This privacy policy explains what personal data Elaris collects through the elaris.hr website, for what purpose it is used, how long it is kept, and what rights you have regarding it.
1. Data controller
The controller of personal data is [COMPANY NAME], Tax ID (OIB): [TAX ID / OIB], with its registered office at [ADDRESS] ("Elaris", "we", "us"). For any questions about the processing of personal data, you can contact us at [email protected] or at +385 91 620 32 79.
2. What data we collect
- data you enter into the contact form on the site: full name, email address, property type and enquiry content;
- data you provide to us by email, phone, or when signing a property management agreement;
- technical data about site usage (e.g. IP address, device and browser type) collected via cookies and analytics tools;
- data about guests of properties managed by Elaris, to the extent necessary for booking administration and mandatory guest registration.
3. Purpose of data processing
We use personal data to:
- respond to enquiries submitted through the contact form;
- prepare offers and enter into cooperation agreements with property owners;
- administer bookings, register and deregister guests, and fulfil legal obligations related to the tourism business;
- improve the site's content and functionality based on anonymised visitor statistics.
4. Legal basis for processing
We process data based on your consent (e.g. by submitting the contact form), the performance of a contract (property management, guest bookings), compliance with legal obligations (e.g. mandatory guest registration), and our legitimate interest in improving the service and ensuring site security.
5. Cookies
The site uses Google Analytics/Google tag (gtag.js) to track site visits and user behaviour in anonymised and aggregated form. You can change your cookie settings in your web browser at any time.
6. Sharing data with third parties
We do not sell personal data to third parties. We may share data with trusted service providers (e.g. hosting, email delivery, booking channels) only to the extent necessary to provide the service, and only where those providers are obligated to protect the data in accordance with applicable regulations.
7. Data retention period
We keep data for as long as necessary to fulfil the purpose for which it was collected, or as required by law (e.g. tax and accounting regulations, tourism industry regulations), after which it is deleted or anonymised.
8. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to request access to your personal data, its correction, deletion, restriction of processing, data portability, and the right to object to processing. You can send your request to [email protected].
9. Changes to this policy
We may occasionally update this privacy policy to keep it aligned with changes in the law or in our business. The current version is always available on this page, and the date of the last update is shown at the top.