PRIVACY POLICY

Aquapark Istralandia

Aquapark Istralandia (“we”, “us”, “our”) is committed to protecting and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website www.istralandia.com or interact with our services. It also outlines your rights under applicable data protection laws.

Please read this policy carefully to understand our views and practices regarding your personal data and how we will treat it.

INTRODUCTION

We respect your privacy and are committed to protecting your personal data. All personal data is collected and processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation (NN 42/2018), and other applicable data protection laws in the Republic of Croatia.

WHO IS THE DATA CONTROLLER?

The data controller responsible for processing your personal data is:

Aquapark Istralandia d.o.o.
Ronki 1, 52474 Brtonigla, Croatia
OIB: 3245196106
Email: info@istralandia.com

INFORMATION WE MAY COLLECT

We may collect and process the following types of personal data:

Contact details (name, email address, phone number) provided via enquiry or feedback forms
Booking and purchase information, including transaction details and communication regarding your reservation
Additional information required for special services (e.g. VIP experiences, events, corporate bookings), such as participant names, ages, or dietary requirements
Marketing preferences, if you choose to receive promotional materials
Survey responses (optional, used for research and service improvement)
Technical data such as IP address, browser type, device information, and website usage statistics
Correspondence with us via email or other communication channels

CHILDREN UNDER 16

We do not knowingly collect personal data from children under 16 for marketing purposes.

Children under 13 may not register for activities, competitions, or services without verified consent from a parent or legal guardian. In such cases, the parent or guardian is responsible for communication and consent.

WHERE WE STORE YOUR DATA

Your personal data is stored securely on protected servers. Payment transactions are encrypted using SSL technology and processed by certified third-party payment providers.

Where you are provided with login credentials, you are responsible for keeping them confidential.

While we take all reasonable measures to protect your data, transmission of information over the internet is not completely secure and is therefore at your own risk.

HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

To provide and manage our services and bookings
To improve website functionality and user experience
To communicate important service updates and booking information
To respond to your enquiries and requests
To send marketing communications (only with your consent)
To conduct surveys and improve our services
To comply with legal obligations

TICKETING PARTNERS

We cooperate with authorised ticketing and promotional partners who may sell our services.

When necessary to complete bookings or process payments, we may share relevant personal data with these partners. All partners are required to comply with applicable data protection laws and security standards.

We do not allow partners to use your data for marketing purposes unless you have given explicit consent.

MARKETING COMMUNICATIONS

If you have opted in to receive marketing communications, you may receive information about our offers, events, and services.

You can withdraw your consent at any time by clicking the unsubscribe link in our emails or contacting us at info@istralandia.com.

Even if you opt out of marketing, we may still contact you regarding your bookings or legal/operational updates.

DISCLOSURE OF DATA

We may share your personal data:

With companies within our corporate group
With third-party service providers acting on our behalf (e.g. IT services, booking systems, analytics providers)
In the event of a business sale, merger, or acquisition
If required by law or legal process

We do not sell your personal data.

All third parties are required to protect your data and process it only in accordance with our instructions and applicable law.

DATA RETENTION

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements.

Typically, customer data is retained for a minimum of six (6) years in accordance with applicable financial and tax regulations.

In some cases, data may be anonymised and used for statistical or research purposes without limitation.

YOUR RIGHTS UNDER GDPR

You have the following rights:

Right of access to your personal data
Right to rectification of inaccurate data
Right to erasure (“right to be forgotten”)
Right to object to processing
Right to restrict processing
Right to data portability
Right to withdraw consent at any time

To exercise your rights, please contact: info@istralandia.com

You may be asked to verify your identity before we process your request.

NO FEE USUALLY REQUIRED

You will not be charged for exercising your rights unless your request is clearly unfounded, repetitive, or excessive.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. Any changes will be published on this page.

CONTACT

If you have any questions about this Privacy Policy or how we handle your data, please contact us at:

📧 info@istralandia.com