Privacy Policy

Plaža-Beach Fažana (hereinafter: "we", "our") respects your privacy. This policy explains what personal data we collect through our website and reservation service, why we process it, who we share it with, and what rights you have under the GDPR.

Data We Collect

When you book a table through our website, we collect the information you enter in the reservation form: your first and last name, phone number, email address, the number of guests, your seating preference, and the date and time of your visit, along with any optional note you choose to add. We use this information solely to handle and manage your reservation. Please do not enter sensitive personal information (such as health details) in the note field. Beyond the reservation form, our website requires no registration and uses no analytics or advertising tools.

Why We Process Your Data

We process your reservation data to receive, confirm and manage your booking, to contact you about it if necessary, and to send you confirmation and cancellation emails. The legal basis for this processing is the performance of a contract and steps taken at your request before entering into it (Article 6(1)(b) GDPR).

Data Controller

The data controller is:

Who We Share Your Data With

To operate the reservation service we rely on carefully selected service providers that process data on our behalf:

• Supabase — database and hosting of reservation data (EU region)
• Resend — delivery of reservation confirmation and cancellation emails
• Vercel — hosting of this website

When you view the page showing our location map, Google receives your IP address because the map is embedded from Google Maps.

Some of these providers may process data outside the European Economic Area under appropriate safeguards, such as the European Commission's standard contractual clauses.

We do not sell your personal data.

How Long We Keep Your Data

We keep reservation data for 12 months after the date of your visit, after which it is automatically deleted. You may ask us to delete your data sooner at any time.

Cookies

Our website uses only strictly necessary cookies: a cookie that remembers your chosen language and, for staff, a session cookie used to sign in to the admin area. We do not use tracking, analytics, or marketing cookies, so no cookie-consent banner is required.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data
• Rectification of inaccurate data
• Erasure of your data
• Restriction of processing
• Data portability
• Object to data processing
• Lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with the supervisory authority. In Croatia this is the Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, www.azop.hr.

Contact for Data Requests

For any questions regarding the protection of personal data or to exercise your rights, please contact us at:

info@restaurantplazafazana.hr

Changes to This Policy

We reserve the right to amend this privacy policy. Any changes will be published on this page with an updated date.