Privacy Policy

The controller of your personal data is DiGallo Apartments, Drakovci 9, 22242 Jezera, Murter, Croatia. For any privacy questions, contact us at info@digallo-apartments.com.

We only collect data you send us yourself via the enquiry form, or data that is technically necessary to run the site:

• Booking enquiry data: full name, e-mail address, phone number (if provided), message, dates of stay, number of adults and children, and the language of your enquiry.
• Technical data: IP address and basic server logs, to the extent necessary for site security and abuse prevention (e.g. rate limiting).

• Processing your enquiry and communicating about your booking - Art. 6(1)(b) GDPR: steps taken at your request prior to entering into a contract.
• Site security and abuse prevention - Art. 6(1)(f) GDPR: our legitimate interest.
• Compliance with legal obligations of accommodation providers (e.g. guest registration) - Art. 6(1)(c) GDPR.

We never sell your data or share it for marketing. We rely on trusted processors to run the site:

• Hostinger (website hosting)
• Neon (database; data stored in the EU - Frankfurt)
• Resend (sending confirmation and notification e-mails)

Some providers may process part of the data outside the European Economic Area. Such transfers rely on appropriate GDPR safeguards, such as standard contractual clauses.

Enquiry data is kept for as long as needed to handle your enquiry and stay, and to meet legal obligations (e.g. guest records). After that, it is deleted. You may request deletion earlier at any time.

Under the GDPR you have the right to:

• access your data and obtain a copy,
• have inaccurate data corrected,
• have your data erased ("right to be forgotten"),
• restrict or object to processing,
• data portability,
• lodge a complaint with a supervisory authority - in Croatia, the Personal Data Protection Agency (AZOP), azop.hr.

The site uses no marketing or analytics cookies and does not track you across other websites. We only use strictly necessary browser storage:

• sessionStorage - remembers that the intro animation has already played (cleared when the tab closes),
• localStorage - remembers that you have seen the privacy notice.
• The map is loaded from OpenStreetMap servers; your IP address is transmitted to the OpenStreetMap Foundation in the process. See their privacy policy.

The site is not directed at children and does not knowingly collect their data. The number of children in an enquiry is entered by the adult sending it.

We may update this policy from time to time; the current version, with its effective date, is always available on this page.