Last updated: 9 October 2026
This policy explains what personal data we process when you visit excursiones.acroacia.com, write to us or book a tour, what we use it for and what rights you have. It is governed by Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD).
1. Data controller
- Owner: Mario Fajt (A Croacia)
- Tax ID (NIF): X3932473W
- Address: Edificio Portillo, Avenida Ricardo Soriano 34, 29601 Marbella (Málaga), Spain
- Email: excursiones@acroacia.com
- Phone / WhatsApp: +34 600 988 287
2. What data we process and why
- Bookings: when you book a tour we process your name, email, phone number, the tour, the date, the number of people and the payment details (amount, method and transaction reference). We use them to manage your booking, send you the confirmation with the meeting point, let you know about weather-related changes and deal with any issue.
- Local operators: so that the tour can take place, we give the local operator running it (boat, guide or transport) only the essential details: name, phone number, date and number of people.
- Enquiries: if you write to us via WhatsApp, email or the contact form, we process your name, your contact details and whatever you tell us in order to reply.
- Unfinished booking reminder: if you start a booking but do not complete the payment, we may send you a single reminder email.
- Feedback request: after the tour we send you a single email asking how it went and, if you wish, inviting you to leave a review.
- Customer account: if you create an account in the shop, we process your login details and your order history.
- Statistics and advertising: if you accept them in the cookie notice, we use Google Analytics, Google Ads and StatCounter to find out how many visits the website gets, where they come from and whether our ads work.
3. Legal basis
- Performance of a contract (or pre-contractual steps): managing your booking, passing details to the local operator, notices about the tour and customer support.
- Legitimate interest: the unfinished booking reminder and the feedback request, always a single message and with the right to object.
- Consent: enquiries you send us, and statistics and advertising cookies.
- Legal obligation: invoicing, accounting and tax obligations.
4. How long we keep your data
- Bookings and invoicing: for as long as needed to provide the service and, afterwards, for as long as the law requires (generally up to six years for accounting and tax records).
- Enquiries that do not lead to a booking: up to one year after the last contact.
- Unfinished bookings: deleted or anonymised within one year at the latest.
5. Who we share it with
We do not sell or pass on your data. Only those who need it to provide the service have access to it, with the safeguards required by the GDPR:
- Local operators in Croatia who run the tour (minimum data, see section 2).
- Payments: Stripe (card) and PayPal. If you pay by Bizum, the payment is handled by your bank.
- Web hosting, with servers in the European Union, and the website's email delivery service.
- Google (Analytics, Ads, Maps, Google reviews and fonts), StatCounter (statistics) and WhatsApp (Meta), if you choose to contact us via WhatsApp.
- Tax authorities and tax advisers, when required by law.
Some of these providers may process data outside the European Economic Area (for example, in the United States). In those cases they do so under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission. The local operators are in Croatia, within the European Union.
6. Your rights
You can ask us at any time for access to your data, its rectification or erasure, restriction of or objection to its processing and its portability, and you can withdraw any consent you have given. Write to us at excursiones@acroacia.com stating which right you wish to exercise.
If you believe we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD).
7. Cookies
The website uses technical cookies needed for it to work (booking, cart, login and cache) and, only if you accept them, statistics and advertising cookies. You will find all the details in the cookie policy.