Back to the villa

Privacy policy

Last updated: 25 October 2026.

Data controller

The controller of personal data on this website is Marija Kadoić Balaško, Matije Vlačića 24, 52220 Labin, Croatia, tax ID (OIB) 56969571050. Contact: info@villakatarina.eu.

What data we process and why

  • Booking enquiry: the name, email address, arrival and departure dates, number of guests and message you enter in the form. We use them only to reply and to arrange your stay (legal basis: steps taken at your request before entering into a contract, Art. 6(1)(b) of the General Data Protection Regulation, GDPR).
  • Phone, email and WhatsApp: if you call or write to us, we process the data you give us in order to answer your enquiry. Messages sent via WhatsApp also pass through that service (Meta Platforms), whose own privacy policy applies to it.
  • Server logs: the server hosting the website temporarily records your IP address and technical details of the visit for security and correct operation (legitimate interest, Art. 6(1)(f) GDPR).
  • Bot protection: when you send an enquiry or ask to see our phone number, Cloudflare Turnstile checks that you are a person and in doing so processes your IP address and browser details (legitimate interest, Art. 6(1)(f) GDPR; Cloudflare, Inc., USA).

Cookies and local storage

The website uses no cookies for tracking, analytics or advertising. The only cookie is “vk-lang”, which remembers the language you chose (it lasts one year). While you switch language, your browser also briefly remembers which part of the page you are reading (sessionStorage); this is deleted when you close the tab. For this reason no cookie banner is needed.

Map

The map on the website is loaded from OpenStreetMap. In doing so, the servers of the OpenStreetMap Foundation receive your IP address and browser details. See their privacy policy: https://osmfoundation.org/wiki/Privacy_Policy.

Recipients of data

We do not sell data. Service providers acting on our instructions may have access to it: the website’s hosting provider (Vercel Inc., USA, under EU standard contractual clauses) and the provider of the email or enquiry-handling service. We may be required to pass guest data to the authorities where the law demands it (e.g. registration of tourists’ stays).

Retention

We keep enquiries only as long as needed to reply and arrange a stay. If a stay takes place, we keep the data for as long as the regulations require (e.g. accounting and tourism rules).

Your rights

  • the right to access your data, to have it corrected and erased,
  • the right to restrict processing and to data portability,
  • the right to object to processing based on legitimate interest.

You can send a request to info@villakatarina.eu. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), www.azop.hr, or with the supervisory authority of your own country.

Links to other websites

Links to Facebook, Instagram and Google Maps lead to third-party sites, whose own privacy rules apply to their processing.