Privacy and cookies
Controller
The controller is Vincere Simul d.o.o., Put Makra 87, 21300 Makarska, Croatia, OIB 47275728598. Contact [email protected] or write to this address to ask questions or exercise your rights.
Enquiries and bookings
We process your name, email, phone number and calling-code country, stay dates, guest numbers, children's ages needed for capacity and pricing, messages and booking details. Processing is necessary to take steps at your request before entering a contract and to perform the contract. Without the necessary contact and stay details we cannot process your request. Do not send unnecessary identity documents or sensitive information.
Other purposes and legal grounds
Accounting records and complaints are processed to meet legal obligations. Necessary security and legal-claims records are processed on the basis of legitimate interests with restricted access. Reviews and public names are published with the author's permission; they may come from the guest or the platform on which the review was published. Permission can be withdrawn by email. An enquiry is not marketing consent. We do not make solely automated decisions producing legal or similarly significant effects.
Recipients
Necessary information is shared with the accommodation provider or organiser of your selected service. We use WMD Hosting for hosting and Google Workspace for email. Authorised staff, contracted technical providers and accounting providers have access only for their tasks; authorities receive information when legally required. Google services may involve processing outside the EEA. Applicable transfer arrangements are governed by provider contracts, including adequacy decisions or standard contractual clauses. You can request information about applicable safeguards by email.
Retention
Enquiries and offers without a booking are kept for 12 months after the last communication. Essential booking records and relevant correspondence are kept for 5 years after departure or cancellation for potential legal claims. Accounting documents are kept for at least 11 years, starting from the last day of the relevant financial year. Records relating to a specific dispute are kept until the proceedings and applicable periods end. Records are then deleted or anonymised; this also applies to email. Reviews remain published while permission and the purpose of publication remain valid. Technical logs are reviewed regularly and removed when no longer needed for diagnosis or a specific incident.
Your rights
Depending on the legal basis, you may request access, rectification, erasure, restriction, portability and object to legitimate-interest processing. Erasure does not apply to records required by law or for legal claims. Consent can be withdrawn without affecting previous lawful processing. Email [email protected]; we normally respond within one month and notify you of any legally permitted extension. You may complain to the Croatian Personal Data Protection Agency (AZOP), azop.hr.
Necessary cookies
A session cookie supports forms, security and your selected language. The XSRF-TOKEN security cookie protects against forged requests. Sessions last 120 minutes of inactivity. Necessary cookies do not require consent; blocking them may prevent form submission. The administration interface may store its appearance preference in browser local storage until deleted.
Google Maps and settings
Google Maps loads only when you click “Load Google Maps”. Google then receives your IP address and technical data and may use its own cookies. The map is optional. “Hide map” removes it; previously set Google cookies can be deleted in browser settings. Your choice is not remembered for your next visit. Google Analytics and marketing pixels have not been added to this portal.
Updates
Version: 29 October 2026. This notice is updated to reflect changes in processing.