Privacy

Bell tower of the cathedral in Split, Croatia
Home
Privacy

Article 1 - Who we are

Casa Malinas is a privately owned holiday house in Stanići, near Omiš, Croatia. This privacy policy explains how Casa Malinas, as data controller, collects and uses personal data through the website https://casa-malinas.com/ and when you contact us about a stay.

You can reach us at any time through the contact form at https://casa-malinas.com/contact. For questions about prices, availability and bookings, our local agency Five Star International Omiš (emilija@5star.hr, +385 91 88 77 235) can also help you.

Article 2 - Which personal data we process and why

Booking requests

When you fill in the booking form, we receive your first and last name, e-mail address, phone number, the requested arrival and departure dates, your flexibility and length of stay, whether you travel with a pet and your message. We use this data to answer your request, check availability, prepare a quote and, if you book, to manage your stay. Legal basis: steps taken at your request before entering into a contract, and the performance of the rental contract (Art. 6(1)(b) GDPR).

Contact form and e-mail

When you use the contact form or e-mail us, we receive your name, e-mail address, phone number, subject and message. We only use this data to answer your question. Legal basis: our legitimate interest in answering your message (Art. 6(1)(f) GDPR) or, for questions about a stay, steps taken before entering into a contract (Art. 6(1)(b) GDPR).

Website statistics

With your consent, we use Google Analytics 4 through Google Tag Manager to see how visitors use the website, for example which pages are viewed and whether a booking request or contact form is sent. We use this data in aggregated form and not to identify you. Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Article 3 - Cookies

We only place cookies that are not strictly necessary after you give your consent in the cookie banner. You can change or withdraw your choice at any time with the button "Change cookie preferences" at the bottom of this page.

  • Necessary: one cookie (fs-cc) that remembers your cookie choice. This cookie is always active.
  • Analytics: Google Analytics 4 cookies (_ga and _ga_*), placed only after you accept analytics cookies. They are kept for up to 2 years.
  • Marketing and personalisation: we currently do not use marketing or personalisation cookies. If this changes, we will only use them with your consent.

Article 4 - Service providers

We use the following service providers. They only process personal data to deliver their service to us:

  • Webflow: website hosting and form handling.
  • Google: Google Tag Manager, Google Analytics, reCAPTCHA spam protection on the forms and Google Fonts.
  • Cloudflare Turnstile: spam protection on the contact form.
  • Rentalbell: availability calendar on the booking page.
  • Elfsight: widget on the home page.
  • Five Star International Omiš: local agency that handles bookings and guest contact.

Some of these providers are based outside the European Economic Area, mainly in the United States. In that case, the transfer is covered by the EU-US Data Privacy Framework or by the standard contractual clauses of the European Commission. We never sell your personal data and only share it with others when the law requires us to.

Article 5 - How long we keep your data

We keep booking requests and messages for as long as needed to handle them, and at the latest up to 2 years after our last contact, unless a booking requires us to keep data longer for legal or tax reasons. Statistics in Google Analytics are kept according to the retention period set in Google Analytics, with a maximum of 14 months.

Article 6 - Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

  • access your personal data and receive a copy;
  • have incorrect or incomplete data corrected;
  • have your data erased ("right to be forgotten"), unless we must keep it by law;
  • restrict the processing of your data;
  • object to processing based on our legitimate interest;
  • receive your data in a structured, machine-readable format (data portability);
  • withdraw your consent at any time, without affecting processing that took place before.

You can exercise these rights free of charge through the contact form at https://casa-malinas.com/contact. We will reply within one month. We may ask for additional information to confirm your identity.

Article 7 - Complaints

If you believe we do not handle your personal data correctly, please contact us first. You also have the right to lodge a complaint with a data protection authority in the EU country where you live, work or where the alleged infringement took place. In Croatia, this is the Personal Data Protection Agency (AZOP), azop.hr.

Article 8 - Security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. The website is only available over a secure HTTPS connection.

Article 9 - Changes to this policy

We may update this privacy policy when our services or the law change. The latest version is always available on this page. Last updated: October 2026.