Privacy Policy

This policy explains how Villa Scvola Elementare collects, uses and protects the personal data of website visitors and guests, and which rights you have under the General Data Protection Regulation (GDPR).

Last updated: 29 October 2026

1. Data controller

The controller of your personal data is:

Anto Vrdoljak
Turinina 4, 10000 Zagreb, Croatia
Email: scvolaelementare@gmail.com
Phone: +385 91 916 6678

For any questions about data protection, please contact us at the email address above.

2. Data we collect

  • Booking enquiry form: your full name, email address, arrival and departure dates, number of guests and the message you send us.
  • Communication: information you give us by email, phone or WhatsApp.
  • Booking and stay: the details needed for your booking and payment, and the identity document details we are legally required to register in the Croatian eVisitor system.
  • Visit statistics (only with your consent): information about how you use the website, such as pages visited, device and browser type and approximate location, through Google Analytics. Without consent, Google only receives basic signals, without cookies or identifiers.

We do not collect special categories of personal data and we do not make automated decisions based on your data.

3. Purposes and legal bases

PurposeLegal basis (Art. 6(1) GDPR)
Replying to your enquiry and sending an offerSteps taken at your request before entering into a contract (point b)
Handling your booking, payment and stayPerformance of a contract (point b)
Guest registration in eVisitor, accounting and tax obligationsLegal obligation (point c)
Visit statistics through Google AnalyticsYour consent (point a)
Protecting the form against misuse and spamLegitimate interest (point f)

4. Who receives your data

We do not sell your data or share it for marketing. Your data may only be received by:

  • Domena.com – the website hosting provider, acting as our processor;
  • Google Ireland Limited – email (Gmail) and, with your consent, Google Analytics;
  • booking platforms and payment providers (such as banks and card companies), if you book or pay through them – they also process data under their own privacy policies;
  • our local host, who welcomes you and assists you during your stay, to the extent needed for this;
  • public authorities (such as the tourist board through eVisitor, or the tax administration) where the law requires it.

5. Transfers outside the EU

Google may also process data in the United States. Such transfers are based on the EU-U.S. Data Privacy Framework and the European Commission's standard contractual clauses.

6. How long we keep your data

  • Enquiries that do not lead to a booking: up to 12 months after our last contact.
  • Booking records and invoices: for the periods required by law (accounting documents are kept for up to 11 years).
  • Data registered in eVisitor: as required by the regulations on tourist tax and guest registration.
  • Statistics (Google Analytics): up to 14 months.

7. Your rights

You have the right at any time to:

  • access your data and receive a copy;
  • have inaccurate data corrected or incomplete data completed;
  • have your data erased, unless we are legally required to keep it;
  • restrict processing;
  • data portability;
  • object to processing based on legitimate interest;
  • withdraw your consent, without affecting processing carried out before the withdrawal.

Send your request to scvolaelementare@gmail.com. We will reply within one month at the latest.

8. Complaints to the supervisory authority

If you believe the processing of your data breaches the law, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, azop.hr, or with the data protection authority in your country of residence.

9. Cookies

Details about cookies and how to manage your consent are in our Cookie Policy.

10. Security and changes to this policy

The website uses an encrypted connection (HTTPS), and only the people who need your data to handle enquiries and bookings have access to it.

We may update this policy from time to time. The current version is always published on this page, with the date of the last change.