Privacy Policy

Who processes your data

The data controller is Samir Chamae, owner of the VŽ Escape apartment, Ul. 22. rujna 1991. 8, 42000, Varaždin, Croatia.

For any question about your data, write to reservations@vz-escape.com or call +385 98 171 0002.

What we collect

Through the enquiry form we collect only what we need in order to reply:

• your full name
• your email address
• your phone number
• your intended arrival and departure dates
• a message, if you choose to write one

Why we collect it

We use your data solely to answer your enquiry, check availability, and arrange your stay.

The legal basis is taking steps at your request before entering into a contract, under Article 6(1)(b) of the General Data Protection Regulation.

We do not use it for marketing and we do not sell it to anyone.

How long we keep it

Enquiries that do not lead to a booking are kept for at most two years and then deleted.

If a booking does follow, we keep the data for as long as tax and accounting law requires.

Who we share it with

We do not sell or hand over your data to third parties. We rely on a few technical services that process it on our behalf:

• Vercel, the servers running this site, which processes access logs
• Resend, which delivers the form message to our mailbox
• Porkbun, which hosts email on the vz-escape.com domain
• CARTO, which serves the map tiles and therefore sees your IP address

Transfers outside the European Economic Area

Vercel and Resend are United States companies, so part of the processing may take place on servers outside the European Economic Area. Both operate under the European Commission's standard contractual clauses, which exist for exactly this kind of transfer.

Messages from the form are sent through Resend's European infrastructure, in the Ireland region.

Server logs

Like every website, our server records technical details of each visit: IP address, browser type, time, and the address requested.

These logs exist for security and troubleshooting. We do not link them to your enquiry and we do not use them to track visitors.

Cookies

This site uses no analytics, no advertising pixels, and no tracking tools.

There is a single cookie, vz_lang, which remembers whether you chose the Croatian or the English version. It is set only when you click the language switch yourself, lasts one year, and holds nothing that could identify you.

Fonts are served from our own server, so loading the page sends no request to Google.

Security

The site is served only over an encrypted connection, and data from the form travels encrypted to the server and onward to our mailbox.

Only the apartment owner has access to enquiries.

Links to other sites

This site links to Booking.com and Agoda. Following those links takes you off our site and onto theirs, where their own privacy terms and cookies apply and ours no longer do.

Automated decision making

We do not subject your data to automated decision making or profiling. Every enquiry is read by a person.

Your rights

At any time you may request access to your data, its correction or erasure, restriction of processing, data portability, and you may object to processing.

Simply write to reservations@vz-escape.com. We reply within one month.

If you believe we are not handling your data properly, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb.

Changes

If this policy changes, we will publish the new version on this page and update the date at the top.