This Privacy Policy explains how we collect, use, and protect your personal data when you use our luxury villa and apartment rental services in Hvar, Croatia. We are committed to protecting your privacy in compliance with the General Data Protection Regulation (GDPR) and Croatian data protection laws. Please read this document carefully to understand our practices regarding your personal information.
Last Updated: March 5, 2025
Welcome to Hvar Luxury Villas and Apartments (hereinafter referred to as "we", "us", or "our"). We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our application (the "App") and services related to luxury villa and apartment rentals in Hvar, Croatia.
This Privacy Policy complies with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Croatian Personal Data Protection Act (Official Gazette No. 106/12).
For the purposes of applicable data protection laws, the data controller is:
HVAR HOUSE
JURJA MATIJEVICA 17
OIB: 89542865131
Email: [email protected]
Phone: +385 97 675 0979
We may collect and process the following personal data:
We process your personal data on the following legal bases:
Processing necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract (booking accommodations).
Processing necessary for our legitimate interests, such as managing our business, providing personalized services, and ensuring the security of our App.
Where you have given clear consent for us to process your personal data for a specific purpose.
Processing necessary for compliance with a legal obligation to which we are subject.
We process your personal data for the following purposes:
We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
To determine the appropriate retention period, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure, the purposes for which we process your personal data, and whether we can achieve those purposes through other means, as well as applicable legal requirements.
Key Retention Periods: In general, we will keep your basic personal data (name, address, contact details) for a period of 3 years after your last transaction or communication with us.
We may share your personal data with:
If we transfer your personal data outside the European Economic Area (EEA), we ensure that appropriate safeguards are in place to protect your personal data, including standard contractual clauses approved by the European Commission.
Under the GDPR and Croatian law, you have the following rights:
The right to obtain confirmation as to whether personal data concerning you is being processed and access to that data.
The right to have inaccurate personal data rectified and incomplete personal data completed.
The right to have your personal data erased in certain circumstances.
The right to restrict the processing of your personal data in certain circumstances.
The right to receive your personal data in a structured, commonly used, and machine-readable format.
The right to object to the processing of your personal data on grounds relating to your particular situation.
Where processing is based on consent, you have the right to withdraw consent at any time.
You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence.
To exercise any of these rights, please contact us using the details provided in Section 2.
We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no method of transmission over the Internet or method of electronic storage is 100% secure.
Our App uses cookies and similar technologies to distinguish you from other users. This helps us provide you with a good experience when you use our App and allows us to improve it. You can set your browser to refuse all or some browser cookies, or to alert you when websites set or access cookies.
For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy.
Our App is not intended for children under the age of 16, and we do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data without parental consent, please contact us, and we will take steps to delete such information.
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.
If you have any questions about this Privacy Policy or our data practices, please contact us at:
Croffers, turisticka agencija, vl. Sanja Marić
Jurja Matijevića 17, Hvar
Email: [email protected]
Phone: +385 97 675 0979
You may also contact the Croatian Personal Data Protection Agency with any concerns:
https://azop.hr/en/
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, or misuse. We regularly review and update these measures.
Yes, under the GDPR, you have the right to request erasure of your personal data in certain circumstances. Contact us at [email protected] to make such a request.
We retain your personal data for as long as necessary to provide our services to you and as required for legal and regulatory obligations. Typically, we keep basic contact information for 3 years after your last interaction with us.
We only share your data with service providers necessary to provide our services, property owners/managers for booking purposes, and when required by law. We have appropriate data protection agreements in place with all third parties.
Under the GDPR, you have various rights including the right to access, rectify, erase, restrict processing, data portability, and object to processing. You can exercise these rights by contacting us directly.