Controller and contact
This notice covers information processed through the Croatissimo website, villa enquiries, owner access and reservations. An accommodation provider may also process information for its own legal duties. Privacy requests may be sent to rekka.jesse@gmail.com.
What information is used and why
When you enquire or book, we process your name, email, telephone number, message, selected villa, dates, guest count, prices, payment method and reservation or transaction reference to respond, check availability, manage a booking, provide support and meet accounting and other legal duties. Owner accounts also require login and authorised villa access information. Technical logs and necessary cookies support security and operation of the site.
The usual legal grounds are steps requested before a contract, performance of a contract, legal duties and legitimate interests in security and support. Marketing emails and optional tracking require an appropriate separate legal basis and, where required, consent. You can withdraw consent without affecting earlier lawful processing.
Recipients, transfers and retention
Information may be shared with the relevant villa owner or accommodation provider, payment services enabled for the transaction (such as Stripe or PayPal), hosting and email providers, and authorities where required by law. Card credentials are entered with the selected payment provider; the booking system keeps payment status and references rather than full card numbers.
We retain booking and accounting records for the periods required by law, support correspondence while needed to resolve the enquiry or dispute, and technical records for an appropriate security period. Contact us for details of specific periods and any transfers outside the EEA.
Your rights
Depending on the applicable legal basis, you may request access, correction, erasure, restriction, portability or object to processing. You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or another competent supervisory authority. To exercise your rights, write to rekka.jesse@gmail.com. We may need to verify the request before sharing reservation data.
Cookies and updates
Essential cookies or browser storage may be necessary for authentication, checkout and security. Any optional analytics or marketing cookies and how to change your preferences should be explained in the site’s cookie settings.