Privacy and cookies

1. Controller and contact

Veritas hospitality d.o.o., Velebitska ulica 24, 21000 Split, Croatia, is responsible for personal data processing in connection with this website and communications with us. For privacy questions and rights requests, contact Domagoj Grgić at domagoj@veritas-hospitality.hr or +385 91 3117 197. Service enquiries may also be sent to sales@veritas-hospitality.hr.

2. Visiting the website and cookies

The website presents our services and editorial articles. It has no contact form, newsletter, booking system or embedded analytics or advertising tools. Images and other automatically loaded content are served as part of this website.

This website’s code does not set cookies, use browser local storage or profile visitors. Selecting HR/EN opens the relevant page without saving a language preference. Technical processing by the hosting provider is described separately below. If we introduce features requiring consent, we will request it before activating them.

3. Email and telephone enquiries

Email and telephone links open the relevant application on your device. If you contact us, we process your contact details and the information you provide to respond and discuss working together. Providing information is voluntary, but we cannot respond without the necessary contact details. Please share only what is needed for your enquiry.

For necessary steps before entering into a contract at your request, where you are the prospective contracting party, the legal basis is Article 6(1)(b) GDPR. For other necessary business correspondence, the basis is our legitimate interest in answering enquiries and maintaining business contacts, with due regard for your rights, under Article 6(1)(f).

4. Service providers and hosting

This version is hosted using Netlify, Inc. and its infrastructure. Access involves processing technical data needed to deliver and protect the website, including IP addresses and network request data. The purpose is secure and reliable delivery; for processing on our behalf, the legal basis is our legitimate interest in doing so under Article 6(1)(f) GDPR. Processing terms are set out in Netlify’s Data Processing Agreement, while its own processing is described in Netlify’s Privacy Policy. Netlify uses international infrastructure, so processing may involve transfers outside the European Economic Area. The addendum governs applicable safeguards, including Standard Contractual Clauses for covered transfers. The subprocessor list identifies infrastructure providers. You may request information about safeguards using our contact details. The website does not include Netlify Forms or analytics tools.

We use Google Workspace (Gmail) for business email. The service provider and its subprocessors process messages and related data to provide business email and support. Processing is governed by applicable contractual terms and Google’s Data Processing Addendum. The service uses international infrastructure; the contractual framework governs safeguards for covered transfers outside the European Economic Area, including Standard Contractual Clauses. We do not assume storage exclusively in the EU. You may request information about recipients and applicable safeguards using our contact details.

5. How long we keep data

Enquiries that do not lead to a working relationship are kept only while needed to handle the enquiry and continue the specific discussions, and for no more than 12 months after the correspondence has ended. We delete them earlier when they are no longer needed. Exceptionally, relevant data may be kept longer where required by law or necessary to establish, exercise or defend legal claims; such retention is limited to the necessary data and applicable period.

If we work together, necessary contractual and accounting records are kept separately in accordance with applicable obligations. Deleting messages from an active mailbox and removing copies held by a service provider are separate processes.

Specific retention periods for hosting technical and security logs and provider copy-removal procedures are still being confirmed for the final publication environment. This notice therefore does not confirm that all organisational and supplier checks are complete. For details, contact domagoj@veritas-hospitality.hr.

6. Your rights

Depending on the applicable conditions, you may request access, correction, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Send requests to domagoj@veritas-hospitality.hr. We will respond without undue delay, normally within one month, and notify you of any extension allowed by law.

You may complain to the Croatian Personal Data Protection Agency (AZOP), azop@azop.hr, Ulica Metela Ožegovića 16, 10000 Zagreb, or another competent supervisory authority.

7. External links

Links to LinkedIn, HrTurizam and other organisations take you to their websites. Once you open them, those providers’ privacy information applies. Our website does not automatically load their content through tracking plugins.