Privacy Policy.

Dubrovnik Boat Adventure respects your privacy. This policy explains what personal data we collect when you enquire, book or browse, why we process it, and the rights you hold over it.

1. Who we are

The data controller responsible for your personal data is:

2. Data we collect

We only collect what we need to answer an enquiry and run your booking. In practice that means:

• Enquiry form data — when you use a form on this site you may enter your name, email address, phone or WhatsApp number, preferred date, group size, the service you are interested in and a free-text message. This data is used solely to prepare and send you a tailored offer.
• Direct-contact data — if you contact us by WhatsApp, phone or email, we receive the number or address you contact us from and the content of your message. WhatsApp is operated by Meta and has its own privacy policy.
• Booking details — trip or boat selected, dates, pickup location, and any preferences or special requests (for example dietary notes for catering, or that a guest is a nervous swimmer). Share only what you are comfortable with; we never ask for more than the trip needs.
• Payment details — deposits are paid by bank transfer or a secure payment link. Payments are processed by our bank or payment provider; we never see or store full card numbers on our systems.
• Your cookie choice — a single entry in your browser’s local storage (bd-cookie-consent) remembering whether you accepted or declined analytics cookies, so we do not ask you again on every page.
• Technical & analytics data — only if you consent via the cookie banner: IP address, device and browser type, pages viewed and how you arrived at the site, collected through analytics (see section 6). If you decline, no analytics data is collected.

3. How we use your data

• To respond to your enquiry and prepare a tailored offer.
• To confirm, manage and deliver your booking, including coordinating crew, transfers and any add-ons.
• To take payment and issue receipts or invoices.
• To contact you about your trip, for example, weather changes or boarding details.
• To meet our legal, accounting and tax obligations.
• To improve our website and understand how it is used.

4. Legal basis for processing

We process your data under one or more of the following legal bases set out in Article 6 GDPR:

• Performance of a contract, to deliver the booking you request.
• Legitimate interests, to respond to enquiries and run our business safely and efficiently.
• Consent, for non-essential cookies and any optional marketing, which you may withdraw at any time.
• Legal obligation, to keep accounting records required by Croatian law.

5. Sharing & processors

We never sell your personal data. We share it only with trusted parties who help us deliver your trip, and only to the extent needed:

• Our crew, skippers, drivers and local guides assigned to your booking.
• Payment and banking providers that process your transaction.
• Our booking, reservation and channel-management platform (Booking Manager).
• Where you book through a partner marketplace (such as Tripadvisor, GetYourGuide or Viator), the booking data they pass to us.
• Hosting and email providers acting on our instructions.
• Authorities or professional advisers where we are legally required to do so.

Third-party services embedded in this website. Some content loads from third parties when a page renders: web fonts from Google Fonts and a number of photographs served from Google-hosted storage. Your browser requests these files directly from Google, which technically discloses your IP address to Google. Analytics runs only after you consent via the cookie banner. Links to WhatsApp, TripAdvisor and Google Maps take you to those services under their own privacy policies.

Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Cookies, consent & analytics

This website takes a consent-first approach:

• Essential storage. The only thing stored without consent is your cookie choice itself (a local-storage entry named bd-cookie-consent) — it holds nothing beyond “accepted” or “declined”.
• Analytics — off by default. We use Google Consent Mode v2 with every category (analytics, advertising, personalisation) set to denied until you choose otherwise in the cookie banner. If you decline, no analytics cookies are set and no measurement data is sent.
• If you accept, analytics collects anonymised usage statistics — pages visited, approximate location (city level), device type and how you found us — used solely to understand which pages and routes guests find useful. We do not run advertising cookies or remarketing.
• Changing your mind. Clear this site’s data in your browser (or use your browser’s cookie controls) and the banner will ask again on your next visit. Details of each cookie are listed in our Cookie Policy.

7. How long we keep your data

Enquiries that do not become bookings are kept for up to 24 months so we can pick up the conversation if you come back, then deleted. Booking and payment records are kept for the period required by Croatian accounting and tax law, after which they are securely deleted or anonymised. Your cookie choice stays in your browser until you clear it.

8. Your rights

Under the GDPR you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact us using the details below, we respond within one month.

9. Contact & complaints

For any privacy question or request, email info@boat-dubrovnik.com or write to Dubrovnik Boat Adventure, Bogišićeva Tiha 26, 20210 Cavtat, Croatia.

If you believe we have not handled your data properly, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.