This Privacy Policy explains how Boat Rental Croatia (“we”, “us”, “our”) collects, uses, stores and protects the personal data of users of our services, visitors to our website, individuals who send us enquiries, and guests who book a boat rental or excursion.
We are committed to protecting privacy and to processing personal data in accordance with the General Data Protection Regulation (GDPR), applicable legislation of the Republic of Croatia, and other applicable regulations.
1. Data Controller
The controller of personal data is:
Tomislav Mijić
Premier putovanja d.o.o.
Brand: Boat Rental Croatia
Address: Ulica Nikole Tesle 14
VAT ID (OIB): 90146473667
E-mail: info@boatrentalcroatia.com
Phone: +385 98 355 899
For any questions regarding the processing and protection of personal data, you may contact us using the details above.
2. What Data We Collect
Depending on the method of communication and the service used, we may process:
- first and last name
- phone number
- e-mail address
- data required to make and organise a booking
- date and time of the booking
- number of persons and information related to the selected service
- place of embarkation and disembarkation
- details of communication and enquiries
- payment and transaction data, where required
- data you voluntarily provide to us via WhatsApp, e-mail, the web form, telephone, or a booking platform
- technical data related to the use of the website, such as IP address, device and browser type, and data collected through cookies and similar technologies, where applicable
We do not request more personal data than is necessary for a given purpose.
3. Purposes for Which We Use Data
We may use personal data for the purposes of:
- responding to enquiries
- preparing and sending offers
- booking and organising a boat rental or excursion
- communication before, during and after the provision of the service
- arranging the skipper, place of embarkation, route and other elements of the booking
- invoicing, issuing receipts and meeting accounting and legal obligations
- customer support
- managing relationships with existing and prospective clients through a CRM system
- preventing misuse and protecting our legal interests
- analysing website usage and improving our services
- marketing and advertising, where an appropriate legal basis for such processing exists
4. Legal Basis for Processing
We process personal data where processing is necessary:
For the performance of a contract, or to take steps prior to entering into a contract – for example, when you request an offer or book a boat.
To comply with legal obligations – for example, in relation to accounting and tax documentation.
On the basis of our legitimate interest – where necessary for the effective running of our business, security, customer support, protection of legal claims, or certain forms of business communication, while respecting your rights and interests.
On the basis of consent – where consent is required, for example for certain marketing activities or non-essential cookies. You may withdraw your consent at any time.
5. CRM and Enquiry Management
We may record the data of prospective and existing clients in a CRM system in order to manage enquiries, offers, bookings and communication.
The CRM may contain data such as name, contact details, date of enquiry, requested service, quoted price, booking status and the history of business communication.
The data is used exclusively for business purposes and is accessible only to those persons who need it to carry out their work.
6. WhatsApp, E-mail and Other Communication Platforms
When you contact us via WhatsApp, e-mail, social networks or other communication services, we process the data you provide in order to respond to your enquiry and provide the requested service.
Such platforms may separately process certain data in accordance with their own privacy policies.
7. Booking Platforms and Partners
If you make a booking or enquiry through an external booking platform, a tourism partner or another intermediary, we may receive the personal data necessary to process the enquiry and complete the booking.
External service providers may have their own terms of use and privacy policies and may act as separate controllers for certain processing activities.
8. Cookies and Analytics
Our website may use cookies and similar technologies necessary for the website to function properly.
With your consent, where such consent is required, we may also use analytical or marketing technologies to measure traffic, understand how the website is used, and measure and improve the effectiveness of advertising.
More detailed information about the cookies we use should be available through the cookie settings on the website.
9. Advertising
We may use advertising platforms to promote our services. If the website uses marketing cookies, pixels or other tracking technologies, these are activated in accordance with the applicable rules on consent.
Data obtained through advertising platforms may be used to measure campaign results, build audiences and display more relevant ads, depending on your settings and the consent you have given.
10. Who We May Share Data With
Where necessary, we may make personal data available to trusted service providers who assist us in running our business, for example providers of:
- hosting and IT services
- CRM systems
- booking systems
- accounting services
- payment services
- communication services
- analytics and digital advertising
We grant service providers access only to the data required to perform their function, subject to appropriate contractual and security measures where these are prescribed.
We may disclose data to the competent authorities where we are required to do so by law.
11. Transfers of Data Outside the EEA
Some providers of digital, communication, CRM, analytics or marketing services may process data outside the European Economic Area.
Where applicable, such transfers are carried out using an appropriate legal mechanism and the safeguards provided for by the GDPR.
12. How Long We Keep Data
We keep personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by legal obligations.
Data relating to invoices, transactions and other business documentation is retained for the periods prescribed by law.
Data relating to enquiries and business communication is kept for a reasonable period necessary for communication, business operations and the protection of any legal claims, after which it is deleted or anonymised once there is no longer a justified purpose for retaining it.
13. Security of Personal Data
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or misuse.
Access to personal data is limited to those persons who require it in order to perform their work duties.
14. Your Rights
In accordance with the GDPR, and depending on the circumstances, you may have the right to:
- request access to your personal data
- request the rectification of inaccurate or incomplete data
- request the erasure of personal data
- request the restriction of processing
- object to certain processing activities
- request data portability
- withdraw your consent at any time where processing is based on consent
To exercise your rights, you may contact us using the details set out in this Privacy Policy.
You also have the right to lodge a complaint with the competent data protection authority.
15. Minors
Our services are booked by adults. We process data concerning children, where required for the organisation and safety of an excursion, only to the extent necessary to provide the service and to communicate with the parent, guardian or person responsible for the booking.
16. Changes to This Privacy Policy
We may amend this Privacy Policy from time to time to reflect changes in our business, technology or applicable regulations.
The current version will be published on our website.
Last updated: 27 July 2026
