Privacy Policy

1. Data Controller

The data controller is the operator of Casa de Tisno, based in Tisno, 22240, Croatia. Contact: info@casadetisno.com

2. What data we process

As part of our booking system and contact form, we process:

First and last name
Email address
Phone number (optional)
Booking details (dates, number of guests, apartment)
IP address when submitting forms
Content of messages from the contact form

3. Purpose of processing

We process personal data for the purpose of:

Processing and managing bookings
Communication regarding your stay
Responding to enquiries from the contact form
Fulfilling legal obligations (guest registration)

4. Legal basis

The legal basis is the performance of a contract (booking), legitimate interest (communication), and compliance with a legal obligation (guest registration under Croatian law).

5. Retention period

We retain booking data for 3 years after the end of the stay. Contact messages are retained for 1 year. After the retention period, data is securely deleted.

6. Your rights

You have the right to:

Access your personal data
Rectification of inaccurate data
Erasure of data (right to be forgotten)
Restriction of processing
Data portability
Lodge a complaint with a supervisory authority (AZOP, Croatia)

7. Security

Your data is protected by technical and organisational measures, including encrypted transmission (HTTPS), secure storage, and restricted access to authorised persons only.

8. Cookies

The website uses technically necessary cookies for session management. With your consent, we also use analytics cookies (Google Analytics) and marketing cookies (Meta Pixel) to improve our services. You can change your consent at any time in cookie settings.

Manage cookie consent

You can change your cookie consent at any time. Click the button below to open cookie settings and adjust your preferences.

9. Contact

To exercise your rights or for questions regarding personal data processing, contact us at info@casadetisno.com.

Last updated: 2026