What happens with
your information.

Who runs this site

Bobinac Garden is at Vrtlići 14, 53291 Stara Novalja, Croatia. A private host (no registered business), run in person by Romana and Doroteja.

What we collect, and only when

We collect data only when you choose to give it to us, or when you accept the cookie banner on your first visit.

• If you submit a contact form (once one exists), we get the name, email, and message you typed. Nothing more.
• Direct emails or Facebook messages give us your message and the account you wrote from.
• If you accept the cookie banner, Google Analytics records page views and a handful of anonymised events (which apartment you reserved, whether you opened the photo gallery, etc.). No name, no email, no IP retention beyond Google's standard anonymisation.

Cookies and analytics

We use Google Analytics 4 (loaded via Google Tag Manager) to understand which pages help guests find what they need. Nothing analytics-related fires until you accept the cookie banner — Google's Consent Mode v2 keeps storage disabled by default. If you reject, no cookies are set; Google receives only an anonymous, cookieless ping it uses to model aggregate traffic patterns.

When you accept, the following cookies may be set:

• _ga — distinguishes your browser from others. Two years.
• _ga_ZK1STP2J2K — session state for our specific GA property. Two years.

We also store your cookie-banner choice in your browser's localStorage under bobinac_consent so we don't ask again on every visit. That's not a cookie and isn't sent to any server.

To change your choice: clear your browser's site data for this domain and the banner reappears on next load.

What we do with the data

Messages: we read and reply. Analytics: we look at aggregate reports (which page is most visited this week, how guests get to us). We never sell, rent, or share your data with anyone for marketing or profiling.

Who else technically touches your data

A few services briefly handle data to make the site work and to deliver your messages.

• Cloudflare serves the website. To deliver a page and keep things secure, it sees basic request data like IP address and browser type. See their privacy policy.
• Google processes the analytics events you've consented to (Analytics 4, Tag Manager). IP addresses are not stored. See their privacy policy.
• Resend is the email service that will deliver contact-form submissions to our inbox, once the form is live. See their privacy policy.

All three have their own GDPR commitments. They act as processors on our instructions, so they can't use your data for their own purposes.

Bookings happen on Airbnb

When you click "Reserve," you leave this site and land on Airbnb. From that moment, Airbnb's own privacy policy applies, and we have no insight into what they collect during booking. We only see your name and whatever you choose to share with us via Airbnb's host inbox.

How long we keep things

Messages stay in our email inbox until we tidy it up, usually a year or two. If you'd like us to delete an older exchange sooner, just ask.

Your rights under EU law (GDPR)

You can ask us to show you the data we have about you, correct it, or delete it. Write to us at our contact address and we'll respond within 30 days. If you think we've handled your data badly, you can complain to the Croatian data protection authority (AZOP).

If this page changes

We'll update the "Last updated" date above. When a change is significant (say, we add a new service that touches your data), we'll mention it on the home page for a while.