Note: For final legal validity, we recommend review by an authorised adviser.

Privacy statement

Nikton Development d.o.o. (hereinafter “we”, “us” or “the controller”) respects your privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable legislation of the Republic of Croatia.

This statement explains what data we collect through the website nikton-hospitality.agency, for what purpose, on what legal basis, how long we retain it and what rights you have.

Who is the data controller?

Nikton Development d.o.o.
Rudeška cesta 91
10000 Zagreb
Croatia
OIB: 54172701855
Registration number: 05140412

Email: toni@nikton-hospitality.agency

Nikton Hospitality operates as a specialist hospitality division within Nikton Development d.o.o.. For data protection questions, please contact us at the email address above.

What data we process

Depending on how you interact with the website, we may process:

Contact form data

  • first and last name
  • email address
  • telephone number, if provided
  • hotel name, if provided
  • message content

Hotel audit form data

  • first and last name, hotel name and hotel website address
  • email address and telephone number
  • role at the hotel, location and number of rooms
  • information about the booking engine, budget and existing channels
  • the main challenge described in the form

Technical and analytics data

With your consent to analytics cookies, tools such as Google Analytics 4 and Google Tag Manager may collect website visit data, such as URL, visit time, device type, approximate location at city or regional level, and traffic source. Details about cookies and consent are provided in our Cookie Policy.

Data we do not intentionally collect

We do not request special categories of sensitive data, such as health information, through website forms. Please do not enter such data in free-text fields unless it is genuinely necessary for your enquiry.

Purpose and legal basis of processing

  • Responding to enquiries and communicating - we process contact form data to respond to your message (legal basis: legitimate interest or pre-contractual steps, depending on the context of the enquiry).
  • Preparing a hotel audit - we use audit form data to assess the hotel's digital system and prepare a discussion or proposal (legal basis: pre-contractual steps at your request or legitimate interest).
  • Website analytics - with your consent to analytics cookies (legal basis: consent under Article 6(1)(a) GDPR).
  • Campaign measurement - with your consent to marketing cookies (legal basis: consent).
  • Security and abuse prevention - technical logs and rate limiting for forms (legal basis: legitimate interest).

Where the data comes from

We receive most data directly from you when you complete a form or accept cookies. Technical visit data may be generated automatically by your browser and analytics tools, but only to the extent permitted through your cookie preferences.

Who we share data with

We do not sell or rent personal data to third parties. We may share data only with trusted service providers that help us operate the website and communicate with you:

  • Vercel - website hosting;
  • SendGrid - delivery of form emails to our business inbox;
  • Google - analytics and tag management (GA4, GTM), with your consent to the relevant cookies.

These providers process data on our behalf or as independent controllers under their own policies, always to the extent necessary to provide the service. We enter into appropriate agreements with providers where required by law.

Transfers to third countries

Some service providers, such as Google, Vercel and SendGrid, may process data on servers outside the European Union. In such cases, we rely on appropriate safeguards under the GDPR, such as standard contractual clauses, where applicable.

How long we retain data

  • Contact form enquiries - until the communication is complete, and for no longer than 24 months, unless longer retention is required for legal reasons.
  • Hotel audit requests - until the assessment and any subsequent engagement are complete; if no contract is concluded, for no longer than 36 months so we retain the context of earlier discussions.
  • Analytics data - according to GA4 settings and your cookie consent; generally up to 14 months for certain reports, depending on configuration.

Once the data is no longer needed, we delete or anonymise it.

Data security

We apply reasonable technical and organisational measures to protect data against unauthorised access, loss or misuse. The website is served over HTTPS. Only authorised personnel within the following organisation have access to form data: Nikton Development d.o.o..

Your rights

Under the GDPR, you have the following rights:

  • the right to access your data
  • the right to rectify inaccurate data
  • the right to erasure (“right to be forgotten”), where applicable
  • the right to restrict processing
  • the right to object to processing based on legitimate interest
  • the right to data portability, where applicable
  • the right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal
  • the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Martićeva 14, 10000 Zagreb, azop.hr

To exercise your rights, send a request to toni@nikton-hospitality.agency. We will respond within the period required by the GDPR, usually within 30 days.

Cookies

Cookie use and consent management are described in our Cookie Policy. You can change your preferences using the Manage cookies button in the footer.

Children

Our website is intended for business users in hospitality, not children. We do not knowingly collect data from children under 16.

Changes to this statement

We may update the Privacy Policy from time to time. We will announce significant changes by publishing a new version on this page.

Last updated: July 2026.

Contact

For all questions about privacy and personal data processing:
toni@nikton-hospitality.agency