Data Protection and Privacy Policy

According to the EU General Data Protection Regulation, the enterprise Ugostiteljstvo i trgovina “Rova” (Rova 28, 51511 Malinska, TIN: 09400923251, hereinafter “Rova”) undertakes to protect your personal data. Consequently, we have compiled a Policy on the protection of privacy of our service users, guests and customers (hereinafter “User”). This document is based on the key principals of personal data processing, which are used to regulate the type of User data being collected, the ways of processing such data and the purposes they are used for, as well as to help users familiarize themselves with their rights relating to personal data collection and processing.

In case of any questions regarding data protection, feel free to contact us via e-mail on or in writing to the following address:
Ugostiteljstvo i trgovina “Rova”
Hotel Vila Rova
Rova 28, 51511 Malinska

“Rova” reserves the right to amend and complete this document without giving prior notice to the interested parties, customers and service users.

Type of data we collect and process

We treat personal data with confidentiality and as a business secret. We do not forward the User’s personal identification data to third parties and we maintain secrecy thereof, unless in case of legal obligation or explicit consent provided by the User. The personal data we collect include name and surname, gender, nationality, e-mail address, mailing address, phone and cellphone number, credit or debit card information, guest preferences (type of accommodation unit, special wishes and notes) and, exceptionally, other data (e.g. business address and phone number), should the User freely decide to share them. To ensure safety of the employees and service users, the public areas of the Vila Rova hotel are subject to video surveillance.

Methods of data collection and purposes of data processing

“Rova” collects data shared by the User when submitting e-mail inquiries, booking online and interacting with us via telephone or in person. Collecting such data enables us to communicate with the User regarding booking and during their stay, to ensure quality when providing requested services, to address inquiries and requests in an effective way, as well as to make further inquiries related to the User’s stay. Video surveillance is used for safety purposes. “Rova” does not perform automatic data processing.

Time limit for data retention and processing

The retention of data is limited to a minimum time period in accordance with the legal provisions. “Rova” processes the User’s personal data in the Republic of Croatia. The electronically stored data are deleted in their entirety, whereas the paper data are destroyed by shredding or burning. In exceptional cases, with our faithful customers’ explicit consent, we store data over the period of three years, which enables us to provide a high-level personalized service. The video recordings are deleted automatically every 15 days by means of overwriting and the access to the video surveillance system is granted exclusively to the authorized personnel. The recordings are analyzed by the authorized personal based on a legitimate reason, such as a security threat, or on legal grounds.

Websites and the usage of cookies

Our website uses cookies in order to facilitate browsing. Cookies are small text files which are set on the User’s computer and aimed at improving their browsing experience. Cookies do not identify an individual and are used for analytical and statistic purposes. The User can delete and permanently disable cookies at any moment in the User settings menu on their computer. The information on managing cookies can be found on the pages of the User’s preferred web-browser. All data collected by “Rova” during the User’s booking or visit to the website are protected with a safety protocol (HTTPS).

User/customer rights

The User has the right to request a review of their personal data. Upon request, we will update, correct and delete your data. Please submit your request via e-mail on

Collection of personal data for eVisitor registration