Privacy Policy

How we handle personal data on this website, under the GDPR.

Controller

Contact form and email

If you send us an enquiry, we process the data you enter: your name, email address, and — where you provide them — preferred dates, number of guests, type of charter and the content of your message.

Purpose: to answer your enquiry and, where applicable, to prepare a charter agreement.
Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to enquiries).
Retention: we keep enquiries for as long as needed to deal with them and, where a charter follows, for the statutory retention periods. Enquiries that lead to nothing are deleted at the latest after two years.

Form processing

Submissions from the contact form are transmitted via an external form service, which forwards them to our mailbox. That provider processes the data on our behalf and may be located outside the European Union; transfers are covered by the European Commission's standard contractual clauses.

Hosting and server logs

This website is hosted by an external provider. When you visit the site, the hosting provider automatically records technical data — including your IP address, the time of the request, the page requested, and your browser and operating system — for the purpose of operating and securing the service. Legal basis: Art. 6(1)(f) GDPR.

Web fonts

This website loads typefaces from Google Fonts. Your browser therefore connects to a Google server, which receives your IP address. If you would prefer this not to happen, the fonts can be served from our own server instead — see the note at the end of this page.

Sharing your data

Where your enquiry leads to a charter, we pass the details needed for the booking to the owner of the yacht, Starfish Yachtcharter d.o.o., who concludes the charter agreement with you. Beyond that, and beyond the service providers named above, we do not share your data with anyone.

Your rights

Under the GDPR you have the right to:

• request access to the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• have processing restricted (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on legitimate interests (Art. 21)

To exercise any of these, write to info@exxcape.com.

Right to complain

You may lodge a complaint with a supervisory authority — in Croatia, the Personal Data Protection Agency (AZOP, Agencija za zaštitu osobnih podataka), or the authority in your country of residence.

Changes

We may update this policy when the website or the services behind it change. The version published here is the one that applies.