Privacy Policy

Last updated: November 2026

Who we are

Kaleta Apartments Split is a family-run provider of holiday apartments in Split, Croatia, and is responsible for the personal data described in this policy. Address: Ul. Majstora Jurja 4, 21000 Split, Croatia. Email: [email protected] · Phone / WhatsApp: +385 99 509 4299. Website: https://www.kaletaapartments.com. Full details of the data controller are available on request.

What data we collect and why

Booking enquiry form. When you send an enquiry, we receive your name, country, email address, phone number, arrival and departure dates, number of guests and children, the apartment you are interested in and your message. We use this information only to answer your enquiry, check availability and, if you decide to book, to arrange your stay. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Email, phone and WhatsApp. If you contact us directly, we use your contact details and messages in the same way, only to reply and to handle your booking.

Guests who stay with us. Croatian law requires us to register every guest with the national tourist register (eVisitor) and to keep invoices and accounting records. For this we collect the details required by law, such as name, date of birth, nationality and identity document number. Legal basis: legal obligation (Art. 6(1)(c) GDPR).

Website security. Like most websites, our server and security software record technical data such as your IP address, browser type and the time of your visit, to protect the site against spam and attacks. Legal basis: our legitimate interest in keeping the website secure (Art. 6(1)(f) GDPR).

We do not sell your data, we do not use it for advertising, and we do not send newsletters.

Who processes your data for us

Website and email hosting – InMotion Hosting (USA) hosts our website, its technical logs and our mailbox, where messages from the enquiry form are delivered.
Cloudflare Turnstile – checks that the enquiry form is sent by a person and not by a spam robot. Cloudflare may process your IP address and technical browser data for this purpose. More information: https://www.cloudflare.com/privacypolicy/
Google Maps – the map on our home page is provided by Google. When the map loads, your browser connects to Google’s servers, which receive your IP address and technical browser data. More information: https://policies.google.com/privacy

Some of these providers may process data outside the European Economic Area. In that case the transfer is protected by safeguards required by GDPR, such as the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework.

Links to other websites

Our website contains links to Airbnb, WhatsApp and other services. When you open them, their own privacy policies apply.

Cookies

We do not use advertising or analytics cookies. The website only uses technically necessary cookies and similar storage, for example for the spam protection on the enquiry form. These do not require your consent.

How long we keep your data

Enquiries that do not lead to a booking: deleted within 12 months.
Booking correspondence: kept for up to 2 years after your stay, so we can help with any questions about it.
Guest registration, invoices and accounting records: kept for the period required by Croatian law.
Website security logs: kept for a short period, normally a few weeks.

Your rights

You have the right to request access to your personal data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Some data we are legally required to keep cannot be deleted before the legal period ends. To use any of these rights, write to [email protected].

You also have the right to lodge a complaint with the Croatian data protection authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, https://azop.hr

Changes to this policy

We may update this policy from time to time. The latest version is always available on this page.