Privacy Policy

1. Personal Data We Collect

We may collect personal data when you contact us, submit an inquiry, request information or make a booking.

Depending on how you interact with us, this may include:

• First and last name
• Email address
• Telephone number
• Information provided in your message or inquiry
• Booking information
• Number of passengers
• Requested tour, date and time
• Pickup information where required
• Payment and transaction information where applicable
• Technical information related to your use of the website

We only request information reasonably necessary to process your inquiry, booking or requested service.

2. How We Collect Personal Data

Personal data may be collected when you:

• Complete a contact or booking form
• Contact us by email
• Contact us by telephone or messaging services such as WhatsApp
• Make a booking
• Communicate with us regarding an existing booking
• Use our website

Certain technical information may also be collected automatically through cookies and similar technologies.

3. Why We Process Your Personal Data

We may process personal data for the following purposes:

• Responding to inquiries
• Processing and managing bookings
• Providing boat tours and related services
• Communicating with you before, during or after your booking
• Organising pickup and operational requirements
• Processing payments where applicable
• Issuing invoices and maintaining accounting records
• Complying with legal obligations
• Protecting our legal rights and preventing fraud
• Improving our website and services
• Analysing website performance where you have consented to analytics cookies

Sea Fun Dubrovnik does not sell or rent your personal data.

4. Legal Basis for Processing

Depending on the circumstances, personal data may be processed on the following legal grounds:

Contractual necessity

Processing may be necessary to provide a service you requested, manage your booking or take steps at your request before entering into a contract.

Legal obligation

Certain information must be processed or retained to comply with Croatian and European Union laws, including accounting and tax requirements.

Legitimate interest

We may process information where necessary for legitimate business purposes, such as responding to inquiries, operating and protecting our business, preventing misuse and improving our services, provided that your rights and interests do not override those interests.

Consent

Where consent is legally required, including certain analytics, marketing or non-essential cookies, processing will take place only after the appropriate consent has been obtained.

Where processing is based on consent, you may withdraw that consent at any time.

5. Data Retention

Personal data is retained only for as long as necessary for the purposes for which it was collected or as required by applicable law.

Accounting documents, invoices and transaction records are retained for the period required under Croatian accounting and tax legislation.

Information relating to inquiries, bookings and customer communication may be retained for a reasonable period where necessary for customer service, business records or the establishment, exercise or defence of legal claims.

Information collected through cookies is retained according to the duration and purpose of the relevant cookie.

When personal data is no longer required, it will be deleted or anonymised where appropriate.

6. Sharing Personal Data

We may share personal data with trusted third parties where necessary to operate our business or provide the requested service.

These may include:

• Website hosting providers
• Booking and reservation systems
• Payment processors
• Accounting providers
• Email and communication providers
• IT and technical service providers
• Analytics providers
• Service providers necessary to fulfil your booking

These providers may process personal data only to the extent necessary to provide their services and must handle the information in accordance with applicable data protection requirements.

Personal data may also be disclosed to courts, law enforcement agencies, tax authorities or other competent public authorities where required by applicable law or a valid legal request.

7. International Data Transfers

Some third-party technology providers may process information outside Croatia or the European Economic Area.

Where personal data is transferred outside the European Economic Area, appropriate safeguards required under applicable data protection legislation will be used where necessary.

8. Your GDPR Rights

Subject to applicable legal requirements, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Request restriction of processing
• Object to certain processing
• Request data portability where applicable
• Withdraw consent where processing is based on consent
• Lodge a complaint with the competent supervisory authority

These rights may be subject to legal limitations. For example, we cannot delete information that we are legally required to retain.

To exercise your rights or ask questions concerning your personal data, contact:

joskoleoni@gmail.com

We may request reasonable information to verify your identity before processing a request concerning personal data.

9. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, misuse or destruction.

Access to personal data is limited to persons and service providers who require access for legitimate business purposes.

No electronic transmission or storage system can guarantee absolute security.

10. Personal Data Breaches

If a personal data breach occurs, Sea Fun Dubrovnik will take appropriate measures in accordance with applicable data protection legislation.

Where legally required, the competent supervisory authority will be notified within the applicable statutory period.

Affected individuals will also be informed where required by law.

11. Marketing Communications

Information submitted through our contact or booking forms will not be used to send unrelated promotional communications unless there is an appropriate legal basis for doing so.

Where consent is required for marketing communications, consent will be requested separately.

You may withdraw marketing consent or unsubscribe from marketing communications at any time.

12. What Are Cookies?

Cookies are small data files stored on your computer, smartphone or other device when you visit a website.

Cookies can perform different functions, including remembering preferences, maintaining essential website functionality and providing information about how visitors interact with a website.

Cookies cannot independently access files stored on your computer.

13. Types of Cookies

Our website may use the following categories of cookies:

Strictly Necessary Cookies

These cookies are necessary for the website to operate correctly. They may be used for security, forms, cookie preferences and other essential website functionality.

Analytics Cookies

Analytics cookies help us understand how visitors use our website. Depending on the analytics services used, information may include pages visited, session duration, device information, approximate location and interactions with the website. Where legally required, analytics cookies will only be activated after you provide consent.

Functional Cookies

These cookies may provide additional website functionality or remember preferences selected by visitors.

Third-Party Cookies

Certain website functionality may depend on third-party services. These services may set cookies or process technical information according to their own privacy policies.

14. Google Analytics

Our website may use Google Analytics to understand website traffic and visitor behaviour.

Depending on the website configuration and your cookie choices, Google Analytics may process information such as:

• Pages visited
• Approximate geographic information
• Device and browser information
• Website interactions
• Referral source
• Session information

Where consent is legally required, Google Analytics will not be activated until you provide consent through our cookie management system.

You can change or withdraw your consent through the cookie settings available on the website.

15. Managing Cookies

When visiting bluecave-dubrovnik.com, you may be presented with a cookie consent tool allowing you to accept or reject non-essential cookies.

You can change your cookie preferences through the cookie settings available on the website.

Cookies may also be managed or deleted through your browser settings.

Blocking certain cookies may affect some website functionality.

16. Third-Party Services

Our website may use or provide links to third-party services, including:

• Google Analytics
• Google Maps
• WhatsApp
• Social media platforms
• Booking systems
• Payment providers
• Other external services required for website or booking functionality

These third parties operate according to their own privacy policies and terms.

Sea Fun Dubrovnik is not responsible for the privacy practices of independent third-party websites or services.

17. Changes to This Policy

We may update this Privacy Policy and Cookie Policy when our services, website, technology or legal obligations change.

The latest version will be published on bluecave-dubrovnik.com with the date of the most recent update.

18. Contact

For questions regarding this Privacy Policy, Cookie Policy or processing of your personal data, contact: