1. Introduction
This Privacy Policy explains how SPORT ANDREA, VRSAR CHARTER, tourism trade, owned by Andrea Bratović, collects, processes, uses and protects the personal data of users of the website www.vrsar-charter.com, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation, and other applicable laws of the Republic of Croatia.
By using this website, you acknowledge that you have read and understood this Privacy Policy.
2. Data Controller
The controller of your personal data is:
SPORT ANDREA, VRSAR CHARTER, tourism trade
Owner: Andrea Bratović
Marasi 9
52450 Vrsar
Republic of Croatia
OIB (Personal Identification Number): 12772305242
If you have any questions regarding the protection of your personal data, you may contact us using the contact details published on our website.
3. What Personal Data We Collect
Depending on how you use our website or services, we may collect the following personal data.
Information you provide voluntarily
- first and last name
- email address
- telephone or mobile number
- contents of your inquiry or message
- preferred reservation date
- number of persons
- selected service
- any other information you voluntarily provide during communication.
Information collected automatically
When you visit the website, certain technical information may be collected automatically, such as:
- IP address
- browser type
- operating system
- access time
- pages visited
- technical information required for the proper functioning of the website.
This information is used solely for security, maintenance and improvement of the website.
4. Purpose of Processing Personal Data
We process your personal data only where there is an appropriate legal basis.
Your personal data may be used for:
- responding to inquiries
- preparing quotations
- arranging reservations
- providing contracted services
- communicating with customers
- complying with legal obligations
- protecting our legitimate business interests
- improving the quality of our services
- handling complaints.
5. Legal Basis for Processing
Personal data are processed on one or more of the following legal grounds:
- your consent
- taking steps prior to entering into a contract
- performance of a contract
- compliance with legal obligations
- legitimate interests of the data controller, provided these do not override your rights and freedoms.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which they were collected or as required by applicable law.
Data contained in inquiries that do not result in a reservation will be deleted or anonymised after a reasonable period unless legal obligations require their retention.
Data relating to invoices and business records are retained for the periods prescribed by Croatian tax, accounting and other applicable legislation.
7. Sharing Personal Data
We do not sell or rent your personal data to third parties.
Personal data may be disclosed only to:
- website hosting providers
- IT support providers
- accounting service providers where necessary
- public authorities where required by law.
All persons with access to personal data are obliged to maintain confidentiality.
8. Transfer of Data Outside the European Union
Personal data are generally processed within the Member States of the European Union.
Where certain service providers process data outside the European Economic Area (EEA), such transfers shall be carried out only with appropriate safeguards in accordance with the GDPR.
9. Data Security
We implement appropriate technical and organisational measures to protect personal data against:
- unauthorised access
- loss
- destruction
- alteration
- misuse
- accidental disclosure.
Although we apply appropriate security measures, no method of data transmission over the Internet can be guaranteed to be completely secure.
10. Your Rights
Under the GDPR you have the right to:
- access your personal data
- request correction of inaccurate data
- request completion of incomplete data
- request erasure where legally applicable
- restrict processing
- object to processing
- request data portability
- withdraw your consent where processing is based on consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
11. Exercising Your Rights
You may exercise your rights by contacting us using the contact details published on this website.
We will respond without undue delay and no later than one month after receiving your request, unless a different period is prescribed by law.
12. Right to Lodge a Complaint
If you believe that the processing of your personal data is not in accordance with applicable regulations, you have the right to lodge a complaint with the competent supervisory authority.
In the Republic of Croatia, the competent authority is:
Croatian Personal Data Protection Agency (AZOP)
Ulica grada Vukovara 54
10000 Zagreb
More information is available on the official AZOP website.
13. Cookies
The website uses cookies to ensure its proper operation and to improve user experience.
Detailed information is available in our Cookie Policy.
14. Links to Other Websites
Our website may contain links to third-party websites.
We are not responsible for their content or the way they process personal data and recommend that users review their privacy policies.
15. Children’s Privacy
Our services are not intended for children under the age of 16.
We do not knowingly collect personal data from children without the appropriate consent of a parent or legal guardian.
16. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy to reflect changes in legislation, technology or our business operations.
All amendments will be published on this page and shall become effective on the date of publication.
17. Contact
For any questions regarding the protection of your personal data, please contact us using the contact details published on the website www.vrsar-charter.com.
Last updated: 9 July 2026.