Privacy Policy

Effective Date: July 2026

Last Updated: July 2026

1. Introduction

This Privacy Policy explains how Commodore Yachting Croatia d.o.o. (“Commodore Yachting,” “we,” “us,” or “our”) collects, uses, and protects your personal information when you visit our website cmycro.com or use our booking services.

We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable Croatian data protection laws.

2. Data Controller

Commodore Yachting Croatia d.o.o.

Address: Bana Josipa Jelačića 23, 21400 Supetar, Croatia
OIB: 30960245443
VAT ID: HR30960245443
Legal Representative: Rafaela Šerka (Director)
Email: info@cmycro.com
Phone: +385 91 892 0603

3. Information We Collect

3.1 Information you provide when booking

When you book a charter through our booking system, we collect:

Full name
Email address
Phone number
Billing address
Payment information (processed by our booking partner)
Charter preferences (date, group size, route)

3.2 Information you provide when contacting us

When you contact us directly (email, phone, WhatsApp), we collect the information you choose to share, such as your name, contact details, and inquiry content.

3.3 Technical information

When you visit cmycro.com, our web server automatically logs basic technical information:

IP address
Browser type
Date and time of visit

This information is used solely for security and technical purposes.

4. How We Use Your Information

We use your personal information for the following purposes:

Processing bookings: to confirm and manage your yacht charter reservation
Communication: to respond to inquiries and provide customer service
Legal obligations: to comply with tax, accounting, and maritime regulations
Security: to protect our website and prevent fraud

We do not use your data for advertising, profiling, or automated decision-making.

5. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

Contract performance: processing necessary to fulfill our charter services (Art. 6(1)(b) GDPR)
Legal obligation: compliance with Croatian and EU law (Art. 6(1)(c) GDPR)
Legitimate interest: website security (Art. 6(1)(f) GDPR)

6. Data Sharing

We share your data only with the following parties:

FareHarbor — our booking and payment processing partner. FareHarbor processes your booking and payment information according to their own privacy policy (fareharbor.com/privacy)
Croatian authorities — when legally required for passenger registration, tax reporting, and maritime regulations
Legal advisors and accountants — bound by confidentiality obligations

We do not sell your personal data to third parties.

We do not share your data for marketing purposes.

7. International Data Transfers

FareHarbor is based in the United States. When you book through our website, your booking data is transferred to FareHarbor’s servers under appropriate safeguards including Standard Contractual Clauses.

8. Data Retention

We retain your personal data for the following periods:

Booking information: up to 10 years, as required by Croatian accounting and tax law
Inquiry information: up to 24 months after last contact

9. Your Rights Under GDPR

If you are located in the European Union or European Economic Area, you have the following rights:

Right of access: obtain a copy of your personal data
Right to rectification: correct inaccurate data
Right to erasure: request deletion of your data
Right to restriction: limit how we process your data
Right to data portability: receive your data in a structured format
Right to object: object to processing based on legitimate interest
Right to withdraw consent: for consent-based processing

To exercise these rights, contact us at info@cmycro.com. We respond within 30 days.

10. Your Rights Under CCPA (California Residents)

California residents have additional rights under the CCPA:

Right to know: what personal information we collect, use, and share
Right to delete: request deletion of personal information
Right to opt-out: we do not sell personal information, so no opt-out is required
Right to non-discrimination: we will not discriminate against you for exercising your rights

To exercise CCPA rights, contact us at info@cmycro.com with “CCPA Request” in the subject line.

11. Cookies

Our website uses only essential cookies necessary for functionality. See our Cookie Policy for details.

We do not use analytics, marketing, or advertising cookies.

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

SSL/TLS encryption for data transmission
Secure hosting infrastructure
Restricted access to personal data

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

13. Children’s Privacy

Our services are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at info@cmycro.com and we will delete it.

14. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to file a complaint with the competent supervisory authority:

Agencija za zaštitu osobnih podataka (AZOP)

Selska cesta 136

10000 Zagreb, Croatia

Website: azop.hr

15. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last Updated” date at the top indicates the most recent revision. Material changes will be communicated on this page.

16. Contact Us

For any questions about this Privacy Policy or your personal data, please contact us: