Privacy Policy

I. NAME AND ADDRESS OF THE CONTROLLER
The controller of personal data, within the meaning of the General Data Protection Regulation (GDPR) and other applicable EU and national laws, is:

ACTION YACHTS d.o.o.
Savska cesta 32, 10000 Zagreb, Croatia
OIB: 16033688533
E-mail: info@actionyachts.eu

 

II. GENERAL INFORMATION ON DATA PROCESSING

1. Scope of processing
   We process users’ personal data only to the extent necessary for the functioning of the website, our services, and content. Processing takes place exclusively on the basis of the user’s consent, unless otherwise required by law.

2. Legal basis of processing

• User’s consent – Art. 6(1)(a) GDPR

• Performance of a contract or pre-contractual measures – Art. 6(1)(b) GDPR

• Compliance with legal obligations – Art. 6(1)(c) GDPR

• Protection of vital interests – Art. 6(1)(d) GDPR

• Legitimate interests of the controller – Art. 6(1)(f) GDPR

   3. Deletion and retention periods

• Personal data are deleted or blocked once the purpose of their processing ceases to exist. Retention may continue if required by EU or Croatian legislation. After statutory retention periods expire, data are deleted unless needed to fulfill a contract or protect legal claims.

 

III. WEBSITE OPERATION AND LOG FILES
We automatically collect: IP address, browser type, operating system, internet service provider, date and time of access, and visited pages.

• Legal basis: Art. 6(1)(f) GDPR (legitimate interest – system security, optimization).

• Retention period: max. 180 days.

• Objection: not possible, as storage is technically necessary for the functioning of the site.

 

IV. USE OF COOKIES

A) Description and purpose
We use mandatory cookies for website functionality and analytical cookies (Google LLC, USA) for statistics and content improvement. Data are pseudonymized.

B) Legal basis

• Mandatory cookies – Art. 6(1)(f) GDPR

• Analytical cookies – Art. 6(1)(a) GDPR (user consent)

C) Retention and deletion
Users may delete or block cookies at any time via their browser settings. Deactivation may limit website functionality.

 

V. CONTACT FORM AND EMAIL COMMUNICATION
Collected data: IP address, date and time, message content, and email address.

• Legal basis: Art. 6(1)(a) GDPR (consent) or Art. 6(1)(b) GDPR (contractual purpose).

• Retention: until the communication ends or max. 7 days thereafter.

• Users may withdraw consent and request deletion at any time by contacting info@actionyachts.eu.

 

VI. RIGHTS OF DATA SUBJECTS
Under GDPR, users have the right to:

• access their data,

• rectification,

• erasure (“right to be forgotten”),

• restriction of processing,

• data portability,

• objection,

• withdraw consent,

• lodge a complaint with the supervisory authority (AZOP – Croatian Personal Data Protection Agency).

 

VII. VIDEO SURVEILLANCE AND MONITORED AREAS
Video surveillance is operated by ACTION YACHTS d.o.o. for the protection of property, employee safety, and compliance with legal obligations.

• Purpose: protection of legitimate interests (Art. 6(1)(f) GDPR), attendance records, occupational safety at construction sites.

• Data: video recordings of individuals.

• Access: state authorities, courts, investors – only in accordance with the law.

• Retention: in line with statutory periods; deleted once the period expires.

• Rights of data subjects: access, rectification, erasure, portability, objection.

 

VIII. FINAL PROVISIONS
This Privacy and Personal Data Protection Policy enters into force on 1 February 2025 and is available on the official website www.waverideclub.com and at the offices of ACTION YACHTS d.o.o.