Privacy Policy

1. Introduction

THEATRE HOTEL d.o.o. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make a booking at our hotel.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Full name
• Email address
• Phone number
• Passport number (for identification and legal requirements)
• Billing and payment information
• Room preferences and special requests
• Date of birth (if provided)

2.2 Technical Information

We automatically collect certain technical information:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website addresses

3. How We Use Your Information

We use your information for the following purposes:

• Processing and managing your bookings and reservations
• Providing customer service and support
• Sending booking confirmations and important updates
• Processing payments securely
• Complying with legal and regulatory requirements
• Improving our website and services
• Sending marketing communications (with your consent)
• Preventing fraud and ensuring security

4. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Your payment information is encrypted using SSL technology.

We store your data on secure servers located in Croatia and the European Union, in compliance with GDPR regulations.

5. Sharing Your Information

We may share your information with:

• Service Providers: Payment processors, email service providers, and booking platforms
• Legal Authorities: When required by law or to protect our rights
• Business Partners: With your consent, for special offers or packages

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. You can control cookie preferences through your browser settings.

We use:

• Essential Cookies: Required for website functionality
• Analytics Cookies: To understand how visitors use our website
• Marketing Cookies: For personalized advertising (with your consent)

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us at info@theatrehoteldoo.com

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Booking records are typically retained for 7 years for accounting and legal purposes.

9. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Transfers

Your information may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure appropriate safeguards are in place to protect your information in accordance with GDPR requirements.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. Supervisory Authority

If you have concerns about our data processing practices, you have the right to lodge a complaint with the Croatian Data Protection Authority (Agencija za zaštitu osobnih podataka) or your local supervisory authority.