Privacy policy.

Dubrovnik Boat Adventure respects your privacy. This policy explains what personal data we collect when you enquire, book or browse, why we process it, and the rights you hold over it.

1. Who we are

The data controller responsible for your personal data is:

2. Data we collect

We only collect what we need to answer an enquiry and run your booking. In practice that means:

• Enquiry form data, when you use a form on this site you may enter your name, email address, phone or WhatsApp number, preferred date, group size, the service you are interested in and a free-text message. This data is used solely to prepare and send you a tailored offer.
• Direct-contact data, if you contact us by WhatsApp, phone or email, we receive the number or address you contact us from and the content of your message. WhatsApp is operated by Meta and has its own privacy policy.
• Booking details, trip or boat selected, dates, pickup location, and any preferences or special requests (for example dietary notes for catering, or that a guest is a nervous swimmer). Share only what you are comfortable with; we never ask for more than the trip needs.
• Payment details, deposits are paid by bank transfer or a secure payment link. Payments are processed by our bank or payment provider; we never see or store full card numbers on our systems.
• Your cookie choice, a single entry in your browser’s local storage (bd-cookie-consent) remembering whether you accepted or declined analytics cookies, so we do not ask you again on every page.
• Technical & analytics data, only if you consent via the cookie banner: IP address, device and browser type, pages viewed and how you arrived at the site, collected through Google Analytics and Google Ads conversion measurement (see section 6). If you decline, no analytics or advertising data is collected.

3. How we use your data

• To respond to your enquiry and prepare a tailored offer.
• To confirm, manage and deliver your booking, including coordinating crew, transfers and any add-ons.
• To take payment and issue receipts or invoices.
• To contact you about your trip, for example, weather changes or boarding details.
• To meet our legal, accounting and tax obligations.
• To improve our website and understand how it is used.

4. Legal basis for processing

We process your data under one or more of the following legal bases set out in Article 6 GDPR:

• Performance of a contract, to deliver the booking you request.
• Legitimate interests, to respond to enquiries and run our business safely and efficiently.
• Consent, for non-essential cookies and any optional marketing, which you may withdraw at any time.
• Legal obligation, to keep accounting records required by Croatian law.

5. Sharing & processors

We never sell your personal data. We share it only with trusted parties who help us deliver your trip, and only to the extent needed:

• Our crew, skippers, drivers and local guides assigned to your booking.
• Payment and banking providers that process your transaction.
• Our booking, reservation and channel-management platform (Booking Manager).
• Where you book through a partner marketplace (such as Tripadvisor, GetYourGuide or Viator), the booking data they pass to us.
• Hosting and email providers acting on our instructions.
• Authorities or professional advisers where we are legally required to do so.

Third-party services embedded in this website. Some content loads from a third party: the route maps on our transfer pages load map images from Esri’s ArcGIS Online service (server.arcgisonline.com) when the map is shown. Your browser requests these images directly from Esri, which discloses your IP address and the map area requested to Esri. The map cannot be shown without these requests, so they do not wait for your cookie choice, and no cookies are set for them. Google Analytics and Google Ads conversion measurement run only after you select “Accept all” in the cookie banner (see section 6). Links to WhatsApp, Tripadvisor and Google Maps take you to those services under their own privacy policies.

Some providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Cookies, consent & analytics

This website takes a consent-first approach:

• Essential storage. The only thing stored without consent is your cookie choice itself (a local-storage entry named bd-cookie-consent), it holds nothing beyond “accepted” or “declined”.
• Analytics, off by default. We use Google Consent Mode v2 with every category (analytics, advertising, personalisation) set to denied until you choose otherwise in the cookie banner. If you decline, no analytics cookies are set and no measurement data is sent.
• If you accept, analytics collects anonymised usage statistics, pages visited, approximate location (city level), device type and how you found us, used solely to understand which pages and routes guests find useful.
• Google Ads conversion measurement. If you select “Accept all”, the Google Ads tag also loads. It sets advertising cookies (such as _gcl_au) and tells Google when a visit that came from one of our Google ads leads to an enquiry or contact, so we can see which ads work. With the same consent, Google may also use the visit to show our ads to people who have been on our site (remarketing). If you choose “Essential only”, the tag does not load.
• Changing your mind. Clear this site’s data in your browser (or use your browser’s cookie controls) and the banner will ask again on your next visit. Details of each cookie are listed in our Cookie Policy.

7. How long we keep your data

Enquiries that do not become bookings are kept for up to 24 months so we can pick up the conversation if you come back, then deleted. Booking and payment records are kept for the period required by Croatian accounting and tax law, after which they are securely deleted or anonymised. Your cookie choice stays in your browser until you clear it.

8. Your rights

Under the GDPR you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, contact us using the details below. We respond within one month.

9. Contact & complaints

For any privacy question or request, email info@boat-dubrovnik.com or write to Dubrovnik Boat Adventure, Bogišićeva Tiha 26, 20210 Cavtat, Croatia.

If you believe we have not handled your data properly, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.