The controller responsible for data processing on this website is:
Ante Milic, Mainzer Straße 14, 70499 Stuttgart, Germany. Email: info@trogir-insider.com.
You have the right to access, rectify, erase and restrict the processing of your personal data, the right to data portability, and the right to object. You may also lodge a complaint with a data protection supervisory authority. To exercise any of these rights, contact us using the address above.
This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit the site, Vercel automatically processes technical information in server log files that your browser transmits — such as the IP address, browser type, operating system, the referring page and the time of the request. This is necessary to deliver the website securely and reliably and is based on our legitimate interest (Art. 6(1)(f) GDPR).
This may involve a transfer of data to the USA. Vercel provides a data processing agreement and uses the EU Standard Contractual Clauses as a safeguard for such transfers. For details see Vercel's privacy policy: vercel.com/legal/privacy-policy.
When you first visit the site, a banner asks whether you consent to analytics. We use Google Consent Mode: until you accept, no analytics cookies or identifiers are set and no analytics data is collected — only the technically necessary processing needed to deliver the pages takes place (see hosting above). Your choice is saved locally in your browser (localStorage) so the banner is not shown again; this storage is technically necessary and requires no consent. You can withdraw your consent at any time with effect for the future by clearing this site's data in your browser, which makes the banner appear again.
If you accept, we use Google Analytics 4, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), to understand how the site is used — for example which pages are popular and which booking and tour links are clicked — so we can improve it. Google may then process data such as a randomly generated identifier, the pages you view, link clicks, approximate location and device/browser information. This can involve a transfer of data to Google LLC in the USA, safeguarded by the EU Standard Contractual Clauses. The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). For details see Google's privacy policy: policies.google.com/privacy.
If you contact us by email, the details you provide (your email address and the content of your message) are stored solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual / contractual) or Art. 6(1)(f) GDPR (our legitimate interest in answering enquiries). We delete this data once it is no longer needed and no statutory retention periods apply.
We link to partner services including Booking.com, GetYourGuide and Discover Cars. When you click such a link and leave our site, the partner may set cookies and process data to attribute a booking to us. This processing takes place on the partner's website and is governed by their own privacy policy:
On our community photos page you can voluntarily submit a photo. When you do, we process the image you upload and the details you enter — a first name or nickname, and optionally a location and a short caption — together with the time of submission and your consent. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by ticking the confirmation box and which you can withdraw at any time by asking us to remove your photo (see contact above). Providing a photo is entirely optional.
Uploaded photos are not published automatically: every submission is reviewed by us first and only appears in the public gallery, or on our associated social-media channels, after we approve it. The image is resized in your browser before it is sent, which also removes embedded metadata such as any GPS location.
Submissions are stored by our processor Supabase (Supabase, Inc.) in a data centre in the European Union (Frankfurt, Germany), under a data processing agreement. To protect the form against automated abuse we use Cloudflare Turnstile, a privacy-friendly bot check by Cloudflare, Inc. that works without tracking cookies; to verify your submission it processes technical data such as your IP address and browser information. This can involve a transfer of data to the USA, safeguarded by the EU Standard Contractual Clauses. See Supabase's privacy policy and Cloudflare's privacy policy. We delete photos and the associated details on request, or when they are no longer needed.
The fonts used on this site (Fraunces and Inter) are hosted on our own server. No connection to Google's servers is established and no data is transmitted to Google when loading the fonts.
We may update this policy to reflect changes to the website or the law. Last updated: 4 July 2026.