PRIVACY POLICY
Euronautic d.o.o.
Obala kralja Petra Kresimira IV 38
23210 Biograd na Moru, Croatia
Company ID (OIB): 05388981949
VAT ID: HR05388981949
E-mail: booking@euronautic.hr
Phone: +385 (0)23 385 205
Web: www.euronautic.eu
Version: 2027
1. GENERAL
Euronautic d.o.o. (hereinafter: Euronautic or EN) respects the privacy of its clients, guests, skippers, crew members, business partners and other natural persons whose personal data it processes.
This Privacy Policy explains which personal data we process, for which purposes and on which legal bases, the sources from which we may obtain such data, to whom we may disclose it, how long we retain it, and the rights of persons whose personal data we process.
We process personal data in accordance with Regulation (EU) 2016/679 - the General Data Protection Regulation (GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation and other applicable legislation.
We process personal data lawfully, fairly and transparently, collect it for specified, explicit and legitimate purposes, and do not process it in a manner incompatible with those purposes.
This Privacy Policy is intended to inform Data Subjects about the processing of their personal data and does not constitute consent to processing.
2. DATA CONTROLLER
The controller of personal data is:
Euronautic d.o.o.
Obala kralja Petra Kresimira IV 38
23210 Biograd na Moru, Croatia
Company ID (OIB): 05388981949
E-mail: booking@euronautic.hr
Phone: +385 (0)23 385 205
For questions concerning the processing of personal data or the exercise of rights under this Policy, you may contact us in writing at the above address or by e-mail.
3. WHOSE PERSONAL DATA WE PROCESS
Depending on the specific business relationship or service, we may process the personal data of:
• persons who book or use charter services;
• guests and other crew members;
• skippers;
• persons who send us enquiries or communicate with us before, during or after a charter;
• vessel owners and other business partners who are natural persons, as well as contact persons of business partners;
• persons involved in damage events, complaints, insurance claims or other incidents;
• other persons whose data is necessary for the performance of a contract, compliance with legal obligations or the protection of the legitimate interests of Euronautic or third parties.
The processing of personal data of employees and job applicants is regulated separately and is not covered by this Privacy Policy.
4. WHAT PERSONAL DATA WE PROCESS
Depending on the specific service, relationship and purpose of processing, we may process the following categories of personal data:
Identification data, such as first and last name, date and place of birth, nationality, sex, and data contained in identity, travel and other identification documents where required for the provision of a service or compliance with legal obligations.
Contact data, such as address, e-mail address and telephone number.
Booking and charter data, such as booking number, booked Vessel, Charter Period, charter base, agreed additional services, price, discounts, method and status of payment, and data relating to amendments to or cancellation of a booking.
Crew member data, namely data required for the preparation and registration of the crew list and for compliance with other legal and contractual obligations relating to persons staying on board the Vessel.
Skipper data, including information on licences, qualifications and documents required to verify that the conditions for operating the specific Vessel are met.
Financial and accounting data, including data required for recording payments, issuing invoices, processing refunds and complying with accounting and tax obligations.
Where card payments are processed through a bank or another authorised payment service provider, Euronautic may not have access to the complete payment card details.
Communication data, including e-mails, messages, requests, complaints, photographs, videos and other documentation provided to us by a person or generated in communications relating to a booking, charter or other business relationship.
Damage, incident and insurance data, including information about the event, participants and witnesses, damage incurred, insurance, service and technical reports, photographs and other documentation required to establish the circumstances of the event and to process damage, an insurance claim or a legal claim.
Technical and location data, where the specific Vessel is equipped with GPS, telemetry or other technical systems. Depending on the system, data may include the Vessel's position and route, speed, engine operating hours, status of individual systems, battery voltage, levels of individual tanks, technical alarms and other technical data.
5. PURPOSES AND LEGAL BASES OF PROCESSING
5.1. Enquiries, bookings and performance of charter services
We process personal data for the purposes of:
• responding to enquiries and preparing offers;
• taking steps prior to entering into a contract;
• confirming and administering bookings;
• communicating before, during and after a charter;
• preparing the necessary documentation;
• check-in and check-out;
• providing contracted and additional services;
• collecting payments and processing refunds;
• resolving matters related to the performance of charter services.
Where the Data Subject is a party to the contract, the legal basis for such processing is taking steps at the Data Subject's request prior to entering into a contract and the performance of the contract.
5.2. Crew lists and compliance with legal obligations
We process the data of Clients, skippers and crew members where necessary for the registration of crew and passengers, maintenance of prescribed records and compliance with obligations arising from applicable maritime, tourism, tax, accounting and other regulations.
The legal basis for such processing is compliance with Euronautic's legal obligations.
5.3. Safety and technical support during the charter
We may process contact, location and technical data in order to provide assistance during the charter, diagnose technical problems, arrange service intervention, protect persons and the Vessel, and respond to emergencies or other exceptional situations.
Depending on the specific circumstances, the legal basis may be performance of the contract, compliance with a legal obligation, protection of vital interests, or the legitimate interests of Euronautic and/or a third party in ensuring the safety of persons, protecting the Vessel and properly providing the charter service.
5.4. Damage, incidents, insurance, complaints and legal claims
We may process personal data for the purposes of:
• establishing the circumstances of damage or another incident;
• service and technical assessment;
• communicating with the Vessel owner, insurer, service provider, competent authority or another person involved;
• handling complaints;
• collecting receivables;
• exercising rights under insurance policies;
• establishing, exercising or defending legal claims.
Depending on the specific case, the legal basis may be performance of the contract, compliance with a legal obligation and/or the legitimate interests of Euronautic or a third party in establishing liability, protecting persons and property, and establishing, exercising or defending legal claims.
5.5. Accounting, tax and other legal obligations
We process data contained in invoices, payments and other business documentation in order to comply with accounting, tax and other legal obligations.
The legal basis for such processing is compliance with Euronautic's legal obligations.
5.6. Protection of business operations, persons and property
We may process certain personal data where necessary to prevent and detect misuse, protect the Vessel and other property, ensure information security, establish facts in the event of a dispute or incident, and protect the rights of Euronautic, Vessel owners, guests or other persons.
Such processing is based on the legitimate interests of Euronautic or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject requiring the protection of personal data.
5.7. Direct marketing
If Euronautic uses personal data for direct marketing, such processing will be carried out only where an appropriate legal basis exists.
Where processing is based on consent, the Data Subject may withdraw consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
A recipient of marketing communications may request at any time that such communications cease, by using the unsubscribe link where available or by contacting Euronautic.
Unsubscribing from marketing communications does not affect communications required in connection with an existing booking, performance of a contract, safety, payment or another non-marketing purpose.
6. SOURCES OF PERSONAL DATA
We may obtain personal data directly from the person to whom the data relates, for example when an enquiry or booking is made, at check-in, during communication or when our services are used.
As charter bookings are often made through third parties, we may also obtain personal data from:
• charter brokers and charter or travel agencies;
• booking platforms and reservation systems;
• the booking holder;
• another crew member;
• the Vessel owner;
• insurers, service providers and other persons involved in a damage event;
• competent authorities;
• other persons or sources where an appropriate legal basis exists for such collection.
In this way, we may obtain identification and contact data, booking data, data required for the crew list, information concerning the Skipper and the Skipper's qualifications, and other data required for the performance of charter services, compliance with legal obligations or another lawful purpose.
Where a Client or another person provides Euronautic with the personal data of other crew members, they should direct those persons to this Privacy Policy.
7. RECIPIENTS OF PERSONAL DATA
Euronautic does not sell personal data.
To the extent necessary for a particular purpose and where an appropriate legal basis exists, personal data may be made available or disclosed to:
• competent state, maritime, port, police, tax, tourism, judicial and other authorities;
• the owner of the specific Vessel where necessary in connection with Vessel management, maintenance, damage, insurance or the exercise of rights relating to the Vessel;
• insurance companies, loss adjusters and their representatives;
• banks and payment service providers;
• accounting, tax, legal and other professional advisers;
• charter brokers, agencies and booking platforms to the extent necessary to manage the relevant booking;
• service providers, technicians and other service providers where necessary for technical assistance, maintenance or the identification and repair of damage;
• providers of IT, reservation, business, hosting, communication and other services used by Euronautic in its business operations;
• other recipients where disclosure is necessary for the performance of a contract, compliance with a legal obligation, protection of legitimate interests or where another appropriate legal basis exists.
Where another person processes personal data on behalf of Euronautic as a processor, the relationship with that processor is governed in accordance with applicable data protection rules.
8. GPS, TELEMETRY AND TECHNICAL VESSEL DATA
Certain Vessels may be equipped with GPS, telemetry and other technical systems.
Depending on the equipment installed on the specific Vessel, such systems may record the Vessel's position and route, speed, engine operating hours, status of individual systems, battery voltage, levels of individual tanks, technical alarms and other technical data.
Such data may be processed for the purposes of:
• safety of persons and the Vessel;
• technical assistance and diagnostics;
• maintenance;
• protection against theft and unauthorised use;
• establishing the circumstances of a damage event or incident;
• insurance;
• establishing, exercising or defending legal claims.
Euronautic does not use telemetry data for continuous monitoring of guests' private behaviour beyond the purposes specified in this Policy.
9. TRANSFERS OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA
Certain providers of IT, communication, reservation or other services used by Euronautic may process personal data outside the European Economic Area.
Where personal data is transferred to a third country or an international organisation, Euronautic will ensure that such transfer is carried out in accordance with the GDPR, for example on the basis of an adequacy decision of the European Commission or by applying appropriate safeguards, where required.
Information on the applicable safeguards may be requested from Euronautic using the contact details specified in this Policy.
10. RETENTION PERIODS FOR PERSONAL DATA
We retain personal data only for as long as necessary for the purpose for which it is processed, unless longer retention is required or permitted by law.
The specific retention period depends on the type of data, the purpose of processing, Euronautic's legal obligations and the periods during which legal claims may be established, exercised or defended.
Data relating to a booking and the performance of charter services is retained for the duration of the contractual relationship and, following its termination, for the period necessary to comply with legal obligations, handle complaints, damage claims and insurance matters, and deal with potential legal claims.
Accounting, tax and other documentation for which specific retention periods are prescribed is retained for the periods required by law.
Data relating to damage, insurance, a dispute or another legal claim may be retained until the final conclusion of the relevant matter and the expiry of the applicable periods for establishing, exercising or defending legal claims.
Where processing is based solely on consent, we process the data until consent is withdrawn, unless another legal basis exists for its continued retention.
Upon expiry of the applicable retention period, personal data is deleted, anonymised or otherwise ceases to be processed in an appropriate manner, unless another lawful basis exists for its continued retention.
11. IS THE PROVISION OF PERSONAL DATA MANDATORY?
The provision of certain personal data may be a statutory or contractual requirement or a condition necessary for entering into or performing a contract.
If a person does not provide data required for a booking, crew list, verification of the required Skipper qualifications, issuing an invoice or another mandatory purpose, Euronautic may be unable to confirm the booking, hand over the Vessel or provide a particular service.
Data that is not necessary for the performance of a contract or compliance with a legal obligation does not have to be provided, unless another appropriate legal basis exists for its processing.
12. RIGHTS OF DATA SUBJECTS
Subject to the conditions laid down in the GDPR, a Data Subject has the right to:
• obtain confirmation as to whether Euronautic processes their personal data and exercise the right of access to such data;
• request the rectification of inaccurate personal data and completion of incomplete personal data;
• request erasure of personal data where the statutory conditions are met;
• request restriction of processing where the statutory conditions are met;
• exercise the right to data portability where the applicable conditions are met;
• object to the processing of personal data based on legitimate interests;
• object at any time to the processing of personal data for direct marketing purposes;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal;
• lodge a complaint with the competent supervisory authority.
These rights are not absolute and their application depends on the legal basis and purpose of processing and on other conditions laid down in the GDPR.
To exercise their rights, a Data Subject may contact Euronautic at:
booking@euronautic.hr
or in writing at:
Euronautic d.o.o.
Obala kralja Petra Kresimira IV 38
23210 Biograd na Moru, Croatia
For the protection of personal data, we may request additional information that is reasonably necessary to verify the identity of the person making the request.
We respond to Data Subject requests without undue delay and within the time limits prescribed by the GDPR.
13. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If a Data Subject considers that their personal data is being processed contrary to data protection legislation, they have the right to lodge a complaint with the competent supervisory authority.
In the Republic of Croatia, the supervisory authority is:
Croatian Personal Data Protection Agency (AZOP)
Zagreb, Republic of Croatia
www.azop.hr
A Data Subject may contact us first so that we can attempt to clarify or resolve the request, but contacting Euronautic beforehand is not a condition for exercising the right to lodge a complaint with the supervisory authority.
14. SECURITY AND CONFIDENTIALITY OF PERSONAL DATA
Euronautic implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of or access to personal data, or other unlawful processing, taking into account the nature of the data, the purpose of processing and the associated risks.
Access to personal data is limited to employees and other authorised persons who require such access for the performance of their duties.
Persons who have access to personal data are required to maintain its confidentiality and may not use such data for private purposes or make it available to unauthorised persons.
The duty of confidentiality continues to apply after termination of employment or another relevant relationship with Euronautic.
15. COOKIES AND THE WEBSITE
Euronautic's website may use technically necessary cookies required for its proper and secure operation.
Where analytical, marketing or other cookies and similar technologies are used for which user consent is required under applicable law, such technologies are used only after the required consent has been obtained and in accordance with the user's settings.
Further information on cookies may be provided in a separate Cookie Policy and/or through the cookie preference management tool on the website.
16. AUTOMATED DECISION-MAKING
In the ordinary course of providing charter services, Euronautic does not make decisions that produce legal effects concerning a Data Subject or similarly significantly affect them solely on the basis of automated processing of personal data, including profiling.
If Euronautic introduces such processing in the future, Data Subjects will be provided with the information required by the GDPR before such processing is implemented.
17. CHANGES TO THE PRIVACY POLICY
Euronautic may amend this Privacy Policy from time to time to reflect changes in its business processes, technology or applicable legislation.
The current version of the Privacy Policy is always available on Euronautic's website.
In the event of material changes that significantly affect the manner in which personal data is processed, Euronautic will take appropriate measures to inform the affected persons in a timely manner.
Date of last update: 23 September 2026
Euronautic d.o.o.
