1. Controller details
The production operator, legal company name, registered address, company/OIB identifiers and privacy contact must be inserted here before commercial launch. This build intentionally does not invent them.
2. Enquiry data
When you submit a stay or host enquiry, the site may collect the information you enter, such as your name, email, dates, group size, preferences and message. That information should be used only to respond to the request and to coordinate with a relevant verified partner where necessary.
3. Payments and identification
This pre-launch build does not collect card details or identity documents. If direct booking, eVisitor registration or payment processing is added, this notice must be updated to name the relevant processors, legal bases and retention periods.
4. Analytics and cookies
Only services actually deployed should be listed. Do not state that analytics, advertising pixels or specific cookie tools are used unless they are enabled in production. Non-essential tracking should follow applicable consent requirements.
5. Your rights
Before launch, add the operator-specific contact and the full GDPR rights procedure, including access, rectification, erasure, restriction, objection and complaint information.