Privacy Policy

 

1. General Information

This Privacy Policy explains how YOUVALA BEACH RESORT, a camping resort (hereinafter: the “Resort”), collects, uses, and protects personal data of guests and website users. The Resort is committed to protecting personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Croatian data protection laws and has assessed that the appointment of a Data Protection Officer is not required under Article 37 GDPR.

2. Data Controller

The data controller responsible for processing personal data is:

Uvala Village Pag d.o.o.
Ulica Ive Senjanina 12 A
Zadar, Croatia

Represented by the Management: Damir Vnučec and Christian Butz

Email: info@uvalavillagepag.com

3. Types of Personal Data Collected

The Resort may collect and process the following personal data:

• Full name
• Email address
• Phone number
• Address and country of residence
• Payment details (processed via secure payment providers)
• Booking details (stay dates, accommodation unit, preferences)
• IP address and technical data (when using the website)

a) Newsletter Subscription (Mailchimp) If you wish to receive our newsletter to get updates about the grand opening of YOUVALA Beach Resort and exclusive promotion offers, we require your email address. We use the "Double Opt-In" procedure to ensure that you are the actual owner of the email address provided. The data is processed by our service provider Mailchimp (The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA). Your data is stored on Mailchimp’s servers in the USA. We haveconcluded a Data Processing Agreement based on the EU Standard Contractual Clauses to guarantee a high level of data protection. You can revoke your consent to store your data and  email address at any time via the "unsubscribe" link in the newsletter.

b) Security and Spam Protection (Wordfence)
To ensure the technical security of ourwebsite, we use the plugin Wordfence, operated by Defiant Inc. (800 5th Ave, Suite 4100, Seattle, WA 98104, USA). Wordfence helps us protect our site from "brute force" attacks and malware. For this purpose, your IP address is checked against a database of known malicious actors. This processing is based on our legitimate interest in maintaining the security of our online presence.

c) Email Communication
If you send us an inquiry via email (e.g., to booking@youvala-resort.com), your message and your contact details will be stored by us for the purpose of processing your request and in case of follow-up questions. We do not share this information without your consent.

4. Purpose of Data Processing

Personal data is processed for the following purposes:
• processing and managing reservations
• communication before, during, and after the stay
• compliance with legal obligations (e.g. guest registration / eVisitor system)
• payment processing
• improving services and user experience
• sending marketing communications (only with explicit consent)

5. Legal Basis for Processing

Personal data is processed based on:
• performance of a contract (reservation and stay)
• legal obligations (Croatian regulations on guest registration)
• legitimate interest (service improvement, security)
• consent (for marketing and newsletters)

6. Data SharingPersonal data may be shared with:

• payment service providers
• IT and booking system providers (e.g. Rentlio)
• public authorities (e.g. eVisitor system, as required by law)
• service providers necessary for the provision of services

All third parties are required to process personal data in accordance with GDPR.

7. Data Retention

Personal data is stored only for as long as necessary:
• for the duration of the contractual relationship
• as required by applicable laws
• until consent is withdrawn (for marketing purposes)

8. Data Security

The Resort implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.

9. Rights of Data Subjects

Guests have the right to:
• access their personal data
• request correction of inaccurate data
• request deletion of data (“right to be forgotten”)
• restrict processing
• object to processing
• withdraw consent at any time
• lodge a complaint with a supervisory authority

Requests can be sent to the contact email listed above.

9. Cookies
The website may use cookies to improve functionality and user experience. Users can manage cookie preferences through their browser settings.

10. Marketing Communication

Guests may receive newsletters and promotional offers only if they have provided explicit consent. Each marketing communication includes an option to unsubscribe at any time.

11. Changes to Privacy Policy

The Resort reserves the right to amend this Privacy Policy at any time. The applicable version is the one published on the website at the time of use.