Privacy Policy

1. Data Controller

The data controller is:
Tihana Kovačić Samaržija
Bujki 21
51216 Viškovo

This Privacy Policy applies to the website Villa Santila (https://villa-santila.hr) and describes what personal data we collect, for what purposes we use it, and what your rights are as a data subject under Regulation (EU) 2016/679 (GDPR) and applicable Croatian data protection legislation.

2. What Personal Data We Collect and Why

a) Accommodation Booking

When making a reservation, we collect the following data:

first and last name
e-mail address
phone number
country of origin

Purpose: entering into and fulfilling a booking contract.
Legal basis: Article 6(1) GDPR (processing necessary for the performance of a contract).

b) Contact Form

When you contact us via the contact form, we collect:

first and last name
e-mail address
phone number (optionally)
country of origin

Purpose: responding to your enquiry.
Legal basis: Article 6(1)(f) GDPR (legitimate interest of the controller in communicating with potential and existing guests).

3. Data Security and Storage

All personal data you enter is encrypted upon storage in our database. Access to personal data is restricted to authorised persons of the data controller, only to the extent necessary to fulfil the stated purposes. We do not sell, rent, or share your data with third parties, except where required by law.

Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected, and in any case in accordance with applicable statutory retention periods.

4. Your Rights as a Data Subject

Under the GDPR, you have the following rights:

Right of access – you may request information about the personal data we process about you.

Right to rectification – you may request correction of inaccurate or incomplete data.

Right to erasure – you may delete your personal data at any time by sending a written request to our e-mail address.

Right to restriction of processing – you may request that we restrict the processing of your data in certain circumstances.

Right to data portability – you may request that your data be provided to you in a structured, machine-readable format.

Right to object – you may object to processing based on legitimate interest.

Right to withdraw consent – where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

Requests relating to the exercise of your rights may be sent to: info@villa-santila.hr. We will respond within 30 days of receiving your request.

5. Right to Lodge a Complaint with a Supervisory Authority

If you believe that the processing of your personal data infringes the GDPR or applicable legislation, you have the right to lodge a complaint with the competent supervisory authority:

Croatian Personal Data Protection Agency (AZOP)
Selska cesta 136, 10000 Zagreb, Croatia
Website: azop.hr
E-mail: azop@azop.hr

6. Cookies

Our website uses cookies to ensure the proper functioning of the site and to improve user experience. By accepting this Privacy Policy, you also accept the use of cookies. Detailed information about the types of cookies we use, their purpose, and how to manage them is available on our dedicated page: https://villa-santila.hr/cookies .

7. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy in accordance with changes in legislation or the operation of our website. You will be notified of any significant changes via a notice on the website. We recommend checking this page periodically.

This Privacy Policy enters into force on the date of publication on the Villa Santila website.
Labin, 6/16/2026