Last updated: [09 January 2026]

Privacy Policy

Tarifa d.o.o. (“we”, “us”, “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Croatian data protection laws.

Company name: Tarifa d.o.o.
Registered address: Francesca Tenchinija 2, 10 090 Zagreb, Croatia]
OIB: 86182522046
Email: info@thelunasailing.com
Website: The Luna Sailing – Experience

Privacy contact: info@thelunasailing.com
(We have not appointed a Data Protection Officer as we are not legally required to do so.)

a) Data you provide directly
  • Name and surname

  • Email address

  • Phone number

  • Booking and inquiry details (dates, number of guests, itinerary preferences)

  • Messages sent via forms, email, or messaging services

  • Invoicing data (if applicable)

b) Booking & operational data
  • Passenger details required for booking or legal compliance

  • Payment status and references (payments processed by third-party providers)

c) Website & technical data
  • IP address

  • Browser and device type

  • Pages visited, date/time of access

  • Cookies and similar technologies

d) Data from third parties

If you book through a platform or agency (e.g. charter or booking platforms), we may receive your contact and booking data from them in order to perform the service.

Note: We do not intentionally process special categories of personal data (GDPR Art. 9), unless strictly required by law and with appropriate safeguards.

 

PurposeLegal Basis
Responding to inquiries and requestsPre-contractual steps (Art. 6(1)(b))
Managing bookings and providing sailing servicesContract performance (Art. 6(1)(b))
Invoicing and accountingLegal obligation (Art. 6(1)(c))
Operational communication (weather, safety, logistics)Contract / Legitimate interest (Art. 6(1)(b), (f))
Website security and performanceLegitimate interest (Art. 6(1)(f))
Marketing communicationsConsent (Art. 6(1)(a))
Analytics and cookiesConsent (Art. 6(1)(a))

We retain personal data only for as long as necessary for the purposes described above, unless a longer retention period is required by law.

Example retention periods:

  • Inquiries without booking: [12 months]

  • Booking and customer communication data: [5 years]

  • Invoices and accounting records: [in accordance with Croatian law]

  • Marketing data: until consent is withdrawn

  • Website logs: [30–90 days]

We may share personal data with trusted third-party service providers only where necessary, including:

  • Website hosting and IT providers

  • Booking and charter management platforms

  • Payment service providers

  • Accounting and legal service providers

All processors act under contractual obligations to protect personal data.

Some service providers may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards, such as Standard Contractual Clauses or adequacy decisions, are in place.

We use cookies to ensure website functionality and, with your consent, to analyze traffic and improve our services.

  • Essential cookies: required for website operation

  • Analytics cookies: used only with consent

  • Marketing cookies: used only with consent

You can manage your cookie preferences at any time via [Cookie Settings].

We will send marketing communications only if you have given explicit consent. You may withdraw your consent at any time by using the unsubscribe link or contacting us at info@thelunasailing.com.

You have the right to:

  • Access your personal data

  • Rectify inaccurate data

  • Request erasure (“right to be forgotten”)

  • Restrict processing

  • Data portability

  • Object to processing

  • Withdraw consent at any time

  • Not be subject to automated decision-making or profiling

To exercise your rights, contact: info@thelunasailing.com

We apply appropriate technical and organizational measures to protect personal data.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with:

Agencija za zaštitu osobnih podataka (AZOP)
Website: https://azop.hr

Our services are intended for adults. We do not knowingly collect personal data from children without parental involvement.

We apply appropriate technical and organizational measures to protect personal data. However, no online transmission or storage method is completely secure.

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

For privacy-related questions, please contact:
📧 info@thelunasailing.com