Privacy Policy

Who is responsible

Harpun, Trg Maršala Tita, 52210 Rovinj, Croatia, is the controller for the data described here. [TO COMPLETE: confirm the registered legal entity name.]

For any privacy question or request, email harpuninfo@gmail.com or call +385 95 506 1849.

Enquiries and bookings

When you contact us by WhatsApp, email or phone we receive the details you choose to send — typically your name, contact details, preferred dates, group size and any message. We use them only to reply, advise on availability and prices, and arrange your trip.

The legal basis is the steps taken at your request before entering into a contract, and our legitimate interest in answering enquiries. We do not have an online checkout and do not take payments through this website.

Technical access data

The site is hosted on Cloudflare Pages. Like any web server, the host processes technical data such as your IP address, browser type and the time of the request to deliver the pages and keep the service secure. The legal basis is our legitimate interest in a reliable, secure website.

Audience measurement

We use Cloudflare Web Analytics to understand, in aggregate, how the site is used. It is privacy-friendly: it sets no cookies, builds no visitor profiles and does not track you across sites or identify you individually. The legal basis is our legitimate interest in improving the site.

Storage on your device

We store a single entry, "harpun-lang", in your browser to remember your chosen language. It stays on your device, is not sent to us and is not used for tracking or advertising. You can clear it at any time in your browser settings.

Third-party services

Our contact page embeds Google Maps. When that page loads, Google receives your IP address and may set its own cookies; this is governed by Google's privacy policy (policies.google.com/privacy).

If you message us on WhatsApp, your data is also processed by Meta under its own privacy policy. These providers may process data outside the European Economic Area under appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep data

We keep enquiry and booking correspondence only as long as needed to handle your request and to meet any legal obligations, then delete it. Aggregated analytics contain no personal data.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and to object to processing, and to withdraw any consent at any time. To exercise these rights, contact us at harpuninfo@gmail.com.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr).

Changes to this policy

We may update this policy as the site or our services change. The date shown above indicates the current version.