What we do with your information

Who is responsible

The controller of any personal data described here is BUCKS PROPERTY SERVICES d.o.o. za usluge, Brežac 11, 52440 Višnjan, Croatia. The company is registered at Trgovački sud u Pazinu under MBS 081493503, its OIB is 65906866044, and it is VAT registered.

For anything to do with your data, write to bookings@bucks.com.hr. There is no separate data protection officer — the same people who answer enquiries about dates answer these questions too.

What this website is

bucks.com.hr is a static website built with Astro and served from Cloudflare Pages. Every page is a fixed file. In practical terms that means:

• there are no forms, so nothing can be submitted through the site;
• there are no accounts, no logins and no database of visitors;
• there are no payments taken anywhere on the site;
• there are no analytics or tracking scripts, no advertising, and no profiling of any kind;
• the site itself sets no cookies and writes nothing to your browser's local or session storage.

Two things do reach other companies when a page loads, and one thing happens when you decide to write to us. Those are covered below.

Email enquiries

Every "email us" button on this site is an ordinary mailto: link. Pressing it opens your own mail programme with a subject line and a short checklist already typed in. Nothing is sent at that moment, and nothing travels through the website. You decide what to write, whether to send it, and to whom.

When you do send it, the message arrives in our mailbox at bookings@bucks.com.hr. Our email is hosted on Microsoft 365, so Microsoft processes the message as our email provider.

What we use it for

To answer you, to talk through dates and the practical details of a stay, and — if you go on to book — to arrange and run that stay. The lawful basis is Article 6(1)(b) of the GDPR: steps taken at your request before entering into a contract, and then the contract itself. If your message turns out not to be about a stay at all, we rely on our legitimate interest in replying to correspondence sent to us.

How long we keep it

Enquiries that do not lead to a booking stay in the mailbox while the conversation is live and are deleted once they are plainly finished with. Correspondence about an actual stay is kept while the stay is being arranged and afterwards for as long as we may need it for accounting and tax records. Ask us to delete something and we will, unless the law requires us to keep it.

Who else sees it

Nobody, beyond the owner and the people who help run the house. We do not sell, rent or share enquiry details with anyone for marketing, and we do not add you to a mailing list.

Hosting and server logs

The site is hosted by Cloudflare. Like any web host, Cloudflare receives the requests your browser makes — including your IP address, the page requested, the time, and your browser's user-agent string — and processes them to serve the page and to protect the site from abuse. Cloudflare may also set a strictly necessary security cookie, such as __cf_bm, for that protection. This is set by the host, not by us, and it is not used to advertise to you or to build a profile.

Content embedded from other services

Two pieces of the site are loaded from other companies' servers. When they load, those companies receive your IP address and the usual connection details, because that is how loading anything from another server works.

• YouTube — the villa video is embedded in YouTube's privacy-enhanced mode, from www.youtube-nocookie.com. That mode defers cookies until you actually start playing the video; it does not remove them, and it does not stop YouTube seeing your IP address when the player loads.
• OpenStreetMap — the map and the map links are served by OpenStreetMap. Loading the map tiles sends your IP address to their servers.

The cookies page explains this in more detail, including how to avoid the embeds entirely.

Data leaving the EEA

Microsoft, Cloudflare and Google are global companies, and data handled by them may be processed outside the European Economic Area under the transfer terms and safeguards those companies publish for their services. We do not transfer your data anywhere else ourselves.

Your rights

Under the GDPR you can ask us for a copy of the personal data we hold about you, ask us to correct it if it is wrong, ask us to delete it, ask us to restrict what we do with it, object to our processing it, and ask for it in a portable form. Where we rely on your consent for something, you can withdraw it at any time.

Ask by writing to bookings@bucks.com.hr. In practice, for almost everyone, the whole of "the personal data we hold about you" is the email thread you started.

If you think we have handled your data badly, please tell us first — it is usually a misunderstanding we can fix in a day. You also have the right to complain to the Croatian supervisory authority, AZOP (Agencija za zaštitu osobnih podataka), Zagreb.

Changes to this page

If what we do changes, this page changes with it, and the date at the top is updated. There is no archive of earlier versions; the current page is the one that applies.