Privacy Policy

1. Data Controller

Carpe Diem Apartments
Jakišnica 273a, 53291 Novalja, Pag, Republic of Croatia
Email: carpediem.jakisnica@gmail.com
Phone: +385 98 629 066

As data controller we are responsible for the lawful, fair, and transparent processing of your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Croatian data protection legislation.

2. What Personal Data We Collect

Through the enquiry form on this website we collect the following data:

• Full name — to identify you and personalise our reply
• Email address — to send you our response
• Number of guests — to check availability and capacity
• Check-in and check-out dates — to check free periods
• Apartment preference — to provide relevant information
• Message (optional) — any additional notes or questions

We do not collect special categories of personal data (health data, biometric data, etc.) nor data of children under the age of 16.

3. Purpose and Legal Basis for Processing

Your personal data is processed solely for the purpose of responding to your enquiry and any subsequent communication regarding accommodation booking.

We do not use your data for marketing purposes, profiling, or automated decision-making.

4. Recipients of Personal Data

We do not sell, rent, or share your data with third parties for commercial purposes. We use the following technical processors:

• Web3Forms (web3forms.com) — a form relay service that forwards the contents of the enquiry form to our email inbox. Web3Forms receives your data for the purpose of delivery and does not permanently store it on their servers. More information: web3forms.com/privacy
• Google Fonts — visual assets (fonts) are loaded from Google's servers, during which your IP address is logged. More information: Google Privacy Policy

We may disclose data to competent authorities only if required to do so by law or court order.

5. International Data Transfers

Web3Forms and Google Fonts are based outside the European Economic Area (EEA), primarily in the United States. Data transfers are carried out with appropriate safeguards (Standard Contractual Clauses adopted by the European Commission under Art. 46 GDPR) or on the basis of an adequacy decision. We encourage you to review the privacy policies of the above providers.

6. Data Retention

Emails containing your enquiry are kept for a maximum of 2 (two) years from the date of receipt, or earlier if the purpose of processing is fulfilled or upon your deletion request. After this period, data is permanently deleted.

Where a booking takes place and a legal retention obligation exists (e.g. accounting records, tax obligations), data is retained for as long as required by applicable law.

7. Your Rights as a Data Subject

Under the GDPR you have the following rights:

• Right of access (Art. 15) — you may request confirmation of whether we process your personal data and obtain a copy.
• Right to rectification (Art. 16) — you may request correction of inaccurate data.
• Right to erasure / "right to be forgotten" (Art. 17) — you may request deletion of your data when there is no longer a lawful basis for processing.
• Right to restriction of processing (Art. 18) — you may request a temporary restriction on the processing of your data.
• Right to data portability (Art. 20) — you may request your data in a structured, machine-readable format.
• Right to object (Art. 21) — you may object to the processing of your personal data.

To exercise your rights, please contact us at: carpediem.jakisnica@gmail.com. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe we are processing your personal data in breach of applicable regulations, you have the right to lodge a complaint with the competent supervisory authority:

We hope, however, that we can resolve any concerns directly — please feel free to reach out to us first.

9. Cookies

This website does not use analytical or marketing cookies and does not track visits through third-party tools (such as Google Analytics). The only external connection that may result in a cookie being set or an IP address being logged is Google Fonts. Blocking content from fonts.googleapis.com in your browser does not affect the functionality of this website.

10. Changes to This Privacy Policy

We reserve the right to amend this Privacy Policy to reflect changes in applicable law or our data processing practices. The date of the last update is always displayed at the top of this page. In the event of material changes, we will provide a prominent notice on the website.