Legal
Privacy Policy
This document explains what data we collect when you send us an inquiry, why we process it, how long we keep it and what rights you have.
Last updated: September 2026.
1. Data controller
The controller of personal data is:
Controller
PULA BOATS, obrt za turizam i promidžbu, vl. Anton Jelaš
Registered address
Selec 1C, 10291 Brdovec, Hrvatska
OIB (tax number)
23118735630
Phone
Pula Sailing School is the name under which the programmes described on this website are provided.
For questions about the processing of personal data, write to info@pulaboats.com.
2. What data we collect
When you send an inquiry through the contact form, we may process:
·your name
·your email address
·your phone / WhatsApp number
·the programme you selected
·your preferred date
·the number of people
·the sailing experience level you stated
·the content of any message you choose to write
·technical data needed for the security and functioning of the form
We do not ask for payment card details through this website.
3. Purposes of processing
We process data in order to:
·answer your inquiry
·check availability
·communicate about the programme
·organise a possible booking
·carry out a confirmed booking
·meet legal obligations
·keep the website secure and prevent misuse
4. Legal bases
For handling an inquiry and preparing a possible booking, data is processed in order to take steps at your request before a contract is potentially concluded.
Once a booking is confirmed, the data needed to organise the programme is processed in order to perform that agreement.
Certain data may be processed in order to meet legal obligations.
Technical data needed to protect the website may be processed on the basis of the legitimate interest in information system security and in preventing misuse.
5. The contact form
Data sent through the form is used for communication about your inquiry, your booking or the programme.
Sending the form is not a booking confirmation.
Data from the form is not used for newsletters or marketing messages without a separate, appropriate legal basis.
6. Recipients of data
To the extent necessary, personal data may be available to:
·our web hosting provider
·our email service provider
·people maintaining the website, where access is required
·accounting or other professional service providers, where required
·competent public authorities, where there is a legal obligation
Personal data is not sold to third parties.
7. International transfers
If a technical service provider processes personal data outside the European Economic Area, the transfer is carried out only with an appropriate legal mechanism for data protection in place.
8. Retention periods
Data from an inquiry that does not result in a booking is kept for no longer than 12 months from the last communication, unless there is a justified reason for a shorter or longer period.
If an inquiry results in a booking and the service is provided, the data needed to deliver the service, to issue an invoice or to meet other legal obligations is kept for the period prescribed by applicable regulations.
Technical data needed only to protect the form is kept for as long as that security purpose requires.
10. Security
We apply reasonable technical and organisational measures to protect personal data.
The contact form uses measures such as:
·CSRF protection
·data validation
·rate limiting of automated submission attempts
·honeypot protection
·HTTPS transmission when the site is served on the production domain
11. Your rights
Depending on the circumstances and the legal basis of processing, you may request:
·access to your personal data
·correction of inaccurate or incomplete data
·erasure of data
·restriction of processing
·data portability, where the conditions are met
·objection to processing based on legitimate interest
To exercise these rights, contact info@pulaboats.com.
We may ask for information needed to reasonably verify the identity of the person making the request.
12. Complaint to the supervisory authority
If you believe your personal data is being processed contrary to the regulations, you may lodge a complaint with the Croatian Personal Data Protection Agency — AZOP.
You are welcome to contact us first at info@pulaboats.com so we can try to resolve the matter directly.
13. Participants under 18
The programmes are intended for people aged 16 and over.
Participation by anyone under 18 requires the consent of a parent or legal guardian.
We process the data of participants under 18 only to the extent needed to organise the programme and to keep participants safe.
14. External links
The website may contain links to external services, for example WhatsApp.
Clicking such a link takes you to a third-party service, and any further processing of data is governed by the rules of that service.
15. Changes to this Policy
This Privacy Policy may be updated because of changes to the website, to the business or to legislation.
The current version is always available on this page.