Privacy Policy

Data Controller

The data controller is:

Company: Tango Properties d.o.o.
Address: Jadranska avenija 6/42, 10000 Zagreb, Croatia
VAT/Tax ID (OIB): 74718017768
Email: info@villa-theodor.com

The data controller is responsible for the lawful and transparent processing of personal data in accordance with applicable data protection regulations, including the General Data Protection Regulation (EU) 2016/679 (GDPR).

What personal data we collect

Through the website’s contact form we collect the following personal data:

  • first and last name
  • email address
  • phone number (if voluntarily provided)
  • the content of your message (inquiry)

When using the website, technical data may also be collected, such as your IP address, browser and device information, date and time of access, and other technical data necessary for the website’s operation and security.

Purpose and legal basis of processing

We process personal data for the following purposes:

Responding to user inquiries and providing information about our accommodation and services

Legal basis: taking steps at the data subject’s request prior to entering into a contract (Art. 6(1)(b) GDPR).

Protecting the website and preventing misuse of the contact form (Google reCAPTCHA)

Legal basis: the data controller’s legitimate interest — ensuring IT security and protection against misuse (Art. 6(1)(f) GDPR).

Analysing website traffic to improve our content and services (Google Analytics 4)

Legal basis: user consent (Art. 6(1)(a) GDPR), given via the cookie banner.

Recipients of personal data

Personal data may be made available to the following recipients or categories of recipients:

  • Hrvatski Telekom d.d., Radnička cesta 21, 10135 Zagreb, Croatia – hosting provider under the brand Croadria (data processor)
  • Google LLC / Google Ireland Limited – for the use of Google Analytics 4 and Google reCAPTCHA

All data processors act solely on the instructions of the data controller.

Transfer of data to third countries

The use of Google Analytics 4 and Google reCAPTCHA may result in the transfer of personal data to third countries (e.g. the United States).

Such transfers are carried out with appropriate safeguards in place, including Standard Contractual Clauses (SCCs), which ensure an adequate level of protection for personal data in accordance with the GDPR.

Data retention period

Data submitted via the website’s contact form is retained for as long as necessary to process the inquiry and any further communication, and for no longer than 12 months from the date the inquiry was received, unless the communication leads to an ongoing business relationship.

Data collected via Google Analytics is retained in accordance with the data retention settings within the Google Analytics 4 tool.

Rights of data subjects

Data subjects have the right to:

  • request access to their personal data
  • request correction of inaccurate or incomplete data
  • request deletion of personal data
  • request restriction of processing
  • object to processing
  • withdraw consent at any time (for processing based on consent)

To exercise these rights, data subjects may contact the data controller at:

info@villa-theodor.com

Right to lodge a complaint with a supervisory authority

If a data subject believes that the processing of their personal data violates applicable regulations, they have the right to lodge a complaint with a supervisory authority:

Croatian Personal Data Protection Agency (AZOP)
www.azop.hr

Provision of data is voluntary

Providing personal data through the website’s contact form is voluntary, but necessary in order for the data controller to respond to your inquiry. If the requested data is not provided, we will not be able to respond to your inquiry.

Automated decision-making

The data controller does not carry out automated decision-making or profiling within the meaning of the GDPR.

Cookies

The website uses cookies and similar technologies.

Detailed information about the types of cookies used, the purpose of their use, and how to manage them is available in our Cookie Policy.

Changes to this Privacy Policy

The data controller reserves the right to amend this Privacy Policy. Any changes will be published on the website.

Last updated: 22 July 2026.

Cookie Policy

What are cookies?

Cookies are small text files stored on your device (computer, tablet or mobile phone) when you visit a website. Cookies allow the website to function properly, improve the user experience, and help us analyse how the website is used.

What types of cookies do we use?

2.1. Necessary (technical) cookies

These cookies are essential for the basic functioning of the website and cannot be disabled in our systems.

Without them, the website could not function properly.

Examples of purposes:

  • website security
  • protection against malicious spam attacks (Google reCAPTCHA)

No user consent is required for these cookies.

2.2. Analytics cookies (Google Analytics 4)

Analytics cookies allow us to collect anonymous statistical data about website usage (e.g. number of visits, most visited pages, time spent on the site).

We use Google Analytics 4 (GA4), a tool provided by Google LLC.

Data that may be collected includes:

  • an anonymised IP address
  • device and browser type
  • data on interactions with the website

These cookies are activated only after you give consent via the cookie banner.

Third-party cookies

The website uses third-party services that may set their own cookies:

Google Analytics 4

Provider: Google LLC

Purpose: analysing website traffic and improving the website

Legal basis: user consent

Google reCAPTCHA

Provider: Google LLC

Purpose: protecting the contact form against misuse and automated attacks

Legal basis: the data controller’s legitimate interest (IT security)

Note: reCAPTCHA is active exclusively on the page with the contact form.

Transfer of data outside the EU

The use of Google Analytics and Google reCAPTCHA may result in data being transferred to third countries, including the United States.

Such transfers are carried out with appropriate safeguards in place, including Standard Contractual Clauses (SCCs), in accordance with the GDPR.

How to manage cookies

On your first visit to the website, a cookie banner is displayed, allowing you to:

  • accept analytics cookies
  • decline analytics cookies
  • accept necessary cookies only

You can change your choice at any time via the cookie banner, through the “Cookie Settings” link on the website, or through your web browser’s settings.

Disabling cookies via your browser

Most web browsers allow you to control cookies through their settings. Disabling cookies may mean that some features of the website will not work properly.

Data controller

The data controller responsible for the use of cookies is:

Company: Tango Properties d.o.o.
Address: Jadranska avenija 6/42, 10000 Zagreb, Croatia
VAT/Tax ID (OIB): 74718017768
Email: info@villa-theodor.com

Changes to this Cookie Policy

We reserve the right to amend this Cookie Policy. Any changes will be published on this website.

Last updated: 22 July 2026.