Privacy Policy

1. Introduction

The Šibenik Tourist Board, located at Fausta Vrančića 18, 22000 Šibenik, VAT ID 80775685291 (hereinafter: the Šibenik Tourist Board), collects and uses certain personal data in the course of its operations. The purpose of this policy is to ensure that the Šibenik Tourist Board fully complies with its legal, organizational, and technical obligations regarding the protection of personal data.

This policy applies to all personal data processed by the Šibenik Tourist Board concerning any individual, regardless of whether that person was, is, or will be a user, business partner, supplier, or contact.

2. Applicable Regulations

The Šibenik Tourist Board collects and processes personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 — GDPR), the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18), and other applicable regulations of the Republic of Croatia.

3. Definitions

Personal data refers to any information relating to an identified or identifiable individual, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, or an online identifier.

Processing means any operation performed on personal data, such as collection, recording, storage, consultation, use, disclosure, restriction, erasure, or destruction.

4. What data we collect and for what purpose

Business Entity Form

A form is available on the website through which business entities can request updates to their contact information in the tourist directory. We collect the data provided by the entity itself: the name of the entity, the contact person's full name, email address, phone number, and details about the facility and its offerings. The purpose of this processing is to ensure the accuracy and currency of publicly available tourist information. The legal basis is the performance of a task carried out in the public interest (Article 6(1)(e) of the GDPR) and, where necessary, the data subject's consent (Article 6(1)(a)).

Visit Statistics (Google Analytics)

To measure and improve website performance, we use the Google Analytics (GA4) service provided by Google Ireland Limited. Through cookies, this service collects data on website usage, such as pages visited, approximate location based on IP address, and the type of device and browser used. Analytical cookies are set only with your consent. The legal basis is consent (Article 6(1)(a) of the GDPR), which you can withdraw at any time via cookie settings. Details are provided in our Cookie Policy.

Hosting and Technical Support

The website is built and hosted on the Webflow platform (Webflow, Inc., United States). The hosting provider, acting as a data processor, may process technical data (such as IP addresses and server logs) to ensure the delivery and security of the website.

Consent Management (Cookiebot)

We use the Cookiebot tool (Usercentrics A/S, Denmark) to collect and record cookie consents. The tool stores a record of your consent, and the data is processed within the European Economic Area.

5. Data Transfers to Third Countries

Certain data processors, such as Google and Webflow, may process data outside the European Economic Area, primarily in the United States. In such cases, the transfer is based on appropriate safeguards in accordance with the GDPR, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

6. Data Subject Rights

Regarding the personal data processed by the Šibenik Tourist Board, data subjects have the following rights:

• Right to be informed — the right to be notified whether their data is being processed, for what purpose, who the data controller is, and which categories of data are being processed.
• Right of access — the right to obtain confirmation as to whether data concerning them is being processed, as well as access to that data and information regarding the processing.
• Right to rectification — the right to obtain the correction of inaccurate data or the completion of incomplete data without undue delay.
• Right to erasure ("right to be forgotten") — the right to request the deletion of data when it is no longer necessary, when consent is withdrawn, or when it has been processed unlawfully, subject to legal exceptions.
• Right to restriction of processing — the right to request a restriction on processing in cases provided for by law.
• Right to object — the right to object to processing based on a task of public interest or legitimate interest, as well as to processing for direct marketing purposes.
• Right to data portability — the right to receive their data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
• Right to withdraw consent — the right to withdraw given consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• Rights related to automated decision-making — the right not to be subject to a decision based solely on automated processing, subject to legal exceptions.

To exercise their rights, data subjects may contact the Data Protection Officer (contact details provided below). Data subjects also have the right to lodge a complaint with the supervisory authority — the Croatian Personal Data Protection Agency (AZOP), www.azop.hr.

7. Data Retention Period

Personal data is stored only for as long as necessary to fulfill the purpose for which it was collected, or in accordance with the timeframes prescribed by applicable regulations. Once the purpose has been fulfilled, the data is deleted or anonymized.

8. Data Security

The Šibenik Tourist Board implements appropriate technical and organizational measures to protect personal data against unauthorized or unlawful access, as well as accidental loss, alteration, or destruction. The Šibenik Tourist Board does not share collected data with third parties without the data subject's consent, except when necessary to fulfill legal obligations or tasks carried out in the public interest.

9. Data Protection Officer

Ivana Grubišić

Phone: 022 219 073

Email: ivana.grubisic@visitsibenik.hr

Any questions regarding personal data protection may be directed to the Data Protection Officer.

10. Changes to this Policy

The Šibenik Tourist Board reserves the right to amend this policy to align with best practices and any changes or updates to data protection regulations.

This policy was last updated on August 11, 2026.