Privacy Policy
Last updated: February 2026
Villa Tunera, located at Porat bb, 51511 Malinska, Island of Krk, Republic of Croatia (hereinafter "we", "us", or "our"), is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the EU General Data Protection Regulation (GDPR — Regulation EU 2016/679) and the Croatian Act on Implementation of the General Data Protection Regulation (Official Gazette 42/2018).
For any questions regarding your personal data, please contact us at: info@villatunera.com
1. Personal Data We Collect
We may collect the following categories of personal data:
- Contact information — name, email address, phone number
- Booking information — check-in and check-out dates, number of guests, country of residence, special requests
- Communication data — messages sent through our contact form or email
- Technical data — IP address, browser type, device information, and pages visited (collected through analytics cookies only with your consent)
2. Purpose and Legal Basis of Processing
We process your personal data for the following purposes and on the following legal bases:
- Accommodation bookings — to process and manage your reservation (legal basis: performance of a contract)
- Communication — to respond to your inquiries via our contact form (legal basis: legitimate interest)
- Legal obligations — to comply with Croatian laws, including guest registration through the eVisitor system (legal basis: legal obligation)
- Website analytics — to analyze website usage and improve our services using Google Analytics (legal basis: your consent)
3. Cookies and Tracking Technologies
Our website uses the following types of cookies:
- Essential cookies — necessary for the website to function properly. These do not require consent.
- Analytics cookies — Google Analytics (GA4) helps us understand how visitors use our website. These cookies are only placed after you give your explicit consent.
You can manage your cookie preferences at any time through the cookie banner. If you decline analytics cookies, Google Analytics will not be loaded and no tracking data will be collected.
For details about Google's data practices, visit: Google Privacy Policy
4. Third-Party Services
We use the following third-party services that may process your personal data on our behalf:
- Google Analytics (Google LLC) — website usage analytics
- EmailJS — processing contact form submissions
These service providers are contractually obligated to protect your data in accordance with GDPR requirements.
5. International Data Transfers
Some of our third-party service providers may transfer your personal data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCC) approved by the European Commission, to guarantee an adequate level of data protection.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Booking data — retained as required by Croatian tax and tourism regulations
- Contact form inquiries — retained for up to 2 years
- Analytics data — automatically anonymized by Google after 14 months
- Cookie consent preferences — stored in your browser's local storage until you clear it
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of your personal data
- Right to rectification — request correction of inaccurate data
- Right to erasure — request deletion of your data ("right to be forgotten")
- Right to restriction — request limiting how we process your data
- Right to data portability — receive your data in a structured, machine-readable format
- Right to object — object to processing based on legitimate interest
- Right to withdraw consent — withdraw your consent for analytics cookies at any time
To exercise any of these rights, please contact us at info@villatunera.com. We will respond to your request within 30 days.
8. Supervisory Authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):
Agencija za zaštitu osobnih podataka (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
Website: azop.hr
Email: azop@azop.hr
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our website uses HTTPS encryption to secure all data transmission between your browser and our servers.
10. Children's Privacy
Our services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us at info@villatunera.com so we can take appropriate action.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.