Privacy Policy

Last updated: August 2026

At Heritage Hotel Casa Blanka, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, contact us, communicate with us or use our online reservation services.

We process personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Croatian data protection laws.

1. Who We Are

This website represents:

Heritage Hotel Casa Blanka
Obala kralja Tomislava 9
21300 Makarska
Croatia

Email: info@casablankamakarska.hr
Telephone: +385 (021) 611 127

For questions concerning this Privacy Policy or the processing of your personal data, please contact us using the details above.

Data Controller:
[LEGAL COMPANY / OPERATOR NAME]
OIB: [OIB]
Registered Address: [REGISTERED ADDRESS]

These legal operator details should be completed before this Privacy Policy is published.

2. Personal Data We May Collect

Depending on how you interact with us, we may process different categories of personal data.

These may include:

name and surname;
email address;
telephone number;
reservation and accommodation information;
arrival and departure dates;
number of guests;
communications, enquiries and special requests;
billing and transaction-related information where applicable;
information necessary to provide accommodation services or comply with legal obligations;
IP address and technical information about your browser and device;
cookie preferences and consent information; and
other information you voluntarily provide when communicating with us.

We only collect personal data that is necessary for the relevant purpose.

3. How We Collect Personal Data

We may collect personal data when you:

contact us by email, telephone or through our website;
submit a contact or enquiry form;
make or manage a reservation;
communicate with us regarding an existing or prospective stay;
use our website and consent to applicable cookies or similar technologies; or
otherwise voluntarily provide information to us.

Certain technical information may also be collected automatically when you visit our website, subject to your cookie preferences and applicable law.

4. Purposes and Legal Bases for Processing

We process personal data only where we have an appropriate legal basis.

Reservations and Accommodation Services

We may process your personal data to:

process and manage reservations;
communicate with you about your booking;
provide requested accommodation and related services;
manage modifications or cancellations;
respond to requests relating to your stay; and
administer payments and booking-related matters where applicable.

The legal basis is generally the performance of a contract or taking steps at your request before entering into a contract.

Enquiries and Communication

When you contact us, we may process your contact details and the contents of your communication to respond to your enquiry or request.

Depending on the nature of the communication, the legal basis may be taking pre-contractual steps at your request or our legitimate interest in responding to enquiries and communicating with guests and prospective guests.

Legal and Regulatory Obligations

We may process certain personal data where necessary to comply with obligations imposed by Croatian or European Union law, including applicable accounting, tax, tourism, hospitality, registration and other regulatory requirements.

The legal basis for such processing is compliance with a legal obligation.

Website Security and Operation

Certain technical information may be processed where necessary to maintain the security, integrity and proper operation of our website.

Where appropriate, this processing is based on our legitimate interests in maintaining a secure and functional website.

Cookies and Optional Technologies

Where cookies or similar technologies require your consent, related personal data will be processed on the basis of your consent.

You may withdraw or change your consent at any time through the Cookie Settings available on our website.

For further information, please see our Cookie Policy.

5. Online Reservations

Online reservations for Heritage Hotel Casa Blanka are made through our official online booking system.

Official Casa Blanka Booking System

When you proceed to the booking system, personal data necessary to search availability, make a reservation, process applicable payments or guarantees and manage your booking may be processed within that booking environment.

The booking service may process personal data on behalf of the hotel and/or in accordance with its own applicable privacy information, depending on the nature of the processing.

We recommend reviewing the privacy information presented during the reservation process.

6. Contact Forms and Direct Communication

If you contact us through a website form, email or other communication channel, we may process the information you provide in order to respond to your request.

Please do not provide sensitive personal information through a general contact form unless it is necessary for your request.

Information submitted through the contact form will not be used for unrelated purposes without an appropriate legal basis.

7. Cookies

Our website uses cookies and similar technologies.

Strictly necessary cookies may be used to provide essential website functionality. Other categories of cookies will be used only where permitted by applicable law and, where required, after you provide consent.

You can manage your preferences through the Cookie Settings available on our website.

For detailed information about the cookies and technologies currently used, please read our Cookie Policy.

8. Sharing Personal Data

We do not sell your personal data.

We may share personal data only where necessary and legally permitted, including with:

providers supporting our website and IT infrastructure;
our online reservation and property-management service providers;
payment service providers, where applicable;
professional advisers and service providers where necessary;
public authorities, regulatory bodies or other recipients where required by law; and
other processors acting on our behalf under appropriate data protection arrangements.

Service providers should receive only the personal data necessary to perform the relevant service.

9. International Data Transfers

Some service providers or technology providers may process personal data outside Croatia or the European Economic Area (EEA).

Where personal data are transferred outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable data protection legislation.

Depending on the circumstances, this may include reliance on an adequacy decision adopted by the European Commission or appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

10. How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected or for the period required by applicable law.

Retention periods may vary depending on the type of information and purpose of processing.

For example, reservation, accounting or transaction-related information may need to be retained for periods required under applicable legal, tax or accounting obligations.

Information relating to enquiries will generally be retained only for as long as reasonably necessary to manage the communication and any resulting relationship.

Where processing is based on consent, information may be retained until consent is withdrawn or until the relevant purpose no longer applies, subject to any other lawful retention requirements.

11. How We Protect Your Personal Data

We take appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure or destruction.

Access to personal data is limited to persons and service providers who require access for legitimate business or legal purposes.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

12. Your Rights

Subject to the conditions provided by applicable data protection law, you may have the right to:

access your personal data;
correct inaccurate or incomplete personal data;
request erasure of your personal data;
request restriction of processing;
object to certain processing based on legitimate interests;
receive certain personal data in a structured, commonly used and machine-readable format and request data portability;
withdraw consent at any time where processing is based on consent; and
lodge a complaint with a competent supervisory authority.

These rights are not absolute and may be subject to conditions and exceptions provided by law.

13. Exercising Your Rights

To exercise your data protection rights or ask a question about the processing of your personal data, please contact:

Email: info@casablankamakarska.hr

Please provide sufficient information for us to understand and process your request.

Where necessary, we may request additional information to verify your identity before responding to a request concerning personal data.

We will respond within the time limits required by applicable data protection law.

14. Right to Lodge a Complaint

If you believe that your personal data have been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

In Croatia, the competent authority is:

Croatian Personal Data Protection Agency (AZOP)
Agencija za zaštitu osobnih podataka
Selska cesta 136
10000 Zagreb
Croatia

Croatian Personal Data Protection Agency (AZOP)

You may contact us first if you have concerns about how we process your personal data so that we have an opportunity to address your request.

15. Children’s Privacy

Our website is not intended to collect personal data directly from children without an appropriate legal basis.

Where information concerning minors is required in connection with accommodation, registration or another legal obligation, such information will be processed only to the extent necessary and in accordance with applicable law.

16. Third-Party Websites

Our website may contain links to external websites and services.

Once you leave our website, the processing of personal data by an external website is governed by that provider’s own privacy practices.

We encourage you to review the privacy information of third-party websites and services before providing personal data.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, data processing activities or applicable legal requirements.

The latest version will always be published on this website, with the date of the most recent update shown at the top of the Policy.

18. Contact

For any questions, requests or concerns regarding privacy or the processing of your personal data, please contact: