Privacy Policy

This privacy policy applies to the website adrion.hr, operated by [[COMPANY LEGAL NAME]], [[ADDRESS, POSTCODE, CITY]], Croatia (OIB: [[OIB]]). We are the data controller for any personal data you choose to submit to us. For privacy-related questions, contact us at info@adriondmc.com.

The enquiry form on this website is a mailto form. When you submit the form, your device's own email client opens with the message pre-filled. The message is sent directly from your email account to info@adriondmc.com. The website itself does not transmit, receive, or store your data on any server. This means that standard email privacy applies: the communication is between your email provider and ours.

When you choose to contact us, you may share your name, email address, message content, and travel preferences. We use this information solely to respond to your enquiry and, where you proceed to book, to organise your journey. We do not use it for any other purpose without your explicit agreement.

Processing is based on our legitimate interest in responding to an enquiry that you have initiated (Article 6(1)(f) GDPR). Where processing is required to take steps at your request prior to entering a contract, the basis is Article 6(1)(b) GDPR. [[Confirm with your lawyer which basis applies at each stage of the booking process.]]

We retain your personal data for as long as necessary to manage your enquiry or journey, and for [[RETENTION PERIOD — e.g. 5 years]] thereafter for legal and accounting obligations. After that period, data is securely deleted or anonymised. [[Confirm retention period with your lawyer, having regard to Croatian accounting law and applicable travel regulations.]]

The adrion.hr website is hosted on and delivered via Cloudflare, Inc., which may process connection metadata (such as IP addresses and request logs) as part of its content delivery and security service. [[Confirm that a Data Processing Agreement (DPA) is in place with Cloudflare — see Cloudflare's standard DPA at cloudflare.com/trust-hub.]]

This website does not use advertising trackers, remarketing pixels, or non-consented analytics. It does load a small number of third-party services needed to provide its features: an embedded map (Mapbox), web fonts (Google Fonts), and — on the Charter page only — a yacht-charter availability search embedded from Booking Manager (booking-manager.com, MMK Systems d.o.o.). These providers may receive your IP address and technical request data in order to serve their content. [[Confirm with counsel whether a cookie/consent banner is required for these embeds, and document each provider’s role and data location.]]

We do not sell, rent, or share your personal data with third parties for marketing purposes. Where necessary to arrange your journey, we may share relevant details (e.g. your name and itinerary) with guides, accommodation providers, transport operators, or activity partners. These partners receive only the information required to deliver the service you have booked. [[Identify and list key processors/partners as required.]]

[[Confirm whether any personal data is transferred outside the EEA (e.g. via any US-hosted services) and, if so, state the safeguard in place — Standard Contractual Clauses, adequacy decision, or other.]]

Under the GDPR, you have the right to access the personal data we hold about you, to request correction of inaccurate data, to request erasure of your data (subject to legal obligations), to object to processing, and to request restriction of processing. To exercise any of these rights, write to us at info@adriondmc.com. We will respond within 30 days. You also have the right to lodge a complaint with the Croatian data protection supervisory authority, the Agencija za zaštitu osobnih podataka (AZOP), at azop.hr.

We may update this policy when the website's functionality changes — for example, if a form backend or analytics is added. Material changes will be reflected in the updated date at the top of this page. We encourage you to review this page periodically.