← Back to home page

How we handle your personal data

We value your trust. This policy explains what data we collect, why we collect it, and what rights you have regarding this data.

1. Data controller

The data controller is:

Milena Močibob
Nova vas 101N
52474 Brtonigla, Croatia
E-mail: info@villavictoriaistra.com
Telefon: +386 40 166 166

2. What data we collect

When you book your stay and communicate with us, we collect the following personal data:

• Identification data: first name, surname, date of birth (at arrival)
• Contact details: email address, phone number, residential address
• Booking data: stay dates, number of guests, special requests
• Payment data: when paying via the Bentral system (card and banking details are processed by Bentral, not by us)
• Technical data: IP address, browser and device information (via cookies)

3. Why we process your data

We process your data for the following purposes:

• Processing and confirming bookings
• Communication with you before, during and after your stay
• Fulfilling contractual obligations regarding the stay
• Fulfilling legal obligations (e.g. registering guests with the authorities)
• Improving our services and website
• Sending important notifications about your booking

4. Legal basis for processing

We process your data on the following legal grounds:

• Contract — to fulfil the booking and stay (Art. 6/1/b GDPR)
• Legal obligation — registering guests with the authorities (Art. 6/1/c GDPR)
• Consent — for any potential marketing purposes (Art. 6/1/a GDPR)
• Legitimate interest — to improve services and protect our interests (Art. 6/1/f GDPR)

5. Who we share your data with

We may share your data with:

• Bentral d.o.o. — our booking system provider
• The competent state authorities — if required by law (guest registration)
• Accounting services — for keeping financial records
• Legal and advisory services — if necessary

We do not sell your data to third parties and do not use it for purposes for which you have not given consent.

6. How long we keep your data

We retain your data only for as long as is necessary to fulfil the purposes for which they were collected:

• Booking fulfilment data: up to 5 years after the end of the stay (due to tax obligations)
• Accounting documentation: up to 10 years (legal obligation)
• Email communication: up to 3 years
• Data for marketing purposes: until consent is withdrawn

7. Your rights under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — to receive a copy of your data
• Right to rectification — correction of inaccurate data
• Right to erasure ("right to be forgotten") — deletion of your data
• Right to restriction of processing
• Right to data portability — transferring your data to another controller
• Right to object — to specific processing
• Right to withdraw consent — where processing was based on consent
• Right to lodge a complaint with the competent supervisory authority

To exercise your rights, please write to: info@villavictoriaistra.com

8. Competent supervisory authority

You may lodge a complaint with:

Croatia: Agencija za zaštitu osobnih podataka (AZOP)
azop.hr

Slovenia (if you are a citizen): Informacijski pooblaščenec RS
ip-rs.si

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. Nonetheless, no system is 100% secure — in the event of a data breach we will act in accordance with the GDPR.

10. Changes to this policy

We may update this privacy policy from time to time. Significant changes will be posted on this page with a new updated date.

11. Contact

For any questions about this policy or the processing of your personal data, please contact us:

E-mail: info@villavictoriaistra.com
Telefon: +386 40 166 166

Last updated: April 2026