Privacy Policy

Privacy Policy

This Policy explains which personal data we collect, why we collect it, how long we keep it, and which rights you have. It applies to website use and the accommodation booking process.

Data controller: Danijel Marić, OIB: 0000000001, Zagrebacka 6A 52000 Pazin
Contact: danijel.maric@gmail.com • +385 989922303 • https://villamontona.com

What data we collect and why

When you inquire or book, we collect basic contact and identification data: first and last name, email, phone, city, country, and any note, so we can process your request and conclude or perform the accommodation agreement.

For accommodation payment, card payment is possible; card data is processed by an authorized payment service provider and is not stored on the Host server.

Due to the legal obligation to register tourists in the eVisitor system, upon arrival we request a valid personal ID from each guest and record the data required by law.

For issuing invoices we process data required by fiscalization and accounting regulations (e.g. full name or company name, address, tax ID/OIB if applicable, amount, and service description).

We may process basic technical data about website usage for system security, statistics, and service improvement (e.g. IP address, date/time of access, URL).

We use cookies only to the extent necessary for website operation and basic statistics; details are in a separate Cookie Policy.

Legal bases for processing

We process your data to take steps at your request and perform the contract (booking and stay), to comply with legal obligations (eVisitor, issuing and keeping invoices), based on legitimate interest (website security, abuse prevention, service improvement) and, if we offer newsletters or marketing notifications, based on consent, which you can withdraw at any time.

Recipients and transfers

We share data only when necessary: with the card payment provider, hosting provider, and technical partners (system maintenance, email), the accounting service, and competent authorities when required by law (e.g. tourist board/eVisitor, tax authority). If data is transferred outside the EEA, we will ensure appropriate safeguards (e.g. standard contractual clauses).

Retention periods

Data related to reservations and accommodation is kept as long as needed to perform the contract and resolve potential complaints. Accounting records are kept for the periods required by law (e.g. up to 10 years). Data processed based on consent is kept until consent is withdrawn or the purpose is fulfilled. Data entered into eVisitor is kept in accordance with system rules and regulations.

Your rights

You have the right to access, rectify, or erase personal data, restrict processing, request data portability, and object to processing based on legitimate interest or direct marketing. You may withdraw consent at any time. To exercise your rights, contact us at danijel.maric@gmail.com. You also have the right to lodge a complaint with the Croatian Data Protection Agency (AZOP, www.azop.hr, azop@azop.hr).

Data security

We apply appropriate technical and organizational security measures to prevent unauthorized access, loss, or misuse of data. Access to personal data is limited to authorized persons and contracted processors bound by confidentiality.

Children and minors

Accommodation is booked by an adult. We process minor data only to the extent necessary for eVisitor registration and contract performance.

External links

The website may contain links to third-party websites; we are not responsible for their privacy practices. Please read their privacy policies.

Policy changes

We may update the Privacy Policy from time to time to comply with regulations or improve clarity. The version published on this page applies, with the date of the last update.