Privacy Policy

Last updated · 7 September 2026

Who handles your information

Villa BlueWave and this website are operated by Blue Wave d.o.o., the data controller for information submitted through the enquiry form.

Blue Wave d.o.o.
Bračka 15
21000 Split
Croatia
OIB: 54336941737
Email: info@bluewave.eu.com

This is the operator’s business correspondence address, not the villa location. For questions about your information or this notice, contact info@bluewave.eu.com.

The information you share

The enquiry form collects your arrival and departure dates, number of guests, name and email address. You may also provide a telephone or WhatsApp number and a message. The privacy checkbox records your confirmation that you have read this notice and agree to being contacted about your enquiry. Please avoid including sensitive personal information in your message.

How we use it

We use your details to check availability, respond to your questions and discuss a possible stay. Processing information necessary to respond to your booking request is a step taken at your request before entering a contract under Article 6(1)(b) of the GDPR. The required fields allow us to provide a tailored response; your telephone number and message are optional. Your enquiry is not a confirmed booking, and the form does not take payments.

The privacy checkbox does not subscribe you to marketing. Responding to your requested booking enquiry relies on the pre-contractual basis described above. You can ask us to stop following up on an enquiry at any time by emailing us. Where we rely on consent for any optional communication, you may withdraw it without affecting earlier lawful processing.

Sending and handling your enquiry

Enquiries are sent to the authorised Villa BlueWave team at info@bluewave.eu.com. Website hosting and email providers process the information needed to operate the service. The website is hosted through Sites using Cloudflare infrastructure. Gandi provides the existing Villa BlueWave mailbox and handles the sending and receipt of enquiry emails. Information about Gandi’s handling of personal data is available in its Privacy Policy. The website does not maintain a separate database of enquiry submissions.

If you choose WhatsApp, you leave this website and communicate through WhatsApp under its own privacy terms. Details you enter in this form are not automatically passed to WhatsApp.

Hosting and email services may process technical or enquiry data outside the European Economic Area. Where applicable, providers use safeguards described in their privacy terms. Gandi’s policy is linked above; Cloudflare describes its international processing in its Privacy Policy. Contact us for information about the safeguards applicable to your enquiry.

Website security and external links

Technical information such as your IP address and request information is processed to deliver and protect the website. The enquiry endpoint uses your IP address for a temporary request counter to limit automated or excessive submissions. This serves our legitimate interest in keeping the website secure under Article 6(1)(f) GDPR. The counter applies a ten-minute window; expired entries are cleared on a later request or when the server instance ends. A temporary hashed submission identifier also helps prevent duplicate enquiries for up to ten minutes within a server instance; it does not store the enquiry text. Our application does not log the content of enquiries.

We have not added advertising cookies, analytics trackers or marketing pixels to this website. Technical hosting or security services may use information needed to operate the site. Google Maps and WhatsApp are external links, and their services handle your connection under their own privacy terms when you choose to open them.

Keeping your information

Enquiry correspondence is kept for as long as needed to respond and follow up on your request, taking account of the stay dates discussed, whether the enquiry is still open and whether an unresolved issue needs the correspondence. If you book a stay, relevant correspondence may become part of your booking records and be kept for the applicable contractual or legal requirements. You can contact us to ask about retention or request deletion of your enquiry.

Email delivery records and received emails are handled separately by Gandi. Its handling of personal data is described in its Privacy Policy. The website does not make automated booking decisions or profile visitors from their enquiries.

Your rights

You may request access to, correction or deletion of your information, restriction of processing, and portability where applicable. You may also object to processing where that right applies. Contact info@bluewave.eu.com to make a request. You may lodge a complaint with Croatia’s data protection authority, AZOP.