Effective Date: 06-Aug-2025
Last Updated: 06-Aug-2025
You can change your cookie preferences any time by clicking the above button. This will let you revisit the cookie consent banner and change your preferences or withdraw your consent right away.
In addition to this, different browsers provide different methods to block and delete cookies used by websites. You can change the settings of your browser to block/delete the cookies. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers.
Chrome: https://support.google.com/accounts/answer/32050
Safari: https://support.apple.com/en-in/guide/safari/sfri11471/mac
Internet Explorer: https://support.microsoft.com/en-us/topic/how-to-delete-cookie-files-in-internet-explorer-bca9446f-d873-78de-77ba-d42645fa52fc
If you are using any other web browser, please visit your browser’s official support documents.
This Data Protection Policy (“Data Protection Policy”) stipulates the rules for personal data protection in the company SUNČANI HVAR d.d., Ive Miličića 3, 21 450 Hvar, OIB 29834131149 (“Company”). It provides for the rules of personal data protection and reflects the data privacy rules required by the GDPR and other national data privacy legislation.
The Company takes personal data protection seriously and handles the personal data with sufficient carefulness and responsibility when performing its business activities. A personal data breach may result in serious legal and economic consequences for the Company, its employees and data subjects. It may also cause damage to the company’ reputation. Through the implementation of the Data Protection Policy across the Company, the risks of, and arising from, breaching data protection will be minimised.
This Data Protection Policy is binding for the Company and its employees. It relates to all personal data processing to which the GDPR and the national legislation apply.
The following articles describe the procedures followed by the Company when processing the personal data. Furthermore, they provide a brief description of the split of the competencies and key roles in the Company in the area of personal data processing.
The Company has taken and shall continue to take appropriate technical and organisational measures in order to ensure the protection of the personal data against misuse, loss and damage, and to treat them in accordance with the GDPR and the national legislation in the area of data privacy. The data protection applies to the processing of the personal data of the Company’ partners, employees, their family members, job applicants, customers and other individuals whose personal data are processed by the Company.
The Company respect the basic principles stipulated by the GDPR in processing the personal data. The respective basic principles are listed below:
The personal data processing is always based on the lawful bases, which include the consent to the personal data processing, compliance with a legal obligation, the performance of a contract, the legitimate interest, the public interest or the protection of the interests of the data subject.
Special categories of personal data and personal data relating to criminal issues are especially sensitive and therefore a high degree of protection is applied. Any processing of special categories of personal data is consulted with the DPO.
The Company may only make personal data available to third parties (including a personal data transfer within the group) under certain conditions. Personal data may only be available to a third party acting as a processor based on a personal data processing agreement. Personal data may also be available to another third-party acting as a controller or a joint-controller based on relevant contractual agreements.
In case there are requirements for rectification or erasure of the personal data or for processing restrictions, under certain circumstances, the Company notifies the relevant third parties to which the personal data were made available, unless this is not feasible or requires an inadequate effort. The Company informs a data subject on the third parties to which the concerned personal data were disclosed, only if required to do so by the data subject.
Under certain conditions, the Company can also transfer personal data to third countries outside the EEA or the European Union or to the international organisations. To assess legal conditions under which personal data may be transferred to third countries or to international organisations, the Company addresses the DPO for consultations.
The Company takes all necessary steps to execute the rights of the data subjects stipulated by the GDPR. In respect of the personal data processing, data subjects have the rights comprising the right of access to personal data, the right to rectification, processing restriction, portability or erasure of personal data, the right to object to the personal data processing and the right not to be a subject to a decision based exclusively on the automated personal data processing.
The data subjects can request the exercise of their rights via a written or oral request. In order to provide the sufficient protection of the personal data processed by the Company and to prevent personal data misuse from taking place, the Company has introduced rules for the verification of the identity of the data subjects stated below.
Written request
To request the exercise of the particular right in writing, the data subjects shall fill in the request form attached to this Data Protection Policy or available from the DPO. The data subjects’ signatures on the requests forms need to be officially certified. You may be able to have your signature certified at a notary public office, attorney-at-law, consulate or in case of delivery of request by e-mail on DPO’s address, you may verify your signature with electronic signature. If a written request is submitted directly to the Company’s premises, signature verification is not required, but it is sufficient to personally access it with the presentation of a valid ID.
Oral request
Data subjects may also request the exercise of their particular right in person, in Company’s registered seat at address: Ive Miličića 3, 21 450 Hvar, Croatia. Your identity will be verified by the Company’s designated employee (e.g. at a front desk), based on the submission of one of the following documents: personal ID card, passport or other document with a photo sufficiently eligible to enable your clear identification.
The exercise of data subjects’ rights shall not affect the rights of the third parties. Should the requests submitted by data subjects be manifestly unfounded or excessive, in particular because of the repetitive character, the Company may require a reasonable fee, not exceeding the necessary costs of the provision of the above stated information or arranging the exercising of the data subjects’ rights, for the purposes of responding to their request.
The Company ensures sufficient communication and cooperation in order to process all received requests in adequate time. The Company’s departments closely cooperate to provide the concerned data subject with a response within the statutory periods.
The Company and its statutory bodies are responsible for ensuring compliance with the GDPR and the relevant national data privacy legislation.
The Company has appointed a DPO with the functional and organisational responsibility for compliance with the legal regulations and internal regulations of the Company concerning the personal data protection.
The DPO can be contacted via e-mail [email protected] or via post at the address Ive Miličića 3, 21 450 Hvar, Croatia.
All data owners within the Company and all employees are obliged to process the personal data in compliance with the Company’ internal policies, the GDPR and other national data privacy legislation.
The Company report any alleged breach of the personal data security to the DPO immediately, in any case no later than within 24 hours. If the breach of personal data meets the requirements for reporting to the respective supervisory authority and/or data subjects, the DPO fulfils this obligation within 72 hours from the personal data breach.
The Company processes personal data only for a necessary time. Personal data are erased or anonymised under the following circumstances:
The Company puts an emphasis on observing the necessary security measures during erasure or anonymization.
The Company may publish personal data in the Intranet, the Internet or any other media only with a consent of the concerned data subject, unless there is another legal basis in specific cases.
In case of any questions in relation to the GDPR requests kindly contact us by email address [email protected]. Please be reminded that email communication is not 100% safe mean of communication and its safety, source or delivery is not guaranteed.
An identified or identifiable individual whose personal data are processed; an identifiable individual is an individual who can be identified either directly or indirectly, predominantly with reference to a certain identifier, such as a name, identification number, location data, online identifier or one or more special elements of the physical, physiological, genetic, psychical, economic, cultural or social identity of the individual.
A natural or legal person, public authority, agency or another body which, alone or jointly with others, determines the purposes and means of personal data processing.
A natural or legal person, public authority, agency or another body which processes personal data on behalf of the controller.
Any information on the identified or identifiable individual.
Personal data providing information on racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership and the processing of genetic data, biometric data for the purposes of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Legislation on Personal Data Protection adopted by Member States in accordance with GDPR.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Data Protection Officer.
Information not relating to an identified or identifiable individual, including personal data anonymised so that the data subject is not or ceased to be identifiable.
Any legal entity or individual who is not the Company’s employee, except for data subjects.
Any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
Appendix no. 1-Request Form
RECEPTION
✓ One glass of Champagne toast at welcome
✓ Local premium Hvar white and red wine
✓ International and domestic selection of soft drinks and bottled water
✓ Premium selection of roasted and natural nuts; dried fruits, locally sourced seasoned olives with and gourmet grissini collection
✓ Selection of three Hours d’Oeuvres per person chosen from premium gourmet menu
FOUR COURSE DINNER
✓ Choice of four course menu ( combination of appetizer , soup or salad , entree and dessert)
✓ One bottle of premium white or red 0,751 wine from Hvar and one bottled of water per 2 persons
✓ Freshly brewed coffee and international selection of tea
✓ One glass of Champagne toast per person
AFTER DINNER
✓ International and domestic selection of soft drinks and bottled water
✓ Domestic bottled beer
✓ Local premium Hvar red and white wine
✓ Two midnight snacks per person
✓ *additional menu enhancements available
EVENT SETUP
✓ Round tables with white tablecloths
✓ Chairs with white covers
✓ Cutlery, glasses and white linen napkins
✓ Diamond package price is based on seasonality.
✓ Package is based on a minimum of 50 adult guests per event
✓ Private rental fee starting from 5 pm till 1 am is not included in above price and is additional charge.
RECEPTION
✓ One glass of Prosecco toast at welcome
✓ Local premium Hvar white and red wine
✓ International and domestic selection of soft drinks and bottled water
✓ Premium selection of roasted and natural nuts; seasoned olives and grissini collection
FOUR COURSE DINNER
✓ Choice of four course menu
✓ (two choices consisted of appetizer, soup or salad , entree and dessert )
✓ One bottle of premium white or red 0,751 wine from Hvar and one bottled of water per 2 persons
✓ Freshly brewed coffee and international selection of tea
AFTER DINNER
✓ Open bar featuring top shelf international libations (detailed list available) International and domestic selection of soft drinks and bottled water
✓ Domestic bottled beer
✓ Local premium Hvar red and white wine
✓ Two midnight snacks per person
✓ *additional menu enhancements available
EVENT SETUP
✓ Round tables with white tablecloths
✓ Chairs with white covers
✓ Cutlery, glasses and white linen napkins
✓ Platinum package price is based on seasonality.
✓ Package is based on a minimum of 50 adult guests per event
✓ Private rental fee starting from 5 pm till 1 am is not included in above price and is additional charge.
