1. Who we are
U.O. STELLA MARIS (obrt), owner: Vjekoslav Klarin, OIB 00201278976
Pod Jasenovac 11, 22242 Jezera, Croatia · E: info@autocamp-stellamaris.com · T: +385 95 940 3490
We are the controller for this website and our on-site services. No Data Protection Officer appointed. Supervisory authority: AZOP.
2. Definitions
“Website” means all pages under the www.autocamp-stellamaris.com domain. “User” means anyone accessing/using the Website. “Guest” means a person who books or stays at the autocamp, apartment or mobile home.
3. Data we collect & legal bases
Website enquiries & bookings
Contact details, dates, party size, message, and channel metadata — for pre-contract steps and performing the contract (Art. 6(1)(b)), compliance with consumer/accounting law (Art. 6(1)(c)), and service quality (Art. 6(1)(f)).
Guest registration (eVisitor)
Identity document data as required by Croatian tourism/tax law — legal obligation (Art. 6(1)(c)); guests are registered within 24 hours of arrival.
Payments
Payer identifiers, masked card/transaction references (via POS), sums and receipts — contract and legal obligation (Art. 6(1)(b)(c)).
CCTV
Video surveillance at reception, parking, internal road and exterior of accommodation units (never inside units or sanitary areas) — legitimate interests in security (Art. 6(1)(f)). Retention: 30 days unless footage is needed longer for incidents/claims.
Wi-Fi
We provide guest Wi-Fi (Starlink). We do not keep connection/MAC/IP logs beyond what is necessary to provide the service; no marketing use.
Cookies & similar tech
We use a consent banner (CookieYes). Non-essential tools are blocked until you consent: GA4 (via GTM), YouTube embeds, Google Maps, and reCAPTCHA. Legal basis: consent (Art. 6(1)(a)). See Cookie Policy.
4. Sources
Data comes directly from you (forms, email, OTA reservations forwarded to us) and from your lawful use of our site. OTAs act as independent controllers — see each OTA’s privacy policy.
5. Where we store/process data
Hosting is provided by Plus Hosting Grupa d.o.o. (Croatia/EU). If you consent to Google services (e.g., GA4/Maps/YouTube/reCAPTCHA), data may be processed outside the EEA (e.g., USA) under appropriate safeguards (see International transfers).
6. Recipients/Processors
- Hosting: Plus Hosting Grupa d.o.o. (processor)
- Website/email maintenance: Ego Media (processor)
- Bookkeeping service: ET - bookkeeping services (processor)
- POS acquirer & terminal brand(s): Zagrebačka Banka d.d. POS 1(processor)
- PMS/Channel manager: ReMaris PMS (processor) — Booking.com - CM (processor)
- Cookie consent CMP: CookieYes (processor)
- Independent controllers: OTAs; Bisage Travel Agency when contacted directly; Google (for GA4/Maps/YouTube/reCAPTCHA if you consent).
7. International transfers
Where Google services are enabled by your consent, data may be transferred outside the EEA (e.g., USA). Transfers rely on adequacy (e.g., EU-U.S. DPF) or Standard Contractual Clauses, as applicable. See Google’s privacy documentation for details.
8. Security measures
We apply organisational, physical and technical safeguards (access controls, encryption in transit, hardened hosting, staff confidentiality, processor contracts, CCTV access controls). Despite safeguards, no Internet service can be 100% secure.
9. Retention
- Enquiries not resulting in a stay: normally up to 12 months.
- Guest/booking and invoice/accounting records: 11 years (statutory).
- CCTV: 30 days (longer only if needed for incidents/legal claims).
- Cookie consent logs: typically 12–24 months (CMP setting).
10. Your rights
Access, rectification, erasure, restriction, portability, objection (including to processing based on legitimate interests), and withdrawal of consent (without affecting prior processing). You can lodge a complaint with AZOP.
11. Children
We do not knowingly contract online with children under 16 without parental authorisation.
12. Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date shows the current version. Material changes will be signposted on the site.
13. Contact
Privacy requests: info@autocamp-stellamaris.com.
14. eVisitor Notice
Dear guests, in accordance with EU GDPR and Croatian law, upon reservation and check-in you agree to present identification documents for registration in the eVisitor system. Data are used for statutory and statistical purposes and made available to competent authorities. Any unauthorised use is prohibited.
Last updated: 10 January 2026