Privacy policy
Last updated: 21 Aug 2026
Who we are
Villa Arboresca ("we") is the controller of the personal data described below. For any privacy question or to exercise your rights, contact us using the details at the bottom of this page.
What data we collect and why
Guest registration (check-in):
Croatian law requires every guest staying in tourist accommodation to be registered with the national eVisitor system. To do this we collect each guest's name, gender, date of birth, identity/travel document type and number, citizenship, country of birth, country and city of residence, and stay dates. We may also store an email address you choose to provide. We collect only the data eVisitor requires.
Legal basis: this processing is a legal obligation (GDPR Article 6(1)(c)) under Croatian residence-registration and tourist-tax law. Because registration is required by law, it is a condition of staying with us and is not based on consent.
Booking and billing:
We process your booking details (dates, unit, the name and contact of the person who made the booking) to manage your stay, and the data required to issue a fiscal invoice where applicable.
Who we share it with
Guest registration data is submitted to the Croatian eVisitor system operated by the Croatian National Tourist Board and the competent authorities. We also use trusted service providers (server hosting, email delivery and file storage) that process data on our behalf under data-processing agreements. We never sell your data.
How long we keep it
Guest registration data stored in our own systems is deleted 30 days after your check-out; eVisitor and the authorities keep their records as required by law.
Invoices and accounting records are retained for the longer period required by tax law.
Your rights
Under the GDPR you have the right to access, rectify, erase or restrict the processing of your personal data, and to data portability. Where we process data to meet a legal obligation (such as guest registration), we may need to keep it for as long as the law requires. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
How we protect your data
Access to guest data is restricted to authorised staff, transmitted over encrypted connections, and every access is logged. We apply data minimisation — we collect only what the law requires.
Contact
Villa Arboresca
Put dr. Ante Starčevića 117b