Guest information · Updated 29 September 2026
Privacy,
simply told.
We only ask for information needed to answer your stay inquiry and welcome you to Casa Santa Maria. We do not sell your personal information.
Who we are
Casa Santa Maria Vacation House in Mali Lošinj, Croatia is responsible for the personal information described on this page.
For privacy questions or requests, contact us at hello@casasantamaria.com.
What we collect
When you send a stay inquiry, we may collect your name, email address, requested arrival and departure dates, number of guests and anything you choose to include in your message.
Our hosting provider may also process basic technical information needed to deliver and protect the website, such as IP address, browser information and request logs.
Why we use it
- To answer your inquiry and discuss availability, price and stay arrangements.
- To take steps requested by you before a possible booking.
- To meet legal, accounting and security obligations where they apply.
- To operate and protect the website based on our legitimate interests.
How long we keep it
Unsuccessful inquiries are kept only as long as reasonably needed for communication and follow-up. Information connected with a confirmed booking may be retained for the period required by Croatian tax, accounting, guest-registration and other applicable laws.
We review information regularly and delete or anonymise it when it is no longer needed.
Who receives it
Information is available only to the hosts and service providers needed to operate the website, communicate with you or administer a booking. These providers must handle information securely and only for the agreed purpose.
If a provider processes information outside the European Economic Area, we use an appropriate legal safeguard where required.
Cookies and links
This preview does not use advertising cookies or behavioural tracking. If analytics, embedded maps, payment services or other optional tools are added later, this notice and any required cookie choices will be updated before they go live.
Links to Instagram, Facebook and Google open services operated under their own privacy terms.
Your choices
Depending on the circumstances, you may ask to access, correct, delete, restrict or receive a copy of your information, or object to certain processing. Where processing relies on consent, you may withdraw it at any time.
You may also contact the Croatian Personal Data Protection Agency (AZOP) at azop.hr or another competent supervisory authority.
Changes
We may update this page when the website, booking process or legal requirements change. The date at the top shows the latest revision.
Working draft: before launch, confirm the legal name and address of the data controller, the final contact email, booking-record retention periods and all hosting, analytics, payment and inquiry providers actually used.
Back to the house