How we handle your personal data

Who is responsible

Oliveglia obrt is the controller of the personal data described here. We are a family business in Šilo on the island of Krk: we make olive oil, rent out holiday homes and look after homes for other owners.

OLIVEGLIA, obrt za usluge, vl. Anton Dunato, OIB 75121165404, Lokvišća 6, 51515 Šilo, Croatia. Email olivegliatourism@gmail.com, phone +385 99 232 3342. Write to us about anything on this page and one of the family will answer.

We are a small business and have not appointed a data protection officer. Questions go to the address above.

What we collect and why

Each use has its legal basis under Article 6(1) GDPR.

• Enquiries. When you use a form on this site or write to us, we receive your name, email address, your phone number if you give it, your message, and what the form asks for: the dates and number of guests for a stay, the town, type and size of a home for property management, or the number of bottles and the delivery country for an oil order. We use this to answer you and prepare an offer. Basis: steps you asked us to take before a contract (point b), or our legitimate interest in answering messages sent to us (point f).
• Stays. When you book with us, we keep the booking details we need to host you and to invoice the stay (point b). Croatian law requires us to register every guest, children included, in the national eVisitor system, using details from an identity document (point c).
• Oil orders. To send an order we need a delivery name and address, which we pass to the postal or courier service, and the details needed for the invoice (points b and c).
• Property management. To look after a home for its owner we keep the owner's contact details and the details of our agreement (point b), and the guest data the work involves, as for our own stays.
• Visits to this site. When you open a page, the server records your IP address, the page, the time and your browser in its log files, as every web server does. This is needed to deliver the site and keep it secure (point f). We do not use these logs to identify anyone.

How the forms on this site work

The forms do not send anything to a server. When you press the button, your own email app opens with the message filled in, and nothing leaves your device until you press send there. The message then reaches our mailbox like any other email.

Cookies and tracking

This site sets no cookies, stores nothing in your browser and runs no analytics, advertising or tracking. Its fonts, pictures, maps and 3D models all come from our own server, so opening a page contacts no one else.

Links to Booking.com, Airbnb, Instagram, Facebook, Google Maps and OpenStreetMap take you to those sites, where their own privacy policies apply. If you book through Booking.com or Airbnb, that platform is responsible for the data you give it.

Who else sees your data

We do not sell your data or share it for advertising. Others receive it only where the work needs it:

• Bluehost (Newfold Digital Inc., USA), which hosts this site and its log files.
• Google, which runs our email (Gmail). Messages you send us are stored there.
• The postal or courier service that delivers an oil order.
• Croatian authorities where the law requires it: guest registration through eVisitor, and the tax administration for invoices. Whoever keeps our accounts sees the documents the accounts need.

Transfers outside the EU

Bluehost and Google are based in the United States. Bluehost's transfers are covered by the European Commission's standard contractual clauses, and Google is certified under the EU-US Data Privacy Framework.

How long we keep it

• Enquiries that do not lead to a stay, an order or an agreement: deleted within 12 months of the last message.
• Bookings, orders, invoices and agreements: for as long as Croatian tax and accounting law requires.
• Guest registration data: for as long as the Croatian rules on guest registration require.
• Server logs: kept by the hosting provider for a short time, then deleted.

Your rights

You can ask us for a copy of your data, and ask us to correct it, delete it, limit how we use it, or give it to you in a portable format. You can object to any use that rests on our legitimate interest. We answer within one month. Some data we must keep by law, such as invoices and guest registration, and we will tell you when that applies.

If you think we have handled your data wrongly, you can complain to the Croatian data protection authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, azop.hr. We would be glad to hear from you first.

Do you have to give us data?

No. But we cannot answer an enquiry without a way to reach you, and we cannot host a stay without the guest registration Croatian law requires. We make no automated decisions about you and build no profiles.

Changes to this notice

When what we do with personal data changes, we update this page and the date at the top.