Privacy policy

Who we are

Skipper Hotline (skipperhotline.eu) offers boat booking advice, Skipper Hotline Assistance, sailing courses and private instructors in Croatia. This policy explains which personal data we collect through this website and in our work with you, why we collect it, who receives it and what rights you have. It follows the EU General Data Protection Regulation (GDPR) and Croatian law.

Skipper Hotline is run by PARAS, obrt za dizajn, owned by Filip Đurić. For anything about your personal data, write to filip@skipperhotline.eu.

What data we collect, and why

We only collect the data you give us yourself, and the technical data every visit to a website leaves:

• Boat booking request: your name, e-mail address and, if you give it, phone number; the trip you plan (boat type, sailing region, dates, number of cabins and any other wishes), your glove size, a discount code and your message. We use it to find boats for you, send you offers and book the boat you choose.
• 7-day pass request: your name, e-mail address and phone number; the boat type, sailing region, start date and number of weeks, a discount code and your message. We use it to arrange the pass and to stay in touch with you during your trip.
• Course reservation and private instructor request: your name, e-mail address and, if you give it, phone number; the course, instructor, dates, boat type and region you choose, and your message. We use it to reserve your place or arrange your instructor.
• Contact form: your name, e-mail address and message, to answer you.
• Newsletter: your e-mail address, to send you the newsletter and the packing list.
• When you are our client: what you share with us by e-mail, WhatsApp or phone before and during your trip, such as your route, your crew and messages about the weather or the boat, so that we can give you the assistance you booked.
• Website visits: when you open a page, our web hosting provider, Cloudflare, processes technical data: your IP address, the date and time, the page or file requested, the browser you use and the page you came from. They are used only to deliver the page and to keep the website running and secure. We also count visits with Cloudflare Web Analytics, to see how many people come and which pages they read: it notes the page, the website you came from, your country and your type of browser and device, without cookies and without recognising you on a later visit. We see only totals, never who you are.

Only the e-mail address is required in our forms (and the phone number for the 7-day pass, as the assistance runs on WhatsApp). Everything else is up to you.

When you start filling in one of our forms, a spam check from Cloudflare (Turnstile) loads: it looks at technical information about your browser to tell people from robots. When you send the form, it reaches us by e-mail, and you get a short confirmation that it has arrived, both through Resend, the service that delivers our website’s e-mails. Our website also keeps a copy of each request in our Cloudflare account, so that none is lost if an e-mail goes astray.

Legal basis

• Taking steps at your request and carrying out our agreement (GDPR article 6(1)(b)): booking requests, the 7-day pass, courses, private instructors, the assistance during your trip, and answering your messages.
• Your consent (article 6(1)(a)): the newsletter. You can withdraw it at any time, with the link in every newsletter or by writing to us; this does not affect what was done before.
• Legal obligations (article 6(1)(c)): keeping invoices and accounting records.
• Our legitimate interest (article 6(1)(f)): keeping the website running and secure (technical data of visits), counting visits to improve the website, keeping our forms free of spam, and keeping a copy of each request so that none is lost.

Who receives your data

We never sell your data. We share it only where it is needed for what you asked us to do:

• Charter companies: the details needed to make and confirm your boat booking.
• Our instructors and partners: for courses and private training, the instructor who trains you; for regular courses, which run together with our partner NAS Sailing Center in Punat, NAS Sailing Center.
• Service providers who work for us: Cloudflare (our web hosting, our forms and their spam check, and our visitor statistics), Resend (which delivers the e-mails our forms send, and our newsletter), Zoho (our e-mail) and Google (Gmail, where we read and answer our e-mail). They may use the data only on our instructions.
• NauSYS: the boat search on our Book a Boat page is run by NauSYS, the booking system Croatian charter companies use. What you search for there goes to NauSYS.
• WhatsApp: if you write to us on WhatsApp, your messages pass through WhatsApp (Meta), under its own privacy policy.
• Authorities: where the law requires it, for example tax authorities.

Data outside the EU

Some of the services above, such as Cloudflare, Resend, Google, WhatsApp and YouTube, are run by companies based in the United States. Where your data leaves the European Economic Area, it is protected by the EU-U.S. Data Privacy Framework or by the European Commission's standard contractual clauses.

How long we keep your data

• Requests that do not lead to a booking: up to 2 years after our last contact, so that we can help you if you come back to them, unless you ask us to delete them sooner.
• Bookings, passes, courses and instructors: for as long as tax and accounting law requires us to keep the records.
• Newsletter: until you unsubscribe.
• Technical data of visits: only as long as Cloudflare needs it to deliver and protect the website. Our visitor statistics hold only totals, nothing that identifies you.

Cookies and embedded content

This website uses no advertising tools and sets no cookies of its own; even its visitor statistics work without cookies. The only cookie is a security one that Cloudflare’s spam check may set when you fill in a form, for that purpose alone. Our fonts, pictures and the 360° views are served from our own website.

The boat search on our Book a Boat page comes from NauSYS. It loads only when you scroll down to it; your browser then also fetches files from NauSYS, from code.jquery.com (a common web toolkit the search uses), from Google Fonts and from Amazon Web Services (the boat photos), and these receive your IP address, as any website you visit does. The boat search sets no cookies.

Some of our videos are on our own website; others are on YouTube. A YouTube video is loaded only when you click it, from YouTube’s privacy-enhanced address (youtube-nocookie.com); from then on YouTube’s privacy policy applies, and YouTube may store information on your device. Links to Google Maps, Google reviews and other websites open those websites, under their own privacy policies; we are not responsible for their content.

Your rights

You have the right to:

• access your data and get a copy of it (GDPR article 15)
• have incorrect data corrected (article 16)
• have your data deleted (article 17)
• restrict how we use it (article 18)
• receive your data in a portable form (article 20)
• object to processing based on our legitimate interest (article 21)
• withdraw your consent at any time (article 7(3))

To use any of these rights, write to filip@skipperhotline.eu. We answer within one month.

You also have the right to lodge a complaint with a supervisory authority (article 77). In Croatia this is the Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Security

This website is served over an encrypted connection (HTTPS), and we protect your data with appropriate technical and organizational measures. No transmission over the internet is completely secure, so please do not send us sensitive data, such as payment card numbers, through our forms or by e-mail.

Children

Our services are meant for adults. We do not knowingly collect data from children under 16 without the consent of a parent or guardian.

Changes to this policy

We update this policy when our services or the law change. The date at the top shows when it was last updated.