This Privacy Policy describes how ECCO ING d.o.o., Kralja Zvonimira 65A, 21000 Split, Croatia, VAT ID (OIB): 28671967175 (hereinafter referred to as the Data Controller) collects, processes and protects the personal data of users of the website vestibulpalace.novevibracije.com.
The Data Controller processes personal data in accordance with:
Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR);
the Croatian Act on the Implementation of the General Data Protection Regulation;
and other applicable laws and regulations of the Republic of Croatia.
Data Controller
ECCO ING d.o.o.
Kralja Zvonimira 65A
21000 Split
Croatia
VAT ID (OIB): 28671967175
E-mail: info@vestibulpalace.com
Phone: +385 21 329 329
Personal Data We Collect
When you use our website, we may collect the following personal data:
Information You Voluntarily Provide
First and last name
E-mail address
Telephone number
Content of your inquiry
Any other information you voluntarily submit through our contact form or via e-mail.
Automatically Collected Information
When visiting our website, certain technical information may be collected automatically, including:
IP address
Browser type
Operating system
Date and time of access
Pages visited
Time spent on the website
Referral source
Technical information required for the proper functioning of the website.
Purpose of Processing
We process your personal data for the following purposes:
Responding to inquiries submitted via the contact form;
Providing information about hotel accommodation and services;
Processing reservations and communicating regarding bookings;
Improving the functionality and performance of our website;
Analysing website traffic and usage statistics;
Complying with legal obligations;
Protecting the legitimate interests of the Data Controller.
Legal Basis for Processing
Personal data is processed on one or more of the following legal bases:
Your consent;
Performance of a contract or steps taken prior to entering into a contract;
Compliance with legal obligations;
Legitimate interests pursued by the Data Controller.
Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected.
Information submitted through the contact form is retained for up to 24 months, unless a longer retention period is required by law or a contractual relationship is established.
Reservation-related data is retained in accordance with applicable accounting, tax and other legal requirements.
Recipients of Personal Data
To provide our services, we may share personal data with trusted data processors, including:
Website hosting providers;
Website maintenance providers;
E-mail service providers;
Analytics providers (such as Google Analytics);
Marketing service providers (such as Google Ads and Meta Platforms, where applicable);
Providers of online booking systems, PMS and Channel Manager services (where applicable);
Accounting service providers;
Law firms and legal advisors.
All processors are contractually bound to process personal data solely on our behalf and in accordance with applicable data protection legislation.
International Data Transfers
Where certain service providers process personal data outside the European Economic Area (EEA), such transfers are carried out only with appropriate safeguards in accordance with the GDPR, including the European Commission’s Standard Contractual Clauses where applicable.
Cookies
Our website uses cookies to ensure proper functionality and to improve the user experience.
We use the following categories of cookies:
Essential Cookies
These cookies are necessary for the operation of the website and cannot be disabled.
Analytics Cookies
These cookies help us understand how visitors interact with the website by collecting anonymous statistical information.
Marketing Cookies
These cookies are used only with your consent to display personalised advertising through platforms such as Google and Meta.
You may modify or withdraw your cookie consent at any time through the cookie settings available on our website.
Data Security
The Data Controller implements appropriate technical and organisational measures to protect personal data against:
unauthorised access;
loss;
alteration;
misuse;
unauthorised disclosure.
Your Rights
Under the GDPR, you have the right to:
Access your personal data;
Request correction of inaccurate or incomplete data;
Request deletion of your personal data (“Right to be Forgotten”);
Request restriction of processing;
Request data portability;
Object to processing;
Withdraw your consent at any time where processing is based on consent;
Lodge a complaint with the competent supervisory authority.
Contact
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us:
ECCO ING d.o.o.
Kralja Zvonimira 65A
21000 Split
Croatia
E-mail: info@vestibulpalace.com
Phone: +385 21 329 329
Right to Lodge a Complaint
If you believe that your personal data has been processed in violation of applicable data protection laws, you have the right to lodge a complaint with the Croatian supervisory authority:
The Data Controller reserves the right to amend this Privacy Policy at any time in order to comply with legal requirements or changes in the processing of personal data. Any updates will be published on this website.
