Privacy policy

Data contact

For accommodation enquiries: Villa Anita, Gabrica 12, 20270 Vela Luka, Croatia; info@villaanitavelaluka.com; +385 91 253 8756.

Data and purpose

The form collects your name, email, optional phone and message, travel dates and number of guests. We use these to respond to your request and take steps before a possible contract (GDPR Article 6(1)(b)). We do not subscribe you to marketing.

Storage and access

Enquiries are stored in a protected database accessible to the authorised owner. Technical infrastructure is provided by Vercel and Neon PostgreSQL. An enquiry is not a booking confirmation. Unconfirmed enquiries in this system are kept for up to 12 months and then removed during the next enquiry submission or owner review. Contract and statutory records may be held separately for applicable periods.

Security and cookies

A short-lived security question and pseudonymised network identifier help prevent abuse, based on legitimate interests in system security (Article 6(1)(f)). Questions expire after 30 minutes and rate-limit records after two hours; expired records are removed on the next security challenge. Google Analytics (GA4) is used only after your explicit consent. If you do not allow analytics, Google Analytics is not loaded. You can change your choice in Privacy settings on the website. Hosting may use essential security and sign-in cookies.

External services

WhatsApp, email and Google Maps open only when you click their links; their own policies then apply. Infrastructure providers may process data outside the EEA under their applicable contractual and transfer safeguards.

Your rights

You can request access, correction, deletion, restriction and, where applicable, portability, or object to processing. Use the contact above. You may complain to the Croatian data protection authority, AZOP (azop.hr). Booking decisions are not made by automated processing.

When email notifications are enabled, enquiry details are sent to the owner through Resend, which processes the message content and data needed for delivery.

14. 9. 2026.