Privacy policy
Last updated 6 November 2026
Controller
The data controller is Memula d.o.o., Tolstojeva 20, 21000 Split, Croatia, OIB 49663429219. Contact for all questions about personal data: info@korculaboating.com, +385 98 931 6767.
What this website collects
The website is a set of static pages with no user accounts and no database. It has no contact form that sends data to us. The inquiry form on the tour pages and the contact page only composes a message in your browser and then opens WhatsApp or your e-mail application; what you type is not sent to or stored by this website.
Once you send that message, it is processed by WhatsApp (Meta Platforms Ireland Ltd.) or by your e-mail provider under their own privacy policies, and it reaches us as an ordinary WhatsApp message or e-mail.
Online booking with Orioly
Tours with online booking use the booking widgets of Orioly (book-now.orioly.com), the booking system Korčula Boating uses. The calendar and the Book now card are loaded from Orioly's servers, which therefore see your IP address. When you book, the details you enter in Orioly's booking panel — name, contact details, number of guests and the payment — are processed by Orioly on behalf of Memula d.o.o. to make and manage your booking (Art. 6(1)(b) GDPR), and the card payment by Orioly's payment provider. Orioly (Avenija Dubrovnik 15, 10000 Zagreb, Croatia) does this as our processor, under a data processing agreement with Memula d.o.o. (Art. 28 GDPR). This website itself stores none of it.
Orioly's booking panel also loads fonts from Adobe Fonts (use.typekit.net) and Google services (Google Tag Manager, Google Analytics). In our test on 14 October 2026 none of them set a cookie.
Messages you send us
When you write to us, we process the data you include — typically your name, telephone number or e-mail address, the tour, the date and the number of guests — in order to answer you and, if you book, to organise the tour (Art. 6(1)(b) GDPR, steps prior to and performance of a contract). We keep booking correspondence for as long as the tax and accounting rules require and delete other inquiries once they are no longer needed.
Analytics without cookies
To see how many people visit the site and which pages they read, we use Vercel Web Analytics. It works without cookies and without tracking you across websites: it records page views and which buttons were used (for example, that a WhatsApp button on a tour page was tapped) against an anonymous, short-lived identifier that is not linked to you. No advertising networks are used.
Embedded map
The map of our meeting point is not loaded from Google until you choose to show it. If you do, Google Maps is loaded from Google's servers and Google may process your IP address and set its own cookies under Google's privacy policy. The "Open in Google Maps" link simply takes you to the Google Maps website.
Hosting
The website is hosted by Vercel Inc. Like every web host, Vercel processes the technical data needed to deliver the pages (such as your IP address) in server logs for a short time, for security and operation (Art. 6(1)(f) GDPR).
Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing and to receive it in a portable format. To exercise any of these rights, write to info@korculaboating.com or to the postal address above.
You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, www.azop.hr, or with the supervisory authority of your own country.