Last updated: June 2026
This Privacy Policy explains how Šumska Vila Mrkopalj collects, uses and protects personal data when you visit this website or contact us regarding accommodation, availability, booking inquiries or other information.
We respect your privacy and handle personal data in accordance with applicable data protection rules, including the General Data Protection Regulation, GDPR.
1. Who is responsible for your personal data
The data controller for personal data collected through this website is:
[Full legal name / business name]
[Address]
[City, Croatia]
Email: [email address]
Phone: +385 98 327 998
For any questions about this Privacy Policy or your personal data, you can contact us using the contact details above.
2. What personal data we collect
We may collect personal data when you:
- send an inquiry through the website contact form
- contact us by email, phone, WhatsApp or social media
- ask about availability, prices or booking details
- communicate with us before, during or after your stay
- visit and use this website
Depending on how you contact us, we may collect:
- name and surname
- email address
- phone number
- message content
- preferred travel dates
- number of guests
- booking-related information
- communication history
- technical website data, such as IP address, browser type, device type and website usage data
We only collect the data that is necessary for communication, answering inquiries, managing reservations and improving the website experience.
3. Why we use your personal data
We use your personal data for the following purposes:
- to respond to your inquiries
- to provide information about availability, prices and accommodation
- to arrange and manage booking requests
- to communicate with you before, during and after your stay
- to provide customer support
- to improve the website and user experience
- to protect the security and proper functioning of the website
- to comply with legal obligations when applicable
4. Legal basis for processing
We process personal data only when there is a valid legal basis to do so. Depending on the situation, the legal basis may be:
- contractual necessity, when processing is needed to respond to booking inquiries or manage accommodation arrangements
- legitimate interest, when we communicate with potential guests, improve our services or protect the website
- legal obligation, when we are required to keep certain data under applicable laws
- consent, when you agree to certain optional processing, such as non-essential cookies or marketing communication, where applicable
5. Contact forms and direct communication
When you send us a message through the website, WhatsApp, email or another communication channel, we use the information you provide only to respond to your request and continue communication related to your inquiry.
Please do not send sensitive personal information through the contact form unless it is necessary for your request.
6. WhatsApp and social media links
This website may include links to WhatsApp, Instagram or other external platforms. When you click these links, you leave our website and the privacy rules of those platforms may apply.
We are not responsible for how third-party platforms process your personal data. We recommend reviewing their privacy policies before using them.
7. Cookies and website analytics
This website may use cookies and similar technologies to make the website work properly, improve performance and understand how visitors use the website.
Cookies may be used for:
- basic website functionality
- security and performance
- analytics and visitor statistics
- embedded third-party content, such as maps or social media links, if used
Non-essential cookies are used only where required consent has been given.
You can control or delete cookies through your browser settings. Please note that disabling some cookies may affect how the website works.
8. Third-party services
We may use trusted third-party services to operate the website and communicate with guests. These may include:
- website hosting provider
- email service provider
- contact form tools
- analytics tools, if enabled
- WhatsApp or social media platforms
- embedded maps or external content, if used
These third parties may process limited personal data only where necessary to provide their services.
9. How long we keep personal data
We keep personal data only for as long as necessary for the purpose for which it was collected.
Inquiry and communication data may be kept for as long as needed to respond to your request, manage booking-related communication and maintain business records.
Certain data may be kept longer if required by law, accounting rules or legitimate business needs.
10. Sharing personal data
We do not sell your personal data.
We may share personal data only when necessary, for example with:
- service providers that help operate the website
- booking or communication tools used to manage inquiries
- competent authorities when legally required
- professional advisors, if needed for legal, accounting or administrative purposes
Any sharing of personal data is limited to what is necessary.
11. International data transfers
Some third-party services, such as communication, analytics or hosting tools, may process data outside the European Economic Area.
When this happens, we rely on appropriate safeguards required by applicable data protection rules.
12. Your rights
Under applicable data protection rules, you may have the right to:
- request access to your personal data
- request correction of inaccurate data
- request deletion of your personal data
- request restriction of processing
- object to processing in certain cases
- request data portability where applicable
- withdraw consent where processing is based on consent
- lodge a complaint with a supervisory authority
In Croatia, the supervisory authority is the Croatian Personal Data Protection Agency, AZOP.
To exercise your rights, please contact us at: [email address]
We will respond to your request in accordance with applicable legal deadlines.
13. Data security
We take reasonable technical and organizational measures to protect personal data from unauthorized access, loss, misuse or disclosure.
However, no method of transmission over the internet is completely secure, so we cannot guarantee absolute security.
14. Children’s privacy
This website is not intended for children. We do not knowingly collect personal data from children without appropriate consent from a parent or legal guardian.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our website, services or legal requirements.
The latest version will always be available on this page, with the updated date shown at the top.
16. Contact
For questions about this Privacy Policy or the way we process personal data, please contact:
Šumska Vila Mrkopalj
[Full legal name / business name]
Email: [email address]
Phone: +385 98 327 998