Privacy Policy – Villa Gehl
Last updated: September 2026
This policy explains which personal data we process when you visit our website, contact us or make a booking.
1. Controller
Dr. Johann Gehl
Villa Gehl
Lopar 164
HR-51281 Lopar, Croatia
Email: gehl@rab-croatia.eu
You can contact us at this address with privacy questions or to exercise your rights.
2. Website visits and hosting
Our website is hosted by STRATO GmbH in Germany. Our webcam is also technically provided through a server at STRATO.
When you access the website, we process in particular your IP address, the pages and files requested, and technical connection information. This may include the date and time, browser information and the previously visited page, if your browser transmits it.
This processing enables us to deliver the website, resolve errors and protect against misuse and attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is the secure and reliable operation of our website.
STRATO states that website visitors’ IP addresses stored to detect and prevent attacks are retained for a maximum of seven days. This information concerns the corresponding processing by STRATO. Information from STRATO
3. Contacting us
If you contact us by email, we process your contact details, the content of your message and any further information you provide.
For enquiries about a booking or stay, this is done to take steps prior to entering into a contract or to perform a contract under Article 6(1)(b) GDPR. We handle other enquiries on the basis of our legitimate interest in answering your message under Article 6(1)(f) GDPR.
Please provide only information that is necessary for your enquiry.
4. Prices, availability and bookings through Lodgify
We use Lodgify to display prices and availability and to process bookings. The provider is Codebay Solutions Limited, Magma House, 16 Davy Court Way, Castle Mound Way, Rugby, Warwickshire, CV23 0UZ, United Kingdom. Lodgify provides a data processing agreement for the processing of guest data. Lodgify: Data Processing Agreement
Your browser connects to Lodgify as soon as you access our prices and availability pages. In particular, your IP address and the technical information needed for the request are transmitted. This allows us to display current accommodation prices and available dates. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is the provision of up-to-date booking information.
When you start a booking, the selected accommodation, travel dates, number of guests and language are passed to the booking area, available at booking.rab-croatia.eu.
During the subsequent booking process, we process the contact and booking details you provide and, where applicable, billing and payment information. This processing serves to arrange the booking, communicate with you and provide your stay. The legal basis is Article 6(1)(b) GDPR.
We cannot process a booking without the information required for it. Optional information is not necessary to enter into a contract.
An adequacy decision of the European Commission applies to transfers to the United Kingdom. European Commission: Adequacy decisions
5. Recipients and retention of enquiry and booking data
Access to your data is granted to people and service providers who need it to handle your enquiry, provide the technical services or process your booking. These include in particular our hosting, communication and booking service providers and, depending on the payment method, the payment service providers involved.
Enquiry data is retained until the matter is resolved. It is stored for longer where the correspondence is needed for a subsequent booking, statutory retention obligations or the establishment, exercise or defence of legal claims.
For bookings, retention depends on the performance of the contract and the applicable statutory retention and limitation periods. Processing required by law is based on Article 6(1)(c) GDPR.
6. Webcam and replay recordings
Our webcam provides a view of the surroundings of Villa Gehl. The camera operates exclusively at times when no guests are present. It is not used to monitor guests.
When the live broadcast is interrupted and during the overnight broadcasting break, previously recorded video sequences may be replayed. These are identified as recordings in the video window.
For this purpose, video sequences of up to approximately 20 minutes are compiled on our server at STRATO. The underlying raw segments are continually cleared; automatic deletion within two hours at the latest is configured for these segments.
The selected replay clips remain stored and publicly accessible until they are replaced. Older clip versions that are no longer used are deleted within 24 hours at the latest.
When you access the video window, your IP address and technical connection data are processed to deliver the video. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is to provide the webcam view you have requested.
7. Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction of processing and data portability.
Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. You may withdraw any consent you have given at any time with effect for the future.
You may lodge a complaint with a data protection supervisory authority, particularly in the place of your residence, work or the alleged infringement. In Croatia, this is the Agencija za zaštitu osobnih podataka – AZOP, accessible at azop.hr. These rights arise from the GDPR.