# KALAMOTA NEKRETNINE D.O.O.
# PRIVACY POLICY
**Version: February 26, 2026**
## 1. INTRODUCTION
**Kalamota Nekretnine d.o.o.**
OIB: 86727363117
Head office: Grintavica 40, 52444 Brečević-Tinjan, Republic of Croatia
Email: info@sanjaferien.com
Phone: +385912121435
Kalamota Nekretnine d.o.o. (“we”, “us”, “Kalamota”) respects your privacy and protects your personal data in accordance with the **General Data Protection Regulation (GDPR – EU 2016/679)**, the Act on the Implementation of the General Data Protection Regulation (OG 42/18) and the Act on Hospitality Activities of the Republic of Croatia.
This Privacy Policy explains how we collect, use, store and protect your personal data.
## 2. DATA WE COLLECT
### 2.1. Guest personal data (mandatory for booking)
– Name and surname of each guest
– Date of birth
– Passport or ID number
– Citizenship
– Residence address
– Email address
– Telephone number
– Arrival and departure dates
– Number of people in the group
### 2.2. Financial data
– IBAN of bank account (for deposit refund)
– Payment details (card type – without CVV number)
– Reservation and deposit amount
### 2.3. Technical data
– IP address (website security)
– Browser and device type
– Access time
## 3. PURPOSES OF DATA PROCESSING
| Purpose of processing | Legal basis | Explanation |
| Confirmation and execution of reservation | Contract | Sending confirmation, issuing keys |
| Login to the eVisitor system | **Legal obligation** | Registration of stay for tourists |
| Issuing invoices and calculating VAT | Legal obligation | Tax documentation |
| Communication about the reservation | Legitimate interest | Arrival instructions, notifications |
| Damage documentation | Legitimate interest | Photos of the condition of the facility |
| Business statistics | Legitimate interest | Occupancy analysis |
## 4. WHO WE SHARE DATA WITH
**We share data EXCLUSIVELY with:**
✅ **Government bodies:**
– eVisitor system (Ministry of Tourism and Sports of the Republic of Croatia)
– Tax Administration of the Republic of Croatia (issuing invoices)
– Ministry of Interior (in cases prescribed by law)
✅ **Financial institutions:**
– Banks (processing payments and deposit refunds)
– Payment systems (PayPal, cards – for authorization only)
✅ **Insurers** (only in case of damage to the property)
✅ **Legal advisors** (in case of dispute)
**WE DO NOT SHARE data with:**
❌ Marketing agencies
❌ Third parties for advertising purposes
❌ Social networks
## 5. DATA STORAGE PERIODS
| Data type | Storage period | Legal basis |
|—————-|————-|—————-|
| Reservations and invoices | **5 years** | Income Tax Act |
| eVisitor applications | **Minimum 2 years** | Hospitality Act |
| Damage documentation | **10 years** | Civil statute of limitations |
| Technical log data | **30 days** | System security |
**After the deadlines have expired, the data is permanently and irreversibly deleted.**
## 6. SECURITY MEASURES
Kalamota Nekretnine applies the following data protection measures:
✅ Data storage on **servers in the European Union**
✅ **SSL encryption** of all data transfers
✅ Data access **only to authorized employees**
✅ Two-factor authentication for system access
✅ Regular security audits and upgrades
✅ Automatic backup copies (also in the EU)
## 7. YOUR RIGHTS UNDER GDPR
**As a data subject, you have the right to:**
| Right | Explanation | How to exercise |
|———|————|—————-|
| **Right to access** | View all data we hold about you | Email request |
| **Right to rectification** | Correct inaccurate or incomplete data | Email request |
| **Right to erasure** | Request erasure after the expiry of legal deadlines | Email request |
| **Right to restriction of processing** | Temporarily stop processing in certain cases | Email request |
| **Right to portability** | Receive data in a machine-readable format (CSV) | Email request |
| **Right to object** | Object to processing based on legitimate interest | Email/writing |
**To exercise your rights, please contact:**
Email: info@sanjaferien.com
Response within: **30 days**
## 8. COOKIES AND TRACKING
### 8.1. Types of cookies we use
✅ **Technical cookies** – necessary for the operation of the site (sessions, security)
✅ **Analytical cookies** – Google Analytics (anonymized, no personal data)
❌ **We do not use:**
– Marketing cookies
– Behavioral cookies
– Third-party cookies (except Google Analytics)
### 8.2. Cookie management
You can disable them in your browser settings. Note: disabling technical cookies may interfere with the functionality of the site.
## 9. CHILDREN
**We do not accept reservations from children under 16 years of age without an adult.**
We collect data from children under 16 years of age only as part of a group reservation with the consent of a parent/guardian.
## 10. AUTOMATED DECISION-MAKING AND PROFILING
**Kalamota Nekretnine DOES NOT use:**
❌ Automated decision-making
❌ Guest profiling
❌ Algorithmic scoring
All decisions (acceptance of reservations, return of deposits) are made manually by employees.
## 11. DATA TRANSFER OUTSIDE THE EU
**All data is stored and processed exclusively on servers in the European Union.**
Exception: PayPal (USA) – has valid Standard Contractual Clauses (SCC) for GDPR compliance.
## 12. CONTACT INFORMATION
**Data Controller:**
Kalamota Nekretnine d.o.o.
Grintavica 40, 52444 Brečević-Tinjan
Email: info@sanjaferien.com
Phone: +385912121435
**Person responsible for data protection:**
Marko Macinković, director
**Objections and complaints:**
If you believe that we have not processed your data correctly, you can file a complaint:
**AZOP – Agency for Personal Data Protection**
Martićeva 14, 10000 Zagreb
www.azop.hr
Phone: 01/406-7911
Email: azop@azop.hr
## 13. PRIVACY POLICY CHANGES
Kalamota Nekretnine reserves the right to change this Privacy Policy with the obligation to publish it on the website and notify guests with active reservations.
**Last modified:** February 26, 2026
**Version:** 1.0
## 14. FINAL PROVISIONS
This Privacy Policy is an integral part of the General Terms and Conditions of Accommodation Services of Kalamota Nekretnine d.o.o.
**Effective Date:** February 26, 2026
**Kalamota Nekretnine d.o.o.**
______________________________
**Marko Mačinković**
Director
