Privacy Policy
Your privacy matters to us. We are committed to protecting your personal information and handling your data transparently, securely and in accordance with applicable European Union and Croatian data protection laws.
Last updated: 10 October 2026This Privacy Policy explains how ISTRIA PUNTA d.o.o., operating as Apartments Istria Punta Umag, collects, uses, stores, shares and protects personal data.
It applies to visitors of our website, guests staying at our accommodation, individuals making reservations or inquiries, and customers using services offered through our website.
We process personal data in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and applicable Croatian data protection legislation.
We collect only personal data needed for legitimate and clearly defined purposes. We do not sell personal data to third parties.
Data Controller
The following company is responsible for the processing of personal data described in this Privacy Policy.
52470 Umag, Croatia
For questions about how we process personal data or to exercise your privacy rights, please contact us using the email address above.
Personal Data We Collect
Depending on how you interact with us, we may collect and process the following categories of personal information.
Full name, email address, telephone number, postal address and other contact details you provide.
Arrival and departure dates, apartment selection, number of guests, reservation details, correspondence and special requests.
Personal identification details required by Croatian legislation for registration in the eVisitor tourist registration system.
Payment status, amounts, transaction references, invoices and billing information required for accounting and accommodation services.
IP address, browser type, device information, access times, server logs and cookie-related information, where applicable.
Account details, usernames, email addresses, shopping cart information and order details when you use relevant website features.
Where We Obtain Personal Data
We normally obtain personal data directly from you when you contact us, make a reservation, register as a guest or use our website.
We may also receive reservation and contact details from accommodation booking platforms, travel intermediaries or other persons making a reservation on your behalf. In such cases, the data may originate from those platforms or persons.
We do not intentionally request sensitive personal information unless a specific lawful purpose requires it. Please avoid including unnecessary sensitive information in messages or booking requests.
Purposes and Legal Bases for Processing
We process personal data only where there is a valid legal basis under Article 6 of the GDPR.
| Purpose | Legal Basis |
|---|---|
| Handling accommodation inquiries and reservation requests | Article 6(1)(b) GDPR: steps taken before entering into a contract |
| Managing confirmed reservations and providing accommodation services | Article 6(1)(b) GDPR: performance of a contract |
| Registering and deregistering guests in eVisitor | Article 6(1)(c) GDPR: compliance with legal obligations |
| Issuing invoices, maintaining accounting records and fulfilling tax obligations | Article 6(1)(c) GDPR: compliance with legal obligations |
| Processing accommodation payments and related transactions | Article 6(1)(b) and, where applicable, Article 6(1)(c) GDPR |
| Protecting our website, preventing misuse and maintaining network security | Article 6(1)(f) GDPR: legitimate interests in maintaining security |
| Handling customer complaints and establishing, exercising or defending legal claims | Article 6(1)(c) or 6(1)(f) GDPR, as appropriate |
| Optional analytics, marketing and non-essential cookies, where these are used | Article 6(1)(a) GDPR: consent, where required |
Where processing is based on legitimate interests, we consider the impact on your privacy and your fundamental rights. You may object to processing based on legitimate interests as described below.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect processing lawfully carried out before withdrawal.
Reservations and Guest Registration
Accommodation Reservations
When you book accommodation directly or through an accommodation platform, we process the personal data necessary to manage your reservation, provide accommodation and communicate with you.
Reservation-related data may include guest names, contact information, accommodation dates, payment details and communications relating to your stay.
Mandatory Registration in eVisitor
Croatian accommodation providers are legally required to register and deregister guests through the official eVisitor tourist registration system.
For this purpose, we collect the identification and stay-related information required by the applicable Croatian tourism regulations.
Depending on the applicable legal requirements, this may include:
- Full name and surname
- Date and place of birth
- Nationality and country of residence
- Address of residence
- Type and number of identity document
- Gender, where required
- Arrival and departure information
- Other information specifically required for statutory registration
Identification documents may be inspected to verify the information necessary for mandatory guest registration. Photographing or retaining copies of identity documents is not required solely for registration in eVisitor.
Guests should provide only the information necessary for the registration process. Unnecessary identification document images should not be submitted.
Mandatory guest registration data is processed on the basis of applicable Croatian legal obligations and entered into the relevant official registration system.
Mandatory and Optional Information
Certain personal data is necessary to confirm your reservation and provide accommodation services. Other information is required by law.
If necessary information is not provided, we may be unable to complete the reservation, register guests legally or provide the requested accommodation service.
Optional information, such as additional preferences or special requests, may be omitted unless it is necessary for a specific requested service.
Payments and Financial Information
We may process payment-related information to manage reservations, collect payments, issue invoices and meet applicable accounting and tax requirements.
Depending on the reservation and payment method, payments may be processed through a third-party payment service provider, including Teya, bank transfer or supported booking platforms.
When you use a third-party payment link or external payment service, the payment provider may collect and process the payment details necessary to complete the transaction.
Payment card details entered directly into a third-party payment provider's secure payment environment are handled by that provider under its applicable privacy and security terms.
We may receive payment confirmations, transaction references and other information necessary to administer your booking and financial records.
We do not ask guests to send payment card photographs or card security codes by email or ordinary messaging services.
Website Services and Third Parties
Our website is built using WordPress and may include features provided by third-party services.
Depending on which functions you use, these services may process certain technical information or personal data.
Used for website content and functionality. Technical information may be processed for website operation, security and administration.
Website accounts, shopping carts and order-related features may process contact details, account information and order history.
Embedded maps may transmit technical information, including your IP address, to Google when the map is loaded.
Our translation functionality may involve Google services. Information may be processed by Google when translation features are used or loaded.
Embedded Instagram content may involve Meta services, which can collect technical information when external content is loaded.
Our hosting provider and security technologies may process IP addresses and access logs to operate and protect the website.
Some external content, such as maps, videos or social media feeds, may involve cookies or similar technologies. Such technologies require prior consent where applicable law requires it.
External service providers operate under their own privacy notices where they act as independent data controllers.
Cookies and Similar Technologies
Cookies are small text files stored on your device when you visit a website. Similar technologies may also be used to support website functions or collect information about how website features are used.
Our website may use the following categories of cookies and related technologies, depending on the functions and services enabled.
Cookie Consent
Where required by applicable law, non-essential cookies and tracking technologies must not be activated before you provide valid consent.
You should be able to accept or reject non-essential cookies and choose individual optional categories through the website's cookie consent controls.
Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.
Managing Cookies
You can manage or withdraw optional cookie consent through the website's cookie preference controls. You may also use your browser settings to delete stored cookies or limit future storage.
Disabling strictly necessary cookies may affect certain website functions. Rejecting optional cookies must not prevent access to basic website content.
For information about the specific cookies and external services active on our website, including their providers and retention periods, please contact us at info@istria-punta.com .
Data Sharing and International Transfers
We do not sell personal information. We disclose personal data only when necessary for legitimate business purposes, the provision of services or compliance with legal requirements.
Depending on the circumstances, recipients may include:
- Croatian tourism authorities and the official eVisitor system
- Competent tax, regulatory or public authorities
- Accommodation booking platforms involved in your reservation
- Payment service providers, including Teya where applicable
- Website hosting, maintenance, security and technical service providers
- Accounting and professional service providers where necessary
- Providers of embedded website content and third-party services where those services are used
International Data Transfers
Some technology providers may process personal data outside the European Economic Area (EEA).
Where we are responsible for such transfers, we seek to ensure an appropriate legal transfer mechanism, such as a European Commission adequacy decision or Standard Contractual Clauses, together with additional safeguards where necessary.
You may contact us for further information about applicable international transfer safeguards or to request information about how to obtain relevant safeguards.
How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purposes for which it was collected or for the periods required under applicable legislation.
Retained as needed to administer the reservation, manage contractual obligations and handle legitimate legal or financial claims.
Retained for the applicable mandatory periods prescribed by Croatian tax and accounting law.
Retained or processed in accordance with the legal requirements governing eVisitor and applicable tourism records.
Retained only as long as reasonably necessary to respond, manage follow-up communication or protect legitimate interests.
Retained while necessary for account functionality, transactions and any applicable legal obligations.
Retained according to their purpose, applicable retention settings and relevant security or legal requirements.
When personal data is no longer needed and no further legal basis requires retention, we delete or anonymize it as appropriate.
You may contact us for information about the retention period applicable to a particular category of your personal data.
Your Rights Under GDPR
Subject to the conditions and limitations provided by law, you have the following rights regarding your personal data.
Request confirmation of whether we process your personal data and obtain access to it.
Request correction of inaccurate or completion of incomplete personal data.
Request deletion of personal data where the conditions under GDPR are met.
Request restriction of processing in circumstances provided by GDPR.
Receive relevant personal data in a structured, commonly used machine-readable format where applicable.
Object to certain processing based on legitimate interests or to direct marketing.
Withdraw previously given consent at any time where processing relies on consent.
Submit a complaint to the competent data protection supervisory authority.
Please email info@istria-punta.com with a description of your request. We may request information reasonably necessary to verify your identity before disclosing or modifying data.
We will respond without undue delay and normally within one month, subject to any extension permitted under GDPR.
Croatian Data Protection Authority
If you believe your personal data has been processed unlawfully, you have the right to lodge a complaint with the Croatian supervisory authority or another competent supervisory authority under GDPR.
Ulica Metela Ožegovića 16
10000 Zagreb, Croatia
Email: azop@azop.hr
Website: www.azop.hr
Data Security and Additional Information
Security Measures
We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure and misuse, taking account of the risks associated with the processing.
Such measures may include access controls, secure website connections, technical maintenance, restricted access to reservation data and appropriate security practices.
No system can guarantee absolute security. We review and adapt security measures when necessary.
Children's Personal Data
Our accommodation may be used by families with children. Where required by law, we process children's personal data for accommodation administration and mandatory tourist registration.
We do not intentionally collect more information about children than is necessary for these purposes.
Automated Decision-Making
We do not use solely automated decision-making, including profiling, to make decisions that produce legal or similarly significant effects concerning guests.
External Links
Our website may contain links to external websites, booking services, social networks and third-party platforms.
These services may operate under their own privacy policies. We recommend reviewing their privacy information before providing personal data.
Contact and Policy Updates
Contact Us About Privacy
If you have questions about this Privacy Policy, how your personal information is used or how to exercise your rights, please contact us.
Apartments Istria Punta Umag
52470 Umag, Croatia
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, technical or operational changes.
The latest version will be published on this page together with the date of the most recent update.
Where required by applicable law, we will provide additional information or obtain consent before introducing new forms of processing.
Related Information
Your Privacy Is Important to Us
At Apartments Istria Punta Umag, we value the trust our guests place in us. We are committed to handling personal information responsibly, transparently and in accordance with applicable data protection laws.
Contact Us About PrivacyApartments Istria Punta Umag • Umag, Croatia
Last updated: 10 October 2026
About Us - Istria Punta
Welcome to our beachhouse! Our vacation rental is perfect for those who love the beach. With its location, our house is the perfect place to relax and enjoy your vacation. Our house is fully furnished and includes all the amenities you need for a relaxing stay. We hope you enjoy your stay
APARTMENTS
istria punta
Contact Us
- info@istria-punta.com
- +385 91 9248 693
- +385 91 9248 693
- Gian Rinalda Carlia 12, 52470 Umag, Croatia