Privacy Policy

1. Data controller / accommodation provider

Sandra Burić Čalić
Private holiday accommodation provider registered in Croatia
Pod Vrh 41a
52204 Ližnjan
Croatia
villaleola1@gmail.com
www.villaleola.com

2. Website visits and technical logs

When you access this website, the hosting provider and technical services may process technical data such as your IP address, time of access, requested URL and browser details. This helps operate and secure the website (Article 6(1)(f) GDPR). Technical log retention depends on the hosting provider’s settings and the need for security and troubleshooting.

3. Enquiries and bookings

When you use the enquiry form, we process the information you submit, including name, email address, phone number, travel dates, number of guests and message. We use it to respond to your enquiry, prepare or fulfil a booking and communicate with you (Article 6(1)(b) GDPR). Completed bookings may also involve statutory guest registration and recordkeeping (Article 6(1)(c) GDPR). Required contact information is necessary for us to respond; otherwise we may not be able to process the enquiry.

4. Storage and recipients

Booking enquiries and related personal data are stored in our website's SQL database and in email messages used to process and respond to enquiries.

Access to personal data is restricted to authorised persons responsible for managing enquiries and bookings. Our website hosting provider and email service provider may process personal data on our behalf to provide their respective technical services.

Personal data is retained only for as long as necessary for the purposes for which it was collected, subject to applicable legal retention requirements. Enquiry records that are no longer required are deleted in accordance with our data retention procedures.

5. Cookies and external resources

Technical session data may be used for booking enquiries and essential website functions. Your choice about optional website analytics is stored in your browser's local storage (localStorage, key leola_consent_v1). This stores your choice, a version number and the time it was made. Your choice applies to that browser until you change it or clear its stored data. The website also loads third-party resources, including Google Fonts and JavaScript libraries, for presentation and functionality. Those providers may receive technical information such as your IP address. These external resources are not automatically covered by consent for Google Analytics.

6. Google Analytics 4 (consent required)

On pages where it is enabled, we use Google Analytics 4 (measurement ID G-T5THYBQGDG), a web analytics service provided by Google. The analytics script loads only if you actively choose to consent through the cookie notice (Article 6(1)(a) GDPR). Without your consent, our consent mechanism does not load the Google Analytics script. With consent, Google Analytics may process page views, device and browser information, and website interactions, and may set analytics cookies. Google is a recipient of this data; processing outside the European Economic Area may occur depending on the Google services involved. Learn more in Google's Privacy Policy.

You can change or withdraw your choice at any time using “Cookie settings” in the homepage footer. Withdrawal applies to future processing. Our implementation also attempts to remove existing Google Analytics cookies on this domain, but withdrawal cannot undo processing that has already occurred.

7. Your rights

Subject to the GDPR, you have rights to access, rectification, erasure, restriction of processing, data portability and, depending on the legal basis, objection. You may withdraw consent at any time for the future. Contact us at the email address above. You may lodge a complaint with the Croatian data protection authority, AZOP: azop.hr.

8. Changes

We update this notice when processing practices or legal requirements change.

Last updated: 22 October 2026