Privacy Policy

We use the following personal data:
Master data: Forename and surname, date of birth, country of birth, nationality, personal
identification number, Tax number
Address and contact information data: city, e-mail address, mobile phone number.
Other data: type of identity document, number of identity document, date of boarding, port of
boarding, name of boat, number of skipper license, number of VHF license, credit card number,
booking number, GPS coordinates of navigation, video surveillance records from our facilities, your IP
address during visiting to our websites, any additional information you provide (e.g. any health issue
or similar).
When you visit our website, certain technical data such as your IP address, browser type and cookie
preferences may be collected automatically to improve functionality and analyse website
performance.

We process your personal data for several reasons. Primarily, it is needed to respond to your request,
confirm your reservation, communicate important details regarding the tour and deliver the service
you have booked. In some cases, processing is required by law, such as when passenger information
must be submitted to local authorities.
We also process certain data to protect our legitimate interests, for example to maintain website
security, improve our service quality or handle inquiries from returning guests and accommodation
partners. When you choose to receive promotional messages from us, this processing is based on
your explicit consent, which you may withdraw at any time.

Your personal data is treated as confidential and is shared only when necessary for the organisation
of your experience or the technical functioning of our services. This may include trusted service
providers such as booking platforms (e.g., Viator or GetYourGuide), payment processors, email
communication tools and website hosting or analytics partners.
On rare occasions, we may be required to share certain data with public authorities if mandated by
law, such as port authorities for passenger lists. Estrales never sells personal data and never shares it
for unrelated marketing purposes.
We apply appropriate technical and organisational measures to keep your data secure and to prevent
unauthorised access, loss or misuse.

We shall keep your personal data and shall not disclose them or make them available to third parties
except in the following cases:
– If you explicitly and in writing agree to disclose certain confidential data for a particular purpose or
to a particular person.
– If the Ministry of the Interior or the competent State Attorney requires the data for the purposes of
carrying out the tasks within their competence.
– If a court, attorneys or a notary public require the data for their proceedings, where the submission
of such data is required in writing.
– If the Tax Administration, the Croatian Pension Insurance Institute, and Croatian Health Insurance
Fund require the data on the basis of the legal obligations that the controller has towards them.
– If we are obliged to submit data to the Ministry of Maritime Affairs, Transport and Infrastructure.
Transfer of data to third countries (countries outside the EU) is performed only if there is a statutory
obligation, if the transfer is necessary for the fulfillment of contractual obligations
or if you have given your explicit consent.

Personal data is stored only for as long as necessary. Inquiry-related information is kept for a limited
period, while booking-related data is retained for the time required by accounting rules and maritime
regulations. If we process your data based on consent for promotional purposes, it will be stored until
you withdraw that consent.

You have the right to request access to your personal data, to ask for corrections of inaccurate
information or to request its deletion when the legal conditions for erasure are met. If processing is
based on your consent, you may withdraw that consent at any time without affecting the legality of
prior processing.
For any questions or requests concerning your personal data, you may contact us at: [email]. You
also have the right to submit a complaint to the Croatian Personal Data Protection Agency (AZOP) if
you believe your data has been processed unlawfully.

Our website uses cookies to ensure full functionality, to analyse performance and to improve user
experience. You may decline non-essential cookies or adjust your browser settings at any time.

From time to time, Estrales may update this Privacy Policy to reflect changes in our services or legal
obligations. The most recent version will always be published on our website.