Privacy policy

1. Controller

Apartmani Petar Pan, Petar Mandic, Dragonja 46, 52212 Valbandon, Fažana, Hrvatska. Email: apartmentpetarpan@gmail.com, phone: +385 99 3800250, +43 660 6673768.

2. Data we process

• Booking inquiry: your name, arrival and departure dates, the selected unit and the contact (phone or email) you enter.
• Messages via WhatsApp, Viber or SMS: your phone number, profile name and message content. You send these directly from your own app — the website does not store them.
• Booking and stay: data required to register guests in the eVisitor system (name, date of birth, nationality, ID document number) and for invoicing.
• Technical data: IP address, browser type and time of access, logged by our hosting provider for security purposes.

3. Purpose and legal basis

• Answering your inquiry and preparing a booking — pre-contractual and contractual steps (Art. 6(1)(b) GDPR).
• Guest registration, tourist tax and tax obligations — legal obligation (Art. 6(1)(c) GDPR).
• Security and proper operation of the website — legitimate interest (Art. 6(1)(f) GDPR).
• Displaying the Google Maps map — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. Recipients and processors

• Vercel Inc. (USA) — website hosting and anonymous visit statistics (Vercel Web Analytics: no cookies, no tracking of individuals, only aggregated data such as page views and device type).
• Resend Inc. (USA) — delivering email inquiries sent from this website to our mailbox.
• Google LLC — our mailbox (Gmail) and, only with your consent, the Google Maps map.
• WhatsApp (Meta Platforms Ireland Ltd.), Viber (Viber Media S.à r.l.) and your mobile carrier — when you message us through these channels their privacy policies also apply.
• Open-Meteo (open-meteo.com) — current weather in Fažana; only the technical request (IP address) is transmitted, no cookies.
• The eVisitor system (Croatian National Tourist Board) and competent authorities — where required by law.

We never sell your data or use it for advertising.

5. Transfers outside the EU/EEA

Some providers (Vercel, Resend, Google) may process data in the USA. Such transfers rely on the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

6. Retention

• Inquiries that do not lead to a booking are deleted no later than 12 months after the last contact.
• Booking and stay data are kept for as long as tax and tourism regulations require.
• Your cookie choice is stored in your browser until you delete it.

7. Cookies and local storage

This website does not use cookies for analytics, tracking or advertising. Visit statistics (Vercel Web Analytics) work without cookies and without identifying visitors.

We only store your cookie choice in your browser's local storage (key "pp-consent") — this is necessary so we don't ask you on every visit.

The Google Maps map loads only when you explicitly allow it. Google may then set its own cookies (e.g. NID) and process your IP address under its privacy policy (policies.google.com/privacy). You can withdraw consent via "Cookie settings" in the footer.

8. Your rights

• the right of access, rectification and erasure,
• the right to restriction of processing and to data portability,
• the right to object to processing based on legitimate interest,
• the right to withdraw consent at any time, without affecting the lawfulness of prior processing.

Send requests to apartmentpetarpan@gmail.com — we reply within one month. You also have the right to lodge a complaint with the supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, www.azop.hr, or with the authority in your country of residence.

9. Security

The website is served exclusively over an encrypted connection (HTTPS) with security headers that block unknown content. Only the owners have access to guest data.

10. Changes

We may update this policy from time to time. The current version is always published on this page.