Skip to content
ENDEHR

Legal

Privacy Policy

Privacy policy for Fru Fru Boats — what data we collect, how we use it, how long we keep it, and your GDPR rights.

Last updated: 2026-05-19

This Privacy Policy describes what personal data Fru Fru Boats collects, why we collect it, how long we keep it, who processes it on our behalf, and what rights you have under the EU General Data Protection Regulation (GDPR) and Croatian law. Personal data means any information that identifies you — name, email, phone, dates of rental, licence details. Fru Fru Boats (owner: Dražen Čikor, Rabac, Croatia) is the data controller. The policy is short and plainly written; if anything is unclear, write to us before you book.

1. Who we are (data controller)

Fru Fru Boats — trading name of MARINO, obrt za turizam, vl. Dražen Čikor Owner / data controller: Dražen Čikor Address: Obala Maršala Tita 59, Rabac 52221, Istria, Croatia OIB: 47259608288 Email: rent@frufru-boats.com Phone: +385 95 900 0804 Contact: see /contact/

2. What data we collect

Through the inquiry form and bookings:

  • Name
  • Email address
  • Phone / WhatsApp number (optional)
  • Rental dates and group size
  • Boating licence details (for licensed boat bookings)
  • Government-issued ID details (for in-person rental record)

Automatically when you visit the website:

  • IP address
  • Browser and device information
  • Pages visited and time spent (analytics)
  • Cookie preferences

Reviews and testimonials:

  • Public reviews from Google and TripAdvisor we display on the site

3. Why we use your data

Each item below pairs the data point with the single legitimate purpose it serves:

  • Reply to inquiries — we use your name and email to send you a tailored boat-day proposal.
  • Process bookings — we use rental dates, group size, and licence details to confirm the boat and prepare the rental contract.
  • Comply with Croatian rental and tax regulation — we keep booking records for the period Croatian law requires.
  • Communicate trip-day logistics — we use your phone or WhatsApp number to send berth, time, and weather updates on the day.
  • Improve the website — we use anonymised analytics to learn which pages help guests plan a day on the water.

We do not sell your data. We do not share your data with third parties for marketing.

4. Legal basis (GDPR)

GDPR requires us to name a legal basis for every processing activity. Legal basis under GDPR means the specific permission in law that allows the controller to process your data. Ours are:

  • Consent — for cookies, analytics, and marketing emails. You give it; you can withdraw it.
  • Contract performance — for booking processing and trip logistics. Without this data we cannot deliver the boat day you booked.
  • Legal obligation — for tax records and rental registration. Croatian law requires the retention.
  • Legitimate interest — for fraud prevention and website security. We keep the minimum required and document the balance.

5. Third-party processors

We use the following services that process some of your data:

  • Website hosting: plus.hr
  • Email: Resend (transactional email for inquiry-form submissions)
  • Payment processing: Not applicable — Fru Fru Boats does not process payments on the website. All quotes and bookings are handled by email and bank transfer.
  • Maps: Google Maps (embedded on /rabac/, /contact/, /about/)
  • Reviews: Google Business Profile, TripAdvisor (data shown on /about/ and home)
  • Analytics: Google Analytics 4 (GA4) via Google Tag Manager (GTM)

Each provider has its own privacy policy. We share only the minimum data required.

6. How long we keep your data

  • Inquiry messages: 2 years after last contact
  • Booking records: 10 years (Croatian tax obligation)
  • Marketing email subscribers: until you unsubscribe
  • Analytics: anonymised after 14 months

7. Your rights

Under GDPR you, the data subject, hold these rights against us, the data controller:

  • Access — we tell you what data we hold about you and supply a copy.
  • Correction — we fix inaccurate or incomplete data.
  • Erasure ("right to be forgotten") — we delete your data, subject to legal retention obligations such as the Croatian tax record period.
  • Restriction — we pause processing while a dispute is resolved.
  • Portability — we hand you a copy of your data in a structured, machine-readable format.
  • Objection — you can object to processing for marketing at any time.
  • Withdrawal of consent — you can withdraw consent at any time without affecting prior lawful processing.
  • Complaint — you can complain to the Croatian Personal Data Protection Agency (AZOP — azop.hr) if you believe we have not respected these rights.

To exercise any of these rights, email us at rent@frufru-boats.com or use the form at /contact/. Dražen reads every request and replies inside one working day.

8. Cookies

A cookie is a small text file a website stores on your browser to remember settings or measure traffic. We use three categories:

  • Essential cookies — always on; required for form submission and language preference. No consent needed.
  • Analytics cookies — only with your consent. GA4 via GTM, with IP anonymisation.
  • Embedded content — Google Maps and review widget. Loads only with your consent.

A cookie consent banner appears on first visit. You can change preferences any time from the banner footer link.

9. Security

  • Website served over HTTPS
  • Form submissions encrypted in transit
  • Booking records stored with access control
  • We don't store payment card details on our servers

10. Changes to this policy

We may update this policy. The "last updated" date at the top reflects the most recent change. Significant changes will be communicated by email or website notice.

11. Contact

Questions about this policy, your data, or a specific GDPR right: email rent@frufru-boats.com or use /contact/. Dražen replies inside one working day.

Inquire — reply within one working day