PRIVACY POLICY AND PERSONAL DATA PROTECTION (GDPR)
1. DATA CONTROLLER
The controller of your personal data is AVALA, travel agency and services, with registered office in Vrgorac, Fra Ivana Rožića 34, MBO: 99210088. The Agency is committed to protecting your privacy and processing data exclusively in accordance with the General Data Protection Regulation (GDPR) and the laws of the Republic of Croatia.
2. WHAT DATA DO WE COLLECT?
When submitting an inquiry or completing a reservation, the Agency collects the following data:
- Basic data: Name and surname, residential address, phone number and email address.
- Data for legal registration (eVisitor): Type and number of identification document, citizenship, date and place of birth (only after confirmed reservation).
- Communication data: Content of your inquiries and messages sent via the web form.
3. PURPOSE AND LEGAL BASIS OF PROCESSING
We process your data exclusively for the following purposes:
- Reservation fulfillment: Processing is necessary for the execution of the accommodation service contract.
- Legal obligation: Registration of your stay in the eVisitor system in accordance with Croatian laws.
- Communication: Responding to your inquiries and providing information about services.
- Legitimate interest: Improving the operation of our website and protection against misuse.
4. DATA RETENTION
Your data is retained only as long as necessary to fulfill the stated purposes:
- Inquiry data is retained until the completion of communication.
- Data on completed reservations and invoices is retained in accordance with legal documentation retention periods (typically 5-11 years).
5. SHARING DATA WITH THIRD PARTIES
The Agency shares your data exclusively with:
- Landlord/Service provider: To ensure your arrival and stay.
- Competent authorities: Through the eVisitor system (Croatian Tourist Board and Ministry of Interior) in accordance with the law.
- Your data will never be sold or transferred to third parties for marketing purposes.
6. YOUR RIGHTS (GDPR)
At any time you have the right to:
- Access: Information about which of your data we process.
- Rectification: Correction of inaccurate data.
- Erasure: “Right to be forgotten” (except for data we are legally required to retain).
- Objection: Submitting an objection to the method of data processing at email: info@avala.hr.
7. COOKIES
Our website uses “cookies” to improve user experience and analyze traffic. Users can independently manage cookie settings in their web browser.
8. CHANGES TO THE PRIVACY POLICY
The Agency reserves the right to modify this Policy. All changes will be published on this website.