Privacy Policy

The following notes provide an overview of what happens to your personal data when you visit this website. Personal data is any data by which you can be personally identified.

This website works without cookies. Data is only collected if you provide it to us via the inquiry form, and in technically necessary server logs.

The controller responsible for data processing on this website is:

Apartments Vila Piculjan
Karin and Ivan Piculjan
Banjol 311
HR-51280 Rab, Croatia

Phone: +385 (0)51-724819
Email: info[at]ferien-rab.de

We host the contents of our website with Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany (“Hetzner”). For details, see Hetzner’s privacy policy: https://www.hetzner.com/legal/privacy-policy.

When you visit the website, the web server automatically processes server log files (IP address, date and time, page accessed, browser type). This data serves to ensure trouble-free operation and to defend against attacks, and is automatically deleted after a short time. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the secure provision of the website).

If you contact us via the inquiry form, the data you provide (name, email address, preferred apartment, number of people, message) will be sent to us by email for processing your inquiry and stored on the server for follow-up. We do not pass this data on without your consent.

Processing is based on Art. 6(1)(b) GDPR (initiation of an accommodation contract). The data remains with us until the purpose of processing no longer applies; statutory retention periods remain unaffected.

To protect the inquiry form from abuse, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether an input originates from a human and processes technical characteristics of the browser for this purpose. No advertising cookies are set. The legal basis is Art. 6(1)(f) GDPR (protection against spam and abuse). Cloudflare may process data in the USA on the basis of EU standard contractual clauses. Details: Cloudflare Privacy Policy.

We use the self-hosted, cookieless analytics software Umami to statistically evaluate the use of the website (e.g. page views). Umami does not store personal data, does not set cookies and does not create cross-user profiles; IP addresses are not stored. The data remains on our own server. The legal basis is Art. 6(1)(f) GDPR (interest in statistical evaluation without intrusion into privacy).

On our contact page we offer a map from Google Maps, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The map is not loaded automatically: at first you only see a placeholder with our address. Only when you click “Load interactive map” is a connection to Google established and your IP address as well as further browser data transmitted to Google — possibly also to the USA.

The legal basis is your consent under Art. 6(1)(a) GDPR, which you give with that click and which you can withdraw at any time by reloading the page and not activating the map again. Without the click, no data whatsoever is transmitted to Google. Details: Google Privacy Policy.

You have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the data processing, as well as the right to rectification, blocking or erasure of this data (Art. 15–18 GDPR), to data portability (Art. 20 GDPR) and to object to processing (Art. 21 GDPR). You also have the right to lodge a complaint with the competent supervisory authority. To do so, contact the address given above at any time.

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by the lock symbol in your browser bar.