Privacy Policy
Last updated: 14 July 2026 · Levantades . Dubrovnik
1. Who we are
“We”, “us”, “Levantades” — Roman, the owner of the sailing yacht Levantades, operating private charters from Rijeka Dubrovnik. For any privacy question you can write to info@levantades.eu
2. What we collect and why
When you reserve a voyage we collect the data you give us in the booking form and at checkout — your name, email address, telephone number, billing address, the date and departure time you have chosen, and the number of guests. Your browser also sends standard technical data (IP address, user agent, referrer, timestamps) which our hosting provider records for security and diagnostic purposes.
We use that data for one purpose: to take your booking, confirm it, communicate with you about the voyage, issue the invoice that Croatian law requires, and — once the day comes — sail with you. We do not profile, score, or sell your data to anyone.
3. Legal basis (GDPR)
The legal basis for processing your booking data is the performance of a contract between you and Levantades (GDPR Art. 6 §1 b). Accounting records are kept under our legal obligation as a Croatian business (GDPR Art. 6 §1 c).
4. Who we share it with
- Our hosting provider — stores the site and the database where the booking is recorded. They process under a written data-processing agreement.
- Our email delivery provider — sends the booking confirmation to you and the notification to Roman.
- Our bank — receives the IBAN transfer when you pay. The bank only sees what any transfer reveals: your name, the amount, and the reference number.
- Croatian tax authority (Porezna uprava) — receives the invoice data we are legally required to file.
We do not use Google Analytics, Facebook pixels, advertising trackers, or any other third-party analytics.
5. How long we keep it
Booking and invoice records are kept for ten (10) years from the end of the year they relate to, in line with Croatian accounting and tax law. After that, records are deleted or anonymised. Email correspondence is kept for up to two (2) years for service-quality purposes.
6. Your rights
Under GDPR you have the right to access the personal data we hold about you, to ask us to correct it if it is wrong, to ask us to erase it where law permits, to restrict how we use it, to receive a copy of it in a structured format, and to object to processing. To exercise any of these rights, write to info@levantades.eu — we will answer within thirty days.
You can also lodge a complaint with the Croatian data-protection authority (Agencija za zaštitu osobnih podataka, AZOP) — azop.hr.
7. Cookies
This site sets only the cookies that WooCommerce needs to keep your cart and checkout working — a session cookie and a few internal flags. These cookies expire when your session ends or after a short period. We do not set advertising or analytics cookies, and we do not load third-party scripts that set them.
8. Changes
If this policy changes we will update the date at the top and, for material changes, post a notice on the site. Material changes will not apply retroactively to bookings already placed under an earlier version.