The data controller responsible for the processing of your personal data is: AB OVO obrt za cestovni prijevoz Owner: Anita Žigo Lička 3, 21300 Makarska, Croatia Email: abovo.online@gmail.com Phone: +385 95 767 9414

When you submit an inquiry or booking request through our contact form, we collect the following information: full name, email address, phone number (optional), your preferred tour and date, number of guests, and any message you include. We do not collect payment card data through this website.

We use your personal data solely to respond to your inquiry, confirm and manage your tour booking, and send you relevant follow-up information about your booking. We do not use your data for marketing purposes without your explicit consent.

We process your data on the following legal bases under Article 6 of the GDPR: • Performance of a contract (Art. 6(1)(b)): processing necessary to respond to your booking request and fulfil the service you requested. • Legitimate interests (Art. 6(1)(f)): processing necessary to handle inquiries and communicate with prospective guests in the normal course of our business.

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected. Booking-related data is kept for up to 3 years for accounting and legal compliance purposes. Inquiry data with no resulting booking is deleted within 12 months.

We do not sell, rent, or share your personal data with third parties for commercial purposes. Your data may be disclosed to competent authorities where required by law.

This website uses Vercel Analytics to understand how visitors interact with our pages. Vercel Analytics is privacy-first: it does not use cookies, does not collect personally identifiable information, and does not track you across websites. No cookie consent banner is required. Aggregate, anonymised statistics are used solely to improve the performance and content of our website.

As a data subject in the European Union, you have the following rights: • Right of access – you may request a copy of your personal data we hold. • Right to rectification – you may ask us to correct inaccurate data. • Right to erasure – you may request deletion of your data where there is no legitimate reason for us to continue processing it. • Right to restriction – you may ask us to restrict the processing of your data in certain circumstances. • Right to data portability – you may request your data in a structured, commonly used format. • Right to object – you may object to processing based on legitimate interests. To exercise any of these rights, please contact us at abovo.online@gmail.com. We will respond within 30 days.

If you believe we have not handled your data in accordance with the GDPR, you have the right to lodge a complaint with the Croatian Data Protection Agency (AZOP): Agencija za zaštitu osobnih podataka (AZOP) Selska cesta 136, 10000 Zagreb, Croatia www.azop.hr azop@azop.hr

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last revised. Continued use of our website after any changes constitutes acceptance of the updated policy.