Who we are
IZY BOAT, Trg kneza Višeslava 8, 23000 Zadar, Croatia. Email: izyboatcroatia@gmail.com. Phone and WhatsApp: +385 91 910 3009. We are responsible for the personal data described on this page.
What we collect and why
- Booking requests: your name, the date, the number of people, the boat or trip, your contact (WhatsApp number or email) and your language. We use them to answer you, check availability and confirm the booking. Legal basis: steps taken at your request before a contract (Article 6(1)(b) GDPR).
- Bookings and payments: for a confirmed booking we keep what the booking and the invoice need. Card payments are handled by the payment provider named in the payment link; we do not see your card number. Legal basis: the contract and our legal obligations (Article 6(1)(b) and (c) GDPR).
- WhatsApp: if you write to us on WhatsApp, the conversation goes through WhatsApp (Meta). We use your messages only for your request and booking. WhatsApp’s own privacy policy applies to the app.
- Website chat: your messages are sent to our AI provider, Anthropic, which writes the answer. If you give your name, date, number of people and contact in the chat, we save them as a booking request and Paulo gets a notification. The conversation itself is not saved in our booking system. Please do not share sensitive information in the chat. Legal basis: Article 6(1)(b) GDPR for booking requests, and our legitimate interest in answering questions (Article 6(1)(f) GDPR).
- Technical data: when you open the website, our hosting provider Cloudflare processes technical data such as your IP address, browser and the page you request, to deliver the website and protect it from abuse. Legal basis: legitimate interest (Article 6(1)(f) GDPR).
- Language choice: the website remembers your language in your browser’s local storage. It is not sent to us. We do not use advertising or tracking cookies.
Who processes data for us
- Cloudflare: hosting, security, our booking database and email forwarding.
- Anthropic: the website chat.
- WhatsApp (Meta): if you contact us on WhatsApp.
- Google: our email (Gmail).
- The payment provider named in the payment link, when you pay.
Some of these companies are based in the USA. Transfers rely on the EU–US Data Privacy Framework where the company is certified, or on the European Commission’s standard contractual clauses.
How long we keep it
Booking requests that do not become a booking are deleted at the latest 12 months after the requested date. Confirmed bookings are kept as long as the booking needs, and invoices and accounting records as long as Croatian law requires.
Your rights
You can ask for access to your data, its correction or deletion, restriction of processing and a copy in a portable format, and you can object to processing based on legitimate interest. Write to izyboatcroatia@gmail.com. You can also complain to the Croatian Personal Data Protection Agency (AZOP, azop.hr).
Changes
When something changes, we update this page. The date at the top shows the current version.
