Last updated: 28.05.2026.
1. Introduction
This Privacy Policy explains how Kayak & SUP Rent Baška Voda (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit kayaksupbaskavoda.com or book a tour with us. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Croatian data protection law.
Data Controller:
Biston d.o.o.
Obala Sv. Nikole 81, 21320 Baška Voda, Croatia
OIB: 84584672097
Email: biston.zpto@gmail.com
Phone / WhatsApp: +385 98 813 148
2. What Information We Collect
Information you provide. When you complete our booking form, we collect your full name, email address, phone number, booking details (tour, date, number of guests), and any additional information you choose to share in the message field.
Information collected automatically. When you visit our website, certain data is collected automatically: your IP address, browser type and version, device information, pages visited and time spent, and the website that referred you.
3. How We Use Your Information
We use your personal data to process and confirm your tour booking, communicate with you about your booking via WhatsApp, email or phone, respond to your inquiries, improve our website and services, protect our website from spam and abuse, and comply with our legal obligations.
4. Legal Basis for Processing
We process your personal data based on contract performance (to process your booking), your consent (for analytics cookies), and our legitimate interest (to secure our website and improve our services).
5. Third-Party Services
We use the following third-party services that may process your data:
Google Analytics 4 — to understand how visitors use our website. It collects data such as your (anonymized) IP address, pages visited, and session duration. This helps us improve the site. See Google’s Privacy Policy at policies.google.com/privacy.
Google reCAPTCHA — to protect our booking form from spam and automated abuse. reCAPTCHA collects hardware and software information and behavioral data to distinguish humans from bots. Use is subject to Google’s Privacy Policy and Terms of Service.
Google Search Console — to monitor our website’s performance in search results. It does not collect personal data from website visitors.
These services may transfer data outside the EU, to the United States. Google adheres to the EU-U.S. Data Privacy Framework and applies Standard Contractual Clauses to ensure an adequate level of protection.
Hosting. Our website is hosted by Globalhost d.o.o., which processes data on our behalf as a data processor.
6. Cookies
Our website uses cookies. For detailed information, please see our Cookie Policy below.
7. Data Retention
We retain your booking data for as long as necessary to provide our services and to comply with legal obligations — typically 5 years for accounting purposes. Analytics data is retained according to our Google Analytics settings (14 months).
8. Your Rights
Under the GDPR, you have the right to access your personal data, correct inaccurate data, request deletion, restrict or object to processing, data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP — azop.hr). To exercise any of these rights, contact us at biston.zpto@gmail.com.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.
10. Children’s Privacy
Our website and services are not directed at children under 16. We do not knowingly collect data from children. Bookings involving minors must be made by a parent or guardian.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the updated date shown above.
12. Contact
For any questions about this Privacy Policy or your personal data: Email: biston.zpto@gmail.com · Phone / WhatsApp: +385 98 813 148
COOKIE POLICY
Last updated: 27.05.2026.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website function properly, remember your preferences, and provide insight into how the site is used.
How We Use Cookies
We use cookies to remember your language preference, analyze website traffic and usage, and protect our forms from spam.
Types of Cookies We Use
Necessary cookies are required for the website to function, including the language-preference cookies set by WPML. Analytics cookies help us understand how visitors interact with our website (Google Analytics) and are only set with your consent. Security cookies are set by Google reCAPTCHA to protect our booking form from spam and abuse.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
_icl_current_language | WPML | Stores selected language | Session | Necessary |
wpml_browser_redirect_test | WPML | Tests browser redirect by language | Session | Necessary |
_ga | Google Analytics | Distinguishes unique users | 2 years | Analytics |
_ga_<container-id> | Google Analytics | Persists session state | 2 years | Analytics |
_gid | Google Analytics | Distinguishes users | 24 hours | Analytics |
_GRECAPTCHA | Google reCAPTCHA | Spam/bot protection | 6 months | Security |
Managing Cookies
You can manage or withdraw your consent at any time through the cookie settings on our website. You can also control cookies through your browser settings (Chrome, Firefox, Edge). Please note that disabling certain cookies may affect website functionality.
Contact
Questions about our use of cookies? Contact biston.zpto@gmail.com.