Privacy Policy

01 Data Controller

The controller of personal data is:

02 What data we may collect

Depending on how you use Boating.hr, we may collect the following data:

• user account data: name, e-mail address, phone number, password (stored only in encrypted form) and profile picture; if you sign in with Google, Facebook or Apple, we receive basic data from that account (name, e-mail, account identifier),
• data about the vessel listings you publish: description, photos, location, prices, deposit, skipper terms and availability calendar,
• messages you exchange with owners or renters through the Platform and your list of saved favourites,
• data needed for ordering and paying for packages: name, e-mail, billing address and, for legal entities, company name and OIB; we do not see or store your card details - you enter them directly with the payment service provider,
• device data and a push notification token, if you enable notifications in the mobile app,
• approximate location or searched locations, when you use maps and the search for marinas and harbours,
• technical data necessary for the operation and security of the system (IP address, browser and device type, error and access logs),
• data on consents and cookie settings.

03 Purposes of processing

We process personal data for the purpose of:

• creating and managing your user account and enabling sign-in,
• publishing and displaying your vessel rental listings and enabling communication between owners and renters,
• responding to your inquiries and providing customer support,
• performing the contract for the purchase of a package, payment, invoicing and refunds,
• sending notifications about messages, enquiries and listing status (by e-mail and push notifications),
• Platform security, preventing fraud and abuse, and fixing errors,
• keeping records of consents and cookie settings,
• traffic analysis, exclusively if you give your consent for it.

04 Legal bases for processing

We process data on the basis of one or more of the following legal bases:

• performance of a contract or taking steps at your request before entering into a contract (user account, publishing listings, purchasing packages, messaging),
• your consent, when it is required (e.g. analytics cookies, push notifications, optional marketing content),
• compliance with legal obligations (e.g. accounting and tax regulations),
• legitimate interest, where applicable and proportionate (Platform security, fraud prevention, protection of legal claims).

05 Data recipients

We may share your data with processors that help us run the Platform: hosting and IT service providers, the card payment service provider (CorvusPay), e-mail service providers, Google (maps, location search, sign-in, web fonts), Facebook and Apple (sign-in with their accounts), Firebase/Apple push notification services, and accounting services. We use analytics tools only if you have given consent.

The content of your listing (description, photos, vessel location) is publicly visible on the Platform. Your name and messages are visible to the other party in a conversation. We do not share data without a legal basis and without the need for a specific purpose of processing. Where data is transferred outside the EEA, we do so with appropriate safeguards (e.g. standard contractual clauses).

06 Retention period

We keep account, listing and message data while your account is active, and after the account is deleted for as long as necessary to comply with legal obligations or protect legal claims. Order and invoice data is kept for the periods prescribed by accounting and tax regulations.

Data related to consents and cookies is kept for up to 12 months to evidence and manage user choices. You can request deletion of your account and data in accordance with your rights.

07 Your rights

As a data subject, you may request:

08 Cookies

Boating.hr uses necessary cookies and similar technologies for proper operation (sign-in, security, language, display), and analytics only if you explicitly agree to them.

09 Contact and complaints

For any questions regarding the protection of personal data, you can contact us via the e-mail address:

If you believe that your rights have been violated, you have the right to lodge a complaint with the competent personal data protection authority (the Croatian Personal Data Protection Agency - AZOP).

10 Changes to the policy

This Privacy Policy may be updated from time to time to align with changes in business, technology or legislation. The current version will always be published on this page.