Privacy Policy
- Home
- Privacy Policy
Last updated: 01/02/2026
This Privacy Policy explains how we collect, use, and protect personal data of guests and website visitors in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable European data protection laws.
1. Data Controller
The data controller responsible for personal data processing is:
VILLA EXOTICA
Address: Pješčana Plaža 4, 22010 Žaborić, Croatia
Email: info@villaexotica.com
2. Personal Data We Collect
We may collect the following personal data when you contact us, submit a booking inquiry, or make a reservation:
- Full name
- Email address
- Phone number
- Country of residence
- Arrival and departure dates
- Number of guests
- Special requests or messages you voluntarily provide
- IP address and basic technical data (browser, device type)
We do not intentionally collect sensitive personal data.
3. Purpose of Data Processing
Personal data is processed strictly for the following purposes:
- Responding to booking inquiries
- Managing reservations and guest communication
- Fulfilling accommodation services
- Meeting legal obligations (e.g. guest registration, invoicing where applicable)
- Improving website functionality and security
4. Legal Basis for Processing
Personal data is processed based on:
- Contractual necessity (booking and accommodation services)
- Consent (contact forms, inquiries)
- Legal obligations (tourism, tax, or guest registration laws)
- Legitimate interest (secure operation of the website and communication)
5. Data Retention
We retain personal data only for as long as necessary:
- Booking-related data is kept for the duration required by legal and accounting regulations
- Inquiry data is stored only until communication is completed
- Data is securely deleted or anonymized once no longer required
6. Data Sharing and Booking Platforms
We do not sell or rent personal data.
Personal data may be shared only with:
- Booking platforms (e.g. Booking.com, Airbnb) when a reservation is made through them
- IT and hosting providers necessary for website operation
- Authorities when legally required
All third parties process data in compliance with GDPR.
7. Cookies
This website may use cookies to ensure proper functionality and to analyze website traffic.
You can control or disable cookies through your browser settings. Additional information is available in our Cookie Policy, if applicable.
8. Data Transfers Outside the EU
If booking platforms or service providers process data outside the European Economic Area (EEA), appropriate safeguards are applied, such as Standard Contractual Clauses, in accordance with GDPR.
9. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Correct inaccurate or incomplete data
- Request deletion of your data
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- File a complaint with a competent supervisory authority
Requests can be sent to: info@villaexotica.com
10. Data Security
We apply appropriate technical and organizational security measures to protect personal data against unauthorized access, loss, or misuse.
11. Changes to This Privacy Policy
This Privacy Policy may be updated occasionally. Any changes will be published on this page with a revised date.
12. Contact
For any questions regarding personal data protection or this Privacy Policy, please contact us at:
Email: info@villaexotica.com