Privacy & cookies
Updated 10 September 2026
Who looks after your data
Apartments Curto (Fam. Curto), Centener 29, 52210 Rovinj, Croatia, is responsible for the personal data used to handle your enquiry and operate this website. For privacy requests, email fam.curto@gmail.com.
Your enquiry
We use your name, email address, requested dates, number of guests, apartment preference and message to answer your request and take steps towards a booking at your request (GDPR Article 6(1)(b)). Analytics consent is not required to contact us. Please do not include sensitive personal information in your message. Enquiries that do not result in a booking are deleted from our active mailboxes within 30 days of our last correspondence. Booking records are handled separately for the reservation and applicable legal obligations.
Optional website analytics
Only after you accept, Google Analytics 4 helps us understand visits, traffic sources, page language, device/browser information and engagement. We measure enquiries accepted by our mail server, the requested arrival month and year, stay length, and clicks on email and telephone links. A link click is an indication of interest; an enquiry is not a confirmed booking. We use these statistics only to improve our website and understand demand for our apartments. For website analytics, we do not send your name, email address, telephone number or message to Google. Analytics uses pseudonymous browser identifiers; it is not anonymous. Google receives technical connection data when Analytics loads.
Your choice and cookies
Analytics is off until you accept, and declining does not affect the website or enquiry form. You can change your choice at any time using Cookie settings. Withdrawing consent stops further measurement, removes this site's Analytics cookies and reloads the page; it does not undo processing already carried out with your consent. We remember your choice on this browser for up to 180 days in local storage (curto-consent-v1). If accepted, first-party _ga and _ga_* cookies distinguish browsers and sessions, with a configured lifetime of up to 180 days. Clearing browser storage may ask you to choose again. No advertising cookies are requested by this setup.
Service providers and storage
Aruba provides website hosting and outgoing mail services; our enquiry mailboxes use Gmail. These providers process the data needed to deliver those services, including technical and security records. Optional analytics is provided by Google Ireland Limited, with processing that can also take place outside the EEA, including in the United States, under Google's applicable data-transfer safeguards. See Google's privacy and partner-site information below. Analytics event and user data is kept for up to 14 months for seasonal analysis, separately from the 30-day enquiry period. Aggregated reports may remain available for longer. After consent, a temporary receipt in session storage (curto-enquiry-receipts) prevents counting an enquiry twice. It is removed on withdrawal or when the browser tab session ends.
Your rights
You can request access, correction, deletion, restriction or portability of your personal data, and object where applicable. You can withdraw optional Analytics consent at any time. Contact fam.curto@gmail.com to exercise your rights. You may also complain to the Croatian supervisory authority, AZOP (azop.hr), or your local data protection authority.
External links
Google Maps and other external links open services with their own privacy terms. Our map and apartment photos are served locally; opening an external link is your choice.
Google privacy policy
How Google uses data from partner sites