GDPR / Privacy policy
Last updated: 26.10.2026.
1. Who we are
2. What data we collect
Through the contact and booking form we may collect:
- first and last name
- email address
- phone number
- number of guests and preferred date/time of the reservation
- message / note
3. Purpose of processing
We process your data in order to:
- respond to your enquiry and handle your reservation
- communicate with you about our services
- keep a record of enquiries for internal business purposes
4. Legal basis
Processing is based on your consent (Art. 6(1)(a) GDPR) and, where applicable, on the performance of a contract or pre-contractual steps.
5. How long we keep data
We retain data only as long as necessary for the purposes described, then delete or anonymise it unless a longer retention period is required by law.
6. Sharing with third parties
We do not sell your data. We may use service providers (e.g. hosting, email) who process data on our behalf under a data processing agreement.
7. Your rights
You have the right of access, rectification, erasure, restriction of processing, objection, and data portability. You may withdraw consent at any time.
To exercise your rights, contact us using the email or phone details in section 1.
8. Cookies and technical data
The site may use strictly necessary technical cookies (e.g. form security token). If we add analytics or marketing cookies in the future, we will disclose this clearly with a consent mechanism.
9. Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or misuse.
10. Contact and complaints
For privacy questions, contact us using the details in section 1. You have the right to lodge a complaint with a supervisory authority (in Croatia: AZOP).