Privacy & cookies
Updated: 17 September 2026
This notice explains how personal data is handled when you visit this website or contact Casa Copa by email.
Controller and contact
Tomislav Copić, Casa Copa. Correspondence address: Beneci 152, 52231 Nedešćina, Croatia. You can contact the controller by email using the buttons below, including to exercise your privacy rights.
Email enquiries
If you email us, we process your email address, your name if provided, your message and any details you choose to include, such as travel dates and guest count. We use these details to respond and, if requested, arrange a stay. Booking enquiries are processed to take steps at your request before entering into a contract (Article 6(1)(b) GDPR). Other correspondence is handled on the basis of our legitimate interest in responding to enquiries (Article 6(1)(f)); requests to exercise data protection rights are handled to meet our legal obligations (Article 6(1)(c)). Sending an email is voluntary, but we need a reply address and sufficient information to answer. Please do not send identity documents or other sensitive information with an initial enquiry. We do not use enquiries for newsletters or advertising.
Website access and cookies
Technical access and security logs may contain your IP address, the requested page, access time, browser information and response status. They are used for reliable delivery, troubleshooting and preventing abuse, on the basis of legitimate interests (Article 6(1)(f) GDPR). This website has no contact form and does not set its former form-session cookie. It does not use analytics or advertising cookies, tracking pixels or browser storage for tracking. Images, fonts and social icons are served locally. Links to Google Maps, Facebook and Instagram open external services only when selected; those services apply their own privacy notices.
Access and storage
Tomislav Copić manages the website hosting and enquiry handling. Access is limited to the controller and technical infrastructure or email service providers where needed for delivering and securing those services. Data may also be disclosed to competent authorities where legally required. Website hosting and the enquiry mailbox are located in Croatia or elsewhere in the European Union. We do not automatically forward enquiry emails outside the European Economic Area.
Retention
Enquiries that do not lead to a reservation are deleted after the correspondence is closed, no later than 30 days after closure, unless a legal duty or a specific dispute requires longer retention. Reservation and accounting records are retained separately for the periods required by applicable law. Technical logs are retained only for the period needed to diagnose faults or investigate security incidents and are removed when that purpose ends; records needed for a specific incident are restricted to that investigation.
Your rights
Subject to the conditions in the GDPR, you may request access, correction, deletion, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your situation. You may contact us by email or post; no travel dates or booking are required. We normally respond within one month; any lawful extension will be explained. You can complain to the Croatian Personal Data Protection Agency (AZOP), or the competent supervisory authority in your country. There is no automated decision-making or profiling.
AZOP ↗