Privacy Policy
Last updated: 20 May 2026
Cavtat Guide (“we”, “us”, or “our”) operates the website cavtatguide.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Site or interact with our services, including yacht charter enquiries, real estate enquiries, restaurant reservations, and experience bookings.
Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Site.
1. Data Controller
The data controller responsible for your personal data is:
Cavtat Guide
Cavtat, Dubrovnik-Neretva County, Croatia
Email: info@cavtatguide.com
For data protection enquiries, please contact us at the address above or submit a request via our Data Requests (GDPR) page.
2. Information We Collect
a) Information You Provide Directly
When you use our contact and booking forms (powered by Forminator), we may collect:
- Full name
- Email address
- Phone number
- Travel dates and preferences
- Number of guests
- Property or yacht enquiry details
- Any other information you choose to provide in a message field
This applies to our yacht charter enquiry form, property enquiry form, restaurant reservation form, and experiences booking form.
b) Information Collected Automatically
When you visit the Site, we may automatically collect:
- IP address and approximate geographic location
- Browser type and version
- Operating system
- Pages viewed and time spent on each page
- Referring URL
- Date and time of your visit
This information is collected via cookies and analytics tools (see Section 5 below).
c) Cookies
We use cookies to enhance your experience. For full details of the cookies we use and your choices, please see our Cookie Policy.
3. How We Use Your Information
We use the information we collect to:
- Respond to your enquiries and booking requests
- Forward your enquiry to the relevant charter operator, real estate agent, restaurant, or tour provider on your behalf
- Improve our Site content and user experience
- Analyse traffic and usage patterns via Google Analytics
- Comply with our legal obligations under Croatian and EU law
- Send you information about our services if you have opted in to receive communications
We do not sell your personal data to third parties.
4. Legal Basis for Processing (GDPR Article 6)
We process your personal data on the following legal bases:
- Contractual necessity (Art. 6(1)(b)): Processing required to handle your booking or enquiry
- Legitimate interests (Art. 6(1)(f)): To operate and improve the Site, prevent fraud, and maintain security
- Consent (Art. 6(1)(a)): For analytics cookies and marketing communications — you may withdraw consent at any time
- Legal obligation (Art. 6(1)(c)): Where required by applicable law
5. Third-Party Service Providers
We share data with the following trusted third-party processors who process data on our behalf:
- Google Analytics (Google LLC): Website traffic and behaviour analytics. Data may be transferred to the USA under Google’s Standard Contractual Clauses. Google Privacy Policy
- Forminator (WPMU DEV): Form submission processing and data storage. Data is stored on our server. WPMU DEV Privacy Policy
- Cloudflare, Inc.: Content delivery and security. Cloudflare Privacy Policy
- Charter and listing partners: When you submit an enquiry for a yacht, property, restaurant, or experience, your contact details and enquiry information are shared with the relevant operator or agent to fulfil your request.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Enquiry and booking form submissions: retained for up to 2 years from submission date, unless you request earlier deletion
- Analytics data (Google Analytics): retained for 26 months per Google’s default settings
- Cookie consent logs: retained for 12 months
After the applicable retention period, data is securely deleted or anonymised.
7. Your Rights Under GDPR
As a data subject under the EU General Data Protection Regulation (GDPR) and Croatian data protection law, you have the following rights:
- Right of Access (Art. 15): Request a copy of the personal data we hold about you
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data
- Right to Erasure (Art. 17): Request deletion of your personal data (“right to be forgotten”)
- Right to Restriction of Processing (Art. 18): Request that we limit how we use your data
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format
- Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please submit a request via our Data Requests (GDPR) page or contact us at info@cavtatguide.com. We will respond within 30 days as required by GDPR Article 12.
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) — azop.hr — or your local supervisory authority.
8. International Data Transfers
Some of our service providers (including Google) are based outside the European Economic Area (EEA). Where we transfer data outside the EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) to protect your data to the same standard as within the EEA.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include SSL/TLS encryption (https://), access controls, and regular security monitoring. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Children’s Privacy
Our Site is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.
11. Links to Third-Party Websites
Our Site may contain links to third-party websites (such as charter operators, real estate agencies, and tourism providers). We are not responsible for the privacy practices of these sites and recommend you review their privacy policies before providing any personal data.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. We encourage you to review this policy periodically. Continued use of the Site after changes constitutes acceptance of the revised policy.
13. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:
Cavtat Guide
Email: info@cavtatguide.com
Data Requests: Submit a Data Request