PERSONAL DATA PROTETCION
Nowarent, Travel Agency
Last updated: 05.12.2025
1. Generally
This Personal Data Protection Statement of the NOWARENT Travel Agency, Rovinj, Ivana Gundulića 6a, OIB: 03084109638 (Data Controller) has been drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation - GDPR), which applies from 25 May 2018 and the Act on the Implementation of the General Data Protection Regulation.
This Statement describes what information we collect, how we handle it, and for which purposes we use it, as well as your rights associated with your data.
By using our website, you agree to this Privacy Policy.
2. Data controller
The Data controller responsible for processing your data is:
Travel Agency NOWARENT, Rovinj - Ivana Gundulića 6a, OIB: 03084109638
Address: Ivana Gundulića 6a, Rovinj
Phone number: +385 (0)95 701 1881
e-mail: rent@nowarent.com
3. Personal data being processed
• Tourists (guests):
Name and surname, data of birth, country of residence, telephone number, e-mail address.
• Private landlords or their representative:
Name and surname, address, phone number, e-mail address, Personal Fiscal Number, your bank account information, information about your accommodation unit, such as its address, its contents and photographs.
4. Legal basis for processing
We process your data on the following legal bases:
• Contract performance: To process bookings, payments
• Legitimate interest: Website security, fraud prevention, service improvement
• Consent: Newsletter subscription, marketing communication, and cookies
For more information about cookies, please visit our Cookies page.
5. Data sharing
We may share your data only with:
• Property managers or owners to prepare your arrival
• IT and hosting providers who maintain our website
• Law enforcement if required by legal obligations
These parties are required to process your personal data in accordance with data protection laws.
6. Data retention
We keep your personal data for as long as necessary for the purposes for which it is processed, and at the latest until the expiry of all legal obligations related to the retention of personal data.
7. Your rights
You have the following rights:
• Right to access personal data we collect.
• Right to rectification of personal data:
You have the right to request rectification or completion of personal data if your data is not accurate, complete and up-to-date.
• Right to erasure of personal data ("right to be forgotten"):
You have the right to request the erasure of personal data if one of the following conditions is met: Your personal data are no longer necessary in relation to the purposes for which they were collected or processed; You have withdrawn the consent on which the processing is based and there is no other legal basis for the processing; You have objected to the processing of your personal data and the controller has no overriding legitimate grounds for the processing; The personal data have been processed unlawfully; The personal data must be erased for compliance with a legal obligation under Union law or the law of a country to which the controller is subject.
• Right to restriction of processing of personal data:
You have the right to obtain restriction of processing if: you dispute their accuracy, if the processing is unlawful and you oppose their deletion, if the data must be stored for the exercise or defence of your legal claims, if you have objected to the processing of your personal data.
• Right to object
If we process your data for the purposes of performing tasks of public interest, on the basis of legitimate interest or for the purposes of direct marketing, you can file an objection against such processing.
• Right to data portability
You have the right to receive your personal data, which you have previously provided to the controller, in a structured form and in a commonly used and machine-readable format. You have the right to transfer this data to another controller without interference from the controller to whom the personal data was provided, if the processing is based on consent or contract.
• Right to withdraw consent at any time
You can revoke your consent at any time. Please note that the processing of your personal data that was based on consent before its withdrawal is considered lawful and that in certain situations, your data may be processed without your consent, because it is necessary for the contractual relationship itself or to fulfil legal obligations.
To exercise your rights, you can contact us in writing or by email using our contact details provided in point 2 of this statement.
We strive to respond to your requests within one month of receiving them, but if necessary, we may extend this deadline by an additional two months, of which you will be notified.
In case of any doubt, before processing your request, we may request additional information to verify your identity, which serves to protect your rights and privacy.
If you were to use these rights too often and with obvious intent of misuse, we could charge an administrative fee or reject to process your application.
If you believe that we have violated Croatian or European data protection regulations by processing your data, please contact us in order to clarify any misunderstandings. You have certainly right to file a complaint to the Croatian Data Protection Agency, or in case of change of valid regulations to another authority that will assume its competence.
8. Security
We use technical and organizational measures to protect personal data from loss, theft, misuse, and unauthorized access.
9. Changes to the privacy policy
We reserve the right to change the content of this privacy policy if we deem it necessary. You will be informed of any changes and amendments in a timely manner via our website.