Source: https://www.liberty-adriatic.com/privacy-policy/
Timestamp: 2019-04-26 14:02:05+00:00

Document:
We appreciate your interest in our online presence and the offers on our website.
The protection of your personal data is of great importance to us. We would therefore like to inform you in detail in this Statement as to which data is collected during your visit to our website and for the use of our offers found there, and how it is processed or utilised by us subsequently. We also describe the accompanying protective actions that we have taken in terms of technical and organisational measures.
As provided for by the GDPR, we shall inform you in accordance with Article 5 and Article 13 of the cited Regulations, pursuant to the transparency requirement, about the nature, scope and purpose of the data processing as well as of the legal basis which legitimises the data processing. Furthermore, we shall indicate the duration of the respective data processing as well as your objection or revocation options, which are linked to the specific data protection-relevant measure in each case. If no right of objection may be granted due to technical reasons (because the processing of the data is absolutely necessary for the technical operation of the website), we assure that no data on your part shall be stored by us.
Insofar as we seek the consent of data subjects for the processing operations of personal data, Art. 6 para. 1 lit. a of the GDPR serves as the legal basis for processing of the personal data.
As regards the processing of personal data which is necessary for the performance of a contract to which the data subject is a contractual party, Art. 6 para. 1 lit. b of the GDPR serves as the legal basis. This also applies to processing operations which are necessary for the performance of pre-contractual measures.
Insofar as the processing of personal data is required to fulfil a legal obligation to which our company is subject, Art. 6 para. 1 lit. c of the GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d of the GDPR serves as the legal basis.
If processing is required to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not outweigh the initial interest, Art. 6 para. 1 lit. f of the GDPR serves as the legal basis for the processing.
The personal data of the data subject shall be erased or blocked as soon as the purpose of the storage is no longer applicable. Moreover, the data shall be stored if such storage has been designated by the European or national legislator in Union regulations, laws or other provisions to which the responsible body is subject. Unless there is a need for further storage of the data for contract conclusion or contract fulfilment, the data shall be blocked or erased once the storage period prescribed by the indicated standards expires.
This data is not stored together with other personal data of the user.
If you wish to look at our website, the collection of the above data is technically necessary in order to show you our website, and to ensure stability and security.
This also presents our legitimate interest in data processing for this purpose in accordance with Art. 6 para. 1 lit. f of the GDPR.
The collection is lawfully carried out in accordance with Art. 6 para. 1 lit. f of the GDPR.
The data shall be erased as soon as it is no longer necessary for achieving the purpose of its collection. In case of data collection for website deployment, such is the case if the respective session has ended.
The collection of the data for website deployment is compulsory for the operation of the website. There is no option of objection in this respect.
In the case of email communication via the email address displayed on our website, we collect, process and store personal data such as the surname, first name, title where applicable, postal address, email and IP address of the user, as well as the date and time of registration, in order to provide the respective services, to get in contact, to process your enquiry and in the event that follow-up questions arise.
When making contact via the provided email address, the personal data of the user which is submitted along with the email shall be stored.
There is no disclosure of data to third parties in this context. The data is used exclusively for processing of the conversation.
When contact is made via email, the required legitimate interest in data processing is present in this case as well.
Art. 6 para. 1 lit. f of the GDPR is the legal basis for processing the data which is sent as part of an email. If the email contact is aimed towards the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b of the GDPR.
The data shall be erased as soon as it is no longer necessary for achieving the purpose of its collection. In terms of personal data that has been sent via email, such is the case if the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant issues have finally been clarified. The personal data additionally collected during the sending process shall be erased after a period of seven days at the latest.
If the user gets in contact with us by email, he/she can object to the storage of his/her personal data at any time. In such a case, the conversation can no longer continue. All personal data that has been stored over the course of making contact shall be erased in such a case.
With regard to making contacting by email, we would like to note that data transfer over the Internet presents issues with security holes in email communication and cannot be completely protected against access by third parties. Personal data in the framework of email communication shall usually be transmitted from your computer via an unsecured connection over the Internet. Information that you send unencrypted by email could be read, stored and misappropriated by third parties along the way. We would therefore like to point out that no confidential information should be sent to us without the use of an encryption program.
The user data collected through technically necessary cookies shall not be used to create user profiles.
Upon consent, the legal basis for the processing of personal data using cookies is Art. 6 para. 1 lit. f of the GDPR.
This website uses Google Analytics, a web analytics service provided by Google Inc. (‘Google’). Google Analytics uses so-called ‘cookies’ – text files that are stored on your computer and that allow an analysis of the website use through you. The information generated by the cookie through your use of this website shall usually be transferred to a Google server in the United States and stored there. In case of activation of IP anonymisation on this website, your Google IP address shall however be truncated beforehand within the member states of the European Union or within the other contracting states to the Agreement on the European Economic Area. Only in exceptional cases shall the full IP address be sent to a Google server in the US and truncated there. Google shall use this information on behalf of the operator of this website to evaluate your use of the website, to compile reports about website activities, and to provide other services associated with the website and internet usage to the website operator.
The IP address transmitted by your browser within the context of Google Analytics shall not be merged with other data from Google.
This website uses Google Analytics with the extension ‘_anonymizeIp()’. IP addresses shall therefore be processed further in a truncated manner; direct personal references can thus be excluded. If there is a personal reference in the data collected about you, this shall be excluded immediately and the personal data promptly erased.
We use Google Analytics in order to analyse the use of our website and to be able to improve upon it regularly. We can improve our offer and make it more attractive for you as a user through the statistics obtained. This presents our legitimate interests. For the exceptional cases wherein personal information is transferred to the US, Google has submitted to the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework.
Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.
Overview on data protection: http://www.google.com/intl/de/analytics/learn/privacy.html as well as the Data Protection Statement: http://www.google.de/intl/de/policies/privacy.
The legal basis for the use of Google Analytics is Art. 6 para. 1 sentence 1 lit. f of the GDPR.
In the case of Facebook, according to the statement of the respective provider in Slovenia, the IP address shall be anonymised immediately after collection. By activating the plug-in, personal information about you shall be transmitted to the respective plug-in provider and stored there (in the USA in the case of US providers). Because the plug-in provider carries out data collection via cookies in particular, we recommend that you delete all cookies before clicking on the greyed-out boxes via the security settings of your browser.
We have no influence on the collected data and data processing operations, nor are we aware of the full extent of the data collection, the purpose of the processing or the retention periods. Moreover, we have no information on the erasure of the data collected by the plug-in provider.
The plug-in provider stores the data collected about you as usage profiles and applies this for purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (including for users who are not logged in) for the presentation of needs-based advertising and in order to inform other social network users about your activities on our website. In terms of the plug-ins, we offer you the opportunity to interact with social networks and other users, so that we can improve our offer and make it more attractive for you as a user.
The data transfer takes place regardless of whether or not you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us shall be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for instance, link the page, the plug-in provider shall also store this information in your user account and share it publicly with your contacts. We recommend that you log out regularly after using a social network, especially so before activating the button in order to avoid any association of your profile by the plug-in provider.
Further information on the purpose and scope of the data collection and its processing by plug-in providers can be found in the data protection statements of these providers as listed below. There you can also find more information about your related rights and configuration options for the protection of your privacy.
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php; further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications as well as http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) Google Inc., 1600 Amphitheater Parkway, Mountainview, California 94043, USA; https://www.google.com/policies/privacy/partners/?hl=de. Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c) Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
e) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
The legal basis for the use of plug-ins is Art. 6 para. 1 sentence 1 lit. f of the GDPR.
You have the right to object to the formation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right.
We recommend that you log out regularly after using a social network, especially so before activating the button in order to avoid any association of your profile by the plug-in provider.
Your personal data shall be passed on, where applicable, to supporting service providers which have been carefully selected by us. These may be technical service providers, service providers supporting us in distribution or third-party companies involved in data processing (so-called outsourced data processing, external data processors). If we use external data processors, they are contractually obligated—under observance of the data protection regulations and according to our instructions—to handle your personal data with care, and neither to use it for their own purposes nor to pass it on to third parties.
Otherwise, your data shall be transferred to other third parties by us only if we are legally obliged to do so. Due to legal requirements, we are obliged to pass on your personal data to third parties in certain cases. Such is the case, for instance, if there is suspicion of a crime or misuse of this website. We are then required to disclose your personal data to the competent law enforcement authorities. Upon an order by the competent authorities, we may therefore provide information on this data in individual cases to the extent that this is necessary for the purposes of law enforcement, danger prevention, the fulfilment of statutory duties of constitutional protection authorities or the military counter-intelligence, or for the enforcement of intellectual property rights.
Your personal data shall only be stored for as long as it is necessary for the required purpose. The personal data shall be erased as soon as it is no longer necessary to fulfil the purpose of the storage.
You may request confirmation from the responsible body as to whether any personal data relating to you has been processed by us.
the existence of automated decision-making including profiling under Art. 22 para. 1 and 4 of the GDPR and—at least in these cases—meaningful information about the logic involved as well as the consequences and the intended impact of such processing on the data subject.
You have the right to request information about whether any personal data relating to you is being transferred to a third country or to an international organisation. In this context, you may request to be notified about the applicable guarantees under Art. 46 of the GDPR in connection with the transfer.
You have a right to rectification and/or completion with respect to the responsible body, provided that the processed personal data relating to you is inaccurate or incomplete. The responsible body must implement the rectification without delay.
if you have objected to the processing pursuant to Art. 21 para. 1 of the GDPR, and it has not yet been determined as to whether the legitimate reasons of the responsible body outweigh your own reasons.
If the processing of the personal data relating to you has been restricted, such data may—apart from its storage— be processed solely with your consent or for the assertion, exercise or defence of legal claims, or for the protection of the rights of another natural or legal entity, or for reasons of significant public interest of the Union or of a Member State.
If the restriction of the processing was implemented in accordance with the above-mentioned conditions, you shall be notified by the responsible body before the restriction is lifted.
The personal data relating to you is no longer necessary for the purposes for which it was collected or otherwise processed.
You revoke your consent to the processing in accordance with Art. 6 para. 1 lit. a or Art. 9 para. 2 lit. a of the GDPR, and there is no other legal basis for the processing.
You object to the processing pursuant to Art. 21 para. 1 of the GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing pursuant to Art. 21 para. 2 of the GDPR.
The personal data relating to you has been processed unlawfully.
The erasure of the personal data relating to you is required to fulfil a legal obligation under Union law or the law of the Member States to which the responsible body is subject.
The personal data relating to you was collected based on the offered services of the information society pursuant to Art.8 para. 1 of the GDPR.
If the responsible body has publicly disclosed the personal data relating to you and has an obligation to the erasure of such pursuant to Art. 17 para. 1 of the GDPR, it shall—taking into account the available technology and the implementation costs—take the appropriate measures, including those of a technical nature, to inform the responsible body who processes the personal data that you, as a data subject, have requested of them the deletion of all links to this personal data, or copies or replications of this personal data.
If you have asserted the right to rectification, erasure or restriction of processing with respect to the responsible body, the latter is obliged to communicate this rectification or erasure of data or the restriction of processing to all recipients to whom the personal data relating to you has been disclosed, unless this proves to be impossible or involves disproportionate effort.
You are entitled to the right, with respect to the responsible body, to be notified about these recipients.
the processing is executed using automated procedures.
In exercising this right, you also have the right to issue that the personal data relating to you is transferred directly from one responsible body to another responsible body, provided that this is technically feasible. The freedoms and rights of other persons may not be affected thereby.
The right to data portability does not apply to the processing of personal data which is required for the performance of a task that is in the public interest or arises in the exercise of official authority, which has been transferred to the responsible body.
You have the right to object at any time—for reasons that arise from your particular situation—to the processing of personal data relating to you, which is carried out on the basis of Art. 6 para. 1 lit. e or f of the GDPR. This also applies to profiling based on these provisions. Please direct your objection to our data protection officers.
The responsible body shall no longer process the personal data relating to you, unless it can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.
If the personal data relating to you is processed in order to engage in direct advertising, you have the right to object to the processing of the personal data relating to you at any time for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct advertising.
Should you object to the processing for direct marketing purposes, your personal data shall no longer be processed for these purposes.
You have the option, in connection with the use of services of the information society and notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures, whereby technical specifications are used.
You have the right to revoke your data protection consent declaration at any time. By revoking the consent, the legality of the processing carried out on the basis of consent shall not be affected up until the revocation.
However, these decisions may not be based on special personal data categories pursuant to Art. 9 para. 1 of the GDPR, unless Art. 9 para. 2 lit. a or g applies and reasonable measures have been taken to protect the rights and freedoms as well as your legitimate interests.
As regards the first and third exceptions, the responsible body shall take appropriate measures to uphold the rights and freedoms as well as your legitimate interests, which involves at least the right to obtain the intervention of a person on the part of the responsible body, upon the statement of its own position and upon the challenge to the decision.
Without prejudice to any other regulatory or judicial remedy, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, place of work or place of alleged infringement, if you believe that the processing of the personal data relating to you violates the GDPR.
The supervisory authority, to which the complaint was lodged, shall inform the complainant on the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 of the GDPR.
We take no responsibility for the confidential handling of your data should you find hyperlinks on our website that take you directly onto the website of another provider (e.g. recognisable by the change of URL). Such is the case since we have no control over the compliance with data protection regulations by these companies. Please refer to the websites directly to find out about the handling of your personal data by these companies.
We use technical and organisational security measures to protect incoming or collected personal data about you, in particular against accidental or intentional manipulation, loss, destruction and against attacks by unauthorised persons. Our security measures are continuously improving in line with technological developments.

References: Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6

Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 6
 Art. 22
 Art. 46
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art.8
 Art. 17
 Art. 6
 Art. 9
 Art. 9
 Art. 78