Privacy policy

Privacy Policy

1. Data Controller

The controller responsible for data processing on this website is:

Mirna Stanimirović
Barat 16b
52352 Barat
Croatia
Email: info@villa-valhalla.com.hr

This website is operated to market and manage enquiries for a private holiday villa rental.

2. Data We Collect

Contact Form

When you submit an enquiry, we collect the following information:

  • Name
  • Email address
  • Preferred dates of stay
  • Number of guests
  • Message or special requests

This data is processed solely to respond to your enquiry and, where applicable, to prepare or fulfil a booking.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures).

Technical Data

When visiting this website, certain technical data is collected automatically, including:

  • IP address
  • Browser type and version
  • Operating system
  • Referrer URL
  • Pages visited and interaction data

This data is used to ensure the secure and stable operation of the website.

Legal basis: Art. 6(1)(f) GDPR (legitimate interest).

3. Cookies

This website uses cookies to store your consent preferences. The cookie stiner_cc is a first-party cookie that records which cookie categories you have accepted or rejected. It does not contain any personal data. It expires after 365 days and can be deleted at any time via your browser settings.

Non-essential cookies (analytics, external content) are only set after you give explicit consent via the cookie banner. You can change or withdraw your consent at any time by clicking Cookie Settings in the footer.

4. Google Analytics

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics collects the following data: pages visited, session duration, approximate geographic location (country/city), device type, browser type and version, operating system, and referring URL. IP addresses are anonymised before storage.

This data is used solely to understand how visitors use this website in order to improve it.

Legal basis: Art. 6(1)(a) GDPR — your consent, given via the cookie banner.

Data transfer: Data may be processed on Google's servers, including in the United States. Google LLC participates in the EU–US Data Privacy Framework (adequacy decision of 10 July 2023), which ensures an adequate level of data protection.

Retention: Analytics data is retained for 2 months in Google Analytics settings.

Opt-out: You can withdraw your consent at any time by clicking Cookie Settings in the footer. You can also install the Google Analytics opt-out browser add-on.

For further information, see Google's Privacy Policy.
 

5. Matomo Analytics

This website uses Matomo, an open-source web analytics platform hosted exclusively on our own server. No data is shared with or transmitted to any third party.

Matomo collects the following data: pages visited, session duration, approximate geographic location (country/region), device type, browser type and version, operating system, and referring URL. IP addresses are anonymised before storage. No cookies are set. Matomo respects your browser's Do Not Track (DNT) signal. If DNT is enabled in your browser, no data is collected.
Because no cookies are used and IP addresses are anonymised, no personal data is stored or processed. All analytics data remains exclusively on our server hosted in Switzerland (cyon GmbH, Basel).

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in understanding how visitors use this website in order to improve it. As no personal data is processed, no consent is required.

6. Google Maps

This website embeds Google Maps to display location information. Data is only transmitted after consent has been given.

Google Maps is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When the map is loaded, data such as your IP address and the pages you visit may be transmitted to Google. For more information, see Google's Privacy Policy.

7. reCAPTCHA

We use Google reCAPTCHA (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to protect our contact form against automated spam and abuse. reCAPTCHA analyses user behaviour and transmits data including IP address and browser information to Google. For more information, see Google's Privacy Policy.

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in protecting the website from spam.

8. Hosting

This website is hosted by:

cyon GmbH
Brunngässlein 12
4052 Basel, Switzerland

Data processing is carried out under a data processing agreement pursuant to Art. 28 GDPR. Switzerland is recognised as providing an adequate level of data protection.

9. Data Retention

  • Enquiries: up to 12 months
  • Booking-related data: according to legal obligations
  • Server logs: up to 30 days

10. Your Rights

You have the following rights under GDPR:

  • Access (Art. 15)
  • Rectification (Art. 16)
  • Erasure (Art. 17)
  • Restriction (Art. 18)
  • Data portability (Art. 20)
  • Objection (Art. 21)
  • Withdrawal of consent (Art. 7)

11. Complaints

You have the right to lodge a complaint with a supervisory authority.

The competent supervisory authority in Croatia is: Agencija za zaštitu osobnih podataka (AZOP) azop.hr

12. Updates

We may update this policy from time to time to reflect legal or operational changes.