1. Data Controller Identification
This website is operated by Vaulttickertonictrailis Adriatic Media d.o.o., a registered limited liability company under the commercial laws of the Republic of Croatia, with registration code HR84920194821 and registered offices at Obala kneza Domagoja 14, 21000 Split, Croatia ("Company", "we", "us", or "our").
We are dedicated to safeguarding the personal privacy of our website visitors in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation (NN 42/18), and applicable international privacy frameworks such as the California Consumer Privacy Act (CCPA/CPRA).
2. Categories of Information Collected
We minimize personal data collection to what is strictly necessary to deliver editorial maritime guides, answer correspondence, and analyze website speed and security:
- Directly Provided Information: When you complete our contact inquiry form, we collect your full name, email address, topic selection, and the textual content of your inquiry message.
- Technical & Telemetry Data: During standard HTTP requests to our static servers, our logs automatically capture truncated (anonymized) IP addresses, browser agent headers, referring URLs, screen resolution metrics, and request timestamps.
- Cookie & Local Storage State: We store your cookie consent preferences in your local browser storage using client-side keys so the cookie prompt does not reappear unnecessarily.
3. Legal Bases for Processing Under GDPR
We process personal data only when an established legal basis under Article 6(1) of the GDPR applies:
- Consent (Art. 6(1)(a)): For non-essential analytics cookies and telemetry evaluations that you explicitly approve via our consent mechanism.
- Performance of Pre-contractual Measures (Art. 6(1)(b)): To address, research, and respond to direct inquiries submitted via our contact portal.
- Legitimate Interests (Art. 6(1)(f)): To maintain web infrastructure security, prevent automated Denial-of-Service attacks, debug rendering anomalies, and defend our legal rights.
4. Third-Party Processors & Infrastructure Providers
We do not sell, rent, or lease your personal identification information to commercial marketing aggregators. Data may be processed on our behalf by qualified technical infrastructure contractors acting as Data Processors under strict Data Processing Agreements (DPAs):
- Static hosting providers, content delivery networks (CDNs), and cloud security firewalls within the European Economic Area (EEA).
- Standard transactional email routing services used exclusively to transmit contact form dispatches to our editorial desk.
5. International Data Transfers
Whenever technical telemetry or email routing involves transmission of information outside the European Economic Area, such transfers rely on Standard Contractual Clauses (SCCs) approved by the European Commission or ensure that recipient vendors operate under certified adequacy decisions to guarantee an equivalent degree of protection.
6. Retention Schedules
We maintain personal information only for the duration necessary to satisfy the objectives for which it was gathered:
- Contact Inquiries: Stored for up to 24 months after resolution of your communication to facilitate subsequent route inquiries, after which records are deleted.
- Server Access Logs: Retained for a maximum rolling window of 90 days for network security auditing before automated overwriting.
- Cookie Preferences: Preserved in your local storage until you clear browser caches or for a duration of 12 months.
7. Your Statutory Privacy Rights
Subject to specific conditions under the GDPR and CCPA, you possess well-defined statutory rights regarding your personal data:
- Right of Access: You may request copies of the personal data we hold about you.
- Right to Rectification: You may request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): You may request deletion of your information where continued processing is not legally mandated.
- Right to Restriction & Objection: You may object to data processing grounded on legitimate interests or request processing restrictions.
- Right to Data Portability: You may request transfer of provided information in a structured, machine-readable format.
- Right to Lodge a Complaint: You maintain the right to register a formal complaint with the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, Croatia (azop.hr).
8. Data Protection Officer (DPO) Contact
For privacy inquiries, rights assertions, or verification requests, contact our dedicated compliance officer via email at [email protected] or postal mail addressed to Data Protection Officer, Vaulttickertonictrailis Adriatic Media d.o.o., Obala kneza Domagoja 14, 21000 Split, Croatia.