
Data protection
Privacy policy
Last updated: 4 November 2026
1. Who processes your data
The controller of your personal data is Mollo Beach Bar, Šibenik, Croatia. For any questions about your data, write to us at info@mollobar.com.
We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Croatian Act on the Implementation of the GDPR.
2. What data we collect
- Table reservation: full name, phone number, date, time, number of guests and a note if you add one.
- Feedback and suggestions: your message and your name if you choose to give it (the name is optional).
- Email enquiries: your email address and the content of the message you send us.
- Technical data: for security and to keep the website running, the hosting provider automatically records basic visit data such as IP address, browser type and time of access.
We do not collect special categories of data and never ask for more data than necessary.
3. Purpose and legal basis
- Processing and confirming your reservation and contacting you about it — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Replying to email enquiries, business partnership and group enquiries — your request and our legitimate interest (Art. 6(1)(b) and (f) GDPR).
- Improving our service based on your feedback — legitimate interest (Art. 6(1)(f) GDPR).
- Security and operation of the website — legitimate interest (Art. 6(1)(f) GDPR).
We do not use your data for marketing, we do not sell it, and we do not carry out automated decision-making or profiling.
4. Who has access to your data
Only our staff handling reservations and enquiries have access to your data. To run the website we use trusted hosting, data storage and email providers, who process data solely on our instructions and under appropriate data processing agreements.
Some of these providers may process data outside the European Economic Area. In that case the transfer is based on appropriate safeguards, such as the European Commission’s standard contractual clauses.
Links to Instagram and Google Maps lead to external websites. When you open them, the privacy policies of those services apply.
5. How long we keep your data
We keep reservation and feedback data only as long as necessary for the purpose it was collected for, and then delete it. We keep email correspondence for as long as the conversation lasts or as long as legal obligations require.
6. Your rights
You have the right at any time to:
- request access to your data and a copy of it,
- request correction of inaccurate data,
- request erasure of your data (“right to be forgotten”),
- request restriction of processing,
- object to processing based on legitimate interest,
- request data portability.
Send your request to info@mollobar.com. We will reply within one month at the latest.
If you believe your rights have been violated, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, azop.hr.
8. Changes
We may update this policy from time to time. The current version is always published on this page, with the date of the last change at the top.
This translation is provided for your convenience; the Croatian version is the binding one.