Privacy Policy

Last updated: 2025-11-27

Introduction

Welcome to Barba Booking. Your privacy is extremely important to us. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our accommodation booking platform in Dalmatia.

Data We Collect

When you use our platform, we may collect the following information:

1. Data You Provide
  • Account data: name, surname, email address, phone number
  • Profile data: profile type (guest or landlord), address
  • Booking data: stay dates, number of guests, special requests
  • Accommodation data: apartment information, prices, availability, photos
  • Communication: comments, reviews, messages with hosts
2. Automatically Collected Data
  • Analytics data (Cloudflare Analytics): We use Cloudflare Analytics to collect anonymized data about website usage. This includes number of visits, most visited pages, geographic location (country/city level), device type and browser. Cloudflare does not use cookies and does not track individual users across different websites.
  • Technical data: IP address, browser type, operating system, access time
  • Cookies: we use cookies for basic site functionality (login, language settings, theme)

How We Use Your Data

We use your personal data for the following purposes:

  • Enable bookings and manage your account
  • Connect guests with landlords and process reservations
  • Send booking notifications, confirmations and reminders
  • Provide customer support
  • Improve user experience and platform functionality
  • Analyze website traffic and usage (via Cloudflare Analytics)
  • Prevent fraud and ensure platform security
  • Comply with legal obligations

Data Sharing

We do not sell your data to third parties. We only share it in the following situations:

  • With hosts: when you book accommodation, your contact details (name, email, phone) will be shared with the apartment owner so they can confirm the booking and organize your arrival
  • With guests: if you are a landlord, your contact details will be visible to guests who book your accommodation
  • Service providers:
    • Cloudflare (hosting, CDN and analytics)
    • Email service provider (for sending notifications)
  • Legal requirements: if necessary to comply with law or court orders

Cookies

Our platform uses cookies for the following purposes:

  • Essential cookies: enable login, save language settings and theme (light/dark)
  • Functional cookies: remember your preferences and settings
  • CSRF protection: cookies for security and protection against malicious attacks

Note: Cloudflare Analytics does not use cookies to track users. You can block cookies in your browser settings, but this may affect platform functionality.

Data Protection

We implement the following security measures to protect your data:

  • HTTPS encryption for all communications
  • Secure passwords stored with hash algorithms
  • CSRF and XSS protection against malicious attacks
  • Regular security checks and updates
  • Limited access to personal data only for authorized personnel
  • Secure storage on Cloudflare infrastructure

Your Rights (GDPR)

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right to access: you can request a copy of your personal data
  • Right to rectification: you can correct inaccurate or incomplete data
  • Right to erasure: you can request deletion of your data ("right to be forgotten")
  • Right to restriction: you can restrict how we use your data
  • Right to portability: you can receive your data in a structured format
  • Right to object: you can object to processing of your data

To exercise these rights, contact us at: [email protected]

Data Retention

We retain your personal data for as long as necessary to:

  • Provide our services (while your account is active)
  • Fulfill legal obligations (e.g. accounting data - 7 years)
  • Resolve disputes and enforce agreements

When you close your account, your data will be deleted or anonymized within 30 days.

Cloudflare Analytics

We use Cloudflare Web Analytics - private, anonymized analytics that:

  • Does not use cookies or cross-site tracking
  • Does not collect user personal data
  • Does not share data with third parties for advertising
  • Is GDPR compliant without need for user consent
  • Allows us to understand traffic and user behavior anonymously

More information: Cloudflare Web Analytics Privacy Policy

Children's Privacy

Our platform is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If we learn that we have collected data from a person under 18, we will delete it immediately.

Privacy Policy Changes

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or notification on the platform. Continued use of the platform after changes is considered acceptance of the new terms.

Contact

If you have questions about this Privacy Policy or want to exercise your rights, contact us:

Barba Booking

Email: [email protected]

Web: barbabooking.com