Privacy policy
Updated: 5 November 2026
Who is responsible?
Daniela Dapas, Ribnjak 5/01, 10000 Zagreb, Croatia, is the data controller for this website and enquiries about Apartment Zlata. You can contact her using the email address or telephone number below.
Enquiries by email or telephone
If you contact us, we use your name, email address or telephone number and the information you choose to provide to answer your enquiry and discuss a possible rental. Please send only information relevant to your enquiry.
For enquiries about renting the apartment, processing is necessary to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). For other correspondence, the basis is our legitimate interest in answering messages and resolving requests (Article 6(1)(f)). Providing contact information is voluntary, but we need a suitable way to reply. This website has no contact form.
Technical data and cookies
When you visit the website, the hosting infrastructure may record your IP address, the date and time, requested pages, browser information and technical errors to deliver the website and detect or investigate misuse. The basis is our legitimate interest in maintaining a secure and available website (Article 6(1)(f) GDPR).
The hosting infrastructure sets the technical session cookie PH_HPXY_CHECK. It is used for technical request checks and website protection, and has no fixed expiry date beyond the browser session. The website does not use Google Analytics, Google Tag Manager, advertising tags or the Polylang language cookie. Language selection works through links to separate language versions.
Service providers and external links
The hosting provider and authorised technical maintenance providers may access technical data when needed to operate or support the website. Email correspondence is handled through Gmail, a Google service. Google may process information outside the European Economic Area, including in the United States. Its published transfer safeguards include applicable adequacy decisions and standard contractual clauses. See Google’s privacy policy and data transfer frameworks.
Links to maps, routes and the online guide open external services when you follow them. Those services apply their own privacy information. We do not use enquiry information for newsletters or advertising.
How long are data kept?
Enquiry correspondence is kept while a proposed rental or related discussion is open. If no rental is agreed, it is kept until the enquiry and any follow-up or complaint have been resolved; correspondence that is no longer needed is then deleted. Where correspondence forms part of an agreed rental, relevant records are retained for managing that rental and for any applicable legal retention or claim periods.
Technical logs are retained and rotated under the hosting provider’s security and retention settings. The specific log retention period has not been confirmed; you can request current information from Daniela Dapas. The technical cookie is a session cookie.
Your rights
Depending on the processing and applicable conditions, you may request access to your personal data, correction, erasure, restriction of processing or portability. You may object to processing based on legitimate interests, on grounds relating to your particular situation. Send requests to Daniela Dapas using the contact details below. We normally respond within one month, subject to the GDPR rules on extensions.
You may also complain to the Croatian Personal Data Protection Agency, AZOP. We do not make automated decisions or create profiles about you.
Open this policy as a separate page
