Last updated: 16 August 2026
Villa Rosa respects the privacy of its guests and visitors to villa-rosa.eu and processes personal data in accordance with Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation and other applicable laws of the Republic of Croatia.
This Privacy Policy explains what personal data we collect, why we process it, how long we retain it, with whom it may be shared and what rights you have in relation to your personal data.
The controller responsible for processing your personal data is:
Villa Rosa
Jasna Škopac, private accommodation provider
Presika 112A
52220 Labin, Croatia
Website: villa-rosa.eu
Email: info@villa-rosa.eu
Contact person for questions relating to personal data protection:
Roberto Škopac
Email: info@villa-rosa.eu
This Privacy Policy applies to:
If you make a reservation through an external platform such as Booking.com, Airbnb or Vrbo, the processing carried out by that platform is also subject to its own privacy policy.
Depending on how you use our website and services, we may process the following categories of personal data:
When a payment is made through an external payment service provider, payment card information is processed by that provider in accordance with its privacy policy. Villa Rosa does not store complete payment card details.
We may process a reviewer’s name or username, review content, rating, country and the source of the review when the review has been publicly posted on platforms such as Google, Booking.com or Tripadvisor, or when a guest has directly authorised us to publish it.
We process personal data to respond to questions about availability, prices, accommodation, location and special requests.
The legal basis is taking steps at your request before entering into a contract or our legitimate interest in communicating with potential guests.
We process personal data to check availability, confirm and manage reservations, process payments, communicate before and during a stay and provide the agreed accommodation service.
The legal basis is the performance of a contract or taking steps before entering into a contract.
We process personal data to register guests through the eVisitor system, maintain statutory records, issue invoices, comply with tax and accounting obligations and respond to lawful requests from competent authorities.
The legal basis is compliance with the legal obligations of the data controller.
We may process technical information to protect the website, detect security incidents, prevent misuse and ensure the stable operation of our systems.
The legal basis is our legitimate interest in protecting the website, our business and our users.
With your consent, we may use analytics cookies to understand how the website is used and to improve its content, functionality and user experience.
The legal basis is your consent.
If you have subscribed to receive promotional communications, we use your email address to send discounts, special offers and occasional updates about Villa Rosa.
The legal basis is your consent. You may withdraw your consent at any time by using the unsubscribe link included in each message or by contacting info@villa-rosa.eu.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
We may publish reviews to present authentic experiences of previous guests and the quality of our accommodation.
The legal basis may be the guest’s consent or our legitimate interest in presenting our services when a review has already been lawfully and publicly posted on a booking or review platform.
We may receive personal data:
A person who provides us with personal data relating to other guests is responsible for informing those guests about this Privacy Policy.
We do not sell personal data or provide it to third parties for their own independent marketing purposes.
Where necessary, personal data may be shared with:
Service providers that process personal data according to our instructions may use it only for the agreed purpose and are required to implement appropriate safeguards.
Certain booking, communication and payment platforms may act as independent data controllers. Their processing is governed by their respective privacy policies.
Certain technology service providers may process personal data outside the European Economic Area.
In such cases, personal data is transferred only where an appropriate legal basis and safeguard are in place, such as a European Commission adequacy decision, the EU–US Data Privacy Framework for certified organisations or the European Commission’s Standard Contractual Clauses.
We retain personal data only for as long as necessary for the purpose for which it was collected:
After the relevant retention period expires, personal data is deleted, anonymised or access to it is restricted.
Providing information through a general enquiry form is voluntary. However, without basic contact information, we may be unable to respond to your enquiry.
Information required to process a reservation, complete a payment, provide accommodation or carry out the statutory registration of guests is mandatory. If you do not provide this information, we may be unable to confirm the reservation or provide the accommodation service.
Providing a telephone number through the contact form is optional unless it is required for arrangements relating to a reservation or stay.
The villa-rosa.eu website uses cookies and similar technologies.
Strictly necessary cookies are used to ensure the proper and secure operation of the website and do not require consent. Analytics, functional and marketing cookies are used only after you have provided consent through the cookie settings.
You may withdraw or change your consent at any time through the “Cookie Settings” option available on the website.
Detailed information about the cookies we use, their purpose, providers and duration is available in our Cookie Policy.
The reservation system may automatically display availability, calculate prices and generate a reservation confirmation based on selected dates, the number of guests and predefined availability and pricing rules.
We do not carry out automated decision-making or profiling that produces legal effects or similarly significantly affects you, apart from automated processes necessary to manage and complete a reservation.
Depending on the circumstances and the legal basis for processing, you have the right to:
These rights are not absolute. We may be required to retain certain information to comply with legal obligations or to establish, exercise or defend legal claims.
To exercise your rights, contact us at info@villa-rosa.eu. We will respond without undue delay and no later than one month after receiving your request. In complex cases, this period may be extended by a further two months, in which case we will notify you in due time.
Before acting on a request, we may ask for additional information necessary to verify the identity of the person making the request.
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency:
Croatian Personal Data Protection Agency – AZOP
Website: azop.hr
Email: azop@azop.hr
Complaint form: azop.hr/zahtjev-za-utvrdivanje-povrede-prava
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse, destruction or unauthorised disclosure.
Access to personal data is limited to people and service providers who require the information to perform their duties.
Although we take reasonable protective measures, no method of transmitting or storing information over the internet can be guaranteed to be completely secure.
Reservations may only be made by adults.
When children are included in a reservation, we process their personal data only to the extent necessary to manage the reservation, provide accommodation and comply with legal obligations, based on information provided by a parent, legal guardian or other person responsible for the reservation.
Our promotional activities and newsletter are not intended for people under the age of 16.
The website may contain links to Google Maps, Facebook, Instagram, WhatsApp, booking platforms and other external websites.
When you open an external link, the relevant provider may process your personal data as an independent data controller. Villa Rosa is not responsible for how external websites process personal data, and we recommend reviewing their respective privacy policies.
We may update this Privacy Policy from time to time to reflect changes in applicable laws, technology, website functionality or our business operations.
The updated version will be published on villa-rosa.eu together with a clearly stated date of the latest revision.
If we intend to use personal data for a new purpose not covered by this Privacy Policy, we will provide the appropriate additional information before beginning such processing.
