In Vila Grotta d.o.o. ("us", “we”, “our” or the “Company”), we value your privacy and the importance of protecting your data. This Privacy Policy (“Policy”) describes our privacy practices in relation to the activities listed below. In accordance with your rights, we inform you about how we collect, store, access, and generally process data related to individuals. In this Policy, personal data (“Personal Data”) refers to any information that, either on its own or in combination with other available information, can identify an individual.
We are committed to protecting your privacy in accordance with the highest level of privacy regulation. Accordingly, we comply with obligations under the following regulations:
This policy applies to websites, domains, applications, services, and products of Vila Grotta d.o.o.
This Policy does not apply to third-party applications, websites, products, services, or platforms that may be accessed through links (outside Vila Grotta d.o.o.) that we may provide. These websites are not owned by us and operate independently, and they have their own separate privacy and data collection practices. Any personal data you provide to such third-party websites is subject to their privacy policies. We cannot accept responsibility for the actions or policies of these independent websites and are not liable for their content or privacy practices.
This Policy applies when interacting with us in any of the following ways:
When you make or attempt to make a purchase, we collect the following types of personal data:
This includes:
When you use our products and/or features, we collect the following types of personal data:
We also collect the following sensitive personal data. When collecting such data, we will obtain your explicit consent:
We collect personal data from the following sources:
You may provide us with your account data, payment information, financial data, demographic data, purchase information, content, feedback, and product-related information by filling out forms, using our products or services, entering data online, or communicating with us by post, telephone, email, or otherwise. This includes personal data you provide when, for example:
When you interact with our website, we may automatically collect the following types of data (as described above): device data about your equipment, usage data about your browsing actions and patterns, and contact data when tasks on our website remain incomplete, such as unfinished orders or abandoned shopping carts. We collect this data using cookies, server logs, and other similar technologies. Please see our cookie section (below) for more details.
We also process information when you use our services and products. This may include:
We may receive your personal data from various third parties, including:
If you provide personal data relating to other individuals to us or our service providers, you confirm that you are authorized to do so and agree that such data will be used in accordance with this Policy. If you believe your personal data has been improperly provided to us or you wish to exercise your rights, please contact us using the details provided in the “Contact Us” section below.
When you visit the Vila Grotta d.o.o. website, we automatically collect and store information about your visit using browser cookies (files we send to your computer) or similar technologies. You can set your browser to refuse all cookies or to notify you when a cookie is being sent. Most browsers provide help information on how to accept or disable cookies. If you do not accept cookies, you may not be able to use some features of our service, and we recommend leaving them enabled.
We also process information when you use our services and products. This may include:
We may receive your personal data from third parties such as Vila Grotta d.o.o. subscription partners, affiliates, and other sources. This data is not collected by us directly and is subject to the third party’s privacy policies. We have no control over how third parties handle your data.
As always, you have the right to review and correct such information. If you have questions, you should first contact the relevant third party. If they do not respond or respect your rights, you may contact the Data Protection Officer of Vila Grotta d.o.o. (contact details below).
Our websites and services may contain links to third-party websites, applications, and services. Their privacy practices are governed by their own privacy policies, which you should review separately.
With your consent, we collect and use your personal data to provide, maintain, and improve our products and services and to better understand how to enhance them.
These purposes include:
When we process your personal data to provide a product or service, we do so because it is necessary to perform contractual obligations. All processing described above is based on our legitimate interests in providing services, maintaining our relationship with you, and protecting our business (e.g., against fraud). Your consent is required to begin providing services, and new consent may be required if data collection practices change. Some services may not be available without your consent.
Where possible, we store and process data on servers within the geographic region where you reside (this may not necessarily be your country of residence). For European companies, we use servers within the European Economic Area (EEA). Your personal data may be transferred to and stored on servers outside your jurisdiction, where data protection laws may differ.
We take appropriate measures to ensure your data is handled securely and in accordance with this Policy and applicable law. Data may be stored in countries deemed adequate under applicable regulations.
We share your personal data only as described in this Policy or at the time of collection.
We use Google Analytics to understand how users interact with our website. More information is available here:
https://www.google.com/intl/hr/policies/privacy/
You may opt out of Google Analytics here:
https://tools.google.com/dlpage/gaoptout?hl=en
We may also use your personal data for targeted advertising, such as newsletters and promotional communications.
For more information on targeted advertising, visit the Network Advertising Initiative (NAI):
http://www.networkadvertising.org/understanding-online-advertising/how-does-it-work
You may opt out via the Digital Advertising Alliance:
http://optout.aboutads.info/
We may use or disclose your personal data to comply with legal obligations, respond to government requests, court proceedings, or to prevent harm or protect our rights or property. Where possible, we will notify you in advance.
We may use third-party service providers, contractors, agencies, or consultants to support and improve our services. Your data may be shared with marketing agencies, database providers, security storage providers, email service providers, and others solely for maintaining and improving our services.
For more information about recipients of your data, please contact us using the “Contact Us” section below.
A cookie is a small file containing information that your browser stores on your device. The information in this file is usually shared with the website owner, as well as potential partners and third parties involved in that business. The collection of this information may be used for website functionality and/or to improve your experience.
To provide you with the best possible experience, we use the following types of cookies:
We implement appropriate organizational safeguards and security measures to protect your personal data against accidental loss, unauthorized use or access, alteration, or disclosure.
Communication between your browser and our website uses a secure encrypted connection wherever personal data is involved.
We require any third party with whom we contract to process your personal data on our behalf to implement security measures to protect your data and to handle such data in accordance with applicable law.
In the unfortunate event of a personal data breach, we will notify you and the relevant regulator where we are legally required to do so.
Depending on your geographic location and citizenship, your rights may vary under local data protection laws. These rights may include:
You have the right to know whether we process your personal data and to request a copy of the personal data we hold about you.
You have the right to request correction of incomplete or inaccurate personal data we process about you.
You have the right to request that we delete your personal data, except where we are required to retain it in order to comply with legal obligations or to establish, exercise, or defend legal claims.
You have the right to restrict our processing of your personal data under certain circumstances. In such cases, we will only store your data and will not process it for other purposes.
You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transferred to another data controller, where (a) the data was provided by you, and (b) we process it based on your consent or for the performance of a contract with you or a third-party service subscriber.
You have the right to opt out of the processing of your personal data for: (1) targeted advertising; (2) sale of personal data; and/or (3) profiling in furtherance of decisions that produce legal or similarly significant effects concerning you. Under CPRA, you also have the right to opt out of sharing your personal data with third parties and our use and disclosure of sensitive personal data beyond what is reasonably expected to provide services.
Where the legal basis for processing your personal data is our legitimate interest, you have the right to object to such processing based on your particular situation. We will comply unless we have compelling legitimate grounds that override your interests and rights, or if processing is necessary for legal claims.
You have the right not to be denied services or receive a different level of service for exercising your rights.
You have the right to appeal our response to any request you make under these rights. If you disagree with how we handled your complaint, you may contact the relevant Attorney General:
You have the right to lodge a complaint with your competent data protection authority.
If you are located in the EEA, please visit this website for a list of local data protection authorities:
https://edpb.europa.eu/about-edpb/about-edpb/members_hr
If you have given consent for the processing of your personal data, you have the right to withdraw your consent at any time free of charge, for example if you wish to opt out of receiving marketing communications from us. To withdraw your consent, please contact us using the details at the bottom of this page.
You may submit a request to exercise any of these rights regarding your personal data by contacting our privacy team using the form below.
To protect your privacy and security, we may require you to verify your identity before providing any requested information.
We have provided a simple process through which you can request a copy of your data, unsubscribe from our email lists, request deletion of your data, or ask a question about data privacy:
Contact us via email: info@luxistria.com
Write to us at:
Vila Grotta d.o.o.
Partizanska 6A, 52440 Poreč
Call us at:
+385 91 427 0699
Opening hours
Monday – Friday: 09:00 – 20:00
Saturday: 10:30 – 22:00
