English Effective date: 25 September 2026

This Privacy Policy explains how Donabilis d.o.o. collects, uses, stores and shares personal data when you visit veprinac.hr, contact us, or submit an inquiry regarding Veprinac Hills. It applies to website visitors and prospective clients.

1. Data controller

2. Personal data we process

Inquiry data
When you contact us or submit the website form, we may process your name, email address, optional phone number, property or villa of interest, message, and related correspondence.

Technical and usage data
When you use the website, our website platform and security providers may process technical data such as IP address, browser and device type, operating system, timestamps, referring page, pages visited, actions on the website and approximate location derived from the IP address.

Analytics and advertising data
With your prior consent, we may use Google Analytics 4 and Meta Pixel to understand website use, measure campaign performance and support relevant advertising. Depending on configuration, these services may process cookie identifiers, session and event data, page interactions, campaign attribution and device information. Non-essential technologies are not activated before consent.

3. Purposes and legal bases

4. Sources and whether data is required

We generally obtain data directly from you, from your use of the website, and from the service providers described below. Fields marked as required are necessary for us to receive and answer your inquiry. If you do not provide them, we may be unable to respond. Optional information is voluntary.

5. Recipients and service providers

·       Tilda Publishing and its infrastructure providers, used for website hosting, forms, internal statistics, security and content delivery.
·       Email, cloud and IT service providers that support communications, storage and website operations.
·       Google Analytics 4, if you consent to analytics cookies.
·       Meta Pixel, if you consent to advertising cookies.
·       Professional advisers, competent authorities or courts where disclosure is required by law or necessary to establish, exercise or defend legal claims.
Service providers process data under their own terms or on our documented instructions, as applicable. We do not sell your personal data.

6. International transfers

Some providers may process personal data outside Croatia or the European Economic Area. Where required, transfers are protected by an adequacy decision, Standard Contractual Clauses approved by the European Commission, or another lawful safeguard under Chapter V GDPR. You may contact us for information about the applicable safeguards.

7. Retention

·       Inquiry data and correspondence: normally up to 24 months after the last communication, unless a longer period is needed for a contract, legal obligation or legal claim.
·       Technical and security logs: normally up to 12 months, or a shorter period set by the relevant provider.
·       Consent records: for as long as reasonably required to demonstrate compliance and address complaints.
·       Analytics and advertising data: according to the settings and retention periods of the relevant provider, your consent choices and the Cookie Policy.
We may anonymise information so that it no longer identifies you; anonymised information may be retained for statistical purposes.

8. Your rights

Subject to the conditions in applicable law, you may request access, rectification, erasure, restriction of processing, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time. We may need to verify your identity before acting on a request.
To exercise your rights, contact us at donabilis.hr@gmail.com. You also have the right to lodge a complaint with the Croatian Supervisory Authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, azop@azop.hr, https://azop.hr/.

9. Automated decisions, children and security

We do not use the website to make decisions producing legal or similarly significant effects solely by automated means. The website is not directed to children under 18, and we do not knowingly collect their personal data. We use appropriate organisational and technical measures designed to protect personal data, but no online system can be guaranteed completely secure.

10. Updates and contact

We may update this Policy when our website, service providers or legal requirements change. The current version and effective date will be published on the website. Questions may be sent to donabilis.hr@gmail.com or to our registered address.

11. Provider information

·       Tilda Privacy Policy
·       Tilda Data Processing Addendum
·       How Google uses information from partner sites
·       Google Privacy Policy
·       Meta Privacy Policy