Privacy Policy

Last updated: 5 November 2026

This page explains what personal data we collect when you visit shore.photoshore.hr, book a boat or contact us, why we need it, who else handles it, and what your rights are.

Who we are

The data controller is:

photoshore j.d.o.o.
Pohorska ulica 16, 10000 Zagreb, Croatia
OIB (tax ID): 77605479095 · Court register: Commercial Court in Zagreb, MBS 081271532
Email: info@photoshore.hr · Phone: +385 98 628 994

Boats are handed over at ACI Marina Šimuni, island of Pag. For any privacy question or request, write to info@photoshore.hr.

What we collect and why

When you book a boat online
The booking form asks for your first and last name, email, phone number, postal address and country, your boat licence number, the dates and boat you choose, any extras, and your chosen payment method. We need this to prepare the rental contract, confirm the booking, send payment instructions and stay in touch about your rental (legal basis: performance of a contract). Your licence number is collected because Croatian law allows a motorboat to be rented only to a person who holds a valid licence (legal basis: legal obligation).

When you pay

  • Card payments online are processed by Stripe. Your card details go directly to Stripe; we never see or store them. Stripe tells us only that the payment succeeded, the amount, and the last four digits of the card. Stripe’s own privacy policy applies to their processing: stripe.com/privacy.
  • Card payments at check-in go through a Worldline POS terminal. The terminal communicates directly with Worldline and your bank; we see only the approval and the receipt.
  • Bank transfer: your bank and ours (Zagrebačka banka) process the transfer data; we see the payer name, amount and reference.

Your boat licence and ID
Before your rental we usually ask you to send a photo of your boat licence and ID by WhatsApp or email so we can prepare the contract in advance; otherwise we photograph them at check-in. We use the copies only to verify your identity and licence, fill in the contract and, if needed, deal with a claim. They are kept with the contract file and are not passed on to anyone (legal basis: performance of a contract and legal obligation).

When you collect the boat
At check-in we sign the rental contract and record the security deposit. These documents are kept on paper and/or as scans (legal basis: performance of a contract and legal obligation).

GPS tracking of the boat
Each of our boats carries a small GPS locator (Sense4Boat). While the boat is moving it reports its position roughly every 10 minutes; when stationary, once a day. We use this to protect the boat against theft, to find you quickly if you need help at sea, and to check that the boat stays within the navigation area and return times agreed in the contract (legal basis: our legitimate interest in protecting our property and your safety, and performance of the contract). During your rental the position data describes your movements, which is why we tell you about it here and in the rental contract. The locator is a fixed part of the boat and cannot be switched off; tracking is a condition of every rental, and if you do not agree to it we are unable to rent you a boat. The data is processed on our behalf by Sense4Boat d.o.o. (Croatia) in their tracking service and is looked at only when there is a reason to (an alarm, an emergency, a dispute about the navigation area or return time).

When you contact us
The contact form asks for your name, email and message. We use them only to reply (legal basis: our legitimate interest in answering inquiries, or steps before a contract). Messages sent through the form are also stored in our website’s message archive.

Phone, email and WhatsApp
If you call, write or message us, we keep the correspondence as long as it is needed to handle your inquiry or booking. If you choose WhatsApp, Meta’s own terms and privacy policy apply to the transmission of your messages.

Website usage (only with your consent)
With your consent we use Google Analytics 4 to understand how visitors use the site, and Google Ads to measure our advertising and show our ads to people who have visited the site (remarketing). We also record, without any personal details, when a visitor clicks our phone number, email or WhatsApp link. See Cookies below.

Cookies and similar technologies

When you first visit, a cookie banner lets you choose which cookies we may use. You can change your choice at any time with the cookie icon at the bottom of the page.

  • Necessary (always on): remember your cookie choice and keep the booking form working (cookieyes-consent, wp_consent_*, PHPSESSID, booking-session storage).
  • Analytics (only with your consent): Google Analytics 4 (_ga, _ga_*). Data retention at Google: 14 months.
  • Advertising (only with your consent): Google Ads conversion measurement and remarketing (_gcl_au, Google advertising cookies).

Until you accept, Google Analytics and Google Ads set no cookies on your device. We use Google Consent Mode, so Google receives only limited, cookieless signals.

Content loaded from other providers

Some parts of the site load from other servers. Your browser connects to them directly, so they see your IP address:

  • Optimole (image delivery network): serves the photos on this site.
  • Google Maps: the map on the Contact us page.
  • Google reCAPTCHA: protects the contact form from spam; loads only on pages with a contact form. Google may analyse your interaction with the page for this purpose.
  • Google Tag Manager: loads the analytics and advertising tags described above, subject to your consent.
  • CookieYes: provides the cookie banner.
  • Stripe: the payment page you are redirected to when paying by card.

Who else handles your data

We do not sell your data and share it only where needed:

  • Mydataknox d.o.o. (Croatia): hosts our website and email.
  • Stripe Payments Europe Ltd. (Ireland): online card payments.
  • Worldline: card payments on the POS terminal at check-in.
  • Zagrebačka banka d.d.: bank transfers.
  • Fira (invoicing and fiscalisation software, Croatia): issues our invoices.
  • Sense4Boat d.o.o. (Croatia): GPS tracking service for our boats.
  • Google Ireland Ltd. (Analytics, Ads, Tag Manager, Maps, reCAPTCHA): as described above. Google may transfer data outside the EU under the EU-US Data Privacy Framework.
  • Meta Platforms Ireland Ltd. (WhatsApp): only if you contact us or send documents via WhatsApp.
  • Optimole / Vertigo Studio SRL (Romania): image delivery.
  • CookieYes Ltd. (UK): cookie consent banner.
  • Our bookkeeping service: receives invoices and contracts as required for bookkeeping.
  • Croatian authorities (tax authority, harbour master’s office, police) where the law requires it, for example in the event of an accident or inspection.
  • Click&Boat: if you booked through the Click&Boat platform, its own privacy policy applies to the data you gave them.

How long we keep data

  • Rental contracts, invoices and booking records: 11 years after the end of the financial year, as required by Croatian accounting law.
  • Photos or scans of your licence and ID: deleted after the end of the season in which your rental took place, by 31 December of that year at the latest, unless a claim or dispute is still open.
  • GPS position data: held in the Sense4Boat service for the duration of our subscription; we export it only when needed for an incident or dispute, and then keep it with the contract file.
  • Contact messages that did not lead to a booking: deleted within 2 years of our last contact.
  • Analytics data: kept by Google for 14 months.
  • We do not use security cameras or record audio or video on the boats.

Your rights

You can ask us at any time to:

  • tell you what data we hold about you, correct it or delete it (where the law does not require us to keep it);
  • restrict or object to its use;
  • give you a copy in a portable format;
  • withdraw your consent, for example to cookies, with effect for the future.

Write to info@photoshore.hr and we will reply within 30 days. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr).

Changes

If we change how we handle data, we will update this page and the date at the top.