NadaPrivacy Policy
1. Data controller
[OWNER / COMPANY NAME], Put Vicka Cvitanovića 1, 21222 Marina, Croatia, OIB: [OIB] (the "Controller") operates the website marina-apartman.com and the Holiday Home Nada accommodation. Data protection contact: info@marina-apartman.com. We process personal data lawfully, fairly and transparently, collect only what each purpose requires, and protect it with appropriate technical and organisational measures (Art. 5 and 32 GDPR).
2. Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Booking inquiries and replies | name, email, phone (optional), dates, message | steps prior to a contract — Art. 6(1)(b) GDPR | 12 months from last contact |
| Reservations and payments | booking and payment confirmation data (card data is processed solely by the payment provider CorvusPay; we never see or store card numbers) | contract — Art. 6(1)(b); legal obligation (accounting) — Art. 6(1)(c) | legal retention periods (up to 11 years under Croatian accounting law) |
| Consent records | consent ID, timestamp, IP address, form version | legal obligation to demonstrate consent — Art. 7(1) | 5 years after withdrawal/expiry |
| Website security logs | IP address, technical browser data | legitimate interest — Art. 6(1)(f) | up to 12 months |
| Analytics cookies (only if activated) | pseudonymous usage statistics | consent — Art. 6(1)(a), via the cookie banner | per cookie duration (see Cookie Policy) |
We do not use profiling or automated decision-making with legal or similarly significant effects. Special categories of data (health, beliefs etc.) are not requested — please do not send them.
3. Recipients and transfers
Data is accessible only to authorised persons. Processors under Art. 28 GDPR: Cloudflare, Inc. (website hosting and email delivery infrastructure) and, when card payment is activated, Corvus Pay d.o.o. (Zagreb, Croatia) as payment processor. Availability synchronisation with Booking.com and Airbnb exchanges calendar dates only — no guest personal data. If you load the embedded Google Map, Google Ireland Ltd. processes data as an independent controller. Transfers to the USA (Cloudflare, Google) are covered by the EU–US Data Privacy Framework and/or Standard Contractual Clauses. We never sell or rent personal data.
4. Your rights
You have the right of access (Art. 15), rectification (16), erasure / "right to be forgotten" (17), restriction of processing (18), data portability (20), objection including to direct marketing (21), and the right to withdraw consent at any time without consequences (Art. 7(3)). Send requests to info@marina-apartman.com — we respond within 30 days, free of charge; identity verification may be required. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, or with your local supervisory authority.
5. Security
The site is served exclusively over encrypted connections (TLS/HTTPS). Access to inquiry data is limited to the hosts, protected by access controls. In the event of a personal data breach we will notify AZOP within 72 hours where required (Art. 33–34 GDPR).
Cookie Policy
Cookies are small text files stored on your device. Related technologies (localStorage, pixels) are treated the same way. Non-necessary cookies are activated only after your explicit consent in the banner, where "Reject all" is as easy as "Accept all". You can change or withdraw your choice at any time via the Manage cookies link in the footer. Consent is stored for 6 months, after which we ask again.
Cookie categories
| Category | Purpose | Set by | Duration | Consent |
|---|---|---|---|---|
| Necessary | basic site functions, storing your cookie choice | marina-apartman.com, Cloudflare | up to 6 months | No (legitimate interest) |
| Analytics | anonymous visit statistics | Google Analytics 4 (only if activated) | up to 2 years | Yes |
| Marketing | personalised ads, remarketing | currently none in use | — | Yes |
| Functional | remembering preferences, embedded Google Map | up to 12 months | Yes |
Detailed list
| Cookie | Domain | Purpose | Duration |
|---|---|---|---|
| cookie_preferences | marina-apartman.com | stores your cookie choices (proof of consent) | 6 months |
| __cf_bm | .marina-apartman.com (Cloudflare) | bot protection | 30 minutes |
| _ga, _ga_* | marina-apartman.com (Google Analytics 4 — only after analytics consent and only once GA4 is activated) | distinguishing visitors, session state | 2 years |
| Google Maps cookies | google.com (only after you click "Load map") | map functionality | per Google's policy |
Third-party cookies are governed by their providers' policies: Google, Cloudflare. You can also delete cookies in your browser settings (Chrome, Firefox, Safari, Edge — see "Privacy" / "Cookies" in each browser's settings).
Changes
We may update this policy; the current version with its effective date is always published on this page. Significant changes will be highlighted on the website.