
Privacy Policy
How we protect and process your personal data
Last updated: January 6, 2026
GDPR Compliant
This privacy policy complies with the European Union's General Data Protection Regulation (GDPR).
1. Introduction
Camp Holiday ("we", "us", "our"), operated by TERMORAD d.o.o., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, process, and protect your personal data when you use our website campholiday.eu and related services.
By using our website and services, you consent to the processing of your personal data as described in this policy.
2. Data Controller
TERMORAD d.o.o.
Dr. Franje Tuđmana 12A
10431 Sveta Nedelja
Croatia
OIB: 48737778965
Privacy Contact:
Email: info@campholiday.eu
3. Data We Collect
3.1 Personal Data
- Full name - for identification and communication
- Email - for booking confirmations and communication
- Phone number - for urgent communication (optional)
- Password - encrypted, for account access
3.2 Booking Data
- Check-in and check-out dates
- Number of guests (adults, children)
- Selected parcel/accommodation
- Additional services
- Special notes or requests
3.3 Technical Data
- IP address (for security)
- Browser and device type
- Language preferences
- Access time and date
4. Legal Basis for Processing (GDPR Art. 6)
Contract Performance (Art. 6.1.b)
Processing personal data necessary for the performance of the booking contract and provision of accommodation services.
Legal Obligation (Art. 6.1.c)
Retention of booking records for tax and accounting purposes as required by Croatian law.
Legitimate Interest (Art. 6.1.f)
Website security, fraud prevention, and service improvement.
Consent (Art. 6.1.a)
Marketing communications and analytics cookies (only with your explicit consent).
5. How We Use Your Data
- 1Processing and managing your bookings
- 2Sending confirmations and important notifications about your stay
- 3Providing customer support
- 4Improving our website and services
- 5Complying with legal obligations
- 6Sending marketing materials (only with your consent)
6. Data Retention Period
| Data Type | Retention Period |
|---|---|
| Account data | Until account deletion |
| Booking records | 7 years (legal requirement) |
| Marketing consents | Until consent withdrawal |
| Technical logs | 90 days |
| Cookies | Up to 1 year |
7. Your Rights (GDPR)
Under the GDPR, you have the following rights regarding your personal data:
Request a copy of your personal data
Correct inaccurate or incomplete data
"Right to be forgotten" - request deletion of data
Receive your data in a machine-readable format
Object to certain types of processing
Withdraw consent at any time
To exercise any of these rights, contact us at info@campholiday.eu. We will respond within 30 days.
8. Cookies
We use cookies to improve your experience on our website. Cookies are small text files stored on your device.
Required for website functionality: user authentication, session security, language preferences.
Examples: auth-token, NEXT_LOCALE
Remember your settings and preferences for an enhanced experience.
Help us understand how you use our website (Google Analytics 4).
You can decline these via the cookie banner.
Google Analytics 4 collects:
- • Pages visited and time spent on them
- • Device and browser type
- • Approximate geographic location (country/city)
- • Interactions (clicks, scrolling)
- • Traffic source (search engine, direct, social media)
Note: IP addresses are anonymized and data is not used to identify individuals.
9. Third Parties and Data Transfers
Your data may be processed by the following trusted service providers:
Supabase
Database and authentication - EU data centers
Vercel
Website hosting - global CDN network
Google Analytics 4
Analytics (only with your consent)
Measurement ID: G-S6ECXJ4VD6 • IP anonymization enabled • EU data centers
Google Privacy PolicyGoogle reCAPTCHA v3
Protection against spam and bots
Used to protect forms (login, registration, contact, booking). Collects behavioral data to distinguish humans from bots.
Google Privacy PolicyAll service providers are bound by Data Processing Agreements (DPA) and comply with GDPR standards.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- SSL/TLS encryption for all data transfers
- Password hashing using secure algorithms
- Regular security audits and updates
- Limited access to personal data
- Row Level Security (RLS) at database level
11. Children's Privacy
Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided personal data, please contact us so we can take appropriate action.
12. Filing a Complaint
If you believe we have violated your data protection rights, you have the right to file a complaint:
Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16
10000 Zagreb
Croatia
Email: azop@azop.hr
Web: azop.hr
13. Changes to Privacy Policy
We may update this Privacy Policy from time to time. The date of the last update is shown at the top of the page. Significant changes will be communicated via website notification or email. We recommend checking this page periodically.
14. Contact Us
For any privacy questions or to exercise your rights, contact us:
Email: info@campholiday.eu
Address: TERMORAD d.o.o., Dr. Franje Tuđmana 12A, 10431 Sveta Nedelja, Croatia




