Privacy policy

The controller is Felix Apartment - obiteljsko iznajmljivanje, Ulica dr. Franje Tuđmana 74A, 23210 Biograd na Moru, Croatia.

Data contact: felix.biograd@gmail.com, phone +385 91 204 7897.

Booking data: name, email, phone number, country, stay dates, number and age of guests, stay notes.

Data required by Croatian law: guest ID details for registration in the eVisitor system (name, date and place of birth, nationality, document number).

Payment data: transaction status and reference. We never see or store full card details - they are handled by the payment provider.

Technical data: IP address, device and browser type, server security events.

Performance of the rental contract (Art. 6(1)(b) GDPR) - enquiries, bookings, payments and your stay.

Legal obligation (Art. 6(1)(c) GDPR) - eVisitor guest registration, tourist tax reporting, accounting and tax duties.

Legitimate interest (Art. 6(1)(f) GDPR) - property and website security, establishing or defending legal claims such as damage to the apartment.

Consent (Art. 6(1)(a) GDPR) - only for non-essential cookies and any marketing messages.

Service providers we need to operate: hosting and database, payment provider (Stripe), email provider, map tiles (OpenStreetMap), weather API, and the AI assistant powering the chat.

Public authorities where the law requires it: eVisitor, tax authority, police.

Booking platforms (e.g. Booking.com) where the reservation originates from that channel - their privacy policy then applies as well.

We never sell your data or share it with third parties for marketing.

Some technical providers may process data outside the EEA under the European Commission's Standard Contractual Clauses or an adequacy decision.

Enquiries without a booking: up to 12 months.

Booking and payment records: 11 years from the end of the financial year (Croatian accounting rules).

eVisitor registration data: as required by tourist accommodation law.

Technical logs: up to 12 months.

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest.

Send requests to felix.biograd@gmail.com. We reply within 30 days.

You may lodge a complaint with a supervisory authority (AZOP in Croatia, or the authority in your country of residence).

We use TLS encryption, access control for the owner panel and data minimisation. No system is fully immune to incidents - our liability is limited to what the GDPR and Croatian law provide.

Providing booking and registration data is voluntary, but without it we cannot conclude the rental contract or register you as a guest.