1.
Pursuant to Article 13(1) of the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), we inform you that the controller of your personal data is: Murter Sunny House – STAY IN MURTER d.o.o., Tunsićka ulica 1A, 22243 Murter, Croatia

2.
You may contact Murter Sunny House by:
a) Phone: +48 887 235 675
b) Email: info@murtersunnyhouse.com

3.
Personal data obtained in connection with entering into an agreement will be processed for the following purposes:
a) Contract execution,
b) Claims handling and defense,
c) Fulfilling statutory obligations (e.g., accounting, tax),
d) Responding to your letters, requests, and complaints,
e) Responding in ongoing legal proceedings.

4.
The legal basis for processing your data is:
a) Necessity for contract performance or actions at your request before contract execution (Article 6(1)(b) GDPR),
b) Necessity for compliance with a legal obligation (Article 6(1)(c) GDPR),
c) Legitimate interests pursued by the controller (Article 6(1)(f) GDPR).

5.
Providing personal data is voluntary but necessary for contract execution. Failure to provide data will result in the inability to conclude the contract.

6.
Your personal data may be disclosed to:
a) Authorized employees and collaborators of Murter Sunny House,
b) Entities providing services on our behalf (e.g., postal services, banks, telecommunication companies),
c) Entities processing data on our behalf (subcontractors),
d) Public bodies or entities entitled to obtain data based on legal regulations, e.g., courts, law enforcement, or state institutions.

7.
Your data will not be transferred to third countries (outside the European Economic Area).

8.
The period of processing your personal data depends on the purpose of processing. The retention period is calculated based on the following criteria:
a) Duration of the contract,
b) Legal regulations requiring data processing for a specified time,
c) Period necessary to protect Murter Sunny House’s interests,
d) Time during which the data remains relevant for the purpose it was collected.

The longest applicable period will always prevail, but the scope of processed data may vary.

9.
You have the right to request:
a) Access to your personal data,
b) Correction of inaccurate or incomplete personal data,
c) Deletion of your personal data, particularly if you withdraw consent or no other legal basis for processing exists,
d) Restriction of personal data processing,
e) Objection to data processing due to your particular situation when your data is processed based on our legitimate interests or for direct marketing purposes,
f) Data portability,
g) Filing a complaint with the supervisory authority for personal data protection. GDPR specifies the scope and conditions for exercising these rights.

10.
If your data is processed based on consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Consent can be withdrawn by sending a statement to Murter Sunny House via mail or email.

11.
We do not use systems for automated decision-making.