--
Privacy Notice
1. Introduction
2. About us – contact
3. Types of personal data we collect
4. Purposes and legal bases for processing Accommodation reservations and stay Marketing, advertising and website use
5. Data retention periods
6. Recipients and processors
7. Data subject rights and how to exercise them
This document aims to provide you with clear and transparent information about the personal data we collect and process when you visit our website, make a reservation at our properties, stay and use services at our properties, or communicate with us for any other reason.
This Privacy Notice covers the types of personal data we collect, the purposes for which we use it, the legal bases on which we do so, how long we retain it, with whom we share it, and what your rights are in relation to such processing and how to exercise them.
2. About us – contact
Data Controller:
SUNČANI HVAR d.d.
Ive Miličića 3, 21 450 Hvar
OIB: 29834131149
Data Protection Officer:
dataprotection@suncanihvar.com
Ive Miličića 3, 21 450 Hvar
OIB: 29834131149
Data Protection Officer:
dataprotection@suncanihvar.com
3. Types of personal data we collect
The data we collect and process depends on your relationship with us and the reasons for our communication. The categories and examples of personal data we collect are:
Identification data
Name, date of birth, gender, personal ID number, identity document number
Contact data
Address, email address, phone number
Financial data
Payment details, account numbers, credit/debit card type and number
Stay & service data
Length of stay, room number, date and type of service used (accommodation, food & beverage, spa)
Technical device data
IP address, login data, location, browser type and version, operating system
Marketing data
Your communication preferences
Telephone communication data
Caller number, call recording, call duration
Preference data
Room type, bedding preferences and other special requests
Special categories of personal data
As a rule, we do not collect special categories of data (race, ethnicity, religious beliefs, health, genetic and biometric data), except in exceptional cases: we collect allergy and health data within spa services exclusively on the basis of your explicit consent, or if you have publicly disclosed such data yourself.
4. Purposes and legal bases for processing Accommodation reservations and stay Marketing, advertising and website use
Cookies: For more information about the cookies we use on our website, please see our
Cookie Policy.
5. Data retention periods
We retain your data only for as long as necessary for the purposes for which the personal data is processed.
6. Recipients and processors
We never sell your personal data or share it with third parties for the purpose of advertising their services. In certain cases there is a legal obligation or business need to share your data with third parties:
→In order to fulfil a contract to which you are a party
→Where you have consented to sharing with a third party (e.g. cookies)
→With judicial, tax, audit and other competent authorities, in accordance with legal obligations
→With payment service providers with whom we have data processing agreements in place
→With IT service providers whose systems we use in our operations (reservation system, CRM, mail system)
→With the e-Visitor system, in accordance with regulations on tourist accommodation and guest registration
7. Data subject rights and how to exercise them
You have the right to exercise the following rights:
Access to personal data
Rectification of inaccurate data
Data portability
Erasure of personal data
Restriction of processing
Objection to processing
You may request to exercise your rights:
By email: dataprotection@suncanihvar.com
By post: SUNČANI HVAR d.d., Ive Miličića 3, 21 450 Hvar
We will respond to all requests within the statutory period of thirty days.
You may lodge a complaint with the supervisory authority: Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16, Zagreb · azop@azop.hr
Ulica Metela Ožegovića 16, Zagreb · azop@azop.hr
8. AI assistants (ChatGPT and Claude)
Sunčani Hvar offers a hotel assistant that guests can add to ChatGPT (by OpenAI) and Claude (by Anthropic). BID Grupa d.o.o. (BID), our technology partner, operates it for us.
What we receive. Only the search details the assistant sends to answer your question: destination, travel dates, number of adults, children's ages, hotel names and the wishes you describe, such as "near a sandy beach". We do not receive your name, contact details, payment details or the rest of your conversation, and no account is needed. The assistant does not pass on your IP address: requests reach us from OpenAI's or Anthropic's servers.
Why. To find matching hotels and to check availability and prices in our booking system.
Who processes it. Sunčani Hvar d.d. as controller; BID as processor, running the service on Cloudflare infrastructure; and our booking system provider, to check availability. Your conversation itself is processed by OpenAI or Anthropic under their own privacy policies. When the assistant shows hotel photos, your browser loads them from our website and our image storage (Google Cloud), as when you visit our website.
How long. Search details are not stored against you. Hotel information is cached for up to 4 hours and availability results for up to 5 minutes. Our hosting provider, Cloudflare, keeps a standard record of each request (time, the address requested and the calling server's IP address) for 32 days, for security. For the assistant, those requests come from OpenAI's or Anthropic's servers, not from your device, and never contain your search details.
Your choices. You can disconnect the assistant at any time in your ChatGPT or Claude settings. Questions about the assistant: ai@suncanihvar.com. Questions about your personal data: our data protection officer, dataprotection@suncanihvar.com.