Osor Musical Evenings (hereinafter: OGV); OIB: 81918486607, with its registered office in Zagreb, Ozaljska 12, and a branch in Osor (Osor bb, 51554 Nerezine), acting as the data controller of your personal data, uses and protects all information you provide to us when using the website www.osorfestival.eu.
Personal data is any information relating to an identified or identifiable natural person. Specifically, personal data includes all information that establishes the user's identity (such as first and last name, e-mail address, residential address, etc.).
Processing of personal data is any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction, as well as the execution of logical, mathematical, and other operations with such data.
How do we collect personal data?
We collect your personal data, among other cases, in the following situations:
- if you contact us directly via our website to request information and inquiries through the ticket reservation form for our programmes
- if you are under 16 years of age, please do not provide us with any information without the consent of a parent or guardian.
How your data may be used
The use of personal data in accordance with data protection regulations must be justified on the basis of one of the legal grounds. Justified grounds for data processing include, among others, legitimate interest, contractual obligation, legal basis, and consent. We use processing based on legitimate interest for the purpose of promoting and providing information about our services, with the aim of maintaining the highest standards in the sale of services from our offer. The fundamental rights and freedoms of existing and potential customers are balanced against our interest in processing data for the specified purpose.
Personal data may be transferred to third parties provided there is a justified basis for the transfer, such as the fulfillment of a service or the execution of a contractual or legal obligation.
We are subject to the laws of the Republic of Croatia, as well as supranational regulations, and are obliged to comply with them, including providing your data to law enforcement, regulatory, and judicial authorities, as well as third-party litigants in connection with proceedings or investigations anywhere in the world where required. Where permitted, we will direct such a request to you or notify you prior to responding, unless doing so would affect the prevention or detection of crime.
Providing personal data for the purpose of compliance with mandatory data requests constitutes a legal obligation that depends on the specific request.
How we protect the security of your data
We use various security measures, including encryption and authentication, to protect and maintain the security, integrity, and availability of your data.
Among other things, we use the following measures:
– strict restriction of personal access to your data based on the "need-to-know" principle
– secure transmission of collected data.
All your data is stored on our secure servers and is accessed and used in accordance with our security policies and standards. The privacy of your data is permanent, and we take all necessary measures to protect it. We process personal data securely, including protection against unauthorized or unlawful processing and against loss.
By filling out the contact form for ticket reservations on the website www.osorfestival.eu, the User gives consent for the processing of their personal data provided in the registration form for a specific purpose (i.e., exclusively for concert ticket reservations).
We are committed to preserving the privacy of personal data for all Users, and we will handle it in accordance with the General Data Protection Regulation (EU) 2016/679 and other applicable national regulations. We must not and will not unauthorizedly use or make available to third parties the collected personal data of registered users and website visitors, except in cases permitted by special law, when it constitutes our legal obligation, or when necessary for the fulfillment of contractual obligations.
We undertake not to misuse personal data from the ticket reservation form or collected via cookies, nor to pass them on to third parties without your permission, except in cases expressly prescribed by law and when necessary for the fulfillment of obligations. Personal data is considered to be any data that identifies the User (such as first and last name, e-mail address, etc.), which is used for the purpose of contract execution, statistics, and potential sending of special offers and newsletters to registered users, based on specifically obtained consent.
All your data is strictly guarded and is available only to employees who need that data to perform their work. All our employees and business partners are responsible for respecting the privacy protection principle. We commit to protecting your personal data by collecting only basic user and potential buyer data necessary for fulfilling obligations or executing contracts. Data automatically recorded upon accessing the website (IP address, domain name, browser type, number of visits, time spent on pages, etc.) will be used exclusively to evaluate website traffic and improve its content and functionality, i.e., for statistical and security purposes.
In accordance with the General Data Protection Regulation, the Act on the Implementation of the General Data Protection Regulation, and other data protection regulations, with the aim of protecting the confidentiality of personal data, we specifically undertake to handle User data lawfully and in good faith; to collect data exclusively for precisely defined and lawful purposes; not to forward data to any third party without your prior consent; not to forward your personal data to countries outside the EU area if that country does not ensure an adequate level of data protection; to ensure appropriate and secure storage of your personal data, in a way that does not exceed the purpose for which the data was collected and is processed; to ensure the accuracy of your personal data; to ensure the processing of personal data only for the time and purpose necessary; to take all necessary and appropriate technical and organizational measures to prevent the destruction, damage, or loss of personal data.
In the event that you no longer wish us to process your data in any way, or if you request the deletion, correction, or transfer of your data, please notify us via email at osorskeveceri@gmail.com
We may contact you to verify the authenticity of the request. Data that must be kept after the termination of a potential subscription in accordance with accounting and tax law regulations will not be deleted.
The user data retention period lasts for 5 (five) years from the date of termination of the business relationship or until the receipt of a deletion request from the individual to whom the personal data relates, after which the personal data is deleted. We retain personal data longer than the specified period only if it is mandatory under applicable regulations in the Republic of Croatia or supranational legislation.
If you have any complaints regarding the processing of your data, you can file a complaint with the competent state authority, in accordance with the General Data Protection Regulation and national legislation.
