Privacy policy

Last updated: 19 September 2026

Who we are

This website is run by Nautilus Group d.o.o., Kurili 27b, 52352 Kanfanar, Croatia, OIB 32229554548, trading as Nautilus Tourist Agency. Our office is at Matteo Benussi 1, 52210 Rovinj, Croatia. We are the controller of the personal data described below.

Questions about your data: info@nautilus-rovinj.com.

What we collect, and why

When you send an enquiry

Your name, email address, and anything else you choose to give us: telephone, country, travel dates, the number of guests, children’s ages and your message. We use it only to check availability with the owner and to send you an offer. The legal basis is taking steps at your request before a contract (Article 6(1)(b) GDPR). We also keep a record of the moment you ticked the privacy box.

An enquiry that does not lead to a booking is deleted within 12 months.

When you book

To arrange the stay we share your name, dates and number of guests with the owner of the property. Croatian law requires every guest to be registered in the national eVisitor system, so before arrival we ask for the details from each guest’s passport or identity card. Those details go to eVisitor and, through it, to the tourist board and the police, as the law requires (Article 6(1)(c) GDPR). Booking and invoice records are kept for as long as Croatian accounting and tourism law requires.

Statistics — only if you agree

With your consent, given in the cookie banner, we use Google Analytics (Google Ireland Limited) to count visits and see which pages are useful. IP addresses are anonymised. Google may process data in the United States under the EU–US Data Privacy Framework. Without your consent, Google Analytics does not load at all. You can change your choice at any time through “Cookie settings” at the foot of every page.

Maps

Property pages show a map from OpenStreetMap. When the map loads, your browser contacts the OpenStreetMap Foundation’s servers, which see your IP address. The links to Google Maps and Apple Maps only open those services if you click them.

Technical data

Like every website, our server records basic request data (IP address, time, page requested, browser) to keep the site secure and working (Article 6(1)(f) GDPR, legitimate interest). These logs are kept for a short time and are not used to identify visitors.

Who else sees your data

• the owner of the property you book;
• public authorities, through eVisitor, as the law requires;
• our hosting provider in Croatia, who runs the web and mail server for us under a data processing agreement;
• our accountant, for invoices;
• Google, for statistics, and only if you consented.

We never sell your data or use it for advertising.

Your rights

You can ask us for a copy of your data, and ask us to correct it, delete it, restrict its use or transfer it. You can object to processing based on legitimate interest, and withdraw consent at any time without affecting what was done before. Write to info@nautilus-rovinj.com; we answer within one month.

If you think we have handled your data wrongly, you can complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or to the authority in your own country.

Cookies

We use only the cookies the site needs to work, plus statistics cookies if you allow them. The cookie banner lists them and lets you choose; the cookie policy has the details.

Changes

If we change how we use personal data, we will update this page and the date at the top.