Privacy Policy

Villa Ema Apartments Ljudevita Gaja 4b HR-23244 Starigrad Paklenica, Croatia Phone: HR +385 (95) 852 2023 | DE +49 (172) 514 6047 E-mail: contact@villa-ema.com

Privacy Policy

1. Data Controller

Villa Ema Apartments
Responsible person: Drago Pirić
OIB: 80847359135
Ljudevita Gaja 4b
HR-23244 Starigrad Paklenica, Croatia
Phone HR: +385 (95) 852 2023
Phone DE: +49 (172) 514 6047
E-mail: contact@villa-ema.com
Website: www.villa-ema.com

This Privacy Policy explains what personal data we collect, the purposes for which we process it, how long we retain it, and what rights you have regarding your personal data.

2. Personal Data We Collect

Depending on how you use our website and communicate with us, we may process the following data:

first and last name
residential address
e-mail address
telephone number
information related to an inquiry or reservation
requested dates of stay
number of guests and selected apartment
content of messages you send us
information required for issuing invoices and complying with legal obligations
payment information and payment status
technical data such as IP address, browser type, device, access time and pages visited

We do not collect special categories of personal data unless the user voluntarily provides such data and it is necessary to process their request.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Responding to Inquiries

We use the information you provide via the contact form, e-mail or telephone to respond to your inquiry and provide the requested information.

The legal basis for processing is taking steps at your request prior to entering into a contract, as well as our legitimate interest in communicating with users.

Reservation and Provision of Accommodation

We process data to check availability, confirm reservations, communicate before and during your stay, process payments and provide the agreed accommodation.

The legal basis for processing is the performance of a contract or taking steps prior to entering into a contract.

Advance Payment

An advance payment of 20% of the total rental price is paid by card. Card payments are processed by an authorised payment service provider in accordance with its own privacy policy and security standards.

Villa Ema Apartments does not store complete payment card details. We may receive information about the status and amount of the payment, as well as information necessary to associate the payment with the reservation.

The legal basis for processing is the performance of a contract.

Compliance with Legal Obligations

Certain data is processed and retained for guest registration, maintaining legally required records, issuing invoices, fulfilling tax obligations and complying with other obligations imposed by applicable laws.

The legal basis for processing is compliance with a legal obligation.

Website Security and Technical Functionality

Technical data may be processed to ensure the proper and secure operation of the website, prevent misuse, detect technical problems and protect our systems.

The legal basis for processing is our legitimate interest in ensuring the secure and reliable operation of the website.

4. Contact Form and Communication

When you contact us via the contact form, e-mail, telephone or another communication channel, we process the information you provide in order to respond to your inquiry.

Please do not submit sensitive personal data through the contact form unless it is necessary for processing your inquiry or reservation.

Data from inquiries is retained for as long as necessary for communication and processing the request, and for a longer period only where necessary in connection with a reservation, contractual relationship, legal claim or legal obligation.

5. Recipients of Personal Data

We may make personal data available, only where necessary, to:

website hosting and technical maintenance providers
e-mail service providers
card payment service providers
accounting and other professional service providers
competent government and public authorities where required by law
other recipients where necessary to fulfil a reservation or protect legal interests

We require service providers to process personal data confidentially, securely and solely in accordance with our instructions and applicable regulations.

6. Website Hosting

The website is created and hosted using the infrastructure of the service provider Hostinger.

When you visit the website, the hosting system may automatically record technical information, including your IP address, browser and device type, date and time of access, pages visited and information required for system security.

This data is used to provide access to the website, ensure its secure operation, detect technical problems and prevent misuse.

7. Cookies

The website may use necessary cookies that enable its proper operation and security. Necessary cookies do not require the user's consent.

Analytics, functional or marketing cookies are used only if they are enabled on the website and the user has given consent through the cookie notice.

Users may change or withdraw their consent at any time through the cookie settings, if this option is available on the website. Cookies can also be deleted or disabled through the web browser settings. Disabling necessary cookies may affect the proper functioning of certain parts of the website.

8. Google Maps and External Content

The website may contain a map provided by Google Maps to show users the location of the accommodation.

When the map is loaded, Google may process users' technical data, including IP address and device information, and may set its own cookies. Such content should only be loaded after the user has provided the appropriate consent where required.

Google's privacy policies apply to data processing carried out by Google.

The website may also contain links to other external websites. Villa Ema Apartments is not responsible for how those websites process personal data.

9. Transfers of Data Outside the European Economic Area

Certain technology service providers may process data outside the European Union and the European Economic Area.

In such cases, data is transferred only where there is an appropriate legal basis and safeguards in accordance with the GDPR, such as an adequacy decision by the European Commission or Standard Contractual Clauses.

10. Data Retention Period

We retain personal data only for as long as necessary for the purpose for which it was collected.

Data relating to inquiries that did not result in a reservation is deleted when it is no longer required for communication, unless there is a legitimate reason for retaining it for a longer period.

Data relating to reservations, invoices and statutory records is retained for the periods required under applicable tax, accounting, tourism and other regulations.

After the required retention period expires, personal data is deleted, anonymised or its processing is restricted.

11. Protection of Personal Data

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal data is limited to persons who require such access for the fulfilment of reservations, provision of services or compliance with legal obligations.

12. User Rights

In accordance with the GDPR, depending on the circumstances and legal basis for processing, you have the right to:

request access to your personal data
request correction of inaccurate or incomplete data
request deletion of personal data
request restriction of processing
request data portability
object to processing
withdraw previously given consent
lodge a complaint with the competent supervisory authority

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

To exercise your rights, you may contact us at contact@villa-ema.com. We will respond to your request without undue delay and no later than within the period prescribed by the GDPR.

13. Right to Lodge a Complaint

If you believe that your personal data is being processed in violation of applicable regulations, you have the right to lodge a complaint with:

Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16
10 000 Zagreb, Croatia
E-mail: azop@azop.hr
Website: www.azop.hr

We recommend contacting us at contact@villa-ema.com before lodging a complaint so that we can attempt to resolve your request.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to the website, services used or applicable regulations.

The updated version will be published on this page.

Last updated: August 2026.

Villa Ema Apartments