments after registering. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this function at any time via a link in the information emails.

 

 

4 External services

 

We use various third-party services on our Website. Below we explain in detail which services these are, what we use them for, and which data is collected.

 

The integration of external services can be problematic under current European case law. The transfer of personal data to external providers (example: analytics, advertising, CDN, fonts, videos, etc.) should be analyzed on a case-by-case basis.

 

 

4.1 Google Analytics

 

We use Google Analytics from Google LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Analytics is a web analytics service of Google LLC (hereinafter “Google”). Google Analytics uses so-called “cookies”, i.e. text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. Due to the activation of IP anonymization on these websites, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website use and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

 

The purposes of data processing are the evaluation of the use of the Website and the compilation of reports on Website activities. Further related services are then provided based on the use of the Website and the internet.

 

If the GDPR applies, the legal basis for the data processing is Art. 6(1)(a) GDPR or Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

 

Google LLC’s privacy policy can be found at https://policies.google.com/privacy.

 

 

4.2 Google Webfonts (script libraries)

 

We use Google Webfonts from Google LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Webfonts is a font tool provided by Google LLC. Your consent is required for the correct display of the font.

 

If the GDPR applies, the legal basis for the data processing is Art. 6(1)(a) GDPR or Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

 

Google LLC’s privacy policy can be found at https://policies.google.com/privacy and https://developers.google.com/fonts/faq/privacy?

 

 

4.3 Google Maps

 

We use Google Maps from Google LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

Google Maps allows us to display interactive maps directly on the Website and enables you to use the map function conveniently.

 

If the GDPR applies, the legal basis for the data processing is Art. 6(1)(a) GDPR or Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

 

Google LLC’s privacy policy can be found at https://policies.google.com/privacy.

 

 

4.4 Embedded YouTube videos

 

We use embedded videos from YouTube LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

Embedded YouTube videos enable us to display videos directly on the Website and allow you to use the video function conveniently.

 

If the GDPR applies, the legal basis for the data processing is Art. 6(1)(a) GDPR or Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

 

The privacy policy of YouTube LLC / Google LLC can be found at https://policies.google.com/privacy.

 

 

4.5 Social plugins

 

We use social plugins from Google LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

 

Social plugins from the providers listed below are used on our Website. You can recognize the plugins by the corresponding logo.

 

Through these plugins, information—potentially including personal data—may be transmitted to the service provider and possibly used by it. We prevent the unconscious and unwanted collection and transmission of data to the provider through a two-click solution. To activate a desired social plugin, it must first be activated by clicking the corresponding button. Only by activating the plugin is the collection of information and its transmission to the service provider triggered. We do not collect personal data ourselves via the social plugins or through their use.

 

We have no influence on which data an activated plugin collects and how it is used by the provider. Currently it must be assumed that a direct connection to the provider’s services is established and that at least the IP address and device-related information are collected and used. It is also possible that the providers attempt to store cookies on the device used. Which specific data is collected and how it is used can be found in the respective provider’s privacy notices. Note: If you are logged into Facebook at the same time, Facebook may be able to identify you as a visitor to a particular page.

 

If the GDPR applies, the legal basis for the data processing is Art. 6(1)(a) GDPR or Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR.

 

The privacy policy for the respective plugins can be found with the respective provider.

 

 

5 Links

 

Our Website contains links to third-party websites. We are not responsible for the content and data protection provisions on external websites that you can access via these links. Please inform yourself about data protection directly on the relevant websites.

 

 

6 Disclosure of data to third parties

 

In order to provide you with the information on our Website, we work with various service providers, in particular IT service providers, so that we can offer you a modern Website. They use your data only within the scope of processing orders on our behalf.

 

With the exception of the provisions in Section 4 of this privacy policy, we do not transfer data to entities outside Switzerland and the European Union (third countries) without your consent, unless this is required under the respective contract, to comply with legal obligations, or to safeguard our legitimate interests.

 

 

7 Your rights

 

If provided for under the data protection law applicable to you, you may request information free of charge about the data stored about you, its origin and recipients, and the purpose of data processing. Under the statutory conditions, you also have a right to rectification, erasure, restriction of processing, or objection to processing, and—if the GDPR applies—the right to receive this data for transfer to another entity.

 

You may withdraw consent you have given at any time with effect for the future. A simple notification by email to us is sufficient.

 

Please note that the above rights are subject to statutory restrictions and may impair or make impossible the provision of our services.

 

You are entitled to enforce your rights in court or to lodge a complaint with the competent data protection authority. In Switzerland, the competent authority is the Federal Data Protection and Information Commissioner (http://www.edoeb.admin.ch).

 

 

8 SSL encryption

 

To protect the security of your data during transmission, we use encryption methods (e.g. SSL) over HTTPS that correspond to the current state of the art.

 

 

8.1 Without SSL/TLS encryption

 

Please note that data transmitted over an open network such as the internet or an email service without SSL encryption can be viewed by anyone. You can recognize an unencrypted connection by the fact that “http://” appears in the browser’s address bar and no lock symbol is displayed.

 

Information transmitted over the internet and content received online may be transmitted via third-party networks. We cannot guarantee the confidentiality of communications or materials transmitted via such open networks or third-party networks. If you disclose personal data via an open network or third-party networks, you should be aware that your data may be lost or viewed by third parties, and that data may therefore be collected and used without your consent. Although in many cases individual data packets are transmitted in encrypted form, the names of sender and recipient are not. Even if sender and recipient are in the same country, data transfer via such networks often also takes place uncontrolled via third countries, i.e. countries that do not offer the same level of data protection as your country of residence. We assume no responsibility for the security of your data during transmission over the internet and reject any liability for direct or indirect damages. We ask you to use other means of communication if you consider this necessary or sensible for security reasons.

 

Despite extensive technical and organizational security measures, it is possible that data may be lost or intercepted and/or manipulated by unauthorized persons. Where possible, we take appropriate technical and organizational security measures to prevent this within our system. However, your computer is outside the security area that we control. It is your responsibility as a user to inform yourself about necessary security precautions and to take appropriate measures. As the operator of the Website, we are not liable in any way for damage caused to you by data loss or manipulation.

 

Data that you enter in online forms may be passed on to authorized third parties for the purpose of order processing and may be viewed and, if necessary, processed by them.

 

 

9 Currency and amendments to this privacy policy

 

We may change or adapt this privacy policy at any time. The current privacy policy can be accessed at www.provilla.hr/datenschutz.

 

 

10 Questions for the Data Protection Officer

 

If you have questions about data protection, please email us or contact the person responsible for data protection in our organization directly:

 

Heiko Gartenmeier, info@vilasan.net