Privacy

Last updated 1 October 2026.

Who we are

Apartman Milly, Krbela 7, Žaborić, Croatia. Rented out by Tomislav Hlušička. For anything about your personal data, write to tomislav.hlusicka@gmail.com.

What we collect and why

Only what you send us with an enquiry, by email, phone or WhatsApp: your name, your email or phone number, your dates, the number of guests, whether you bring a pet, your message and your confirmation that you are at least 18. We use it to reply, to agree your stay and, if you book, to keep the records the law requires for guests (the Croatian guest registration, eVisitor).

The basis is the steps you ask for before a booking and, once you book, the booking itself and our legal obligations.

Where it goes

An enquiry sent from this website goes by email to our Gmail inbox (Google). The website is hosted by Hostinger (EU). The form sends your enquiry to us through Zauzeto’s Google Workspace mail service (Google); Zauzeto keeps no copy. Only if that service is unavailable does the form send it from Hostinger. Zauzeto (2GREAT d.o.o., Zagreb) builds and maintains the website for us and may handle your data only on our instructions, as our processor. If you choose WhatsApp, the message goes through WhatsApp (Meta), under its own terms. We don’t sell or share your details with anyone else. To stop abuse of the form, our server keeps a scrambled code (hash) of your IP address for up to 24 hours, never the address itself.

How long we keep it

Enquiries that don’t become a stay: up to 12 months. Bookings: as long as the tax and guest-registration rules require.

Cookies and the map

This website sets no cookies, loads no trackers and serves its own fonts. If you press “Stop animations”, your browser remembers that choice on your device; it is never sent to us. The map in the “Around” section comes from Google Maps and loads only when you press “Show the map”; from then on Google receives your IP address and may set cookies.

Your rights

You can ask to see, correct or delete your data, to restrict its use, or object to it. For this, including deleting everything we hold about you, a short message to the address above is enough, for example with the subject “Delete my data”. We reply within one month at the latest and delete everything except what the law makes us keep (guest registration and invoices), which we delete as soon as that period ends. You can also complain to the Croatian data protection authority, AZOP (azop.hr).