Privacy policy

Data and purposes

For enquiries and offers we process your name, email, telephone number if provided, chosen accommodation, arrival/departure dates, numbers of adults and children, and message. Enquiries are delivered by email. Preparing a booking relies on steps requested before entering a contract (GDPR Article 6(1)(b)); other correspondence relies on our legitimate interest in answering enquiries (Article 6(1)(f)).

Required fields are identified in the form. We cannot process an accommodation offer without the necessary contact details and dates. Do not send card details or sensitive personal data.

Security and visitor statistics

The server processes technical information such as IP address, request time, requested address, browser and referral source to operate and protect the website. Form protection uses a session and short-lived attempt records with a keyed hash of the IP address. The basis is our legitimate interest in website security (Article 6(1)(f)).

Basic statistics use Hetzner access logs with anonymised IP addresses to understand visits and improve the website. Reports contain aggregate visitor estimates, languages of pages opened, devices, referral sources and hours. We do not track individuals across days. We use no analytics cookies, Google Analytics or Meta Pixel for these reports. Where personal data is involved, the basis is our legitimate interest in basic usage measurement; you may object.

Google Maps and external links

The optional Google map is blocked until consent (Article 6(1)(a)). Once allowed, Google receives technical information including IP address and browser details and may use cookies. The provider for EEA users is Google Ireland Limited. Processing may include the US and other countries under the mechanisms described by Google: Google Privacy Policy; Google — data transfer frameworks.

Links to Google, Instagram and Facebook open separate services governed by their own policies. Website photographs and fonts are served by our hosting provider.

Recipients

Access is limited as needed to authorised staff handling enquiries, Hetzner Online GmbH for hosting and email, and authorised technical maintenance providers. Authorities may receive data where legally required. Google receives data when you allow the map or open its links. We do not sell form data or add it to advertising lists.

Retention

We retain enquiries and correspondence while needed to answer, prepare an offer and handle a related booking. Longer retention is limited to applicable legal duties or the period needed to establish, exercise or defend legal claims. Technical logs are kept according to hosting settings only as needed for security, troubleshooting and basic statistics; specific records may be retained to investigate an incident.

Your cookie choice is valid for 180 days in this browser. The form cookie lasts for the browser session; a security token is valid for up to two hours. Rate-limiting records use 15- and 60-minute windows; older entries are removed on subsequent processing. Temporary identifiers used for daily statistics are not saved after report generation. Aggregate reports contain no IP addresses.

Your rights and contact

Subject to the legal basis and GDPR conditions, you can request access, rectification, erasure, restriction and portability, and object to processing. Contact info@konobadaniela.com. We normally respond within one month, informing you within that period of any permitted extension and its reasons. We may request information necessary to verify identity.

Withdraw map consent using “Cookie settings” in the footer; this does not affect prior lawful processing. You may complain to a supervisory authority, including AZOP — azop.hr. We do not make decisions with legal or similarly significant effects solely through automated processing of website data.