Privacy policy

With this Privacy Notice, Koventia (operating the platform Green Stay Croatia, hereinafter referred to as "we", "us", or "our") commits to protecting the privacy of users, customers, hosts, and visitors to our website, as well as ensuring the security of all personal data provided to us.

This notice describes the types of information we may collect from you when you visit our website, explains how we process and use that data, and outlines the technical and organizational measures we take to protect it.

1. Data Controller

The Data Controller responsible for your personal data collected through this website is:

Company: Koventia 

Address: Ulica braće Radić 20, 42230 Ludbreg, Croatia

Contact Email for Privacy & Data Protection: info@greenstaycroatia.com

2. What Personal Data We Collect and How We Use It

In general, you can visit our website without disclosing personal data about yourself. We do not collect personal information about you (such as your name, contact details, or location) unless you voluntarily submit this data using one of the available interactive forms on our platform (such as our contact form, property listing application form, newsletter sign-up, or inquiry forms).

By submitting your data, you give explicit consent for its processing for the specific purpose requested. All personal data is used solely for the purpose for which it was submitted:

Contact & Inquiry Forms: To process, answer, and forward guest inquiries directly to property hosts, or to respond to general requests.

Host Application & Registration Forms: To evaluate, onboard, and manage listing partnerships and B2B services with accommodation providers.

Newsletter Subscriptions: To deliver updates, articles, and curated travel/sustainability insights (only with explicit opt-in).

Consent for personal data processing can be given by individuals aged 16 and over; individuals under 16 require verifiable parental or guardian consent. Collected data will never be sold, leased, or made available to unauthorized third parties, except where required by applicable laws. All personal data is retained only as long as necessary to fulfill the purpose for which it was collected or to comply with statutory retention requirements, after which it is securely deleted or anonymized.

3. Data Sharing with Authorized Third Parties

Under specific operational circumstances, we share relevant information with third-party processors to fulfill legal and functional obligations:

Google Analytics: Google collects information through our use of Google Analytics to analyze website traffic, user interactions, and performance metrics. Data (including IP addresses and cookies) is shared on an anonymized basis. You can review Google's privacy practices or opt out at any time via the Google Analytics Opt-out Browser Add-on.

Meta Pixel (Facebook Conversion Tracking): Subject to your prior cookie consent, our website utilizes Meta Pixel. This enables us to track visitor activity following ad interactions for statistical analysis and performance measurement. Collected data remains anonymous to us. You can review Meta’s Privacy Policy or adjust your preferences directly via Meta Ad Preferences.

Accounting & Business Operations: We share billing and transaction data with our licensed accounting services and tax authorities to comply with fiscal reporting laws and corporate compliance in Croatia.

4. Automatically Collected Information & Server Logs

When accessing our platform, our servers automatically collect standard technical information in server log files (such as IP address, browser type, operating system, referring/exit pages, and timestamps). This data is processed strictly to maintain technical platform stability, secure infrastructure, prevent unauthorized access, and optimize user navigation.

5. Your Rights Under GDPR

As a data subject, you hold the following rights regarding your personal information at any time:

Right to Access & Information: The right to request confirmation on whether your data is being processed and receive a copy of your personal records.

Right to Rectification: The right to request immediate correction of inaccurate or incomplete personal data.

Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where statutory storage requirements no longer apply.

Right to Restrict Processing & Object: The right to limit or object to the processing of your data under specific legal conditions.

Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.

Right to Withdraw Consent: The right to withdraw your consent for processing at any time without affecting the lawfulness of processing based on consent prior to its withdrawal.

To exercise any of these rights, please contact our Data Protection lead directly at info@greenstaycroatia.com or by physical post to our official address: Koventia, Ulica braće Radić 20, 42230 Ludbreg, Croatia.

6. Data Security

We implement strict technical and organizational security protocols (including SSL encryption, secure socket layer standards, and restricted access roles) to safeguard your personal data against unauthorized processing, unlawful destruction, alteration, or accidental loss. All information transmitted via our platform is encrypted and stored on secure server infrastructure located within the European Union (EU).