Privacy and cookies

We respect your privacy. We only collect the data we need to answer your enquiry, handle your booking and keep this website secure. We do not sell your data or use it for advertising.

Controller

The controllers of your personal data are the hosts of Villa LEA and Villa EVA named in the Terms and conditions. For questions or to exercise your rights, write to lea.villamarezige@gmail.com or eva.villamarezige@gmail.com.

What data we process

• Enquiries through the form: name, e-mail, phone (optional), message and preferred dates. Purpose: to answer your enquiry (steps before a contract). Kept for 24 months.
• Bookings: guest details, dates and payment. Purpose: to carry out the booking and to meet legal obligations (guest registration, tourist tax, accounting). Kept as long as the law requires.
• Security logs: IP address, browser and time of visit. Purpose: to protect the website from abuse (legitimate interest). Kept for 90 days.
• Visitor statistics (Google Analytics): only if you accept them in the cookie banner.

Cookies

• Necessary: your cookie choice is stored in your browser for 12 months. Cloudflare may set security cookies (for example __cf_bm) that tell people apart from bots.
• Statistics (only with your consent): Google Analytics sets the cookies _ga and _ga_*, valid for up to 400 days (about 13 months). Advertising features are switched off.
• Booking window: when you open it, the Bentral system loads and may use cookies needed to complete the booking.

You can withdraw your consent at any time in the footer (Cookie settings); the Google Analytics cookies are then deleted.

Processors

• Neoserv (web hosting, Slovenia)
• Cloudflare (security and speed)
• Bentral (booking system)
• Google (Analytics and e-mail)

Google and Cloudflare may also process data in the USA under the EU-US Data Privacy Framework.

For bookings made through Booking.com or Airbnb, the privacy policies of those platforms also apply.

Your rights

You have the right to access, correct, delete and port your data, to restrict processing, to object and to withdraw consent. We reply within 30 days. You can lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si.

Valid from 1 November 2026.