Logo cropped Logo

Privacy Policy

Privacy Policy

1. DATA CONTROLLER

  • Name: OPG Morena Derossi-Bursic
  • Tax number (OIB): 42896399115
  • Address: Mala Vala 121, 52212 Valbandon, Fažana, Croatia
  • E-mail: info@papafigo.hr
  • Telephone: +385 91 346 8000
  • Performance of a contract – GDPR Art. 6(1)(b)
  • Compliance with legal obligations – GDPR Art. 6(1)(c)
  • Legitimate interest – GDPR Art. 6(1)(f)

3. DATA COLLECTED

First name and surname, address, e-mail, telephone, vehicle details (registration number), number of guests, and payment data (which is processed by WSPay; we do not store it).

4. DATA RETENTION PERIOD

For the duration of the contract + 5 years after the service has been provided (in accordance with the Croatian Accounting Act). Longer retention applies only in the event of a dispute.

5. DATA SUBJECT RIGHTS

You have the right to access your data, to rectify inaccurate data, to erasure, to restriction of processing, to data portability, to object to processing, and to withdraw your consent.

6. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY

Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb. E-mail: azop@azop.hr, Web: www.azop.hr.

7. SHARING WITH THIRD PARTIES

Data may be shared with:

  • WSPay (payment processing, PCI DSS Level 1 certified)
  • Tourist Board (legal obligation)
  • Tax Administration (accounting obligation)
  • Lawyers / courts (only in the event of a dispute)

We do NOT sell your data and do NOT use it for marketing without your consent.

8. DATA TRANSFER AND AUTOMATION

  • Your data is NOT transferred outside the EU/EEA.
  • We do not use automated decision-making or profiling.

9. PRIVACY STATEMENT

We undertake to protect the personal data of our customers by collecting only the data strictly necessary to fulfil our obligations. Personal data are considered to be the customer’s identifying information: first name and surname, e-mail address, home address and telephone number, i.e. data that is not otherwise publicly available. All customer data is kept strictly confidential and is accessible only to those employees for whom such data is essential for the performance of their work. All our employees and business partners are responsible for complying with the principles of privacy protection.

Version: 1.0 Effective date: 04.03.2026 Last update: 04.03.2026