1. Controller

Apartments Panorama Grebaštica
Rade Bašelović
Grebaštica Donja 150
22000 Grebaštica
Croatia

Phone / WhatsApp: +385 91 9465 309
E-mail: kontakt@panorama-autocamp.com

2. Purposes of processing

We may process personal data for the following purposes:

• providing this website,
• ensuring the security, stability and proper functioning of the website,
• responding to inquiries,
• handling accommodation and camping booking requests,
• pre-contractual communication,
• fulfilling legal obligations.

3. Categories of personal data

Depending on how you interact with us, we may process the following data:

• name,
• phone number,
• e-mail address,
• travel dates,
• number of guests,
• requested accommodation type,
• message content,
• technical access data required for website operation.

4. Legal basis for processing

We process personal data on the following legal bases:

• Art. 6(1)(b) GDPR: processing necessary to respond to booking inquiries or to take steps at your request before entering into a contract,
• Art. 6(1)(f) GDPR: processing necessary for our legitimate interests in ensuring the secure and stable operation of the website, preventing misuse, maintaining IT security, and handling general business communication,
• Art. 6(1)(c) GDPR: processing necessary for compliance with legal obligations, where applicable.

5. Website hosting and server log files

This website is hosted by STRATO. When this website is accessed, technical usage data transmitted by your browser may be processed in server log files. Such data may include, for example:

• IP address,
• date and time of access,
• browser type and browser version,
• operating system,
• requested page or file,
• referrer URL, if transmitted.

This processing is necessary to ensure the operation, security and stability of the website.

6. Inquiries by e-mail, phone or WhatsApp

If you contact us by e-mail, phone or WhatsApp, we process the data you provide in order to answer your inquiry and, if relevant, to prepare or handle a booking request. This usually includes your contact details, travel dates, number of guests and the content of your message.

If you contact us via WhatsApp, your data may also be processed by WhatsApp according to WhatsApp’s own privacy terms. We recommend using WhatsApp only if you agree with such processing.

7. Recipients of data

We do not sell your personal data. Personal data may be disclosed only where necessary, in particular to:

• hosting providers / technical service providers, especially STRATO for website hosting,
• public authorities, courts or other bodies, if we are legally required to do so.

If service providers process data on our behalf, this is done only within the framework permitted by applicable data protection law.

8. Data retention

We store personal data only for as long as necessary for the relevant purpose:

• inquiry data: for as long as necessary to process and follow up the inquiry,
• booking-related communication: for as long as necessary for pre-contractual communication and, where applicable, for statutory retention periods,
• technical log data: for as long as necessary for website security, operation and troubleshooting.

When data is no longer required for these purposes and there is no legal obligation to retain it, it will be deleted.

9. Your rights

Under the GDPR, you have the following rights, subject to the applicable legal requirements:

• right to be informed,
• right of access,
• right to rectification,
• right to erasure,
• right to restriction of processing,
• right to data portability,
• right to object,
• right to lodge a complaint with a supervisory authority.

If you believe that the processing of your personal data violates applicable data protection law, you also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

If you wish to exercise any of your rights, please contact us using the contact details above.

10. Obligation to provide data

You are not legally required to provide personal data. However, without certain information, we may not be able to answer your inquiry or process a booking request.

11. Automated decision-making

We do not use automated decision-making or profiling within the meaning of the GDPR.

12. Changes to this Privacy Policy

We may update this Privacy Policy if legal, technical or operational changes make this necessary. The current version published on this website applies.

Language and Translation

The website may be made available in multiple languages for convenience.
In the event of discrepancies, inconsistencies or translation errors, the English version of these Terms and related booking conditions shall prevail.
Translations are provided for convenience only and may not fully reflect the original wording.