Privacy Policy

1. General provisions

This Privacy Policy sets out the rules for processing personal data and the use of cookies in connection with the use of the website bluezadar.com.

The Website also uses Google Analytics to prepare statistics and analyses regarding how the Website is used.

The controller of personal data of the Website users is Monika Drążkowska - Blue Zadar, with the correspondence address: ul. Branka Vodnika 5, 23000 Zadar, Croatia.

The Controller can be contacted regarding personal data at the e-mail address: hello@bluezadar.com and by phone at +385 98 951 4000.

By using the Website, the user accepts the terms of this Privacy Policy.

2. Legal basis for data processing

Personal data of users are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and applicable provisions of Polish law, in particular the Personal Data Protection Act and the Act on Rendering Electronic Services.

The Controller processes personal data only to the extent necessary to achieve the purposes indicated in this Privacy Policy and in accordance with the principles laid down in the GDPR, including lawfulness, fairness, transparency, data minimisation and accountability.

3. Scope of processed data

4. Purposes and legal grounds for processing

5. Recipients of personal data

The Controller does not sell users' personal data to third parties.

• OVHcloud (OVH Groupe SA) - hosting and server infrastructure provider where the Website is hosted,
• IT service providers and technical support necessary to maintain the Website, including the WordPress environment,
• Bókun ehf. - Bókun, a Tripadvisor company - the booking platform used to handle online reservations,
• Google Ireland Limited - provider of Google Analytics used to analyse traffic on the Website,
• accounting, legal or advisory service providers supporting the Controller's business,
• local partners and contractors in Croatia, such as boat operators, transport companies and local tour providers, to the extent necessary to perform booked services,
• public authorities, if the obligation to disclose data results from applicable law.

6. Transfers of data outside the European Economic Area

As a rule, personal data are processed within the European Economic Area, including on servers of the hosting provider OVHcloud.

Due to the use of the Bókun booking system and Google Analytics, users' data may in some cases be transferred to third countries, in particular to the United States.

Where data are transferred outside the EEA, the Controller ensures that appropriate safeguards required by the GDPR are in place, including standard contractual clauses approved by the European Commission or other appropriate legal instruments.

Detailed information about the safeguards used for data transfers may be provided to the user upon request.

7. Data retention periods

Data processed for the purpose of responding to enquiries are stored for the period necessary to conduct the correspondence, and afterwards for the limitation period of any claims arising from such correspondence.

Data processed in connection with the conclusion and performance of a contract are stored for the duration of the contract and for the period required by law, in particular tax and accounting regulations.

Data processed on the basis of consent are stored until the consent is withdrawn, unless a longer retention period is required by law.

Data used for analytics and statistical purposes may be stored in an anonymised form, without possibility of identifying an individual, for a longer period.

8. Rights of data subjects

To exercise these rights, the user may contact the Controller at hello@bluezadar.com.

• right of access,
• right to rectification,
• right to erasure,
• right to restriction of processing,
• right to data portability,
• right to object,
• right to withdraw consent at any time,
• right to lodge a complaint with the President of the Personal Data Protection Office in Poland.

9. Voluntary provision of data

Providing personal data is generally voluntary, but may be necessary to use certain services offered by the Controller, for example to receive an offer, make a booking or obtain a reply to an enquiry.

Failure to provide required data may prevent the Controller from providing some services or from responding to the user's request.

10. Cookies and Google Analytics

The Website uses cookies, which are small text files stored on the user's device, in order to ensure proper functioning of the Website, adapt it to user preferences and compile anonymous statistics of visits.

Detailed rules regarding cookies and consent management are also described in a separate Cookie Policy available on the Website.

Users can manage cookies through their web browser settings, including blocking cookies or deleting previously stored files. Restricting the use of cookies may affect some functionalities of the Website.

11. Server logs

Using the Website involves sending queries to the server on which the Website is hosted.

Each query is recorded in server logs and includes, among other things, the user's IP address, server date and time, information about the browser and operating system.

Data stored in server logs are used solely for technical, administrative and security purposes as well as for preparing aggregated statistics, and are not associated with specific users, unless this is necessary for the establishment, exercise or defence of claims.

12. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy, in particular in case of development of the Website, implementation of new functionalities or changes in applicable law.

Users may be informed of significant changes by means of an appropriate notice on the Website.

The current version of the Privacy Policy is always available at bluezadar.com under the Privacy Policy section.