Privacy Policy

1. Data Controller

The data controller responsible for this website is:

Villa Village
Tinjan — Šurani, Istria, Croatia
Email: ivi_1504@hotmail.com

2. What Data We Collect

When you submit an enquiry through our contact form, we collect the following personal data:

• Full name
• Email address
• Intended arrival and departure dates (optional)
• Number of guests (optional)
• Message content (optional)

We do not use tracking pixels, advertising cookies, or analytics services. No data is collected during passive browsing.

3. How We Process Your Data

Enquiry forms are processed through Formspree (formspree.io), a third-party form service. Your submitted data is transmitted securely to Formspree and forwarded to our email address. Formspree's privacy policy is available at formspree.io/legal/privacy-policy.

We use your data solely to respond to your enquiry and, if a booking is made, to fulfil the rental agreement.

4. Legal Basis

Processing is based on:

• Art. 6(1)(b) GDPR — processing necessary for the performance of a contract or to take steps prior to entering into a contract (responding to your booking enquiry).
• Art. 6(1)(a) GDPR — your explicit consent given via the checkbox on the contact form.

5. Data Retention

Enquiry data is retained only as long as necessary to process your request and fulfil any resulting booking obligations, and no longer than 3 years after the last interaction, unless a longer retention period is required by applicable law.

6. Cookies

This website uses only one essential cookie (stored in localStorage) to remember your cookie consent preference. No third-party, tracking, or advertising cookies are set.

7. Your Rights

Under the GDPR you have the right to:

• Access (Art. 15) — request a copy of the personal data we hold about you.
• Rectification (Art. 16) — request correction of inaccurate data.
• Erasure (Art. 17) — request deletion of your data ("right to be forgotten").
• Restriction (Art. 18) — request that we limit processing of your data.
• Portability (Art. 20) — receive your data in a structured, machine-readable format.
• Object (Art. 21) — object to processing based on legitimate interests.
• Withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at ivi_1504@hotmail.com. We will respond within 30 days.

8. Complaints

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): azop.hr.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The current version is always available at this page. Last updated: June 2026.