CONTACT

SESTRA MARE · DATA PROTECTION

Privacy Policy

Your privacy and trust matter to us. This policy explains which data we process through sestramare.com, why we do so, and the rights available to you.

REVIEW DRAFT — DO NOT PUBLISH UNTIL VERIFIED. Confirm the legal name and status of the data controller, postal contact address, hosting and email providers, retention periods and actual cookies. If health information is processed outside the public contact form, describe that processing separately and establish a valid legal basis.

1. Who controls your data?

This website is operated under the name Sestra Mare. Full registered name and relevant registration details: [TO BE CONFIRMED]. Privacy questions: info@sestramare.com. Controller postal address: [TO BE CONFIRMED — the website lists Lumbarda 20, Korčula Island, Croatia as a location, which may not be the controller’s registered address].

2. What information is collected?

  • Contact form: your name, email, optional telephone number, type of inquiry and message.
  • Event announcements subscription: email address, confirmation status and information necessary to manage the subscription; signup uses email confirmation.
  • Technical data: information needed for basic operation and security, potentially including IP address, server logs and browser data depending on hosting and security configurations.
  • Cookies: strictly necessary cookies and, where installed and consented to, optional analytics or embedded-content cookies.

Please do not send medical records, diagnoses, national identification numbers or other sensitive information through the public contact form. Any health-data processing associated with separate consultations requires its own clear arrangements and safeguards.

3. Purposes and legal bases

  • Replying to inquiries and consultation requests: steps taken at your request prior to a contract and/or legitimate interests in managing communications.
  • Sending event announcements: your consent, which may be withdrawn at any time.
  • Site security, abuse prevention and maintenance: legitimate interests or applicable legal obligations.
  • Optional analytics and third-party features: consent when required.

4. How the information is used

Contact inquiries are delivered through the site’s email system for responding to you. Subscriber email addresses are held in a non-public WordPress administrative list. We do not sell personal information or use it for unrelated marketing without an appropriate legal basis.

5. Service providers and international transfers

Hosting, email, maintenance and security providers may process information solely as needed to deliver their services. The precise provider inventory and any processing outside the EEA must be verified: [HOSTING, EMAIL, ANALYTICS, INSTAGRAM EMBEDS, ANY ACTIVE CHECKOUT SERVICES — TO BE CONFIRMED]. Visiting linked social media sites is subject to their own privacy practices.

6. Retention

We keep inquiries and related emails only as long as needed to answer requests, handle related issues or meet legal requirements. Event subscriber addresses are kept until you unsubscribe or another applicable lawful reason requires removal. Exact operational retention periods, server logs and backup handling: [TO BE CONFIRMED BEFORE PUBLICATION].

7. Cookies

Necessary cookies support essential functions, security and relevant user features. Optional analytics or third-party embedded-content cookies should only be used in line with your choices where consent is needed. You will be able to update these choices through cookie preferences once the consent system has been configured. A verified cookie list, purposes and expiry periods will be published based on an actual scan of the website.

8. Your rights

Depending on the circumstances, you may request access, rectification, erasure, restriction, portability, or object to processing. You may withdraw consent at any time without affecting past lawful processing. Contact info@sestramare.com. You may also lodge a complaint with Croatia’s data protection authority (AZOP): azop.hr.

9. Security and updates

We take reasonable technical and organisational measures to protect personal information. We may update this policy to reflect changes to our practices or applicable rules. The final last-updated date will be added following approval.

Privacy contact: info@sestramare.com