Privacy policy

1. Data controller

The controller of personal data collected through this website is Mili Planinčić, provider of the Villa Kaštel Stari accommodation, Sv. Jurja 28a, 21216 Kaštel Stari, Croatia ("we" or "the controller").

Contact: kastela01@gmail.com, +385 95 596 2906.

2. What data we collect

When you send us an enquiry through the contact or booking form, we collect the data you enter: name, e-mail address, phone number, dates of stay, number of guests, estimated arrival time and your message.

If you contact us via WhatsApp, phone or e-mail, we process the data from that communication.

If you accept statistics cookies, we may also collect basic technical data about how the site is used (e.g. pages visited, device type).

3. Purpose of processing

We process data solely to reply to your enquiries, check availability, arrange and carry out your booking, issue invoices and improve the website.

4. Legal basis

Processing is based on your consent (by submitting a form), the performance of pre-contractual and contractual obligations (arranging the booking), legal obligations (guest registration and tax regulations) and our legitimate interest in communicating well with guests.

5. Data retention

We keep personal data only as long as needed for the purpose for which it was collected, or as required by law (e.g. tax and accounting rules for completed bookings). Enquiries that did not result in a booking are deleted within 12 months at the latest.

6. Sharing data with third parties

We do not sell or rent your data to third parties. Data may only be shared with service providers we use to run the site (web hosting and e-mail delivery) or where required by law (e.g. registering guests with the authorities under tourist tax regulations).

7. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to request access to your data, its correction or deletion, restriction of processing, to object to processing and to data portability. Requests can be sent to kastela01@gmail.com.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), www.azop.hr.

8. Cookies and external content

The website uses cookies for basic functionality and, with your consent, for visitor statistics. The map on the home page and on the Location and Contact pages is loaded from Google Maps, which may set its own cookies. See our Cookie policy for details.

9. Data security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss or misuse.

10. Changes to this policy

We may update this privacy policy. Any significant changes will be announced by publishing the new version on this page.