Privacy policy

Who processes your data

This website is run by Osmijeh d.o.o., Ul. Antuna Kuzmanića 3, 21000 Split, Croatia, company ID (OIB) 78387116184, trading as Hotel Villa Diana and Pizzeria Villa Diana.

For any question about privacy, write to info@villadiana.hr or call +385 21 482 460. Reception is open around the clock.

What we do not ask of you

This website has no enquiry form, no login, no user account and no newsletter. We do not ask for your name, e-mail or phone number, and we have nowhere to record them.

There is no analytics and no advertising technology either. We do not use Google Analytics, Google Ads, the Meta pixel or any other tool that would track what you look at or recognise you on another site. There is no profiling and no automated decision-making about you.

The fonts the site is set in are served from our own domain, so your browser does not contact any third party because of them.

Server logs

The site is served by Vercel Inc. Like any server anywhere, it records technical details of every request: IP address, browser type, the address requested, the time and the server's response.

This happens so that the site can work at all and so that an attack or a fault can be spotted. The legal basis is our legitimate interest under Article 6(1)(f) GDPR. We do not combine these logs with anything else, we do not use them to measure traffic and we do not pass them to anyone.

Vercel acts as our processor and keeps the logs briefly, in line with its own terms.

The map on the Contact page

The Contact page has a Google Maps map, but it **does not load by itself**. Until you click the “Show the map” button there is only a still panel and nothing goes to Google.

When you click, your browser requests the map from Google and thereby sends it your IP address, browser details and the time. Google Ireland Limited then becomes the recipient of that data, and the data may also be transferred to the United States. The legal basis is your consent under Article 6(1)(a) GDPR, and you give that consent by that very click.

If you do not open the map, nothing is sent. How Google handles the data is set out in its privacy policy at policies.google.com/privacy.

When you book a room

On the site you choose dates and the number of adults, children and rooms. Those choices **do not come to us**: clicking “Check availability” opens the Rentlio reservation system and passes your choices to it in the address.

The booking itself — name, e-mail, payment details — you complete with Rentlio, on its site and under its privacy policy. We receive your booking details from Rentlio because we need them to receive you, and we then process them to perform the accommodation contract under Article 6(1)(b) GDPR, and to meet the legal duties of registering guests and issuing invoices.

A table at the pizzeria is booked by phone or on WhatsApp. If you write to us on WhatsApp, the message travels through WhatsApp and is subject to that service's terms.

Cookies

The site sets **one** cookie: NEXT_LOCALE. It holds nothing but the code of the language you chose — for example “hr” or “de” — so that your next visit does not start in the wrong language.

That cookie does not track you, contains nothing about you and is not shared with anyone. There are no analytics or advertising cookies, which is why the site does not ask for cookie consent.

If you would still like to delete it, that is done in your browser settings, as for any other site.

Your rights

You have the right to know what data we hold about you and to receive a copy of it, to have inaccurate data corrected, to ask for erasure or for processing to be restricted, to take your data elsewhere, and to object to processing based on our legitimate interest.

Where processing rests on consent — and that is only the map on the Contact page — you may withdraw it at any time, quite simply by not opening the map or by reloading the page.

Send your request to info@villadiana.hr. We reply within one month. If you believe we are not handling your data properly, you may contact the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Changes to this policy

We change this policy when what the site does changes. If one day we introduce analytics or advertising tools, we will add a section on each of them and ask for consent before any of them runs.

The date of the last change is shown at the top.