Last updated: 3 November 2026
This privacy policy explains what personal data Adriatic Frequencies collects when you visit adriaticfrequencies.com, send us a booking request or a message, and how we use and protect it. We follow the EU General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR.
Who we are
The data controller is [Legal name of the business], OIB [OIB], Pod Topol, 51521 Punat, Croatia, trading as Adriatic Frequencies.
Contact for all privacy questions: adriatic.frequencies@gmail.com, phone +385 91 390 4597.
What we collect and why
Booking requests
When you request a tour we collect your name, e-mail address, phone number (optional), your message (optional), the tour, date and departure time you chose, and the time of the request.
We use this to check availability, confirm or decline your request, contact you about the tour (for example if the weather changes) and run the tour. Legal basis: taking steps at your request before entering into a contract and performing that contract (Art. 6(1)(b) GDPR).
Contact form and e-mail
When you write to us we collect your name, e-mail address, phone number (optional) and your message, to answer you. Legal basis: our legitimate interest in replying to enquiries (Art. 6(1)(f) GDPR) or steps before a contract.
Technical data
When you visit the website, our web server automatically processes your IP address, browser type and the pages requested. This is necessary to deliver the website securely, prevent abuse and spam (for example limiting repeated form submissions) and fix errors. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Server logs are kept for no longer than [30] days.
Accounting
If you take a tour, the data needed for invoicing and fiscalisation is kept as required by Croatian tax and accounting law (Art. 6(1)(c) GDPR).
Who receives your data
We do not sell your data and do not use it for advertising. It is only shared with service providers that help us run the business, under data processing terms:
- Our web hosting and e-mail server provider (website, form submissions and outgoing e-mail via mail.adriaticfrequencies.com).
- Google (Gmail), where our inbox receives booking requests and messages. Google may process data outside the EU under the EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
- OpenStreetMap Foundation (UK), which serves the map tiles on our tour pages. When a map loads, your browser requests the tiles directly from OpenStreetMap, which receives your IP address. The UK has an EU adequacy decision.
- Authorities, where we are legally required to share data (for example tax authorities).
How long we keep it
- Booking requests and related e-mails: up to 2 years after the tour date, or after the request if no tour took place, then deleted.
- Contact messages: up to 1 year after our last reply.
- Invoices and accounting records: as long as Croatian law requires (generally 11 years).
Cookies
We use only one cookie, which stores your cookie choice. We use no analytics or advertising cookies. See our Cookie policy.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. Where processing is based on consent, you can withdraw consent at any time. To use any of these rights, write to adriatic.frequencies@gmail.com; we will reply within one month.
You can also complain to the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
Security
The website uses an encrypted connection (HTTPS). Booking data is stored in our website’s database, which only we can access with a password, and it is never shown publicly.
Changes
We may update this policy when our services or the law change. The date at the top shows the latest version.