Privacy Policy
This is a translation of the Croatian original. In case of any discrepancy, the Croatian version prevails.
River Lodge Jesenica collects only the personal data needed to respond to enquiries, handle bookings and register guests as required by law, and does not sell or pass it on to third parties for marketing purposes.
1. Data controller
Igor Subotić, host
Email: [email protected]
Phone / WhatsApp: +385 91 533 1667
2. What data we collect
- Contact form and enquiry data: name, email, phone, preferred dates, number of guests and the content of your message.
- Booking and payment data: first and last name, contact details, dates of stay, details of the deposit and balance payments.
- Guest registration data: identity card or passport details of all guests, which we are required by Croatian law to register in the eVisitor system.
- Communication via WhatsApp or email: the content of the messages you send us.
3. Purpose and legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to enquiries and sending offers | Steps prior to entering into a contract (Art. 6(1)(b)) |
| Booking and performance of the stay | Performance of a contract (Art. 6(1)(b)) |
| Guest registration in eVisitor, tourist tax, invoices | Legal obligation (Art. 6(1)(c)) |
| Protecting the website against spam and attacks | Legitimate interest (Art. 6(1)(f)) |
4. Who else processes the data
To run the website, we use reliable service providers who process data only for the purposes stated:
- Web3Forms – forwards messages from the contact form to our email.
- Cloudflare – website and email hosting, protection against attacks.
- Google Maps – displaying the map in the Location section.
- WhatsApp (Meta) – if you choose to contact us via WhatsApp.
- Airbnb – displaying availability in the calendar; if you book via Airbnb, your data is also processed by Airbnb in accordance with its own privacy policy.
- Competent authorities – guest registration data is submitted via the eVisitor system to the tourist board and other authorities as required by law.
Some of these providers are located outside the European Union (e.g. in the USA). In that case, data is transferred with the safeguards required by the GDPR, such as standard contractual clauses.
5. How long we keep data
- Enquiries that do not result in a booking are deleted no later than 12 months after the last contact.
- Booking and invoice data are kept for as long as required by tax and accounting regulations.
- Data in the eVisitor system is kept for the periods prescribed by law.
6. Cookies
This website does not use cookies for tracking or advertising. The embedded Google map may set its own cookies when you open it. By viewing the map you accept Google’s terms; you can delete or block cookies in your browser settings.
7. Your rights
You have the right to request access to your data, its rectification, erasure or restriction of processing, to object to processing and to request data portability. Please send your request to [email protected] and we will reply within 30 days. Data that we are required by law to keep cannot be deleted before the statutory period has expired.
If you believe that your data has been processed unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr.
8. Changes
We may update this policy from time to time. The current version is always published on this page.
Last updated: 15 October 2026
← Back to the home page