Last updated: 29 October 2026

This privacy policy explains what personal information Apartments Kralj Ana ("we", "us") collects when you use our website or make a booking, why we collect it, how long we keep it, and your rights under the EU General Data Protection Regulation (GDPR).

1. Who is the data controller

Apartments Kralj Ana
Prijeko 1A, 20210 Cavtat, Croatia
Email: info@apartments-kralj-ana.com
Phone: +385 98 906 2712

2. What personal data we collect

We only collect the information we need to handle a booking and stay in touch with you about it:

  • Booking details — full name, email address, phone number, country, postal address, check-in / check-out dates, number of guests, special requests, payment method.
  • Payment information — when you pay online, your card details are entered directly on Stripe's secure payment page. We never see or store your card number, CVV or expiry. Stripe shares with us only a confirmation that the payment was successful, the amount, and the last four digits of the card.
  • Contact-form submissions — the name, email, phone number, subject and message you send via our contact form.
  • Technical data — server access logs (IP address, user agent, time of request) which our hosting provider keeps for security and troubleshooting.

3. Why we use it (legal basis)

  • To fulfil your booking — performance of a contract (Article 6(1)(b) GDPR).
  • To meet our legal obligations — keeping booking records for tax and tourist-tax reporting (Article 6(1)(c) GDPR).
  • To answer your questions sent via the contact form — legitimate interest (Article 6(1)(f) GDPR).
  • To improve the site — only where you have given consent through the cookie banner (Article 6(1)(a) GDPR).

4. Who sees your data

Your data is only shared with the parties strictly necessary to deliver the service you've asked for:

  • Stripe Payments Europe Ltd. — to process online card payments.
  • Our hosting provider — to operate the website and email server.
  • Croatian tax and tourist-board authorities — only when legally required (the standard eVisitor system for registered guests in Croatia).

We never sell or rent your data to third parties for marketing.

5. How long we keep it

  • Booking records: 11 years after the booking date — required by Croatian accounting law (Zakon o računovodstvu).
  • Contact-form messages: deleted within 24 months of the last reply, unless they're linked to a booking.
  • Server access logs: 30 days.

6. Your rights

Under the GDPR you can, at any time, request:

  • A copy of the personal data we hold on you.
  • Correction of any incorrect or incomplete data.
  • Deletion of your data, where we are not legally obliged to keep it.
  • Restriction or objection to a particular processing activity.
  • Withdrawal of any consent you previously gave (e.g. the analytics-cookies consent).
  • To lodge a complaint with the Croatian Data Protection Authority — azop.hr.

To exercise any of these rights, just email us at info@apartments-kralj-ana.com — we'll reply within 30 days.

7. Cancellation & refund policy

  • More than 15 days before check-in — you can cancel for a full refund, no questions asked. The deposit and any pre-payment are returned to the original card within 7 working days.
  • Within 15 days of your check-in date — the deposit (30% of the total) and any amount already paid are non-refundable. If the full amount was paid up-front, only the balance above the 30% deposit is refunded.
  • No-show — treated as a within-15-days cancellation, no refund.

To cancel, use the Cancel link in your confirmation email or email info@apartments-kralj-ana.com with your reservation number.

8. Cookies

For details about the specific cookies our site uses and how to disable them, please see our Cookies Policy.

9. Changes to this policy

If we change anything important, we'll update the "Last updated" date at the top of this page. The current version is always the one published here.