Privacy Policy
Last updated: 24 October 2026
Villa Olea Cvitani respects the privacy of its guests and website visitors. This Privacy Policy explains what personal data we may collect, why and how we process it, and the rights available to you under the General Data Protection Regulation (GDPR).
1. Data Controller
TITABOX j.d.o.o. za usluge
Radovanići 19, 10432 Bregana, Croatia
Croatian Tax Identification Number (OIB): 31209907428
Email: info@villa-olea-cvitani.com
2. Personal Data We Collect
Depending on how you use our website and communicate with us, we may process the following categories of personal data:
- Your first and last name and contact details provided to us.
- Information included in your booking inquiry, such as preferred dates, number of guests and message content.
- Information contained in email correspondence.
- Technical information associated with website access, including IP addresses, browser details and device information.
- Information associated with cookies and analytics technologies, depending on their configuration and your consent preferences.
3. Purposes and Legal Bases for Processing
We process personal data where necessary for the following purposes:
- Processing booking inquiries: responding to inquiries, checking availability and preparing potential accommodation arrangements. The legal basis is taking steps at your request prior to entering into a contract.
- Communication: responding to questions and requests. Depending on the nature of the communication, processing may be based on pre-contractual steps or legitimate interests.
- Compliance with legal obligations: processing required under applicable laws, including guest registration obligations where a stay takes place.
- Website security: protecting our systems, preventing misuse and resolving technical issues, based on legitimate interests or applicable legal obligations.
- Analytics and other non-essential technologies: where consent is required, processing is based on valid consent.
4. Booking Inquiries and Payments
The Villa Olea Cvitani website allows visitors to submit booking inquiries. Submitting an inquiry does not constitute a confirmed reservation.
The website does not offer direct card payments, and we do not collect payment card information through our booking inquiry form. Any reservation and payment arrangements are agreed upon separately.
5. Data Recipients and Service Providers
We may use external service providers for website operations and inquiry processing, including hosting, content management, email delivery and analytics services.
The website's known technical infrastructure includes Vercel, Sanity and Resend. Technologies associated with Google Analytics, Meta and Microsoft Clarity have also been observed on the website. Their specific roles, configuration and scope of data processing remain subject to technical verification.
We share personal data only where there is an appropriate purpose and legal basis, including where disclosure is necessary to comply with legal obligations.
6. Cookies and Analytics Technologies
Our website may use essential cookies required for basic functionality and security, as well as additional cookies and similar technologies for analytics or other purposes.
Where consent is legally required for a particular technology, it should be activated only after the appropriate consent has been obtained. You may withdraw consent through the available cookie settings. The technical configuration of the consent system is currently undergoing further review.
7. Statutory Guest Registration
If a reservation results in an actual stay, additional personal data may be collected to fulfil statutory guest registration requirements through the relevant authorities and systems, including eVisitor, in accordance with applicable Croatian legislation.
This processing is separate from the initial booking inquiry submitted through the website.
8. Data Retention
We retain personal data for as long as necessary to fulfil the purposes for which it was collected, or for longer where required by applicable law or necessary for the establishment, exercise or defence of legal claims.
The applicable retention period depends on the category of personal data, the purpose of processing and relevant legal obligations.
9. Transfers Outside the European Economic Area
Certain technology providers may process personal data outside the European Economic Area. Where such transfers occur, appropriate safeguards required by the GDPR must be applied, depending on the service provider and the circumstances of the transfer.
10. Your Data Protection Rights
Subject to the conditions established by the GDPR, you have the right to:
- Request access to your personal data.
- Request correction of inaccurate or incomplete data.
- Request erasure of personal data where the legal requirements are met.
- Request restriction of processing.
- Object to certain types of processing.
- Request data portability where applicable.
- Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise your rights, please contact us at info@villa-olea-cvitani.com.
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): azop.hr.
11. Personal Data Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the nature of processing and the associated risks.
12. External Links
Our website may contain links to third-party websites and social media platforms. Their processing of personal data is governed by the privacy policies of the respective providers.
13. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in our data processing practices, technologies or applicable legal requirements. The updated version will be published on this page.
14. Contact
For any questions regarding the protection of personal data, please contact us at info@villa-olea-cvitani.com.