Data Protection

Data Protection


Data Protection imanjetosca.hr

Welcome to the data protection policy of imanjetosca.hr. This policy will help you understand how we collect, use and store your personal data in accordance with GDPR.

Last updated: 23. October 2025.

Introduction

Imanje Tosca (hereinafter: "Company") with address Šulinec 87, 10380 Sveti Ivan Zelina, pays special attention to the protection of personal data of its users in accordance with the General Data Protection Regulation (GDPR) and Croatian legislation. Our company organizes weddings, family celebrations and private parties in the beautiful environment of Prigorje.

This policy explains how we collect, use, store and share your personal data when you use our website and our services. We are committed to protecting your privacy and transparency in handling personal data.

By using our website and services, you agree to the collection and use of information in accordance with this policy.

Data owner and controller

ABC RENT - Tent rental, catering equipment and hospitality

Registration number: 90026454

Šulinec 87, 10380 Sveti Ivan Zelina

Owner email: info@imanjetosca.hr

+385 (0)99 616 6188 +385 (0)99 616 6188

Categories of personal data we process

Contact data (through contact form)

First and last name, email address, phone number, message with inquiry about the event

Technical data (automatically collected)

IP address, browser type, operating system, pages you visit, visit time (Google Analytics)

Consent data

Cookie settings and consent to use trackers (cookieConsent, analyticsConsent, marketingConsent)

Purposes of personal data processing

Communication with potential clients

We process your personal data to respond to inquiries through the contact form, provide information about our services and communicate about event reservations.

Website security

We use Google reCAPTCHA v3 to protect the contact form from spam messages and automated attacks.

Website usage analysis

We use Google Analytics 4 to analyze website usage, improve functionality and understand user behavior (with your consent).

Legal obligations

We process data to fulfill legal obligations: maintaining client records and archiving communication.

Your rights under GDPR

Right of access (Article 15 of GDPR)

You have the right to request confirmation as to whether we process your personal data and, if we do, access to personal data and the following information: purposes of processing, categories of personal data, recipients or categories of recipients, retention period, existence of rights to rectification, erasure or restriction of processing.

Right of rectification (Article 16 of GDPR)

You have the right to request rectification of inaccurate personal data concerning you. Taking into account the purposes of processing, you have the right to request completion of incomplete personal data.

Right of erasure (Article 17 of GDPR)

You have the right to request erasure of personal data in the following cases: personal data are no longer necessary for the original processing purposes, you have withdrawn consent to processing, personal data have been processed unlawfully, erasure is necessary to fulfill a legal obligation.

Right of restriction of processing (Article 18 of GDPR)

You have the right to request restriction of processing in the following cases: you contest the accuracy of personal data, processing is unlawful and you object to erasure, we no longer need personal data but you need them for a legal proceeding, you have objected to processing.

Right of data portability (Article 20 of GDPR)

You have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer that data to another controller.

Right of objection (Article 21 of GDPR)

You have the right to object to processing of personal data concerning you, including profiling, if processing is based on legitimate interests or public interests.

Right of withdrawal of consent

When processing is based on consent, you have the right to withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.

Data retention period

We retain your personal data for the following periods:

Contact inquiries: 3 years from last communication

Event reservations: 7 years (for accounting purposes)

Newsletter subscriptions: until consent is withdrawn

Technical data (cookies): up to 2 years

Security measures

We take appropriate technical and organizational measures to protect your personal data:

Technical measures

SSL encryption for all data in transit, secure storage of data on protected servers, regular security checks and updates, antivirus protection and firewall, regular data backups.

Organizational measures

Limited access to data only by authorized persons, staff training on data protection, confidentiality agreements with partners, regular security measure checks, documented procedures for data handling.

How to exercise your rights

To exercise your rights, you can contact us:

E-mail: info@imanjetosca.hr

Telefon: +385 (0)99 616 6188

Poštom: Imanje Tosca, Šulinec 87, 10380 Sveti Ivan Zelina

We will respond to your request within 30 days of receiving the request. We may extend the deadline by an additional 60 days if necessary, of which we will notify you.

Supervisory authority

The supervisory authority for personal data protection in the Republic of Croatia is the Personal Data Protection Agency (AZOP). Users have the right to file a complaint with AZOP if they believe their personal data protection rights have been violated.

AZOP contact: