Privacy Policy.

We respect the privacy of our guests, enquirers, and everyone who visits this website, and process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation) and applicable Croatian law.

The data controller is Revenger tours d.o.o., Šegedinova 12, 21000 Split, Croatia (OIB: 31088397830), trading as "Croatia Boat Tours" (hereinafter "we", "us"), reachable at croatiaboattours@gmail.com or +385 95 392 3476.

Given our size and the nature of our processing, we have not appointed a Data Protection Officer. The contact above handles all data protection queries directly.

When you submit an enquiry or booking form: your first and last name, email address, phone number, and any details you choose to include about your trip (dates, group size, special requests).

When you book through our embedded booking widget: the same details, plus payment information, which is entered directly into and processed by our booking and payment partners — we do not receive or store your card details ourselves.

When you browse the site and have accepted analytics cookies: your IP address, approximate location, device and browser type, and how you interact with the pages, collected via Google Analytics. See our Cookie Policy for the full detail on cookies and how to opt out.

During tours and private events: photos and videos our crew takes aboard. General group shots may be shared on our Instagram and the Gallery page on this website to promote the business; if a photo singles out you or your child individually, we'll ask for your consent before publishing it. The same applies to photos from the optional photographer add-on for private events.

To respond to enquiries and arrange bookings — necessary for the performance of a contract with you, or to take steps at your request before entering into one.

To communicate with you before, during and after your trip about logistics, changes, or your booking — necessary for the performance of that contract.

To understand how visitors use the website and improve it — based on your consent, given via the cookie banner, and only once you've accepted analytics cookies.

For general group photos and videos from tours — where no individual is singled out — we don't need separate consent to share them for promotion. If we take or want to publish a photo that features you or your child individually and identifiably, we'll ask first; that use is based on your (or, for a child, your guardian's) consent, which you can withdraw at any time by asking us to take it down.

Providing your name, email and phone number is required to process a booking or enquiry; without it, we cannot fulfil your request.

Enquiry and booking data is kept for as long as needed to fulfil your booking and handle any related correspondence afterwards, and in any case no longer than necessary to meet our accounting and tax obligations under Croatian law.

Analytics data collected by Google Analytics is retained according to Google's own retention settings for this property, currently 14 months, after which it is automatically deleted.

Access to enquiry and booking data is limited to Croatia Boat Tours staff who need it to do their job, and our website and email communications run over encrypted (HTTPS/TLS) connections.

We do not handle or store payment card details ourselves — these are entered directly into our booking partner's and payment processor's own secure systems.

Enquiry forms are delivered to us via EmailJS, our email-delivery provider, purely to route your message into our inbox.

Bookings are handled by our booking partner Bokun, whose widget is embedded directly on this website, together with Stripe, which processes payment inside that same widget.

Website analytics, where you've consented to it, are processed by Google Analytics.

Photos and videos we publish are shared publicly via our Instagram account and the Gallery page on this website.

Some of these providers are based outside the European Economic Area and rely on the European Commission's Standard Contractual Clauses, or an equivalent adequacy mechanism, to safeguard data transferred to them. We do not sell or rent your personal data to anyone, and do not use it for automated decision-making or profiling.

You have the right to access the personal data we hold about you, request that it be corrected or deleted, restrict or object to its processing, and — where processing is based on consent or a contract — request that it be transferred to you or another provider in a portable format.

Where processing is based on your consent (such as analytics cookies), you can withdraw that consent at any time via the "Cookie Preferences" link in the footer, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact us at croatiaboattours@gmail.com. We may ask for information to verify your identity before acting on a request, and will respond within one month, extendable by a further two months for complex requests, in which case we'll let you know.

If you believe our processing of your personal data breaches data protection law, you have the right to lodge a complaint with the Croatian Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, Croatia — azop@azop.hr — www.azop.hr — or with the supervisory authority in your own EU country of residence.

We may update this policy from time to time to reflect changes in what data we collect or how we use it. Material changes will be reflected on this page with an updated date below.

All requests and inquiries about your data, or objections to its processing, should be sent by email to croatiaboattours@gmail.com.

Last updated: August 2026.