Privacy Policy

1. Data Controller

Pelican Tours Split j.d.o.o.
Ribarska 7, 22222 Skradin, Croatia
OIB: 45497214393
Email: [email protected]
(hereinafter: “we”, “us”, “our”)

2. Personal Data We Collect

We may collect the following personal data:

• Full name,
• Email address
• Phone number
• Booking details (selected tours, dates, number of participants)

This data is collected through the Bókun reservation system or direct communication.

3. Purpose and Legal Basis for Processing

We process personal data based on:

• Performance of a contract – to process bookings and provide services
• Legal obligations – to comply with accounting and tax regulations
• Legitimate interest – to improve our services and website performance

4. Data Sharing with Third Parties

We share your data only with trusted partners necessary for service delivery:

• Bókun – booking management and vouchers
• Stripe – secure payment processing (we do not store card data)
• Google Analytics – anonymous traffic analysis (if enabled)

All partners comply with applicable data protection standards.

5. International Data Transfers

Some of our partners may process data outside the European Economic Area (EEA).

In such cases, appropriate safeguards are applied, such as Standard Contractual Clauses approved by the European Commission.

6. Data Retention

We retain personal data only as long as necessary:

• Booking and invoice data: up to 10 years (legal obligation)
• Communication data: up to 2 years
• Analytics data: according to tool settings

7. Cookies

We use cookies to ensure proper website functionality and improve user experience.

Types of cookies:

• Essential cookies – required for website operation
• Analytics cookies – used only with your consent

You can manage cookie preferences via your browser or cookie banner.

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability
• Lodge a complaint with a supervisory authority (e.g. Croatian Personal Data Protection Agency – AZOP)

To exercise your rights, contact: [email protected]

9. Data Security

We implement appropriate technical and organisational measures, including:

• SSL encryption
• Secure hosting
• Restricted data access

10. Contact

For any privacy-related inquiries:

📧 [email protected]