EN
ContactBook a call

Privacy policy

Updated 5 November 2026

This is a translation. If it differs from the Croatian version, the Croatian version prevails.

Controller

CODE BYTE, obrt za računalno programiranje, Fažanska cesta 41, 52215 Vodnjan, Croatia, OIB 51669689617, [email protected].

Enquiries from the contact form

Data: your name, email and/or phone number and, if you fill them in, your accommodation and place, how guests book with you today, and your message. With the enquiry we record the language and address of the page it was sent from and the country estimated from your IP address; we don’t store the IP address. Please don’t include details of your guests in the message.

Purpose and lawful basis: replying to your enquiry and arranging a call, steps taken at your request before a contract (GDPR Art. 6(1)(b)).

Is it required: without your name and an email or phone number we can’t reply. All other fields are optional.

Retention: 24 months, in our email inbox and in the database; if we sign a contract, for as long as it runs and the law requires.

Visit statistics

We count every visit anonymously, without cookies and without storing anything on your device. Your answer to the notice only decides whether the visit may be linked: with “Accept” we join the pages you view that day into one visit and, if you send an enquiry, link the enquiry to that visit; with “Deny”, without an answer, or if your browser sends a Global Privacy Control or Do Not Track signal, each page view is counted on its own and linked to nothing.

Data: the pages you open, where you came from (the previous page and UTM tags), language, the country, city and network estimated from your IP address, device, browser and operating system, screen size, time zone, time on the page, and clicks on buttons and links, use of the calculator and of the form, without anything you type. Measurement runs on our own server at Cloudflare, with no cookies and no third-party tools, and we don’t store your IP address. Each page view gets a random code that is never reused. Only if you accepted do we also recognise your visit by a code derived from your IP address and browser with a key that is valid for one day and then deleted, so we can’t link visits on different days.

Link to an enquiry: if you accepted linking that day and send an enquiry, we link the enquiry to that visit (the pages you viewed and where you came from). Without consent the enquiry is linked to nothing. Visits not linked to an enquiry can’t be traced to a person.

Purpose and lawful basis: counting visits anonymously, to understand how the site is used and where visitors come from, is our legitimate interest (GDPR Art. 6(1)(f)). Joining pages into one visit and linking it to an enquiry, to see where enquiries come from, only with your consent (GDPR Art. 6(1)(a)).

Retention: 25 months. Your answer (“Accept” or “Deny”) and when you gave it are kept in your browser (localStorage, key cookie-notice) for 12 months. We set no cookies.

Site security and form protection

Data: on every visit Cloudflare processes technical data, such as IP address, time and browser, to deliver the site and protect it from attacks. When you start filling in the form, Cloudflare Turnstile loads and checks, from browser data and your IP address, that you are a person. To limit how often the form can be sent, we hold your IP address briefly in the server’s working memory.

Purpose and lawful basis: running the site securely and blocking spam, our legitimate interest (GDPR Art. 6(1)(f)).

Retention: we don’t store this data; Cloudflare keeps it briefly under its own rules.

Recipients and transfers outside the EU

These providers may transfer data to the US. Transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You have the right to access, correct, erase and restrict processing of your data, to data portability, and to object to processing based on legitimate interest. You can withdraw consent to linking visits at any time with the “Cookie settings” link at the bottom of every page; this doesn’t affect processing before you withdrew. Email [email protected]; we reply within one month.

We make no decisions based solely on automated processing.

You can complain to the Croatian data protection authority, AZOP (azop.hr).