This Privacy & Cookie Policy explains how OPG ŽELJKO LAPTALO (data controller) processes personal data of visitors and users of laptalo-agro.hr and which technologies are used.

1. Data controller

OPG ŽELJKO LAPTALO, OIB: 24040570214, Gromača 56, 20234 Zaton / Orašac, Croatia, email: laptaloagro@gmail.com, phone: +385 99 2183 612.

2. Data we collect

Through website forms we may receive:

name
email address
phone number
preferred date and/or time
number of guests / people
selected service or interest type (e.g. tasting, purchase, visit)
free-text message (which may include dietary wishes or allergy notes if you choose to provide them)

The restaurant form may be sent by email or open WhatsApp with a pre-filled message. In that case communication continues on WhatsApp (Meta Platforms) under their terms.

Technical data (e.g. IP address, browser type) may be processed temporarily via hosting infrastructure and security logs usual for website operation.

3. Purposes

processing inquiries and reservation requests and related communication
organising visits to the konoba, accommodation or estate experiences
responding to product inquiries (e.g. olive oil)
complying with legal obligations where applicable
maintaining website security and functionality

4. Legal bases

steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR) — for inquiries and reservations
legitimate interests (Art. 6(1)(f) GDPR) — for basic site security and responding to general inquiries
legal obligation (Art. 6(1)(c) GDPR) — where the law requires it
consent (Art. 6(1)(a) GDPR) — only where specifically requested (e.g. for non-essential analytics cookies, if activated)

We do not require a separate GDPR consent checkbox for processing inquiry or reservation data.

5. Special category data (allergies / diet)

If you voluntarily include allergy or diet-related health information in a message, we process it only to prepare and deliver the service safely, to the extent you provided it. We do not systematically collect such data via dedicated form fields.

6. Recipients and processing outside forms

email delivery provider (Resend) — to deliver form messages to the owner
WhatsApp — if you choose to send a reservation inquiry via WhatsApp
website hosting / infrastructure
Google Maps — embedded map on location pages (Google may process technical data under its own policies)
external links (e.g. Facebook, Tripadvisor) — if you open them, their policies apply

7. Retention

We keep inquiry and reservation data for as long as needed to handle the request and related communication, then delete or anonymise it within a reasonable period, unless longer retention is required for legal obligations or dispute resolution.

8. Your rights

You have the right of access, rectification, erasure, restriction, data portability (where applicable) and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting lawfulness before withdrawal. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

9. Cookies and similar technologies

Based on the current website implementation:

Necessary / technical: basic site operation, locale routing, remembering your cookie choice (local storage).
Fonts: typography is loaded via the Next.js / Google Fonts mechanism to display the site.
Google Maps embed: location pages load a Google Maps embed; this is a third-party service.
Analytics: code is prepared for Google Analytics (gtag), but the analytics script does not load until an ID is configured and (if active) you consent to analytics.
Marketing cookies: no dedicated marketing pixels are currently used.

You can open Cookie Settings from the footer link. Necessary technologies remain active. Analytics and marketing stay off until you accept them (if available).

10. Changes

We may update this Policy to reflect actual site functionality. The current version is published on this page.