Privacy Policy
Your privacy and the protection of your personal data are of utmost importance to us. This Privacy Notice (hereinafter: “Notice”) describes how we collect, use, share, and protect your personal data when you visit or use our website, services, applications, and other platforms (hereinafter: “Services”).
What data do we collect?
When you use our Services, we may collect the following information related to you:
Contact information: full name, email address, phone number, address.
Usage information: details about how you use our Services, including time, duration, and manner of use.
Technical information: IP address, browser type, browser version, and cookies we use to improve user experience.
Data you enter in the contact web form, including your email address entered for the purpose of receiving a reply.
Other data you voluntarily submit to us.
Delivery information such as delivery address.
Purposes for which we use your data
We use your personal data for the following purposes:
To provide, improve, and personalize our Services.
To communicate with you, including responding to your inquiries.
For marketing purposes, with your prior consent.
To comply with legal obligations.
To fulfil specific purposes defined by the website owner for the processing of visitor data.
Who is responsible for processing my data?
The website owner (Hotel Sv. Ana), as the data controller in accordance with the General Data Protection Regulation (hereinafter: “GDPR”), is responsible for the processing of personal data relating to you.
To whom is my data disclosed?
Data relating to you may be disclosed to our partners and subcontractors acting as data processors in accordance with Article 28 of the GDPR if we engage them for certain tasks involving the processing of personal data.
For example, we use WIX.com LTD (“WIX”) as our website service provider. All information about WIX’s processing of personal data can be found in their Privacy Policy at https://www.wix.com/about/privacy.
Please note that in such cases, as the data controller, we remain responsible for the processing of your data.
In addition, your data may be shared with our partners who provide services to you independently, regardless of your relationship with us — for example, if you order services from our partners through us, or give consent for sharing your data with them, or if we include partners in processing based on a legal basis.
Finally, we may disclose data to public authorities when required to do so by law.
Is my data subject to automated processing?
We do not use your data for automated decision-making processes.
How long do we retain your personal data?
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected.
For example, we retain your email address for newsletter delivery only as long as you remain subscribed to receive our newsletters.
Where is my personal data processed?
Your data is primarily processed in the Republic of Croatia and in other countries of the European Union or the European Economic Area (EEA).
Only exceptionally do we transfer your data to so-called third countries, in which case we ensure adequate safeguards for the protection of personal data, such as using the European Commission’s Standard Contractual Clauses or transferring data to countries deemed to provide an adequate level of protection under an adequacy decision of the European Commission.
Your rights regarding your data
In accordance with the GDPR, you have the following rights:
Right of access: You may request information on whether data relating to you is being processed, the categories of personal data, the purposes of processing, any recipients of your data, and the retention period (Article 15 GDPR).
Right to rectification: You may request the correction of inaccurate personal data or completion of incomplete data (Article 16 GDPR).
Right to erasure: You may request the deletion of your personal data in accordance with Article 17 GDPR.
Right to restriction of processing: You may request restriction of the processing of your personal data in accordance with Article 18 GDPR.
Right to object: You may object to the processing of your personal data based on legitimate interests in accordance with Article 21(1) GDPR.
Right to data portability: You may request that your personal data, which you have provided to us, be transferred to another service provider in a structured, commonly used, and machine-readable format (Article 20 GDPR).
Right to withdraw consent: You may withdraw your consent at any time, and your data processed on the basis of that consent will no longer be used.
To exercise your rights, please contact us at [ivojugovic@gmail.com].
You also have the right to lodge a complaint with the supervisory authority — the Croatian Personal Data Protection Agency (AZOP).
Cookies and tracking technologies
We use cookies and similar technologies to enhance your user experience and to analyze the use of our Services. You can control the use of cookies through your browser settings.
For more details on the cookies we use and their purposes, please see our Cookie Policy page.
Data security
We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.
Updating this Privacy Policy
This Privacy Policy may be updated periodically. You will be notified of any changes via our website.
Contact information
For any questions regarding the collection or processing of your personal data, or regarding this Notice, you can contact us at [ivojugovic@gmail.com].