Privacy policy

Your details.
Only for your enquiry.

The data controller is Jana Tolj, owner of the Croatian sole proprietorship CAFE BAR ZONA, through which Dalmatia Web Studio operates, Josipa bana Jelačića 24, 20250 Orebić, Croatia, Croatian personal identification number (OIB): 33020884427 (“the Studio”). Personal data is used for the purposes described in this policy. For privacy questions and rights requests, contact info@dalmatiawebstudio.hr.

Data we collect

When you submit an enquiry, we may receive your name, email address, phone number, property name and location, a link to an existing website or listing, number of accommodation units, and anything you add to the message. Server security logs may contain an IP address, browser type, access time and requested page.

Purpose and legal basis

• Responding to requests, preparing previews and proposals, and delivering services for an individual: pre-contractual steps at your request or contract performance (GDPR Article 6(1)(b)).
• Communication with business clients’ representatives: legitimate interests in organising business cooperation (point (f)).
• Necessary technical logs, abuse prevention and protection of legal claims: legitimate interests in secure and reliable operations (point (f)).
• Accounting, statutory records and written complaints: legal obligations (point (c)).
• Analytics: your voluntary consent (point (a)), separate from enquiries.

Fields marked as required are needed to process your request; we cannot reply without contact details. Telephone and additional information are optional. An enquiry creates no order obligation and is not marketing consent.

Processors and recipients

The contact form is technically processed by Netlify as the website and form provider. Depending on the channel you choose, an email provider or WhatsApp/Meta may also process the communication. These providers operate under their own privacy terms and may transfer data outside the European Economic Area using appropriate safeguards. We do not sell personal data.

Transfers outside the EEA

Netlify provides hosting and form processing. Email and Google Analytics providers may process data outside the European Economic Area, including the United States. Their information describes adequacy decisions where applicable and standard contractual clauses for other covered transfers: Netlify and Google. Contact us for information about safeguards applicable to your processing and how to obtain a copy. WhatsApp is a separate channel you choose; submitting the web form does not send your data to WhatsApp.

Retention

Enquiries that do not lead to a project are normally kept for no longer than 24 months after the last communication, unless you request earlier deletion or a justified reason requires longer retention. Contractual and accounting records are kept for the periods required by law. Written complaint records are retained for one year from receipt.

Analytics and cookies

We use Google Analytics 4 only after your voluntary consent. The analytics tag does not load before you accept, and refusing analytics does not affect the website or your ability to submit an enquiry. If you accept, we may measure pages viewed, approximate location, device and browser type, acquisition source, selected clicks, form submission and confirmation that an enquiry was received. Form-field content, names, email addresses and phone numbers are not sent to Analytics.

The analytics service is provided by Google Ireland Limited. Google may process data outside the European Economic Area using the safeguards described in its policies. Advertising storage and ad personalisation are disabled on this website. Your choice is stored locally in your browser so that the website does not ask on every visit. You can change your choice at any time using the “Privacy settings” button.

Your analytics choice is stored for up to 180 days, after which we ask again. Withdrawing consent stops Analytics collection and removes this website's Google Analytics cookies. Enquiries remain available without analytics consent.

Our Google Analytics settings retain individual event data for 2 months and user data for 14 months. The user data retention period resets on new user activity. These settings do not apply to most standard reports based on aggregated data.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. Where processing relies on consent, consent may be withdrawn at any time without affecting earlier lawful processing. You may also complain to the Croatian Personal Data Protection Agency (AZOP). Complaints: AZOP.

Automated decision-making

Contact enquiry data is not used for automated decision-making or profiling that produces legal or similarly significant effects.

Last updated: 26 September 2026.