Last updated: July 2026
1. Data controller
Sebastian Hendel
Ulica hrvatskih gradova 3, 23232 Nin, Croatia
E-mail: contact@panorama.holiday
2. General information
We process personal data only to the extent necessary to provide this website and to handle your enquiry or booking, or where you have given your consent. This website uses no analytics or tracking services and no advertising cookies. Fonts and map software are served from our own server.
3. Hosting and server log files
This website is hosted by ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. When the website is accessed, the server automatically processes technical access data (IP address, date and time of access, page requested, browser type). This data is required for secure and stable operation; the legal basis is Art. 6(1)(f) GDPR. Log files are deleted after seven days at the latest. A data processing agreement (Art. 28 GDPR) is in place with the hosting provider.
4. Contact form
If you use our contact form, we process the data you provide (name, e-mail address, requested travel dates, number of guests, message) solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract).
To deliver form enquiries to our mailbox we use the e-mail delivery service Resend (Resend, Inc., USA) as a processor. In doing so, the form data is transmitted to Resend; the transfer to the USA is based on the EU standard contractual clauses (Art. 46 GDPR).
We delete enquiries once they have been dealt with conclusively and no statutory retention obligations (for example in the case of completed bookings) stand in the way.
5. Guest area (login cookie)
After a successful login, the password-protected guest area sets a cookie named guest_session (signed, httpOnly, valid for 30 days). Its sole purpose is to keep you logged in, and it contains no profile data. As a strictly necessary cookie, it does not require consent (Section 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG); the processing is based on Art. 6(1)(b) GDPR.
6. OpenStreetMap map (two-click solution)
The map on the location page is only loaded once you click “Load map”. Only then are map tiles retrieved from OpenStreetMap (OpenStreetMap Foundation, United Kingdom), transmitting your IP address there. An adequacy decision of the European Commission is in place for the United Kingdom. The legal basis is your consent (Art. 6(1)(a) GDPR); you can withdraw it with effect for the future by reloading the page and not activating the map again.
7. Smoobu availability calendar (two-click solution)
The availability calendar on the prices page is only loaded once you click “Load availability calendar”. Only then is content from Smoobu (Smoobu GmbH, Berlin, Germany) embedded, transmitting your IP address to Smoobu. The legal basis is your consent (Art. 6(1)(a) GDPR); withdrawal works as described in section 6.
8. Booking and guest registration (eVisitor)
When you make a booking, we process the data required to perform the contract (Art. 6(1)(b) GDPR). Under Croatian tourism law, we are obliged to register all guests upon arrival via the official eVisitor system of the Croatian National Tourist Board; for this purpose, the data from your identity document is collected (Art. 6(1)(c) GDPR in conjunction with the Croatian guest registration regulations).
9. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on Art. 6(1)(f) GDPR (Art. 21). You may withdraw any consent you have given at any time with effect for the future (Art. 7(3) GDPR). To do so, simply contact contact@panorama.holiday.
10. Right to lodge a complaint
You have the right to lodge a complaint with a data protection supervisory authority — for example with the authority at your place of residence or with the German state authority responsible for us.