Privacy Policy

Who is responsible

The controller of your personal data is Ana Pandol Apartments (Ana Plenković-Pandol), Ivan Dolac, Hvar, Croatia · info@anapandol.com · +385 91 528 8969.

What we collect and why

• Inquiry form: name, chosen apartment, dates, number of guests and your message. When you use the WhatsApp or e-mail button, this data is also saved on our website so the hosts can reply. We also store the sending channel, the page and language, and a technical, non-reversible code derived from your IP address to prevent abuse. Legal basis: steps at your request before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in protecting the site from abuse (Art. 6(1)(f)). Inquiries are deleted after 12 months.
• Bookings: if a stay is confirmed, we record the guest name and stay details in our calendar for as long as needed to perform the stay and to meet legal obligations (for example accounting and guest registration).
• Messages by WhatsApp or e-mail are handled by those services under their own privacy policies. We receive your phone number or e-mail address and your message and use them only to answer you.
• Website statistics: Google Analytics 4, only after you accept analytics cookies (Art. 6(1)(a) GDPR). It measures visits and clicks on contact buttons. IP anonymisation is on and advertising features are off. Before you accept, no analytics cookies are set.
• Server logs: the web server keeps your IP address, the time and the requested page for security and to keep the site running, for a limited time.

Who receives your data

We do not sell your data. It may be processed by our hosting provider; by Google (analytics, only with your consent; data may be transferred outside the EU under Google’s safeguards); and by Meta (WhatsApp) or your e-mail provider when you use them to contact us.

Your rights

You may ask us for access to your data, correction, deletion, restriction, portability, or object to processing, and withdraw your consent at any time. Write to us at info@anapandol.com. You can also complain to the Croatian data protection authority (AZOP, azop.hr) or to the authority in your country.

Security

Inquiry data is available only to the hosts through a password-protected panel, and the connection to the website is encrypted (HTTPS).

Changes

We may update this policy. The date at the top shows the latest version.