Unda mora d.o.o. takes your privacy seriously. This policy explains what data we collect, why we collect it, and the rights you have under the GDPR.
1. Who We Are
Unda mora d.o.o. ("we", "us", "our") operates the websites morayachting.com and unda-mora.vercel.app. We are a data controller under the General Data Protection Regulation (EU) 2016/679 ("GDPR").
Unda mora d.o.o.
Director: Vedran Šubić
Starogradska ulica 10, 48000 Koprivnica, Croatia
Email: info@undamora.com
2. Data We Collect
| Category | Examples | Basis |
|---|---|---|
| Identity | Name, nationality, date of birth | Contract performance |
| Contact | Email, phone, address | Contract / Legitimate interest |
| Booking | Charter dates, vessel, guest list | Contract performance |
| Dietary / Medical | Allergies, dietary preferences | Explicit consent + contract |
| Financial | Payment reference (not card data) | Contract performance |
| Technical | IP address, browser, device | Legitimate interest |
| Communications | Enquiry messages, emails | Legitimate interest |
3. How We Use Your Data
- To process and manage your charter booking.
- To communicate regarding your reservation.
- To comply with Croatian maritime and tax law (crew list, tourist tax).
- To improve our website and services.
- To send relevant marketing communications (with your consent, withdrawable at any time).
4. Data Retention
- Booking data: 7 years (Croatian accounting law requirement).
- Marketing preferences: until withdrawn.
- Website analytics: 26 months.
- Enquiry data (non-booking): 2 years.
5. Your Rights Under GDPR
You have the right to:
- Access — request a copy of your personal data.
- Rectification — correct inaccurate data.
- Erasure — request deletion ("right to be forgotten"), subject to legal retention requirements.
- Restriction — limit how we process your data.
- Portability — receive your data in a machine-readable format.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — at any time where processing is consent-based.
To exercise any right, contact info@undamora.com. We will respond within 30 days. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP): azop.hr.
6. Data Sharing
We do not sell your data. We may share it with:
- Payment processors (for transaction processing only).
- Croatian maritime authorities (legal requirement — crew lists).
- Email service providers (marketing, with DPA in place).
- IT hosting providers (with appropriate safeguards).
All third parties are contractually bound to handle data per GDPR standards.
7. International Transfers
Where data is transferred outside the EEA, we ensure appropriate safeguards (Standard Contractual Clauses or adequacy decisions).
8. Security
We implement appropriate technical and organisational measures to protect your personal data, including SSL encryption, access controls, and regular security reviews.
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help websites function properly and provide usage insights.
Cookies We Use
| Cookie Type | Purpose | Duration | Opt out? |
|---|---|---|---|
| Essential | Website functionality, session management | Session | No (required) |
| Analytics | Understand how visitors use the site (Google Analytics / Plausible) | 26 months | Yes |
| Preferences | Remember language and settings | 12 months | Yes |
| Marketing | Targeted advertising (if enabled) | 90 days | Yes |
Managing Cookies
You can control cookies through:
- Our cookie consent banner (on first visit).
- Your browser settings.
- Opt-out tools provided by analytics providers.
Third-Party Cookies
We may use Google Analytics (opt-out: tools.google.com/dlpage/gaoptout), Meta Pixel (if advertising enabled), and Vercel analytics.
Unda mora d.o.o. · Starogradska ulica 10, 48000 Koprivnica, Croatia · Questions: info@undamora.com · See also our Terms & Conditions.