Who We Are

This website, pulaboats.com, is operated by Pula Boats, a boat charter and sailing agency based in Pula, Istria, Croatia. For the purposes of the EU General Data Protection Regulation (GDPR), Pula Boats is the data controller responsible for your personal data when you visit this site, contact us, or book a tour with us.

PULA BOATS, OBRT ZA TURIZAM I PROMIDŽBU, VL. ANTON JELAŠ, BRDOVEC, Selec 1c, OIB (23118735630) and MBS (99287781)

Registered office and departure point: Marina Polesana, Pula, Istria, Croatia. You can reach us at info@pulaboats.com or +385 91 939 0213 with any question about this policy or your personal data.

What Personal Data We Collect

We only collect what we need to run bookings, answer enquiries and operate this website. Depending on how you interact with us, this can include:

Booking and enquiry details — name, email address, phone number, number of guests, requested dates, and any message you send us through the contact form or booking flow.
Account details, if you create one — email address, encrypted password, and profile details you choose to add.
Payment information — processed directly by our payment provider, Stripe; we do not store your full card number on our own servers (see "Payments" below).
Technical data — IP address, browser type, device type, and pages visited, collected automatically when you use the site.
Cookie data — see "Cookies" below.

How We Use Your Data, and On What Legal Basis

To process and manage your booking — necessary to perform the contract between us once you book a tour.
To respond to enquiries sent through our contact form — based on your consent in submitting the form, or our legitimate interest in answering questions about our services.
To send booking confirmations and essential service messages — necessary to perform the contract.
To improve this website and understand how it's used, via cookies and analytics — based on your consent, which you can withdraw at any time (see "Cookies" below).
To meet legal and accounting obligations, such as retaining invoices — necessary for legal compliance.

We do not use your data for automated decision-making or profiling that produces legal effects concerning you.

Payments

Card payments on this site are processed by Stripe, a PCI-DSS-compliant payment processor. When you pay for a booking, your card details are sent directly to Stripe and are not stored on Pula Boats' own servers. Stripe processes this data as an independent controller under its own privacy policy, available at stripe.com/privacy.

Bookings Made Through Other Platforms

Some of our tours are also listed independently on third-party booking marketplaces, such as GetYourGuide. These listings are managed separately from this website and are not technically connected to it — if you book through one of these platforms rather than directly on pulaboats.com, your data is collected and processed first by that platform under its own privacy policy, and is shared with us only to the extent needed to run your tour (typically your name, guest count, and contact details for the day).

Cookies and Similar Technologies

We use cookies to run this website and, where you consent, to understand how it's used. Categories of cookies on this site:

Strictly necessary cookies — required for the site and booking flow to function; these cannot be switched off.
Analytics cookies — help us understand which pages are useful and how visitors reach the site, only set with your consent.
Advertising cookies — used to measure the performance of our marketing campaigns, only set with your consent.

You can accept, reject or change your cookie preferences at any time via the cookie banner shown when you first visit the site. Choices are logged so we can demonstrate compliance with your preferences. Most browsers also let you block or delete cookies directly in your browser settings, though this may affect how well the site works.

How Long We Keep Your Data

Booking records — kept for the period required by Croatian tax and accounting law, typically up to 11 years for financial records, and reviewed periodically thereafter.
Contact form enquiries that don't lead to a booking — kept for up to 12 months, then deleted.
Account data — kept while your account is active; deleted or anonymised within a reasonable period after account closure, unless we're required to keep it longer by law.
Server and analytics logs — kept for a limited period for security and performance purposes, then deleted or anonymised.

Who We Share Your Data With

We do not sell your personal data. We share it only where necessary, with:

Our payment processor (Stripe), to process your payment.
Website hosting, email and analytics service providers who process data on our behalf, under data processing agreements.
Public authorities, where required by law.

Note: if you book one of our tours through a third-party marketplace such as GetYourGuide instead of directly on this site, that platform is a separate data controller for that booking — see "Bookings made through other platforms" above.

International Data Transfers

Some of the service providers above (including Stripe and certain analytics or hosting providers) may process data outside the European Economic Area. Where this happens, we rely on providers that offer appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

Your Rights

Under the GDPR, you have the right to:

Access the personal data we hold about you;
Request correction of inaccurate data;
Request erasure of your data, where applicable;
Request that we restrict how we use your data;
Receive your data in a portable format;
Object to processing based on our legitimate interests;
Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at info@pulaboats.com. We will respond within one month, as required by the GDPR. If you're unhappy with how we've handled your data, you also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr, or your local data protection authority.

Children's Privacy

Our tours often welcome families and children, but this website is not directed at children, and we do not knowingly collect personal data directly from children without a parent or guardian making the booking on their behalf.

Data Security

We use technical and organisational measures — including encrypted (HTTPS) connections and access controls on our systems — to protect your personal data against unauthorised access, loss or misuse.

Changes to This Policy

We may update this privacy policy from time to time, for example to reflect changes in our services or the law. We'll update the date below when we do; significant changes will be highlighted on this page.

Last updated: 20 July 2026

Contact Us

Questions about this policy or your personal data are welcome any time at info@pulaboats.com or +385 91 939 0213, or by post to Marina Polesana, Pula, Istria, Croatia.