Privacy Policy
Last updated: 29 June 2026.
This is the plain-language version of how we handle your personal data at Mikrofarma Mrvica. If you book a visit or write to us, here is exactly what happens with your information.
Who looks after your data
Hrvoje Bota, founder of Održivo d.o.o. (OIB 86160669260) in Split, Croatia, the umbrella company that runs Mikrofarma Mrvica, decides how your data is used. Questions: [email protected].
What we collect
Only what we need to plan your visit. When you send a booking inquiry, that is your name, email, phone (optional), party size, preferred date, any dietary needs or allergies, and any notes you add. If you opt into analytics, we also collect basic, anonymous usage data (see our Cookie Policy).
Why we use it, and our legal basis
- To arrange your visit (confirm the date, party size, get back to you). Basis: taking steps at your request / our agreement.
- Dietary needs and allergies, only to keep you safe and cook for you properly. This can be health information, so we use it only with your clear consent and only for your visit.
- Analytics, only if you opt in. Basis: your consent, which you can withdraw any time.
- Invoices and payment records. Basis: our legal and accounting obligations.
Who sees it
The Mrvica team. We do not sell your data. A few trusted providers help us run things and only process what they need:
- Cloudflare, which hosts the website and routes your inquiry to our email inbox.
- Google, which holds that email inbox (where your inquiry lands) and, only if you opt in, Google Analytics. Google Fonts loads the typefaces but does not receive your booking details.
- The booking calendar library, which loads in your browser and does not receive your booking details.
- PayPal, if you pay a deposit, handles that payment on its own terms.
Some of these providers (Cloudflare, Google, PayPal) are based outside the EU, so your data may be processed outside the EU. When that happens, it is under GDPR-approved safeguards (Standard Contractual Clauses or the EU-US Data Privacy Framework).
How long we keep it
We keep booking inquiries only until your visit, then delete them shortly after (within about 30 days). Invoices and payment records we keep as long as the law requires us to. Analytics data follows the retention set in Google Analytics.
Your rights
You can ask us to show you your data, fix it, delete it, limit how we use it, hand it over, or object to a use. You can also withdraw consent any time. Just email [email protected] and we will sort it out. If you are not happy with how we handle it, you can complain to the Croatian Data Protection Agency (AZOP).
Children
Visits are arranged by adults and the site is not aimed at children. We do not knowingly collect children's data.
Keeping it safe
The site runs over a secure (https) connection, access to inquiries is limited to the people who need it, and we use reputable providers.
Cookies
For how cookies work here and how to control them, see our Cookie Policy. You can change your choice any time with Manage cookies.
Changes
If we update this policy, we will change the date at the top. Questions any time: [email protected].