Privacy Policy

Apartments Mirakul Lopar Lopar, Island Rab, Croatia

Last updated: April 2026

1. Introduction

Apartments Mirakul Lopar ("we", "us", "our") is committed to protecting the personal data of our guests and website visitors. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have regarding your data.

This policy is in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Croatian data protection legislation.

2. Data Controller

Apartments Mirakul Lopar Lopar, Island Rab, Croatia

For any privacy-related questions, please contact us at: apartmanimirakul.lopar@gmail.com

3. Personal Data We Collect

We may collect and process the following personal data:

Identity data: full name, date of birth, nationality, passport or ID number
Contact data: email address, phone number, home address
Booking data: check-in and check-out dates, number of guests, special requests
Payment data: payment method and transaction details (we do not store full card numbers)
Communication data: messages sent to us via email, phone, or booking platforms
Technical data: IP address, browser type, and usage data if you visit our website

4. How We Collect Your Data

We collect personal data:

Directly from you when you make a reservation (by phone, email, or booking platforms)
Through third-party booking platforms (e.g. Booking.com, Airbnb)
Automatically via cookies or analytics tools on our website (if applicable)

5. Legal Basis for Processing

We process your personal data on the following legal grounds:

Contract performance: to process your reservation and provide accommodation services
Legal obligation: Croatian law requires us to register guests with the local tourist board (eVisitor system) and relevant authorities
Legitimate interest: to respond to your inquiries and improve our services
Consent: for marketing communications, where you have explicitly opted in

6. How We Use Your Data

Your personal data is used to:

Process and confirm your reservation
Manage your stay and communicate with you
Register guests with the Croatian tourist board via the eVisitor system, as required by law
Process payments
Comply with tax and legal obligations
Send you information about future offers or promotions (only with your consent)

7. Sharing Your Data

We do not sell your personal data. We may share it with:

Croatian authorities (tourist board, police, tax authorities) as required by law
Booking platforms (e.g. Booking.com, Airbnb) through which your reservation was made
Payment processors for secure transaction handling
Service providers who assist us in operating our business, under strict confidentiality obligations

8. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this policy, and in accordance with Croatian legal requirements. Booking and guest records are typically kept for a minimum of 5 years for tax and legal compliance purposes.

9. Your Rights

Under GDPR, you have the right to:

Access the personal data we hold about you
Correct inaccurate or incomplete data
Erase your data ("right to be forgotten"), where legally permitted
Restrict or object to processing of your data
Data portability — receive your data in a structured, machine-readable format
Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at [your email address]. We will respond within 30 days.

If you believe your rights have been violated, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): Website: www.azop.hr | Email: azop@azop.hr

10. Cookies

If our website uses cookies, we will request your consent before placing non-essential cookies. You may adjust your cookie preferences at any time through your browser settings.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available upon request and, if applicable, on our website. The date at the top of this document indicates when it was last revised.