Privacy policy

This privacy policy outlines how data are collected, used and shared when using this website.

Who are we? 

Public Institution of Biokovo Nature Park, Franjevački put 2/A, 21300 Makarska, Croatia
Our website is: https://www.pp-biokovo.hr

Personal data we collect

When you visit this website, we automatically collect information about your device, including the name of the Internet browser, IP address, time zone and certain cookies that are already present on your device. Additionally, as you view our site, we will collect information about which pages you open, how long you spend on each, and which search words were used to reach a certain page. We call this type of collected information “Information about the device”.

We collect information about the device using the following technology:

- Cookies, these are files stored on your device that often contain an anonymous unique identifier; for more information about cookies and how to disable them, visit: http://www.allaboutcookies.org
- Log file, these are files stored on the web server that archive data about IP addresses, time of visit, Internet browser, internet service provider and website from which you reached our website

- Web beacons, tags, and pixels, are files that serve to monitor viewing of websites.

When you send a reservation request using this website or using the contact form, we collect the information that you submit, which includes at least your name and surname, address, e-mail address and telephone number. We call this type of collected data “Inquiry information”. When we refer to personal data in this privacy policy, we refer to information about the device and inquiry information.

How do we use your personal data?

We use the data you submit in your inquiry so that we can contact you and answer your questions.

Exclusively in cases when you permit it, we use your information so that we can send you offers we believe you might be interested in.

We use information about the device in order to reduce the risk of fraud, to improve and optimise the user experience of our website, and to improve the execution of our advertising campaigns.

Sharing your personal data

We use Google Analytics in order to research how our users use our website.

For more about how Google handles your personal data, visit this site: https://www.google.com/intl/en/policies/privacy/. 

You can also disable sharing your personal information with Google Analytics here: https://tools.google.com/dlpage/gaoptout.

Credit card payments

Personal data are protected in compliance with the General Data Protection Regulation (GDPR) of the European Parliament and of the Council no 2016/679 – and the Regulation on implementation of GDPR

Corvus Pay – Statement of safe online payment

For payment in our webshop, we use CorvusPay – an advanced system for the safe processing and acceptance of credit card payment via the Internet.

CorvusPay ensures complete secrecy of your card data from the very moment that you enter them into the CorvusPay payment form. The payment data are then encrypted from your web browser to the bank issuing your card. Our shop never comes in contact with all the data about your payment card. Also, the data are unavailable even to the staff of the CorvusPay system. The isolated core independently transfers the data and manages secure data, protecting them to ensure they are completely safe.

The entry form for payment data is secured with the TLS transport code of the highest reliability. All stored data are additionally protected by encryption, using a cryptographic device certified according to the FIPS 140-2 Level 3 standard. CorvusPay meets all requirements for online payment security prescribed by the leading card brands, and operates in compliance with the standard – PCI DSS Level 1 – the highest security standards of the card payment industry, which is proven by the certificate. In card payment included in the 3-D Secure programme, your bank confirms the validity of your card and confirms your identity using a token or password.

CorvusPay collects all information considered a banking secret and treats them in accordance with that status. The information is used exclusively for the purpose they were intended. Your sensitive data are completely safe, and their privacy is guaranteed using the most modern protection mechanisms. Only the most essential data are collected to perform the required task, pursuant to the prescribed requirements of online payment procedures.

Security controls and operational procedures applied on our infrastructure secures the current reliability of the CorvusPay system. In addition, all strict access controls are abided by, and regular monitoring of security and in-depth verifications to prevent network vulnerability and planned execution of provisions on information security permanently maintain and improve the degree of system security to protect your card data.

Thank you for using Corvuspay!

Behavioural advertising

As described above, we may in some cases use your personal data to adapt our marketing communications to make them more interesting and relevant. For more information about how targeting advertising works, please visit this website: http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work

Targeted advertising can be disabled or adjusted using the links below:
- Facebook: https://www.facebook.com/settings/?tab=ads
- Google: https://www.google.com/settings/ads/anonymous
- Bing: https://advertise.bingads.microsoft.com/en-us/resources/policies/personalized-ads
Additionally, some targeted marketing services can be disabled using the link: http://optout.aboutads.info/.

Cookies

CSRF_TOKEN => unique token, sessional
GA => possible that there is Google Analytics or google tag manager cookies
laravel_session => unique token, sessional

Built-in content

The content of this website (e.g., video, photographs, articles, etc.) may be included from other websites that are not under our control. Such content behaves in the same way as when you visit those websites, they can collect your personal data, use your cookies or third-party cookies, including monitoring your interactions with that content if you have a user account and are logged in to those sites (e.g., Google, Facebook).

Links

When you open a link from this website, it can take you to another website that is not under our control. We are not responsible for the protection of your personal data in those cases, and we ask you to look for and examine the privacy policy of those websites. We do not put links to any websites if we believe that they do not act responsibly towards personal data.

Your rights

You have the right to review your personal data that we keep. You may correct, supplement, or delete them. If you wish to use any of these rights, feel free to contact us via our contact form at the bottom of this page.

Any consent that you have given us concerning the use of your personal data may also be withdrawn at any time.

Keeping personal data

When you send an inquiry via this website, we will keep your personal data until you tell us to delete them. However, we cannot delete your personal data needed to fulfil our administrative or legal obligations (e.g., if you have purchased tickets).

Changes

We reserve the right to occasionally change this privacy policy to better suit our business practices, and the legal and regulatory requirements.

Contact us

For any additional explanations, complaints, or if you wish to take advantage of your rights, please feel free to contact us at:
https://pp-biokovo.hr/en/contact