PRIVACY & COOKIE POLICY
Last updated: 10 September 2026
The big blue Zrmanja respects your privacy and is committed to protecting your personal data. This Privacy & Cookie Policy explains how we collect, use and protect personal data when you visit our website, contact us or submit a booking request.
1. Who is responsible for your data?
The data controller is:
THE BIG BLUE, obrt za elektroinstalacije i pomorski prijevoz putnika, vl. Branimir Šestak
Obala K. E. Kotromanić 59
23312 Novigrad, Croatia
OIB: 56687633889
Email: info@big-blue-zrmanja.hr
Phone: +385 99 2057 767
2. What personal data do we collect?
When you contact us or submit a booking request, we may collect:
- name and surname
- email address
- phone / WhatsApp number
- preferred tour and date
- number and age categories of guests
- messages, special requests or other information you choose to provide
Our website may also process technical information necessary for its operation and security, such as IP address, browser and device information.
3. Why do we use your personal data?
We use personal data to:
- respond to your enquiries
- process and manage booking requests
- check availability
- communicate with you about your tour
- provide the requested service
- comply with legal obligations
- maintain the security and proper functioning of our website
The legal basis for processing depends on the purpose and may include taking steps at your request before entering into a contract, performance of a contract, compliance with a legal obligation, legitimate interests where applicable, or your consent where consent is required.
4. How long do we keep your data?
We keep personal data only for as long as necessary for the purpose for which it was collected.
Where certain information must be retained for accounting, tax or other legal purposes, it will be kept for the period required by applicable law.
5. Who may have access to your data?
We do not sell your personal data.
Personal data may be processed by service providers necessary for the operation of our website and business, such as our website hosting and email providers.
Personal data may also be disclosed where required by applicable law or a competent public authority.
6. Your rights
Under the GDPR, depending on the circumstances, you may have the right to:
- access your personal data
- correct inaccurate or incomplete personal data
- request deletion of your personal data
- restrict certain processing
- object to certain processing
- request data portability where applicable
- withdraw your consent at any time where processing is based on consent
To exercise your rights, contact us at:
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).
AZOP specifically requires privacy information to explain the controller, purposes and legal bases, recipients, retention, data-subject rights and other applicable information, so these aren’t just filler sections.
7. Cookies
Cookies are small files that may be stored on your device when you visit a website.
Our website may use cookies that are strictly necessary for the website to function properly. These cookies do not require your consent when they are necessary to provide the website or a service you have requested.
If we use analytics, marketing or other non-essential cookies, they will not be activated before you have given your consent.
When you first visit our website, the cookie banner allows you to accept or reject non-essential cookies and, where applicable, manage your preferences.
You may withdraw or change your consent at any time using the cookie consent mechanism available on the website.
This distinction matters: under the current Croatian guidance, non-essential cookies generally require prior consent, while strictly necessary cookies are exempt. AZOP also requires the first banner layer to make accepting and rejecting cookies equally straightforward.
8. Third-party services
Our website may contain links to third-party websites and services, including Google Maps, Facebook and Instagram.
If you follow an external link or interact with a third-party service, that provider may process your personal data according to its own privacy policy.
9. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or misuse.
10. Changes to this policy
We may update this Privacy & Cookie Policy if our website, services or legal obligations change.
The latest version will always be available on this page.
