Privacy Policy

Danielis Yachting

Last updated: [23.06.2026.]

This Privacy Policy explains how we collect, use, share and protect your personal data when you visit www.danielis-yachting.com (the "Website"), contact us, or use our yacht charter and related services. We process personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), the Croatian Act on the Implementation of the General Data Protection Regulation (Zakon o provedbi Opće uredbe o zaštiti podataka, NN 42/2018), and the Croatian Electronic Communications Act (Zakon o elektroničkim komunikacijama).

Please read this Policy together with our Cookie Policy, which explains how we use cookies and similar technologies.

1. Who is responsible for your data (Data Controller)

The data controller responsible for your personal data is:

• Legal name: DANIELIS d.o.o.
• Registered address: Grada Chicaga 4, 10000 Zagreb, Croatia
• Company registration number (MBS): 080730317
• Personal Identification Number (OIB): 02751914763
• Email: [email protected]
• Data protection contact: [email protected]
• Telephone: +385 98 273 416

We are not required to appoint a statutory Data Protection Officer (DPO) under Article 37 of the GDPR, and we have not appointed one. This does not reduce our responsibility for protecting your personal data. If you have any question about how we handle your data, or wish to exercise your rights, please contact our data protection contact using the details above.

2. Scope of this Policy

This Policy applies to personal data we process about:

• visitors to our Website;
• people who contact us with enquiries (by web form, email, telephone, WhatsApp, Viber, Skype or social media);
• clients who book or enquire about a yacht charter or any of our services, including crew members and additional guests listed on a booking;
• people who subscribe to our newsletter or marketing;
• people who submit reviews or testimonials.

We act as a charter agency and intermediary. This means that, to fulfil a booking, we pass certain personal data to the charter operator (the boat owner or fleet operator) who provides the vessel. Section 6 explains this in detail.

3. What personal data we collect

3.1 Data you provide to us

• Enquiry and contact data: your name, email address, telephone number, country, and the content of your message.
• Booking data: name, date of birth, nationality, postal address, email, telephone, and information about your sailing experience and licences where relevant.
• Crew and guest data: for crew lists required by charter operators and port or harbour authorities, this may include the name, date of birth, nationality, and identity- or passport-document details of each person on board.
• Payment data: the information needed to process your payment or deposit. Card payments are handled by our payment providers; we do not store full card numbers.
• Reviews and testimonials: your name (or chosen display name) and the content of your review.
• Marketing data: your email address and preferences if you subscribe to our newsletter.
• Correspondence: records of your communications with us across any channel.

3.2 Data collected automatically

When you use the Website, we and our service providers may collect:

• your IP address, approximate location, device and browser type, operating system, and language;
• pages viewed, links clicked, referring website, and the time and date of access;
• information collected through cookies and similar technologies.

We set non-essential cookies (including analytics and marketing cookies) only after you give consent through our cookie banner. See our Cookie Policy for details.

3.3 Data we receive from third parties

• from charter operators in connection with your booking;
• from social media platforms when you interact with our pages or click our links;
• from payment providers confirming the status of a payment.

We do not knowingly process special categories of personal data (such as health data). Please do not send us such data unless strictly necessary, and only after agreeing the appropriate safeguards with us.

4. Why we use your data and our legal basis

We only process your personal data where we have a lawful basis to do so under Article 6 of the GDPR.

Purpose	Legal basis
Responding to your enquiries and providing requested information	Steps prior to entering a contract (Art. 6(1)(b)); our legitimate interest in answering enquiries (Art. 6(1)(f))
Arranging, managing and fulfilling your charter booking	Performance of a contract (Art. 6(1)(b))
Forwarding booking and crew details to the charter operator	Performance of a contract (Art. 6(1)(b)); compliance with maritime / port obligations (Art. 6(1)(c))
Processing payments, deposits and refunds	Performance of a contract (Art. 6(1)(b))
Keeping accounting, tax and invoicing records	Compliance with a legal obligation (Art. 6(1)(c))
Sending newsletters and marketing communications	Your consent (Art. 6(1)(a)); the applicable rules on electronic marketing
Setting analytics and advertising cookies	Your consent (Art. 6(1)(a))
Publishing reviews and testimonials that identify you	Your consent (Art. 6(1)(a))
Securing our Website and preventing fraud and abuse	Our legitimate interests (Art. 6(1)(f))
Establishing, exercising or defending legal claims	Our legitimate interests (Art. 6(1)(f)); legal obligation (Art. 6(1)(c))

Where we rely on consent, you may withdraw it at any time (see Section 9). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, you have the right to object (see Section 9).

If you do not provide data that is necessary for a booking, we may be unable to arrange or fulfil the charter.

5. Reviews and testimonials

If you submit a review, we may publish it on our Website and marketing channels showing your first name and the initial of your surname (for example, “John E.”), the charter date, and your rating and comments. We publish identifiable reviews only with your consent, and you may ask us to remove or anonymise your review at any time using the contact details in Section 10.

6. Who we share your data with (recipients)

We share personal data only as described below, and only to the extent necessary.

• Charter operators and boat owners. To fulfil your booking we pass the necessary client and crew data to the operator who provides the vessel. These operators are generally independent data controllers who process your data under their own privacy terms once it is handed over; we recommend you also review the operator’s privacy information where provided.
• Booking-system provider: NauSys and MMK Booking Manager, which operates the reservation platform used to manage bookings, acting as our processor.
• Website developer and hosting provider: E-start and SETCOR d.o.o., acting as our processor.
• Payment providers: Monri Payments, Apple Pay, Google Pay], who act as controllers or processors as applicable.
• Email, CRM and newsletter providers: Google Workspace, acting as our processors.
• Analytics and advertising providers (only where you consent): Google (Google Analytics and Google Ads) and Meta Platforms (the Facebook Pixel, used for advertising on Facebook and Instagram). These tools are activated only after you give consent through our cookie banner.
• Professional advisers (accountants, lawyers, auditors) where necessary.
• Public authorities, courts or regulators where we are legally required to disclose data, or to establish, exercise or defend legal claims.

We use the Meta (Facebook) Pixel to measure and deliver advertising. When activated, it shares certain information about your activity on the Website with Meta Platforms. The Pixel is set only after you give consent, and you can withdraw your consent at any time. The specific cookies involved are listed in our Cookie Policy.

Where a third party acts as our processor, we have a written data-processing agreement in place as required by Article 28 of the GDPR, obliging them to protect your data and to process it only on our instructions. We do not sell your personal data.

7. International transfers

We are based in Croatia (EU). Some of our recipients may process data outside the European Economic Area (EEA):

• Where we use providers based in or operating from outside the EEA (for example Google and Meta Platforms), data may be transferred to the United States. Such transfers are protected by the EU–U.S. Data Privacy Framework (where the recipient is certified) and/or by Standard Contractual Clauses approved by the European Commission.
• Where you book a charter in a destination outside the EEA (for example Turkey or the British Virgin Islands), the relevant charter operator may receive your data in that country. Where no EU adequacy decision applies, we rely on Standard Contractual Clauses or, where applicable, on the transfer being necessary for the performance of your contract (Art. 49(1)(b) GDPR).

You may request a copy of the relevant safeguards using the contacts in Section 10.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes set out above:

• Enquiries that do not lead to a booking: 60 months from your last contact.
• Booking and contract records: for the duration of the contract and afterwards for the period needed to handle complaints and legal claims up to 11 years, because of bookkeeping rules period under Croatian law.
• Accounting and invoicing records: for the period required by Croatian law 11 years under the Croatian Accounting Act for bookkeeping documents.
• Marketing data: until you withdraw consent or unsubscribe, and a short period afterwards to record your opt-out.
• Reviews and testimonials: until you ask us to remove them.
• Cookie data: for the lifespan stated in our Cookie Policy.

When data is no longer needed, we securely delete or anonymise it.

9. Your rights

Under the GDPR you have the right to:

• access your personal data and receive a copy;
• rectification of inaccurate or incomplete data;
• erasure (“right to be forgotten”) in certain circumstances;
• restriction of processing in certain circumstances;
• data portability – to receive data you provided in a structured, commonly used, machine-readable format, and have it transmitted to another controller where technically feasible;
• objection – to object to processing based on our legitimate interests, and to object at any time to direct marketing;
• withdraw consent at any time where processing is based on consent;
• not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects (we do not carry out such automated decision-making – see Section 12).

We will respond to your request within one month. We may need to verify your identity before acting. Exercising these rights is normally free of charge.

10. How to exercise your rights and how to complain

To exercise any of your rights, or for any question about this Policy, contact us:

• Email: [email protected]
• Post: Grada Chicaga 4, 10000 Zagreb, Croatia
• Telephone: +385 98 273 416

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the Croatian supervisory authority:

Agencija za zaštitu osobnih podataka (AZOP)

Selska cesta 136, HR – 10000 Zagreb, Croatia

Telephone: +385 1 4609 000

Email: [email protected]

Website: www.azop.hr

You may also complain to the supervisory authority in your EU country of residence.

11. Cookies and similar technologies

We use cookies and similar technologies to operate the Website, remember your preferences, measure performance and, where you consent, for analytics and advertising. We set non-essential cookies only after you give consent through our cookie banner, and you can change or withdraw your choices at any time. For full details, see our Cookie Policy.

12. Automated decision-making and profiling

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.

13. Children

Our services and Website are directed at adults. We do not knowingly collect personal data from children under the age of 16 without the consent of a parent or guardian. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These include encrypted (HTTPS/TLS) transmission of data through the Website, access controls, and agreements with our service providers requiring them to maintain appropriate security. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify AZOP and, where required, affected individuals, in accordance with Articles 33 and 34 of the GDPR.

15. Changes to this Policy

We may update this Policy from time to time. The current version is always available on this page, with the “Last updated” date shown at the top. Where changes are significant, we will take reasonable steps to inform you.

This Policy is published in English. Where it is translated into other languages, the English version prevails in the event of any discrepancy.