Privacy policy & GDPR

Legal basis and purpose
Legal basis for our data processing is necessity for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract - as defined by GDPR and procedures where the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
Purpose of data collection is to enable communication regarding services of accommodation, buying tickets and other where consent is needed.

Procedure and volume
Our data collection is primarily organized by e-mail and phone where user is asked for specific data palette from our agents.
Users get forms which may contain empty boxes for:
name, surname, phone, address, PIN number, IBAN and eVisitor set for accommodation (eVisitor is official Croatian
state accommodation system).

Third party relationship
We don't forward any data set without data subject's consent for specifically defined purpose in line with the service. List of third parties is different per different arrangement and it is available trough tailored forms.

Security and personnel
Our agents are educated regarding data protection principles and our obligations. We fully respect integrated data protection practices where our devices, services, procedures and processes respect integrated logic.

Right claims
Data subjects can ask for: Right of access, Rectification and erasure, Right to restriction of processing, Notification obligation regarding rectification or erasure of personal data or restriction of processing, Right to data portability, Right to object and automated individual decision-making, Right to object, Automated individual decision-making, including profiling. Data subject can contact the DPO regarding any question or claim. We answer the claims in 30 days.

Data retention
We withhold the data only during the contractual relationship or until the revocation of consent.

Data Controler:
ADRIA BEAT Events

Data Protection Officer:
dpo@adriabeat.com

If you have any additional questions please contact our Data Protection Officer.

Adriabeat is compliant with EU's GDPR and all relevant data protection legal framework. In our privacy policy we define measures, volumes, legal basis, obligations, rights, purposes and data storage.