Privacy Policy

TUMA d.o.o., Nedešćina 137, Nedešćina, Croatia, OIB: 99306151775, represented by Michaela Tůmová, Managing Director and owner (the “Operator”), operates the Apartmani Michelle Croatia accommodation facility at Diminići 40e, 52222 Sveti Lovreč Labinski, Croatia.

Contact: +420 775 228 922, tumovami.croatia@gmail.com, tumastanislav.loc@gmail.com. Postal address: Nedešćina 137, Nedešćina, Croatia.

For questions and requests concerning personal data, please use tumovami.croatia@gmail.com.

We process the data you provide when making a booking or communicating with us: first name, surname, date of birth, address, telephone number, email address, dates and details of the stay, information about accompanying guests, the content of your message and payment information necessary to record the payment. The web server and external services may process technical data such as your IP address, device and browser type, time of visit and the page requested.

The website does not have user accounts and does not carry out automated decision-making or profiling.

• handling enquiries, bookings, payments and stays – taking steps before entering into a contract and performing a contract;
• guest registration and compliance with accounting and tax obligations – compliance with a legal obligation;
• handling complaints, protecting legal rights and ensuring website security – the Operator’s legitimate interests;
• sending news and updates – only on the basis of consent, which may be withdrawn at any time;
• preferred currency and cookie choices – browser storage required to provide the requested website functionality.

The data required to make a booking is a contractual requirement. Without a name, contact details, dates of stay and other necessary information, the Operator cannot confirm the booking or provide accommodation. Customers are required to provide information required by law.

The contact form sends the entered data through a secured WordPress endpoint directly to the Operator's contact email. The data is not used to create an account or for marketing; the form security may temporarily process the IP address to prevent abuse. The data is subsequently processed by the Operator, the web-hosting provider and email service providers.

Bookings made through Booking.com or another platform are also governed by that platform’s privacy policy, and the platform may act as an independent controller.

To the extent necessary, data may be received by hosting and technical support providers, email service providers, accounting or legal advisers, payment institutions, booking platforms and public authorities where required by law.

Google Maps is loaded only after you expressly consent to external content. Once loaded, Google may process your IP address, device information and other technical data and may use its own technologies in accordance with its policies. Services provided by global providers may involve processing outside the European Economic Area; the provider is responsible for implementing appropriate legal safeguards.

Links to Instagram, Facebook, YouTube and Booking.com transfer data to those services only after the user follows the link to their website.

We retain enquiries that do not result in a contract for as long as necessary to handle them, normally for no longer than 12 months. We retain booking and stay data for the duration of the contract and subsequently for the periods required by accounting, tax, guest-registration and other legislation, or for as long as necessary to protect legal claims. Local settings remain in the browser until they are deleted.

You have the right of access, rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interests and the right to withdraw consent. Certain rights may be limited by statutory retention obligations or the need to protect legal claims.

Send your request to tumovami.croatia@gmail.com. You also have the right to lodge a complaint with the Croatian supervisory authority, the Agencija za zaštitu osobnih podataka (AZOP).

We update this Policy whenever the website, services or legal requirements change. The current version is effective from 30 August 2026.