Skip to content
Villa Grandis
//

Legal

Privacy policy

How we collect, use and store your data, in line with the General Data Protection Regulation (GDPR).

  1. 01Data controller

    The controller of your personal data is the accommodation provider named below. Any request about your data may be sent to the same contacts.

    • Ivan Bradić
    • OIB: 27199275293
    • Apatovec, Carine 64, 48260 Križevci
    • +385 99 600 3048
    • grandisvilla@gmail.com

  2. 02What we collect

    Through the booking and contact forms we collect your name, email address, telephone number, number of guests, requested dates, and the content of your message including any special requests. If you pay the deposit by bank transfer you may also leave your account number — solely so that we know where to return the deposit if you cancel. That field is optional.

  3. 03Why we process it

    Solely to process and confirm your booking, to communicate about your stay, to issue invoices, and to meet the statutory guest registration obligations.

  4. 04Legal basis

    Processing is based on performance of the accommodation contract, on the provider's legal obligations, and — for optional analytics cookies — on your consent.

  5. 05How long we keep it

    Booking records are kept for as long as tax and hospitality legislation requires. Messages sent through the contact form are deleted once the enquiry is no longer current.

  6. 06Who we share it with

    With the service providers that process data on our behalf: Vercel (site hosting), Supabase (the reservation database) and Resend (transactional email), and where applicable a calendar synchronisation service. We are also required to report guest details to eVisitor, the Croatian guest registration system run by the tourist boards and the Ministry of the Interior. We do not sell your data or pass it to third parties for marketing.

  7. 07Transfers outside the European Economic Area

    Some of those service providers process data on servers outside the European Economic Area, principally in the United States. Those transfers rely on the European Commission's standard contractual clauses or on the EU–US Data Privacy Framework, in accordance with Chapter V of the General Data Protection Regulation.

  8. 08Your rights

    You have the right to access your data, and to its rectification, erasure, restriction of processing, portability, and to object. You may withdraw consent at any time. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency.

  9. 09Data protection contact

    Requests concerning personal data should be sent to the contact address published in the imprint.

    • +385 99 600 3048
    • grandisvilla@gmail.com