PLIVA RENTALS
Privacy
Responsible operator & contact
These notes describe the public Pliva Rentals website. The contact responsible for handling your data is Mato Kustura, Meše Selimovića bb, Jezero, Bosnia and Herzegovina. For questions about your data, its storage or deletion, contact [email protected].
Website delivery
The website and its availability endpoints are delivered through Cloudflare Pages. Requests transmit technically necessary connection and request data, such as your IP address, requested address and browser information, to the hosting service. This also happens without analytics consent. Photos, video and fonts are served through the website. The analytics URL cleaning described below does not apply to normal HTTP requests to the hosting service.
Your analytics choice
Google Analytics 4 loads only after you choose “Accept analytics”. Without valid consent, or after “Reject”, our analytics integration does not load the Google tag, send GA4 requests or set GA cookies. It does not send cookieless analytics pings before consent. You can use the website and prepare an enquiry without analytics.
Storing your choice
Your choice, its version, the time of your choice and its expiry date are stored for six months in your browser’s localStorage under pliva:consent:v1. The choice applies across page loads and DE/EN switching on the same website origin. Other domains or Preview addresses have separate browser storage. If storage is unavailable, the choice remains only in the current page window. After expiry, you are asked to choose again.
Analytics after consent
After consent, your browser loads the Google tag from googletagmanager.com and sends analytics data to Google. We use GA4 to understand page views and sources of visits statistically. Our integration sends the page title, a cleaned page address and, where available, cleaned campaign and referrer information. Google also processes technical browser/device information and cookie identifiers to measure visitors and sessions, using network connections to Google. The integration can create the cookies _ga and _ga_Q42TR0DKW6. Google Signals and advertising personalization signals are disabled in our integration; advertising storage, advertising user data and advertising personalization are not granted. After consent, we also measure opening availability, date selection, available or blocked results, starting enquiry preparation and clicks on email, WhatsApp or Viber. We send only the event type, optional apartment name and calendar status, and cleaned campaign context. These events contain no travel dates, guest count, names, contact details, messages, documents or enquiry references. A click or start is not a submitted enquiry or booking. Production and test traffic are separated by hostname and an environment label.
Cleaned referrer and campaign information
The explicitly transmitted page address contains only the current origin and an approved public path, with no query parameters or URL fragments. Only after consent, utm_source, utm_medium, utm_campaign and utm_content are read as campaign fields from the then-current URL. Short campaign identifiers using letters, numbers, underscores and hyphens are accepted; invalid, duplicate, overlong and obviously personal-data-like values are rejected. Email addresses, phone numbers and full URLs are not intended for these fields. For a valid external HTTP/HTTPS referrer, only its origin (scheme, host and any port) is sent, without a path, query, fragment or credentials. Internal referrals are not presented as external sources. We do not store the original arrival information before consent; navigating internally before accepting can therefore lose the original campaign information. Only after consent, the four cleaned campaign fields are retained under pliva:campaign:v1 in the same browser tab’s sessionStorage. They expire after 30 minutes without another page load or when the tab closes, and are deleted on rejection. This preserves campaigns across internal navigation and language switching. Campaign fields are not appended to contact links.
Changing or withdrawing your choice
You can reject analytics at any time through “Cookie Settings” in the footer. Rejection is saved, further collection by our integration is disabled and the two GA cookies it uses are deleted. If the Google tag was already running, the page reloads so it no longer runs in that page window. Withdrawal stops future collection; it does not retrospectively delete data already transmitted. Contact us with questions about data already sent.
Availability & enquiries
Calendar endpoints return only sanitized blocked-date ranges. Guest names, booking titles, reservation identifiers and private calendar addresses are not exposed to the browser. The website does not import personal Airbnb or Booking.com guest data from those ranges. An enquiry can include the apartment or group enquiry, arrival and departure, nights, guest count, optional fishing participants and days, price summary, communication channel and, optionally, your name and reply contact. A locally generated enquiry reference and public enquiry context are added to the message. These entries are processed in your browser into a message, not stored by this form in a server-side reservation database or sent to GA4 as enquiry content. This does not automatically confirm a booking.
Email, WhatsApp and Viber
General contact links open your email service, WhatsApp or Viber directly. For a prepared enquiry, email opens a draft with a subject and message; WhatsApp receives the message in a prefilled link. For Viber, clicking copies the same message to your clipboard and opens the chat so you can paste and send it. If copying fails, you can copy the visible message yourself. You decide whether to send it in the chosen service. Opening an external link can already transmit connection data and prefilled content to that service. Pliva Rentals does not control these platforms; their privacy terms also apply. “Copy email” writes only our public email address to your clipboard. External apps must be configured on your device; the confirmed Viber number remains visible. A server-sent contact form is not currently available.
Google Maps, social links & sharing
The contact page embeds Google Maps for the guest parking area. The map is lazy-loaded but is not controlled by the analytics choice. When it loads, your browser connects to Google and may transmit your IP address, browser information and referrer information available in your browser. Rejecting analytics does not block this map. Social-media links are ordinary external links, not embedded feeds. “Share this page” opens your device’s sharing feature or copies the cleaned page link, removing its query and fragment. Your choice in the sharing dialog determines the recipient.
Other functions
A public livestream and current weather data are not active at present. The public website does not process identity documents or offer online payments. Automated OTA email processing, AI guest assistance and automated message sending are not active website features.
Internal test mode
Owners and testers can intentionally enable internal test mode in Cookie Settings. Only after analytics consent, the marker on is saved under pliva:internal-test:v1 in this tab’s sessionStorage. It persists across page and language changes in this tab and is removed on rejection or switching it off. It normally ends when the tab is closed; browsers can restore tabs and their sessions. On our two production domains, subsequent events are marked production_internal, otherwise production_external. Other domains are always marked development_preview. The marker contains no identity, location or language and does not change past data.
Provider information: Google · Google Analytics · Cloudflare