Pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Euronautic d.o.o. entirely applies the principles of the aforementioned Regulation (hereinafter: Regulation).

Personal data shall mean any information relating to an identified or identifiable natural person ('data subject'); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, mental, economic, cultural or social identity..

In the course of its activities, Euronautic d.o.o. collects, uses, transmits and processes the personal data of its customers, employees and business partners, as well as other persons who can be identified directly or indirectly (hereinafter: data subjects).

Depending on the nature of the joint business relationship or other type of affiliation, the Euronautic d.o.o. may have various personal data of data subjects at its disposal. This includes identification and contact information, financial data, transaction data, data on contracted services and products, accounts, correspondence addressed to the Euronautic d.o.o. and documented data (e.g. copies of identity cards, passports, professional qualifications, credit cards, etc.) as well as publicly available data.

Euronautic d.o.o. processes personal data and may use them only for the purpose for which they were collected. The processing of personal data is permitted only if and to the extent that at least one of the following principles applies:

• Data processing is necessary for compliance with legal obligations to which Euronautic d.o.o. is subject;

• Data processing is necessary for performance of a contract to which the data subject is party or in order to undertake certain actions at the request of the data subject prior to entering into a contract within the area of activity of the Euronautic d.o.o.;

• Data processing is required for the legitimate business interests of the Euronautic d.o.o. or a third party, unless those interests are exceeded by greater interests or fundamental rights and freedoms of data subjects who request the protection of their personal data.

• The data subject has given explicit consent to data processing.

Euronautic d.o.o. undertakes to process personal data legally, fairly and transparently with respect to the data subject, to collect them for special, explicit and legitimate purposes and not to process them further in a manner that is inconsistent with these purposes. The data will not be further processed for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.

The data legitimately processed by Euronautic d.o.o. are collected from the data subject during the establishment and course of the business relationship, during conversations with the data subject at the agency's office, during their use of Euronautic d.o.o. website, from electronic messages, letters and other documents, when concluding employment contracts with Euronautic d.o.o. employees and when performing other activities for which Euronautic d.o.o. is authorized.

In cases where personal data are not received directly from the data subjects, Euronautic d.o.o. commits to additionally provide to the data subject information on the categories of personal data concerned, the source of the personal data and whether they come from publicly available sources.

The aforementioned information will be disclosed to the data subject within a reasonable timeframe, depending on the circumstances of each specific case.

In certain cases, Euronautic d.o.o. may request the consent of the data subject to process their personal data for specific purposes. When the processing of the personal data of the data subject is based on their consent, the data subject shall have the right to withdraw their consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. It shall be as easy to withdraw as to give consent.

The fundamental rights of subjects whose personal data are being processed include:

- The right to be informed about the collection and any further processing of personal data;

- The right to withdraw the consent for personal data processing and to request the termination of the personal data processing;

- The right to inspect the personal data contained in the data collections;

- The right to rectify, amend or erase personal data contained in the data collections if such data are inaccurate or incomplete;

- The right to oppose the processing of data for marketing purposes;

- The right to object to the competent regulatory body;

- The right to object to the collection and processing of personal data, in which case Euronautic d.o.o. can no longer process the data unless they demonstrate convincing legitimate grounds for the processing, prescribed by the introductory Regulation or the positive legal regulations of the Republic of Slovenia, that exceed the interests, rights and freedoms of the data subjects; or if the further processing of the data is required for the establishment, exercise or defence of legal claims.

The data subject retains the right to obtain the erasure of personal data relating to them without unnecessary delay and the data controller has the obligation to erase personal data without unnecessary delay if one of the conditions prescribed by Article 17 of the Regulation (“the right to be forgotten”) has been met.

If Euronautic d.o.o. has the explicit and voluntary consent of the data subject at their disposal, they may use personal data to inform the data subjects about their products, services and offers that they find potentially important or interesting for them. Euronautic d.o.o. allows the data subject to request the termination of the marketing correspondence at any time.

Euronautic d.o.o. is obliged to safeguard the personal data of the subject in accordance with special legal regulations relating to the obligation of protecting certain data categories for a longer or shorter period of time.

Pursuant to its objective capabilities, Euronautic d.o.o. undertakes appropriate technical and organisational measures to ensure the necessary protection of personal data. These measures apply specifically to computers (servers and workstations), networks and communication connections, and applications.

Only authorized Euronautic d.o.o. employees who are familiar with the data confidentiality requirements are involved in data processing. They are prohibited from using the data for personal purposes or making them accessible to unauthorised parties. Employees whose access to such data is not necessary for the completion of their work tasks are also considered unauthorised parties in this context. The obligation of confidentiality also applies after the termination of employment.

Pursuant the legal provisions set forth in the Regulation, any data subject who may have an enquiry on how Euronautic d.o.o. uses their personal data or who wishes to file an objection to the processing of personal data can contact Euronautic d.o.o. in writing, at the official address of the company`s office or through the public, official e-mail address of the company booking@euronautic.hr. Euronautic d.o.o. undertakes to respond as quickly as possible to any objection or inquiry relating to the personal data of the person filing the enquiry/objection.