Data protection

Privacy Policy at

Date of entry into effect: 15 June 2018


  1. Personal Data Controller


The company Arenaturist Ribarska koliba d.o.o., address Verudela 16, 52100 Pula, Croatia, OIB: 95903460600, phone: +385 91 600 1269, email: respects your privacy and undertakes to protect it even after your visit to this website (hereinafter “Site”). In that sense, Arenaturist Ribarska koliba d.o.o. acts as the controller (“Controller”). This privacy policy (“Privacy Policy”) provides insight into our procedures related to the collection and processing of personal data.


  1. Types of personal data to be processed


Arenaturist Ribarska koliba d.o.o. collects and processes your personal data (e.g. information that may be used to identify you directly or indirectly, in particular using identifiers such as name, last name, email address, date of birth, country, IP address, mobile phone number, phone number and sex) in cases when:

  • you use the contact form on the Site
  • you contact us via the email provided on the Site
  • you contact us or connect with us via social media,
  • you sign up for our newsletter
  • you participate in a contest or giveaway that we organise


Arenaturist Ribarska koliba d.o.o. shall not collect personal data unless you provide it voluntarily, except for certain personal data collected via the information systems and programs used for the operation of the Site, the transfer of which is inherent to the usage of internet communication protocols (e.g. IP addresses when sending a contact form), and shall not request more information than necessary for participation in certain activities. If you do not wish to provide us with personal data (except for personal data related to the use of internet communication protocols, usually collected upon visiting the website), you can still access our Site, but you will not be able to send a contact form or contact us, receive our newsletter or participate in contests/giveaways.


Visitors/senders provide their information voluntarily and there is no contractual obligation or requirement that a visitor/sender does this. The Controller shall not create profiles from the collected information, i.e. there is no automated decision-making.


  1. Cookies


Google Analytics and Google Tag Manager

This website uses cookies to provide a better user experience and functionality.


Our Site uses Google Analytics and Google Tag Manager, web analysis tools by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States (“Google“) – so-called cookies, which are small files saved on your computer. We collect log information, as well as information on how many visitors have visited certain parts of the Site. Google analyses the usage of the Site and cookies enable the analysis of visits to the Site by assigning a unique, randomly generated ID to your device, which is used to identify your device on your next visit to the Site. The duration is 24 months and the cookie provider is Google. If you are visiting this website for the first time, a notification will appear on the website where we invite you to provide your consent for the usage of these cookies. If you provide your consent, we will store the cookie on your computer and this notification will not repeat during the period of validity of the cookie. After the expiration of the validity of the cookie, or if you actively erase the cookie before that time, the notification will reappear upon your next visit to the Site and the invitation to provide your consent will also reappear. Information collected by Google related to your usage of the Site (e.g. starting URL, our sites that you have visited, the search engine that you used, your language settings, your computer system or your resolution) are transferred to Google’s servers in the USA, they are stored and analysed there, and the result is made available to us in an anonymous format. The data on your usage is not associated with your full IP address. This website activated Google’s offered function of IP anonymisation, so that the last 8 digits (type IPv4), i.e. the last 80 bits (type IPv6) of your IP address are deleted.


Google has been certified with regards to the EU-US Privacy Shield, which means that Google’s data processing in the USA applies an appropriate level of personal data protection. You may withdraw your consent for web analysis at any time by downloading and installing Google’s browser plugin. For additional information on Google Analytics, please see the Google Analytics Terms of Service, the Principles of Security and Data Protection of Google Analytics, as well as Google’s Data Protection Statement.

  • Social media

Arenaturist Ribarska koliba d.o.o. collects personal data on its social media contacts (Facebook, Instagram etc.) but does not contact them except when responding to enquiries or comments.

  • Direct marketing – newsletter

Arenaturist Ribarska koliba d.o.o. sends a newsletter containing information related to its offer, including marketing materials that may be of interest to you.

The newsletter is sent approximately twice a month, and the sending frequency is increased in case of news relevant to the Controller’s business. Each recipient of the newsletter can unsubscribe simply and quickly by clicking on the unsubscribe link, which is present in every newsletter. The Processor sending the newsletter is Envy d.o.o. and Arenaturist Ribarska koliba d.o.o. collects statistical data related to the opening of emails and URL clicks so that email sending may be monitored and improved, as well as for the purpose of analysing interest in particular content.

Arenaturist Ribarska koliba d.o.o. sends the newsletter based on a legitimate interest. Data is stored until a person withdraws their consent, or until the person objects to our contact based on legitimate interest.


  1. The purposes, the legal basis of the processing and possible consequences of not providing personal data


When you provide your personal data, we will limit the usage of the personal data to the purpose for which they were collected, in accordance with the terms of this Privacy Policy. The usage of your personal data includes:


  1. executing accommodation contracts
  2. satisfying the legal requirements governing the hospitality industry
  3. conducting steps upon your request, e.g. responding to your questions and comments submitted through the contact form, receiving your applications to participate in contests/giveaways, as well as newsletter sending
  4. for the purpose of improving and personalising the service for you as a guest
  5. for the purpose of protecting the property and safety of individuals by applying video surveillance measures
  6. Investigating fraud, disturbance and physical threat allegations, or other violations of the rules on the Site, or any suspicious behaviour or behaviour we consider rude;


Providing personal data for the purposes from A), B) and C) is voluntary, but in certain situations, it is required. Refusing to provide such data may make Arenaturist Ribarska koliba d.o.o. unable to respond to your requests. Processing data under D) and E) is based on legitimate interest, and for F), public interest.

If you have given a marketing consent, you can always withdraw your consent and stop receiving our newsletter (e.g. if you no longer wish to receive our newsletter, click on the unsubscribe link).


  1. Recipients


Your personal data may be disclosed in the following cases:


  • to subjects maintaining our information systems
  • to technical suppliers, in relation to creating and maintaining the website
  • to persons authorised by Arenaturist Ribarska koliba d.o.o. for the processing of personal data, which have been subjected to appropriate legal confidentiality obligations (employees of Arenaturist Ribarska koliba d.o.o.)
  • to legal advisers of Arenaturist Ribarska koliba d.o.o. in case of having to forward the data for legal proceedings
  • to digital marketing agencies for the purpose of sending the newsletter and managing social media
  • to public notaries and the Ministry of Finance, pursuant to legal provisions concerning contests
  • to companies participating in the organisation of the contest/giveaway for which you are applying, respecting legal measures and regulations, in accordance with the Rules of individual contests/giveaways


  1. Transfer of personal data to third countries


Arenaturist Ribarska koliba d.o.o. transfers personal data to Processors/Subprocessors in third countries, in particular in the USA, and only to those certified by the Privacy Shield programme between the European Union and the USA, while transfers to other countries are insured by standard contract clauses or appropriate decisions guaranteeing adequate protection of personal data.


  1. Storage


Arenaturist Ribarska koliba d.o.o. processes your personal data collected by your application to participate in contests/giveaways/programmes for 120 days as of the ending date of the contest/giveaway, after which the data shall be permanently erased. Personal data that we receive via contact forms, contact emails and newsletter sign-ups on the Site shall be processed until you use your right to object or until you withdraw your consent for the processing of personal data.

In addition to the aforementioned, Arenaturist Ribarska koliba d.o.o. shall maintain the personal data of the winners of the contest/giveaway, and of the buyers of its services for the required or permitted time, in accordance with the laws in force (e.g. at least 11 years, in accordance with the Accounting Act, which relates to storing documents on the basis of which the data has been entered into a log book, and the main records as proof of a sent prize).


  1. Your rights


Arenaturist Ribarska koliba d.o.o. informs you that, in accordance with and to the extent allowed by the applicable law, you may request access and the correction or erasure of personal data from Arenaturist Ribarska koliba d.o.o., as well as to limit processing related to your personal data, or to object to any given processing activity, as well as to issue a complaint to the competent surveillance body (Croatian Personal Data Protection Agency in the Republic of Croatia). In addition, you have the right to know the recipients or the categories of recipients to which your personal data has been or will be disclosed, in particular recipients in third countries.


  1. Related sites


The Site may contain links to other websites that are not owned, managed or maintained by Arenaturist Ribarska koliba d.o.o., and for which Arenaturist Ribarska koliba d.o.o. bears no responsibility. When you leave the Site, you should notice and read the terms and the privacy policy of any website that you visit.


  1. Safety practices


The safety of your personal data is exceptionally important for us, so we have placed appropriate physical, electronic and managerial procedures to protect the data that we collect. However, due to the inherent open nature of the Internet, we cannot guarantee that communication between you and us, or information stored on the Site, or on our servers, will be completely safe from unauthorised access by third parties. To the greatest extent allowed by the applicable law, we waive all responsibility for any damage that you may have incurred for any loss, unauthorised access, misuse or change in any information that you send to the Site.


  1. Applicable law


For all questions related to the Site and this Privacy Policy, the applicable law is Croatian law. You hereby consent that the exclusive and local jurisdiction for procedures related to the Site and this Privacy Policy belongs to the courts of the Republic of Croatia. We do not guarantee or implicate that the Site or content/material on the Site is appropriate for use outside of the Republic of Croatia.


  1. Changes and updates to our Privacy Policy


Arenaturist Ribarska koliba d.o.o. withholds the right to change or update this Privacy Policy at any moment and with no prior announcement. We cordially request that, from time to time, you check all changes or updates of our Privacy Policy, which will be published here and will show the updated date of entry into effect on the first page of the Privacy Policy, should there be any changes or updates.


  1. Contact information


In case of any questions or comments related to the Site or the Privacy Policy, you can contact us via our online form, which is available at, via email to, or via phone: +385 91 600 1269.


Personal Data Controller


Arenaturist Ribarska koliba d.o.o.,

Verudela 16,

52100 Pula, Croatia


Phone number.: +385 91 600 1269, +385 52 222 966