Privacy Policy
Last updated: 24 June 2026
Who we are
OPG Lola Kokica (family farm), Hrvatskih branitelja 9, 31328 Vardarac, Croatia ("we") is the controller of personal data collected through this website. For any privacy questions, contact us at pajichrvoje@outlook.com.
What data we collect
Data you send us yourself when you contact us with an accommodation enquiry: name, e-mail address, phone number (if provided), requested dates, number of guests and the content of your message.
To protect against spam we also temporarily store a one-way cryptographic hash of your IP address — not the IP address itself; this hash changes daily and does not allow you to be tracked. The legal basis is our legitimate interest in protecting the system (Art. 6(1)(f) GDPR).
For aggregate, anonymous visit statistics we use Vercel Web Analytics — a cookieless tool that stores no personal data or unique identifiers and does not allow you to be tracked (it records only aggregate data such as page views, referrer, country and device type). Otherwise the website uses no tracking cookies; the only technical exception is described in the Cookie Policy.
Why and on what legal basis
We process your data to reply to your enquiry and arrange your stay (steps prior to entering into a contract, Art. 6(1)(b) GDPR) and to comply with legal obligations if a booking is made (e.g. guest records required by Croatian hospitality and tourism regulations, Art. 6(1)(c) GDPR).
How long we keep data
We keep enquiry correspondence while the conversation is ongoing and for a reasonable period afterwards, at most two years from the last contact — unless the enquiry results in a booking, in which case data is kept as long as tax and hospitality regulations require.
Who we share data with
We do not sell your data or share it for marketing. We use trusted technical service providers who process data on our behalf: website hosting (Vercel), database (Supabase, servers in Frankfurt, EU) and e-mail delivery (Resend). Data processing agreements are in place with these providers. Some of these providers (Vercel, Resend) are based in the USA, so some data (for example e-mail delivery) may be processed outside the European Economic Area. Where that happens, the transfer is protected by appropriate GDPR safeguards — the European Commission Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
Your rights
You have the right to request access to your data, rectification or erasure, restriction of processing, data portability, and to object to processing. Send your request to pajichrvoje@outlook.com — we will respond without undue delay. You may also lodge a complaint with the Croatian Data Protection Agency (AZOP), Selska cesta 136, Zagreb, www.azop.hr.
Security
Data is stored in a protected database with restricted access; connections to the site are TLS-encrypted. Only the farm owner has access to the data.
Changes to this policy
We will update this policy if we introduce new features affecting data processing (e.g. consent-based visit statistics). The date of the last change is shown at the top.