Privacy Policy
1. Introduction & Overview
Sortsyvaultsprout Adriatic Adventures d.o.o. ("we", "our", "us", or "Sortsyvaultsprout") operates the website sortsyvaultsprout.cfd (the "Service"). This Privacy Policy explains our practices regarding the collection, use, protection, and disclosure of personal data received from users of the Service under the European Union General Data Protection Regulation (EU GDPR Regulation 2016/679), the Croatian Personal Data Protection Act, and the California Consumer Privacy Act (CCPA).
2. Data Controller Details
The entity responsible for processing your personal information is:
Sortsyvaultsprout Adriatic Adventures d.o.o.
Company Registration Number: HR-84920194821
Registered Office: Obala maršala Tita 14, 52440 Poreč, Istria, Croatia
Data Protection Officer (DPO) Contact: [email protected]
3. Categories of Personal Data Collected
We collect data that you voluntarily provide to us when using our contact forms, interactive itinerary planners, and newsletter subscriptions, as well as automated diagnostic data:
- Direct Contact Data: Name, email address, telephone contact (if provided), and inquiry content submitted via our interactive forms.
- Usage & Navigation Metrics: IP addresses, browser user agent strings, pages visited, referral paths, time spent on individual water park reviews, and device specifications.
- Planner Preference Data: Selected travel dates, family group sizes, thrill level preferences, and regional interests stored locally in browser state.
4. Lawful Grounds for Processing
Under GDPR Article 6, we process personal information based on the following legal grounds:
- Consent (Art. 6(1)(a)): Explicit consent provided by you when opting into marketing updates or voluntary non-essential cookies.
- Performance of a Contract or Pre-Contractual Steps (Art. 6(1)(b)): Responding to your direct requests for park tour coordination or bespoke concierge assistance.
- Legitimate Interests (Art. 6(1)(f)): Maintaining site security, preventing malicious spam attacks, and improving the UX performance of our interactive 3D WebGL features.
5. Third-Party Service Processors
We engage vetted third-party service providers to ensure seamless hosting, performance optimization, and analytics:
- Content Delivery Networks & Hosting: Encrypted European cloud infrastructure ensuring low latency.
- Analytics Processors: Anonymized statistical tracking without persisting raw IP addresses.
6. Your Statutory GDPR and CCPA Rights
You maintain fundamental statutory rights regarding your personal information:
- Right to Access: Request a full copy of the personal information we hold concerning you.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): Request full deletion of your contact records where no legal obligation to retain exists.
- Right to Restrict Processing & Object: Object to processing for direct marketing purposes.
- Right to Data Portability: Obtain your data in a structured, machine-readable format.
To exercise any of these rights, email our Data Protection Officer at [email protected]. We respond to all verified requests within 30 calendar days.
7. Data Retention & International Transfers
We retain personal contact inquiries for a maximum duration of 24 months from the last communication, unless required for legal defense. All data is processed primarily within the European Economic Area (EEA). If any subprocessors are located in third countries, standard contractual clauses (SCCs) are applied.
8. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in legal mandates or service features. Revisions will be published on this page with an updated effective date.