Privacy Policy


Introductory terms

Mulino d.o.o., respects your privacy and the safety of your personal data. The collection, use and processing of your personal data is carried out in accordance with these Privacy Rules and with the applicable legal provisions.

Please note, that we reserve the right to change the terms and conditions of the Privacy Policy, under which this Site is offered at any time. At every touch point or guest interaction, also by conducting every aspect of our business, we may collect personal data.

This Privacy policy for Mulino d.o.o. shall apply from May 25th, 2018. By using the services and products you entrust us with your data. This Policy describes what data we collect, the ways we process them and the purposes we use them for, as well as your rights associated with your data.

Responsible for data processing

Mulino d.o.o., Škrile 75a, Buje, Croatia, PIN: 75599831396

The Data Protection Officer is available at the e-mail:

If we use the services of external service providers for the processing of your personal data, we are talking about the processing (of personal data) per order. In this case, we are responsible for the protection of your personal data. During the processing of your personal data, we may use service providers outside the EU. We will do so only if for that third country exists a decision of the European Commission on the adequacy of that country, or if we contracted with the service provider appropriate warranties or adherence to binding regulations on the protection of personal data.

"Personal data" means any information collected and logged in a format that allows you to be identified personally, either directly (e.g. name) or indirectly (e.g. telephone number) as a natural person. Before providing us with this information, we recommend that you read this document describing our customer privacy protection policy.

By accessing and using our website (this includes: viewing, transmitting, caching or storing this site, or any of its services, functions, materials or content) this means you have read and agreed to each and all the terms and conditions. If you do not agree with the terms and conditions, you may not use this Site for any further purpose.

Your rights

  1. Right to rectification: If we process your personal data that are incomplete or inaccurate, at any time you can request from us correction or amendment of the data.
  2. Right to erasure: You can request from us erasure of your personal data if we have processed them unlawfully, or if that processing represents a disproportionate infringement in your protected interests. Please take into consideration that there exist reasons that prevent immediate erasure, such as statutory obligations.
  3. Right to the possibility of data transfer: You may request from us to deliver to you in a structured form (in a common machine-readable format) the data that you have entrusted to us for archiving purposes.
  4. Right of access: You can get a confirmation from us on whether your personal data are processed and if such personal data are being processed, you can get access to these data and the following information: information on the purpose of the processing, on the categories of the personal data concerned, on the recipients or categories of recipients to whom personal data are disclosed or will be disclosed, on the estimated period in which personal data will be stored or on the criteria that were used for the determination of that period, on the existence of your rights that are listed in this paragraph of the Policy, on the existence of automated decision making, including drafting profiles and information on the logic of the processing, on the importance and the predicted consequences of processing, on the protective measures if the personal data are transferred to third countries or international organization.
  5. Right to limit processing: From us you can request the restriction of the processing of your data:
    1. if you dispute the accuracy of the data during the period that allows us to verify the accuracy of these data
    2. if the data processing was unlawful, but you refuse erasure and instead request data restriction
    3. if the data are no longer required for the intended purposes, but you still require them to meet legal requirements
    4. if you filed a complaint about the distribution of these data
  6. Right to object: If we distribute your data in order to execute the tasks of public interest or tasks of public authorities or if we refer to our legitimate interests during their processing, you can submit a complaint against such data processing if there is interest of protecting your data.
  7. Right to appeal: If it is your opinion that during the processing of your data we violated Croatian or European regulations on data protection, please contact us in order to clarify any inquiries. You certainly have the right to submit a complaint to the Croatian Personal Dana Protection Agency, or in the event of change of applicable regulations, you may submit a complaint to another body, which will take over its jurisdiction, and from May 25th, 2018 this complaint may be submitted to the supervisory body within the EU as well.
  8. Exercise the right: If you would like to exercise any of the above-mentioned rights, please contact us by using our contact information stated in the introductory provisions of this Policy.
  9. Authentication of identity: In case of doubt, we may require additional information to verify your identity. We do so in order to protect your rights and private sphere.
  10. Abuse of rights: If you use these rights too often and with an evident intent of misuse, we may charge an administrative fee, or refuse to process your request.

The legal basis for the processing of your data

We process personal data based on the following legal grounds:

On the legal basis, processing of personal data is necessary for the execution of the contract, i.e. to finalize and manage your reservation. If the required personal data are not given to us, we cannot finalize the reservation, nor can we provide the services of the customer service.

We rely on our own legitimate business interests in order to provide our services, prevent fraud and improve our services. When using personal data for the purpose of exercising our legitimate interests or the legitimate interests of third parties, we will always prioritize your rights and interests to protect your personal data over our rights and interests or rights and interests of third parties. Sometimes we may contact you through other channels such as email, post, telephone or SMS – the selected modality depends on the contact information you have previously shared with us. Also, we process the messages that you send us. There are several reasons for this:

Answering and processing of any request that you have made. We offer our guests various ways of exchanging data, requests and comments about their offers and existing reservations made through our website and through the booking interface.

When you use our services, you may receive a questionnaire or an invitation to write a review about your experience with us.

Also, we send you other types of materials related to your reservations, such as information on how you can contact us if you need help while you're on the road, and information that we believe you might find useful when planning your stay in order to spend it in the best possible way. We also send you material related to the upcoming travel reservation.

When calling the Customer service team, we use a system of automatic phone number recognition to connect your telephone number.Our Customer service team may require data authentication, which ensures the confidentiality of your reservation data.

In addition, when applicable, we rely on the fulfilment of legal obligations (such as the legitimate requirements of the competent law implementation authorities). When necessary, and on the basis of the applicable law, we will obtain your consent prior to the processing of your personal data for the purposes of direct marketing.

Information for individual categories of data subjects

1. Guests and other users of our services

1.1. Why do we collect and process your personal data?

When processing your personal data we also partly apply automated processing processes, for example: in order to constantly improve our products and services, to make our contact with you more individual, and in order to customize as much as possible our offer and products to your users’ habits. Such processes can be called profiling, and, as such, are mentioned in the following text. In addition, we may process and analyze large amounts of data about our users so that they are processed in an aggregated and anonymous form and cannot be linked to a concrete physical person. We process all kinds of your personal data for the following purposes: