Privacy Policy

San Mar Lopar (Lopar 511a, 51281 Lopar, Croatia; e-mail: info@san-mar-lopar.com) is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and what rights you have under the General Data Protection Regulation (GDPR).

1. Data controller

The data controller is:
San Mar Lopar
Lopar 511a, 51281 Lopar, Croatia
E-mail: info@san-mar-lopar.com
Phone: +385 98 197 88 28

2. Data we collect

2.1 Inquiry and booking form

When you submit an enquiry through our website, we collect: name, e-mail address, phone number (optional), chosen accommodation, requested dates, number of guests, and any message you provide. This data is processed on the legal basis of pre-contractual measures (Art. 6(1)(b) GDPR) to respond to your enquiry and prepare a booking.

2.2 Cookies and analytics

We use cookies to operate the website and, with your consent, to collect analytics data via Google Analytics 4 (Google LLC, USA) and marketing data via Google Ads. We implement Google Consent Mode v2 — no analytics or marketing cookies are set until you give consent. Necessary cookies (session, security) are always active.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time by clicking the cookie settings link in the footer.

2.3 Server logs

Our hosting provider (Vercel Inc.) automatically logs IP addresses, browser type, and page requests for security and performance purposes. These logs are deleted after 30 days. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

3. Third-party services

Google Analytics 4 / Google Tag Manager — with your consent, usage data is transferred to Google LLC servers in the USA. Google is certified under the EU–US Data Privacy Framework. Google Privacy Policy.

Supabase — our database and file storage (Supabase Inc., USA / EU region). Inquiry data is stored in a EU-hosted Supabase instance. Supabase Privacy Policy.

Vercel — website hosting. Vercel Privacy Policy.

4. Data retention

Inquiry data is retained for up to 2 years after the last communication to handle potential follow-up requests or bookings, and is then deleted. Booking-related data required for tax purposes is kept for 7 years (Croatian Accounting Act).

5. Your rights

Under the GDPR you have the right to: access your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). To exercise any right, contact us at info@san-mar-lopar.com. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, Zagreb, azop.hr.

6. Changes to this policy

We may update this policy from time to time. The current version is always available on this page with the date of the last update.