Privacy policy
Last updated: 22 September 2026.
Data controllers
The joint controllers of your personal data are Vesna Facković, Prominska 16, 10040 Zagreb, and Stjepan Facković, Dalmatinska 16, 52452 Funtana, Croatia.
All communication with guests, including requests about your data, is handled by Tamara Facković. You can reach her at apartmani-noa@hotmail.com or on +385 99 431 25 11. You can exercise your rights against either of us, and we will pass the request on to each other. We have not appointed a data protection officer.
What data we process
When you send an enquiry, we process what you type in: your name, e-mail address, telephone number (if you give one), arrival and departure dates, the number of guests, the number of children up to 3, any pets, the apartment you chose and the text of your message.
When you visit the site, the server records technical details of the request, such as the page opened and the time. The IP address in these records is anonymised.
Why we process it, on what basis and for how long
Answering your enquiry and preparing a possible stay. The basis is Article 6(1)(b) of the General Data Protection Regulation (GDPR): steps we take at your request before entering into a contract. We keep the data no longer than needed: while a stay is being arranged and for follow-up questions, and if a booking follows, as long as the law requires.
Security and correct operation of the site. The basis is our legitimate interest (Article 6(1)(f) GDPR) in protecting the site and the form from abuse. The server logs do not contain the full IP address.
You are not legally obliged to fill in the form. Without the data we cannot answer: we need at least a name, an e-mail address and dates.
Who receives your data
Besides us, the service providers that keep the site and the form running process your data:
- AhaSend B.V. (Netherlands), e-mail delivery: it tells us an enquiry has arrived and sends you the confirmation. Its infrastructure is in Europe.
- bunny.net (BunnyWay d.o.o., Slovenia), the servers the site and the script that receives the form run on.
- Our mailbox. Enquiries arrive directly at apartmani-noa@hotmail.com, a mailbox with Microsoft (Outlook/Hotmail). Microsoft is based in the USA; the transfer relies on a European Commission adequacy decision or on standard contractual clauses.
- YouTube (Google), only if you yourself start the video on the home page. More on this under cookies.
We do not give your data to anyone else and never sell it.
Security
The site runs over an encrypted connection (HTTPS). The form is protected against automated requests by a check that runs on our site and does not send your data to third parties. Enquiries are accessible only to the people who run the accommodation.
Cookies and analytics
The site itself sets no cookies, so it asks for no consent. We measure visits with Plausible, which runs on a European server operated by the developer of the site, uses no cookies and builds no visitor profiles.
The exception is the video on the home page. Until you start it, no connection to YouTube is made. Once you start it, it loads from youtube-nocookie.com, and Google may then process your IP address and device data and set cookies of its own. If you do not want that, do not start the video.
Your rights
You have the right to ask for access to your data, for its rectification or erasure, for restriction of processing and for data portability. You can object to processing that is based on our legitimate interest. Send your request to apartmani-noa@hotmail.com. We may ask you to verify your identity first. We reply within one month. We take no automated decisions and do no profiling.
Complaint to the supervisory authority
If you believe we are breaching data protection law, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): Ulica Metela Ožegovića 16, 10000 Zagreb, azop@azop.hr, www.azop.hr.
Changes
We update this text when the way we process data changes. The date of the last update is at the top of the page.