Privacy

Who is responsible

Marestina is a privately let apartment in Makarska, Croatia. The owner is responsible for the personal data described here and can be reached at the address below with any question about it.

What we collect, and why

To request specific dates, the form asks for your first and last name, your email address, your phone number and the country you live in — the booking system needs all of these to hold a reservation, and your country also decides which language it writes to you in. It sends the dates you chose and the number of guests. A street address, postcode, town and expected arrival time are optional; we ask for them because it helps us prepare for your stay, and leaving them blank does not stop you booking. For a general question, only your name, email address and message are needed.

There is nothing else. No account, no newsletter, and no advertising of any kind.

Where it goes

Your request goes to two places. It is emailed to us, and it creates a reservation in Smoobu — the booking system we use to manage this apartment and keep its calendar in step with the platforms it is listed on. Smoobu GmbH, Berlin, Germany, acts as a processor on our behalf. What it receives is your name, your email address, your phone number if you gave one, your dates, the number of guests and your message. This website itself has no database and stores nothing on its own server.

How long we keep it

Enquiries that do not lead to a booking are deleted from our mailbox within a year, and the corresponding entry is removed from the booking system. Where a stay does go ahead, we keep what Croatian tax and guest-registration law requires us to keep, for as long as it requires.

Cookies and analytics

This website sets no cookies until you agree to analytics. If you accept, Google Analytics stores two cookies — `_ga` and `_ga_G-MB49PM1TW1` — for up to two years, containing a random identifier and no name, email or address. If you decline, or simply ignore the banner, neither is written and no measurement is stored. There is no advertising, no profiling for advertising, and no social media widget anywhere on the site. Fonts are served from here rather than fetched from a third party, and the map, Instagram and WhatsApp links are ordinary links — nothing loads from those services unless you click through.

Two things are kept in your browser, and neither is a cookie. When you pick a language with the switcher, a marker is saved for the rest of the browsing session so the site stops redirecting you. And your answer to the analytics question is remembered, so you are not asked again on every visit — recording that you declined must not itself require your permission. Both exist only to do something you asked for, and neither is sent anywhere.

What Google Analytics receives

With your consent: the pages you open, roughly where you are (from a shortened IP address, never the full one), your browser and device type, and the site or search that sent you. It is used to understand which pages are useful, nothing more — we do not try to identify individual visitors and could not if we wanted to.

Google Ireland Limited acts as our processor for this, and data may be transferred to Google servers in the United States under the EU–US Data Privacy Framework. Even before you choose, the analytics script is loaded from Google; until you accept, it is told to store nothing and it sets no cookie.

Server logs

If someone submits the form unusually often, the rate limiter records their IP address so the abuse can be stopped. Ordinary submissions are not logged this way, and the log never contains your name, email or message.

Your rights

You can ask what we hold about you, have it corrected or deleted, ask us to restrict how it is used, object to its use, or ask for a copy in a portable form. Write to the address below and we will respond. If you are not satisfied, you can complain to the Croatian data protection authority, AZOP (azop.hr).