Privacy Policy
Content
Definitions of terms
Personal data – all information related to an identified or recognizable natural person.
Processing – any operation or set of operations performed on Personal Data or on sets of Personal Data.
Respondent – a natural person whose personal data is being processed.
Child – a natural person under the age of 18.
User – a user of our websites and/or our services.
We/we/our/us – Vila Velebita Ugostitelski obrt, vl. Dejan Vukobratović
Data protection principles
The Board of Directors of Vila Velebita respects the following data protection principles:
- The processing is lawful, fair and transparent.
- Our processing activities have lawful bases.
- We will provide you with processing information upon request.
- Data processing is purpose-limited. Our processing activities are appropriate to the purpose for which the personal data was collected.
- Processing is done with minimal data. We collect and process only the minimum amount of personal data that is necessary for any purpose.
- Processing is limited in time. We will not store your personal data for longer than necessary.
- We will do our best to ensure the accuracy of the data.
- We will do our best to ensure the integrity and confidentiality of the data.
Rights of the respondent
The respondent has the following rights:
- Right to information – you have the right to know whether your personal data is being processed; what data is being collected, where it is obtained from and why, and by whom it is being processed.
- Right of access – You have the right to access the information collected about you. This includes your right to request and receive a copy of your personal information.
- Right to rectification – you have the right to request the correction or deletion of your personal data that is inaccurate or incomplete.
- Right to erasure – in certain circumstances you may request the deletion of your Personal Data from our records.
- Right to restriction of processing – where certain conditions apply, you have the right to restrict the processing of your personal data.
- The right to object to processing – which means that in certain cases you have the right to object to the processing of your personal data, for example in the case of direct marketing.
- Right to object to automated processing – you have the right to object to automated processing, including profiling; and not to be subject to a decision based solely on automated processing. You can exercise this right whenever there is a result of profiling which produces legal effects concerning you or significantly affects you.
- Right to data portability – you have the right to receive your personal data in a machine-readable format or, if feasible, as a direct transfer from one information system to another.
- Right to appeal – if we refuse your request under the Right to Access Personal Data, we will provide you with a reason for the refusal. If you are not satisfied with the way your request has been handled, please contact us.
- The right to help from the Supervisory Body – you have the right to help from the supervisory body and the right to other legal remedies.
- Right to withdraw consent – you have the right to withdraw any consent to the processing of your personal data, except in cases where there are legal grounds for processing the personal data.
Data we collect
Information you provided to us
This can be your email address, name, address, etc. – mainly data that is necessary to establish contact, deliver products/services or to improve your user experience with us.
Information that is automatically collected about you
This includes information that is automatically stored in cookies and other internet session tools. For example, information about your shopping cart (if any), your IP address in anonymized form, your purchase history (if any), etc. This information is used to improve your user experience. When you use our services or browse the content of our website, your activities may be recorded.
Forwarding of personal data
We do not share personal information with anyone.
Publicly available information
We may collect information about you that is publicly available.
How we use your personal information
We use your personal data for:
- provision of our services to you. This includes, for example, providing the services and products you have requested, communicating with you about those services and products, communicating and interacting with you, and notifying you of changes to any services.
- improving your customer experience;
- fulfilling obligations under law or contract;
We use your personal data on legitimate grounds and/or with your consent. Based on a concluded contract or the fulfillment of contractual obligations, we process your personal data for the following purposes:
- to identify you;
- to provide you with a service or send/offer a product;
- to communicate with you either for sales or to issue quotes and invoices;
Based on legitimate interest, we process your personal data for the following purposes:
- to send you customized offers;
- to administer and analyze the customer base (behavior and purchasing history) in order to improve the quality, variety and availability of the services/products we offer/provide;
- to conduct questionnaires related to client satisfaction;
With your consent, we process your personal data for the following purposes:
- sending you newsletters regarding our services and products;
- for other purposes for which we have asked your consent.
We process your personal data to comply with legal obligations and/or use your personal data for the purposes provided by law. We reserve the right to anonymize the personal data collected and to use any such data. We will only use data outside the scope of this Privacy Policy if we have made it anonymous. We store your billing information and other data collected about you for as long as necessary for accounting purposes or other obligations arising from law, but not longer than is required by law. We may process your personal data for additional purposes not listed here, but which are compatible with the original purpose for which the data was collected. To do this, we will ensure that:
- the link between the purpose, context and nature of the Personal Data suitable for further processing;
- that further processing will not harm your interests and
- that there is an appropriate safeguard for the processing.
We will inform you of any further processing and purposes.
Who else can access your personal information?
We do not share your personal information with anyone, except when we are legally required to do so. We may disclose your personal information to third parties if you have consented to it or if there is an express legal authority to disclose the information.
How we secure your data
- We use secure protocols (such as HTTPS) for communication and data transfer.
- We use anonymization and pseudonymization where appropriate.
- We monitor and regularly update our systems for potential vulnerabilities and attacks.
- All systems on which the data we process is located are additionally protected.
- If there is a violation of security measures, we will inform the appropriate supervisory authorities about it.
- We will also notify you if there is a threat to your rights or interests.
- We will do everything we reasonably can to prevent breaches of security measures and assist authorities in the event of any breaches.
- If you have an account with us, please note that you must keep your username and password confidential.
Children
We do not intend to collect information from children. Our services are not intended for children.
Cookies and other technologies we use
We use cookies and/or similar technologies to analyze user behavior, administer the website, track user movements, and collect user information. We do this to personalize and improve your experience with us. A cookie is a small text file stored on your computer. Cookies store information that is used to make websites work. Only we can access the cookies created on our websites. You can control cookies at the browser level. Choosing to disable cookies may interfere with your use of certain features. Depending on your consent, we use cookies for the following purposes:
- Necessary cookies – these cookies are necessary so that you can use some important features on our websites, such as logging in. These cookies do not collect any personal information.
- Functionality cookies – these cookies provide functionality that makes using our service more convenient and allows us to provide more personalized features. For example, they can remember your name and email in comment forms so that you don’t have to re-enter this information when you comment again.
- Analytical cookies – these cookies are used to track the usage and performance of our websites and services.
- Advertising cookies – these cookies are used to deliver advertisements that are relevant to you and your interests. They are also used to limit the number of times you see an advertisement. They are usually placed on a website by advertising networks with the operator’s permission. These cookies remember that you have visited a website and this information is shared with other organisations such as advertisers. Often targeting or advertising cookies will be linked to website functionalities provided by another organisation.
You can remove cookies stored on your computer through your browser settings. Alternatively, you can control some third-party cookies by using a privacy-enhancing platform such as optout.aboutads.info or youronlinechoices.com . For more information about cookies, visit allaboutcookies.org . We use Google Analytics to measure traffic on our websites. Google has its own privacy policy, which you can review here . If you would like to opt out of being tracked by Google Analytics, please visit the Google Analytics Opt-Out Page . We use Facebook Pixel to measure traffic on our websites. Facebook has its own privacy policy, which you can review here , and customize it to your needs.
Contact information
We would be happy to receive your comments and suggestions regarding this Privacy Statement, as well as other comments. The right to access data, and to correct, supplement or delete personal data is exercised upon written request sent to the address:
Ugostitelski obrt Vila Velebita, vl. Dejan Vukobratović
Data Protection Officer
Rudanovac 12A, Rudanovac
53230 Korenica
or to the email address: info@vila-velebita.com
Supervisory body
In addition to the objection to the processing of personal data submitted to us, an objection to the processing of personal data can also be submitted to the supervisory authority:
Personal Data Protection Agency
Selska cesta 136
10000 Zagreb
phone: 00385 (0)1 4609-000
e-mail: azop@azop.hr
website: www.azop.hr
Changes to this Privacy Policy
We reserve the right to make changes to this Privacy Policy.
The last change was made on 22.02.2025.
Version 1.0
Vila Velebita Bistro
Rudanovac 12A, Rudanovac
53230 Korenica, Croatia
15.03.-15.11.2026.
Monday - Sunday
7:00 AM - 10:00 PM