Privacy Policy

Adriatic Retreat is operated by Otto Ziegler Consulting BV, the data controller responsible for the personal data described in this policy.

• Otto Ziegler Consulting BV
• Van Tuyll Van Serooskerkenplein 39-3, 1076 LZ Amsterdam, Netherlands
• Chamber of Commerce (KvK) 60917547
• Privacy contact: stay@adriaticretreat.hr

We collect only what we need to answer enquiries, host stays and run our gatherings:

• Enquiries and interest forms — name, email, and anything you choose to write to us.
• Bookings and payments — name, email, phone, billing address, stay dates, group size, and payment confirmation details. Card details are entered directly with our payment provider and never reach our systems.
• Membership accounts — account email, membership tier, and your saved preferences.
• Event and gathering registrations — name, email, company, role, date preferences, and dietary or accessibility notes you share.
• Guest check-in details — full name, date of birth, nationality, and travel document details for every guest, including children. We are legally required to collect and submit this for registration with the Croatian tourist authority.
• Gift purchases — purchaser and recipient names and contact details.
• Referral and ambassador participation — contact details and referral activity linked to your code.
• Newsletter and waitlist sign-ups — email address and the topic you signed up for.
• Technical data — basic, aggregated information about how pages on this site are used.

We publish some gatherings as LinkedIn Events. When you register through LinkedIn, we receive the registration details LinkedIn makes available to the event host — typically your name, professional headline, LinkedIn profile, and any contact details you or LinkedIn choose to share — along with anything you enter in a registration question.

We use this only to confirm your place, send practical information about that event, and follow up afterwards about that event. We do not add LinkedIn registrants to marketing lists without a separate opt-in.

LinkedIn is an independent controller for the data it collects on its own platform, under its own privacy policy. This policy covers only what happens once the data reaches us.

• Performance of a contract — handling bookings, memberships, gift purchases and event participation you have requested.
• Legal obligation — guest registration with the Croatian tourist authority, and retaining invoicing and tax records.
• Legitimate interests — responding to enquiries, coordinating dates with a group, following up after an event, preventing misuse, and improving our service. We keep this proportionate and you can object at any time.
• Consent — newsletters and other marketing emails. You can withdraw consent at any time, without affecting anything sent before.

We do not sell personal data. We share it only with providers and authorities that help us deliver the service:

• Payment processing
• Email delivery and scheduling tools
• Website hosting and database infrastructure
• The Croatian tourist-registration authority, where legally required for a stay
• Professional advisers or authorities, where we are legally obliged to disclose

These providers act on our instructions under data-processing agreements.

Some of our providers process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's standard contractual clauses or an equivalent safeguard.

• Enquiries and leads — up to 24 months after our last contact, unless you ask us to delete sooner.
• Booking, stay and invoicing records — retained for the statutory retention period that applies to our accounting records.
• Guest registration details — kept only as long as required by the applicable registration rules.
• Membership and account data — while the account is active, and for a short period afterwards.
• Marketing contacts — until you unsubscribe or withdraw consent.

Under the GDPR you can ask us to:

• Give you access to a copy of your data
• Correct data that is wrong or incomplete
• Delete data we no longer need to keep
• Restrict how we use it, or object to use based on legitimate interests
• Receive your data in a portable format
• Withdraw consent to marketing at any time

Write to stay@adriaticretreat.hr and we will respond within one month. If you are not satisfied, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens, or to the supervisory authority in your own country.

Data is transmitted over encrypted connections and stored in access-controlled systems, with access limited to the people who need it to run the residence and our gatherings.

This site uses cookies and local storage that are necessary for it to work — for example keeping you signed in to a member account and remembering form progress. We also look at aggregated page usage to understand which pages are useful. We do not run advertising trackers.

We update this policy when our practices change. The date at the top of this page shows when it was last revised.