Privacy policy

We appreciate your interest in our website. Protecting your data matters to us. Below we explain what data we collect, for what purpose, and what rights you have. This policy is intentionally concise and written in plain English.

For international visitors: this site is operated from Croatia for the German and European market. EU data protection law (GDPR) applies – which is one of the strictest frameworks in the world. If you’re visiting from the US, UK, Australia or elsewhere, the rights set out below apply to you too while you interact with this site.

1. Data controller

Kosi Radić Put Opatije 36, 21222 Marina / Poljica, Croatia Phone: +385 91 3204764 Email: info [at] poljica.de

2. What data we collect

2.1 When you open this website

Our web server records the following data in server log files for technical reasons:

• anonymised IP address of the device accessing the site
• date and time of the request
• URL of the page viewed
• amount of data transferred
• browser type and version, operating system
• referrer URL (if any)

This data is used exclusively to detect and fix errors and to defend against attacks. Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in running the site securely). Storage: a maximum of seven days, after which the data is deleted or anonymised.

2.2 When you submit the contact form

When you use the contact form, we store the data you enter (name, email, optional phone number, arrival/departure dates, number of guests, preferred apartment, message) to process your inquiry. Legal basis: Art. 6 (1) (b) GDPR (steps taken prior to entering into a contract). We delete this data once the purpose is fulfilled and no retention obligation applies – generally within two years of the last communication.

3. Third-party services

This site uses a small number of third-party services. For each one, we list what data is processed.

3.1 Cloudflare Turnstile (form spam protection)

We use Turnstile from Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA) to protect the contact form against automated submissions. Technical characteristics of your browser (including fingerprint and IP address) are transmitted to Cloudflare. A manual captcha click is usually not required – the check runs in the background.

Legal basis: Art. 6 (1) (f) GDPR (legitimate interest in spam prevention). Privacy policy: cloudflare.com/privacypolicy.

3.2 OpenStreetMap / CARTO (map on contact and arrival pages)

The map is rendered using map tiles from CARTO (CARTO DB, Inc., New York, USA) based on OpenStreetMap data. Loading the map transmits your IP address to the tile servers.

Legal basis: Art. 6 (1) (f) GDPR. CARTO privacy policy: carto.com/privacy.

3.3 Meteoblue (weather forecast on the weather page)

The forecast on /en/weather/ is embedded as a widget from meteoblue AG (Clarastrasse 2, 4058 Basel, Switzerland). Loading the widget transmits your IP address.

Legal basis: Art. 6 (1) (f) GDPR. Privacy policy: content.meteoblue.com/en/privacy-policy.

3.4 YouTube (video on the home page)

The home page embeds a YouTube video via the privacy-enhanced youtube-nocookie.com domain. Data is only transmitted to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) if you click „Play”. Without playback, no data is sent to YouTube.

Legal basis: Art. 6 (1) (f) GDPR. YouTube privacy: policies.google.com/privacy.

3.5 Google Maps (button „Open in Google Maps”)

Our Google business listing is linked as an external link. Data is only transmitted to Google once you click the „Open in Google Maps” button – your browser is then redirected to Google. The interactive map on our own pages uses OpenStreetMap, not Google.

Legal basis: Art. 6 (1) (f) GDPR on active click.

4. Cookies

We do not use tracking or analytics cookies. Turnstile and CARTO may set technically necessary cookies required to run their services.

5. Your rights

Under the GDPR you have the following rights:

• Access to the personal data we hold about you (Art. 15 GDPR)
• Rectification of inaccurate data (Art. 16 GDPR)
• Erasure (Art. 17 GDPR), unless retention obligations apply
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

To exercise any of these rights, just email us at the address above.

6. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority.

7. SSL encryption

This website uses HTTPS / SSL to transmit your data securely. You can recognize an encrypted connection by the padlock icon in your browser’s address bar.

8. Updates to this policy

We update this policy as needed when laws or the services we use change. The current version is always available on this page.

Last updated: April 2026