Privacy Policy
1. Data Controller
The data controller is the operator of Casa de Tisno, based at Put rata 1, 22242 Tisno, Croatia. Contact: info@casadetisno.com
2. What data we process
As part of our booking system and contact form, we process:
- First and last name
- Email address
- Phone number (optional)
- Booking details (dates, number of guests, apartment)
- IP address when submitting forms
- Content of messages from the contact form
3. Purpose of processing
We process personal data for the purpose of:
- Processing and managing bookings
- Communication regarding your stay
- Responding to enquiries from the contact form
- Fulfilling legal obligations (guest registration)
4. Legal basis
The legal basis is the performance of a contract (booking), legitimate interest (communication), and compliance with a legal obligation (guest registration under Croatian law).
5. Retention period
We retain booking data for 3 years after the end of the stay. Contact messages are retained for 1 year. After the retention period, data is securely deleted.
6. Your rights
You have the right to:
- Access your personal data
- Rectification of inaccurate data
- Erasure of data (right to be forgotten)
- Restriction of processing
- Data portability
- Lodge a complaint with a supervisory authority (AZOP, Croatia)
7. Security
Your data is protected by technical and organisational measures, including encrypted transmission (HTTPS), secure storage, and restricted access to authorised persons only.
8. Cookies and embedded third-party content
The website uses technically necessary cookies for session management and CSRF protection. With your consent, we also use analytics cookies (Google Analytics 4) and marketing cookies (Meta/Facebook Pixel) to improve our services. You can change your consent at any time in the cookie settings. The homepage additionally embeds a muted, autoplaying background video from YouTube via the privacy-enhanced youtube-nocookie.com domain — this embed does not set tracking cookies until you actively interact with the player, however loading the iframe transmits your IP address, the Referer header and basic browser information to Google LLC to deliver the video.
9. Contact
To exercise your rights or for questions regarding personal data processing, contact us at info@casadetisno.com.
Last updated: 2026