Privacy Policy

How we collect, use and protect your personal data

Last updated: 28 October 2026

1. Data Controller

Croatian Nautical Hub, established in the Republic of Croatia, acts as the data controller for personal data collected through this platform, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Croatian data protection laws.

2. Information We Collect

2A. Favourites and Private Memos

When you save a listing to your favourites, we store the listing reference and any private memo you add, linked to your account. We use this information to provide the saved listings and personal reminders you request.

Your favourites and private memos are not displayed to other members or shared with listed businesses through this feature. Authorised CNH personnel and service providers may access them where necessary to operate, support or secure the platform. You can edit or clear your memo, or remove the favourite.

2B. My Vessel

My Vessel is optional. If you use it, we store the vessel name, vessel type, length, home marina, country of registration, insurance company and insurance expiry date that you provide, linked to your account. We use these details to provide your saved vessel profile and insurance-expiry indicators.

These details are not displayed to other members or automatically sent to marinas, insurers or other listed providers through this feature. Authorised CNH personnel and service providers may access them where necessary to operate, support or secure the platform. You can update or delete your saved vessel details.

We process the information needed to provide these optional account features at your request under Article 6(1)(b) GDPR. Using these features is not required to register or purchase a subscription.

Please keep private memos relevant to the listing. Do not include passwords, payment-card details, identity-document numbers, health information or other sensitive personal information. Avoid including unnecessary personal information about other people.

2C. Reviews and Reviewer Names

When you submit a review, we store your rating, comment, submission date, the listing concerned, moderation status, reviewer display name and a link to your account. Reviews are checked by CNH before approval. Approved reviews are available to signed-in users.

If you choose to post anonymously, other members see "Anonymous" instead of your name. CNH still retains the link between your review and your account for moderation, support and prevention of misuse. This option does not make the review anonymous to CNH. If you do not select anonymous posting, your saved name may be displayed alongside the review. Information you include in the comment itself may also identify you.

We process review submissions to provide the review feature you request under Article 6(1)(b) GDPR. We also moderate reviews and investigate misuse based on our legitimate interests in maintaining a trustworthy and secure community under Article 6(1)(f) GDPR, subject to your rights and interests.

To request correction or removal of your review, contact info@croatiannauticalhub.com. Please keep reviews relevant to your experience and avoid publishing private contact details or unnecessary personal information about others.

3. Business Listings and Publicly Available Information

Croatian Nautical Hub compiles and publishes maritime business listings, including marinas, nautical service providers, marine mechanics, fuel providers, charter-related services, and other relevant Adriatic maritime businesses. Listing information may include business names, addresses, coordinates, phone numbers, email addresses, websites, working hours, service categories, and factual notes about services offered. This information is researched manually and compiled from publicly available sources, including company websites, public directories, official sources, and other publicly accessible business information.

4. Legal Basis for Processing

5. Business Listing Corrections, Updates, and Removal Requests

If you are a business owner, authorised representative, or affected person and believe that a listing is inaccurate, outdated, incomplete, or should not appear on the platform, you may contact us to request correction, update, or removal. We will review such requests within a reasonable time. Where personal data is involved, applicable GDPR rights may apply.

6. Data Storage & Security

We use Supabase for database and authentication services. Our primary database is hosted in the eu-west-1 region in Ireland. Choosing this region does not mean that all supporting processing remains within the European Economic Area. Support, account administration and other supporting services may involve processing outside the EEA. Supabase's Data Processing Addendum incorporates Standard Contractual Clauses for applicable international transfers. You can contact info@croatiannauticalhub.com for information about the relevant transfer safeguards. We use access controls, authentication and other technical and organisational measures to protect personal data.

7. Payments

Subscription payments are processed through PayPal and Stripe. We process subscription and transaction information where necessary to provide your subscription, manage payments and comply with applicable legal obligations. Payment providers process personal data in accordance with their respective roles and privacy policies. Payment-card details and payment-account credentials are handled by the payment providers; Croatian Nautical Hub does not store full payment-card numbers or payment-account passwords.

8. Account and Service Emails

We use your email address to send account confirmations, authentication and password-reset messages, subscription and payment notifications, and responses to support requests. Where these messages are necessary to provide your requested account or subscription services, we rely on Article 6(1)(b) GDPR. We currently do not operate a newsletter. If we introduce a newsletter or promotional email programme, we will provide separate information and obtain consent where required. Registering an account does not automatically subscribe you to promotional emails.

If you separately opt in during registration, we use your email address to send one membership-completion reminder if your email is confirmed and your membership remains unpaid at least 24 hours after registration. We rely on your consent under Article 6(1)(a) GDPR for this reminder. This permission is optional and is not required to register or subscribe. Before the reminder is sent, you can withdraw permission on the payment page or by contacting info@croatiannauticalhub.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal. We record your consent choice and, where applicable, its withdrawal.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for essential website functionality and, with your consent, Google Analytics. You can accept or reject analytics through the cookie banner and change your choice through Cookie Preferences in the footer. We do not currently use affiliate tracking. In future, we may introduce affiliate links through which we could earn a commission on qualifying purchases or bookings. Before introducing these features, we will update this policy to explain the providers, information involved and any tracking used, and obtain consent where required.

With your consent, we use Google Analytics 4 on selected website pages to understand website usage and measure registration and subscription journeys. Google Analytics uses cookies and processes information such as cookie identifiers, page views, selected interactions, browser and device information, and approximate location. We rely on consent under Article 6(1)(a) GDPR for this analytics processing.

Google Analytics is provided by Google Ireland Limited. Analytics data may be processed outside the European Economic Area, including in the United States. Google describes its transfer safeguards as including the EU–US Data Privacy Framework for applicable transfers to certified US entities and Standard Contractual Clauses where applicable. You can contact info@croatiannauticalhub.com for information about the relevant safeguards.

Google's information about international data transfers

Analytics is not loaded through our analytics integration until you select Accept in the cookie banner. You can withdraw consent through Cookie Preferences in the footer and select Reject. Refusing analytics does not prevent registration or use of your subscription. Our integration excludes the trip planner, dashboard and authentication callback pages, and removes query parameters and URL fragments from the page addresses it sends.

We have configured Google Analytics user-level and event-level retention to two months, with retention reset on new activity disabled. These controls do not apply to standard aggregated reports. Analytics cookies have a separate lifetime; the main _ga cookie can last up to two years under Google's default settings. Withdrawing consent stops future collection through our integration; it does not automatically erase data already collected or remove existing cookies. You can remove stored cookies through your browser settings.

How Google uses information from websites using its services

10. Affiliate Links

We do not currently use affiliate links or affiliate tracking. In future, we may introduce affiliate links through which we could earn a commission on qualifying purchases or bookings. We will clearly identify affiliate links and, before introducing them, update this policy to explain the providers, information involved and any tracking used, and obtain consent where required.

11. Third-Party Services

We may use third-party providers for hosting, authentication, database services, payments, analytics, email communications, maps, weather data, affiliate tracking, and other platform functions. These providers may process limited personal data only where necessary to provide their services and in accordance with applicable data protection laws.

12. Data Accuracy Disclaimer

We make reasonable efforts to keep platform and business listing information accurate and up to date. However, information may be compiled from external public sources and may not always be complete, current, or error-free. Users and listed businesses are encouraged to contact us with corrections or updates.

13. User Rights Under GDPR

To exercise your data protection rights, contact info@croatiannauticalhub.com. We respond without undue delay and normally within one month of receiving your request. Where necessary, taking into account the complexity and number of requests, we may extend this period by up to two further months. If an extension is needed, we will inform you within the first month and explain the reasons. Requests are normally handled free of charge. Where we have reasonable doubts about your identity, we may request additional information necessary to confirm it.

14. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, including account management, subscription access, legal compliance, accounting, security, dispute resolution, and legitimate business purposes. Business listing information may remain published for as long as it is relevant to the maritime directory, unless corrected, removed, or objected to in accordance with applicable law.

14A. My Croatia Trip Planner

When you use My Croatia Trip, we store the information you save in the planner and link it to your account. This may include trip names, travel dates, selected towns, marinas, services and other stops, booking references, booking status, estimated costs, budgets and personal notes. Using the planner is optional.

We process this information to provide the trip-planning service you request as part of your subscription, relying on Article 6(1)(b) GDPR where processing is necessary to provide that service. Saving a listing in your planner does not make a booking or send your itinerary or booking reference to the listed provider.

After your subscription expires, we retain your saved trips for one calendar month to allow you to recover them if you renew. For this limited renewal period, we rely on our legitimate interest in providing continuity of service under Article 6(1)(f) GDPR, subject to your rights and interests. If you do not renew, trips and their associated stops are scheduled for deletion from the active database at the next daily cleanup after that period, normally within a further 24 hours. This cleanup does not delete your account or records retained separately for other lawful purposes.

While you have access to the planner, you can edit or delete your saved trips and stops. You can also contact info@croatiannauticalhub.com to request access, correction, deletion, restriction or, where applicable, a machine-readable copy of your planner data, or to object to processing based on legitimate interests. These requests can also be made after your subscription expires. To request account deletion, contact the same email address. We may request proportionate information to verify your identity where necessary.

Please keep notes relevant to your trip. Do not enter payment-card details, passwords, passport or identity-document numbers, health information or other sensitive personal information. Avoid including personal information about other people unless necessary and you have an appropriate basis to provide it.

14B. Favourites, Private Memos and Vessel Details

After your subscription expires, we retain your saved favourites, private memos and optional My Vessel details for one calendar month so they are available if you renew during that period. For this limited renewal period, we rely on our legitimate interest in providing continuity of service under Article 6(1)(f) GDPR, subject to your rights and interests. If you do not renew, these details are scheduled for removal from the active database at the next daily cleanup after that period, normally within a further 24 hours. This cleanup does not delete your account, reviews or records retained separately for other lawful purposes. You may also request earlier deletion by contacting info@croatiannauticalhub.com.

14C. Review Retention and Account Deletion

Approved reviews are not automatically removed when a subscription expires. We retain them while they remain relevant to the listing and useful to the community, subject to moderation and applicable data protection rights. Where reviews contain personal data, continued retention relies on our legitimate interest in providing trustworthy community feedback under Article 6(1)(f) GDPR, subject to your rights and interests.

When handling an account deletion request, we assess approved reviews individually. We may retain a review only after removing its account link, replacing the reviewer name and checking the content and remaining details to ensure the author is no longer identifiable. If this cannot be achieved, we remove the review unless a separately assessed lawful reason requires retention. Pending and rejected reviews linked to the account are deleted with it. Approval does not prevent you from requesting correction or erasure of personal data in a review. Contact info@croatiannauticalhub.com.

15. Independent Informational Platform

Croatian Nautical Hub is an independent informational maritime platform. We are not an official maritime authority, marina operator, vessel operator, charter company, or regulatory body. Users remain responsible for verifying critical information directly with official sources or service providers.

16. Contact Information

Croatian Nautical Hub, obrt za usluge,
suvl. Valentina Čorak i Martina Boljkovac
Bračka 6
23210 Biograd na Moru
Republic of Croatia
Email: info@croatiannauticalhub.com
OIB: Available upon request

Your Privacy Matters

🛡

We are committed to protecting your personal data and privacy.

⚙️

You have control over your data and preferences.

🔒

This policy explains how we collect, use, and protect your information.