Privacy Policy

Last updated: April 18, 2026

1. Data Controller

Love Stories Museum
Od Tabakarije 2
20000 Dubrovnik, Croatia
Email: lovestoriesmuseum@gmail.com

2. What Data We Collect

We may collect and process the following personal data:

• Ticket purchases: Name, email address, visit date, and payment information (processed securely by our payment provider).
• Contact inquiries: Name and email address when you contact us.
• Website usage data: Anonymized analytics data such as pages visited, browser type, and device information.

3. How We Use Your Data

We use your personal data for the following purposes:

• Processing and delivering your ticket purchases and e-vouchers.
• Responding to your inquiries and providing customer support.
• Improving our website and services.
• Complying with legal obligations.

4. Legal Basis for Processing

We process your personal data based on:

• Contract performance: To fulfill ticket purchases.
• Legitimate interest: To improve our services and website experience.
• Consent: For cookies and marketing communications (where applicable).

5. Cookies

Our website uses cookies to enhance your browsing experience. Cookies are small text files stored on your device.

We use the following types of cookies:

• Essential cookies: Required for the website to function properly (e.g., cookie consent preference stored in localStorage).
• Analytics cookies: Help us understand how visitors interact with our website, using anonymized data.

You can manage your cookie preferences through your browser settings. Disabling cookies may affect the functionality of certain parts of the website.

6. Data Sharing

We do not sell your personal data. We may share your data with:

• Payment processors for secure transaction handling.
• Service providers who assist in operating our website.
• Legal authorities when required by law.

7. Data Retention

We retain your personal data only as long as necessary for the purposes described in this policy, or as required by law. Ticket purchase records are retained for accounting and legal purposes.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Request erasure of your data ("right to be forgotten").
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

To exercise any of these rights, please contact us at lovestoriesmuseum@gmail.com.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

10. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact

If you have any questions about this privacy policy or our data practices, please contact us:

Love Stories Museum
Od Tabakarije 2, 20000 Dubrovnik, Croatia
Email: lovestoriesmuseum@gmail.com