Personal Data Protection

The Institute for Tourism (hereinafter: the Institute), as a public institution and as a data controller or data processor, collects, stores, and processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18).

Every data subject (an individual whose personal data is processed by the Institute) has the right to access, rectify, erase, and object to the processing of their personal data.

These rights may be exercised by submitting a request:

By post:
Institute for Tourism
Vrhovec 5
10000 Zagreb
Croatia

By e-mail:
gdpr@iztzg.hr

Privacy Policy Data Controller

Institute for Tourism
Vrhovec 5, 10000 Zagreb, Croatia
Tel: +385 1 3909 666
E-mail: info@iztzg.hr

  1. Data Protection Officer

Tel: +385 1 3909 648

E-mail: gdpr@iztzg.hr

  1. Purpose and Legal Basis for the Processing of Personal Data

2.1 Performance of Tasks Carried Out in the Public Interest

The Institute processes personal data necessary for the performance of its official duties and responsibilities pursuant to Article 6(1)(e) of Regulation (EU) 2016/679.

Such processing includes:

  • Responding to enquiries and requests;
  • Undertaking activities related to compliance with the GDPR and other applicable regulations.

2.2 Compliance with Legal Obligations

The Institute processes personal data pursuant to Article 6(1)(c) of the GDPR in order to:

  • Respond to requests for access to information;
  • Fulfil reporting and administrative obligations towards the European Commission regarding projects financed through EU programmes;
  • Manage employment-related procedures and obligations.

2.3 Legitimate Interests

The Institute processes personal data pursuant to Article 6(1)(f) of the GDPR for the following purposes:

  • Participation in educational activities, lectures, workshops, conferences, and project-related activities;
  • Maintaining visitor records;
  • Video surveillance for the protection of persons and property.
  1. Processing of Personal Data Through Video Surveillance

Purpose:
Protection of persons and property.

Legal basis:
Legitimate interest of the Institute as the data controller.

Recipients:
Video recordings may be disclosed, upon request, to competent authorities such as the police or courts when required for legal, administrative, or judicial proceedings.

Retention period:
Recordings obtained through the video surveillance system are retained for a maximum period of six months, unless they are required as evidence in judicial, administrative, arbitration, or other legal proceedings.

  1. Use of Cookies

The official website of the Institute for Tourism uses cookies. Cookies are small text files stored on a user’s device by a web server through which the website is delivered.

Cookies are created when a user’s browser loads a website. The website sends information to the browser, which creates a text file (cookie). The browser retrieves and sends the cookie back to the server whenever the user revisits the website.

The Institute’s website uses technical cookies (strictly necessary cookies) that are essential for the proper functioning of the website. These cookies cannot be disabled.

  1. Your Rights Regarding the Processing of Personal Data

You may exercise your rights relating to personal data protection by contacting the Institute in writing or by e-mail using the contact details provided above.

For additional information, please visit our Contact page.