1. Introduction

Welcome to DB007. Protecting your privacy and personal data is of the utmost importance to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR).

By using our website or services, you agree to this Privacy Policy.

2. Who We Are

DB007 Sailing Agency
Address:  Lastovska 4, 20000 Dubrovnik
Email: info@db007-sailing.hr
Phone: +38599 4077 863
Website: https://db007-sailing.hr

As the data controller, DB007 determines the purposes and means of processing your personal data.

3. What Data We Collect

We may collect and process the following personal data:

Data You Provide Directly

  • Identification Information: Name, email address, phone number, and postal address.
  • Booking Information: Travel dates, vessel preferences, and crew list details.
  • Payment Details: Bank account or credit card information (processed securely).
  • Identity Documents: Copies of licenses (e.g., skipper’s license) or passports when required for legal compliance.

Data We Collect Automatically

  • Technical Data: IP address, browser type, operating system, and website activity.
  • Cookies: Data collected through cookies to enhance website functionality and user experience. (See Section 10 for details.)

Communication Data

  • Any information you share through inquiries, feedback forms, or direct communication with us.

4. Purpose and Legal Basis for Data Processing

We process your personal data for the following purposes under the specified legal bases:

  1. Booking Management: To confirm, process, and manage your bookings and related services.
    (Legal Basis: Performance of a contract.)
  2. Compliance with Legal Obligations: To meet legal requirements, including maritime regulations and tax laws.
    (Legal Basis: Compliance with legal obligations.)
  3. Customer Communication: To respond to inquiries, provide updates, and offer customer support.
    (Legal Basis: Legitimate interests.)
  4. Marketing and Promotions: To send newsletters or promotional materials, with your explicit consent.
    (Legal Basis: Consent.)
  5. Website Improvement: To monitor and enhance website performance and user experience.
    (Legal Basis: Legitimate interests.)

5. How We Share Your Data

We only share your data when necessary and under strict conditions:

  • Service Providers: Third-party companies that facilitate services (e.g., payment processors, skippers, or crew services).
  • Authorities: When required by law, such as sharing crew lists with port authorities.
  • Business Partners: For additional services such as transfers, excursions, or provisioning.

We do not sell, lease, or trade your personal data with third parties.

6. Retention Period

Your data is retained only for as long as necessary:

  • Booking Records: Retained for up to 5 years for tax, legal, and accounting purposes.
  • Marketing Data: Retained until you withdraw your consent.
  • Communication Records: Retained for up to 2 years after resolution of your inquiry.

When the retention period ends, your data is securely deleted or anonymized.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

  1. Access: Request confirmation if your data is being processed and access to that data.
  2. Rectification: Correct inaccurate or incomplete data.
  3. Erasure (“Right to be Forgotten”): Request deletion of your data, subject to legal obligations.
  4. Restriction: Restrict processing of your data in specific circumstances.
  5. Data Portability: Receive your data in a structured, machine-readable format.
  6. Objection: Object to the processing of your data for legitimate interests or direct marketing.
  7. Withdraw Consent: Withdraw your consent for specific processing activities (e.g., marketing).

To exercise these rights, email us at info@db007-sailing.hr. We will respond in the shortest possible time.

8. Data Security

We implement robust technical and organizational measures to protect your data from unauthorized access, alteration, or loss. These include:

  • Encrypted connections (SSL) for secure communication.
  • Restricted access to sensitive data.
  • Regular monitoring of our systems for vulnerabilities.

9. International Data Transfers

If your data is transferred outside the European Economic Area (EEA), we ensure it is protected by:

  • Adequate safeguards (e.g., EU Standard Contractual Clauses).
  • Compliance with GDPR requirements.

10. Cookies and Tracking Technologies

Our website uses cookies to provide a better user experience. Cookies may collect information about:

  • Your browsing activity on our website.
  • Preferences you have set (e.g., language settings).

You can control or disable cookies through your browser settings. For more details, refer to our [Cookie Policy].

11. Third-Party Websites

Our website may contain links to third-party websites. DB007 is not responsible for their privacy practices or content. Please review their privacy policies before sharing personal data.

12. Updates to This Privacy Policy

This Privacy Policy may be updated to reflect changes in our practices or legal requirements. The latest version will always be available on our website, with the effective date noted.

13. Contact Information

If you have any questions or concerns about this Privacy Policy or how we process your data, please contact us:

DB007
Email: info@db007-sailing.hr
Website: https://db007-sailing.hr