1. Controller and contact
Apartments Neda is the controller of personal data processed through this website and in connection with apartment enquiries, reservations and SUP rentals.
Address: Kampor 45a, 51290 Kampor, Croatia
Email: info@apartmentsneda.com
2. Data we process
Depending on how you use the website, we process your name, email address, telephone number, requested dates, guest-party details, selected apartment or SUP rental, booking reference, price and payment records, messages you send us, legal-document versions you accepted, and booking or cancellation history.
For security and abuse prevention, the service also receives technical data such as your IP address and browser request information. The public booking throttle stores only keyed hashes derived from an IP address and contact details, not the original values.
3. Purposes and legal bases
- To answer enquiries, prepare quotes, administer bookings, arrange pickup and return, send confirmations and provide the requested service: steps requested before entering into a contract and performance of a contract (Article 6(1)(b) GDPR).
- To keep tax, accounting and other records required by law: compliance with legal obligations (Article 6(1)(c) GDPR).
- To secure the website, prevent abuse, maintain reliable records and establish, exercise or defend legal claims: our legitimate interests (Article 6(1)(f) GDPR).
We do not use booking details for direct marketing unless we ask for separate consent.
4. Required and optional information
Fields marked as required are needed to handle an enquiry or conclude and perform a booking. Without them, we cannot provide that service. A message is optional. Please do not include sensitive personal data in free-text fields.
5. Recipients and service providers
Access is limited to Apartments Neda and service providers that need the data to operate the website and communicate with you. These include our hosting and technical providers and Postmark, operated by ActiveCampaign, for transactional email. Data may also be disclosed to accountants, professional advisers, payment providers where relevant, and public authorities when required by law.
The website loads typefaces from Google Fonts. Your browser therefore sends Google the IP address and standard request information needed to deliver the font files. Google Fonts does not set cookies through its Web Fonts API.
6. International transfers
Some providers, including Postmark and Google, may process data outside the European Economic Area. Where required, transfers are protected by an adequacy decision, the European Commission's Standard Contractual Clauses or another lawful safeguard. Postmark states that its data processing terms include Standard Contractual Clauses.
7. Retention
Non-financial enquiry and booking personal data is anonymised after 24 months without relevant activity. Records that must be retained for accounting or legal reasons are kept for 11 complete business years, or longer only when required for an active claim or legal obligation. Anti-abuse throttle hashes expire within two hours. Postmark normally retains email content and metadata for 45 days; suppression records for bounces, spam complaints or unsubscribed recipients may be retained longer to protect email delivery.
8. Cookies and analytics
The public website does not use advertising or analytics cookies. A secure, essential session cookie is used for authorised administration access. Google Fonts does not set cookies through the font service.
9. Your rights
Subject to the conditions in data-protection law, you may request access, correction, deletion or restriction of your data, receive portable data, and object to processing based on legitimate interests. You may also complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, at azop.hr. To exercise a right, email info@apartmentsneda.com.
10. Automated decisions and updates
We do not make decisions producing legal or similarly significant effects through automated decision-making or profiling. We may update this notice when our services or legal obligations change. The publication date shown on this page identifies the current version.