Privacy Policy

Croatia Outdoor
BDC d.o.o., Graščica 36, 10000 Zagreb, Croatia
VAT ID: 32986581405
Phone: +385 (1) 2035 001
E-mail: info@croatiaoutdoor.com

This Privacy Policy explains how BDC d.o.o., as the data controller, collects, uses, stores, and protects the personal data of users of the website croatiaoutdoor.com, users of bicycle rental services, participants in guided tours, business clients, persons sending inquiries, and persons registering for activities, tours, or other services offered by Croatia Outdoor.

By using the website, sending inquiries, making reservations, signing up for a tour, paying for a service, or communicating with us in any other way, the user confirms that they are familiar with this Privacy Policy.

1. Data Controller

The data controller is: BDC d.o.o., Graščica 36, 10000 Zagreb, Croatia, VAT ID: 32986581405, phone: +385 (1) 2035 001, e-mail: info@croatiaoutdoor.com.

For any questions related to personal data processing, exercising data subject rights, or withdrawing consent, users may contact us at: info@croatiaoutdoor.com.

2. Personal Data We Collect

Depending on how you use our website and services, we may collect the following personal data:

  • first and last name
  • email address
  • mobile or phone number
  • date and time of the requested rental, tour, or service
  • number of participants
  • company or organization name, especially for business clients and team-building programs
  • data required for issuing invoices or R1 invoices
  • delivery address or hotel/accommodation location, if bicycle delivery is arranged
  • special notes provided by the user when making a reservation or inquiry
  • payment-related data
  • communication data with the user
  • IP address and technical website usage data
  • data collected through cookies and similar technologies, in accordance with the Cookie Policy
  • photos and videos from tours or events, only if the user has given explicit consent

We do not collect special categories of personal data, such as health data, unless the user voluntarily provides such information when it is relevant for the safe provision of the service, for example special restrictions or notes related to physical activity. Such data is used exclusively for organizing and ensuring service safety.

3. Purposes of Processing

We process personal data for the following purposes:

  • responding to user inquiries
  • processing reservations for bicycle rentals, guided tours, team-building programs, and other services
  • organizing and delivering rentals, tours, excursions, and other activities
  • communicating with users before, during, and after service delivery
  • processing payments
  • issuing invoices and fulfilling accounting and tax obligations
  • sending notifications related to reservations or contracted services
  • sending newsletters and promotional communications, if the user has given consent or if another legal basis applies
  • marketing activities via tools such as Google Ads, Facebook, Instagram, and similar platforms, in compliance with consent requirements for non-essential cookies
  • website usage analysis via tools such as Google Analytics, where consent is required
  • improving service quality and user experience
  • publishing photos and videos from tours, events, or activities for marketing purposes, only with explicit user consent
  • protecting the rights and interests of BDC d.o.o., users, and third parties
  • compliance with legal obligations

4. Legal Basis for Processing

We process personal data based on one or more of the following legal grounds:

Performance of a contract or pre-contractual steps – applies when a user sends an inquiry, makes a reservation, or uses our services, and when data is required to provide the requested service.

Legal obligation – certain data is processed and retained to comply with accounting, tax, and other legal obligations.

User consent – used for processing personal data in cases where consent is required, such as newsletters, non-essential cookies, analytics and marketing tools, and publishing photos and videos.

Legitimate interest – in certain cases, data may be processed based on legitimate interest, such as protecting our rights, ensuring business security, preventing misuse, responding to complaints, or improving services, provided that users’ rights and freedoms do not override these interests.

5. Payments and Reservations

The website croatiaoutdoor.com may enable online reservations and payments for services, including bicycle rentals, guided tours, tour bookings, team-building programs, and other related services.

Data required for reservations and payments is processed for order fulfillment, confirmation of bookings, service organization, communication with users, and invoice issuance.

If payment is processed through a third-party payment provider, payment data is handled in accordance with that provider’s privacy policies. BDC d.o.o. generally does not store full card details unless explicitly enabled through a secure and authorized payment system.

6. Newsletter and Promotional Communications

If a user subscribes to the newsletter or gives consent to receive promotional communications, we may use their data to send information about our services, tours, offers, promotions, and updates.

We may use external tools such as Brevo and/or Mailchimp for newsletter distribution and marketing campaigns.

Users may unsubscribe at any time via the unsubscribe link in each newsletter or by sending a request to: info@croatiaoutdoor.com.

7. Photos and Videos from Tours and Events

During tours, excursions, team-building programs, and other activities, photos and videos of participants may be created.

Photos and videos in which a user can be identified may be used for marketing and promotional purposes, including publication on croatiaoutdoor.com, social media, promotional materials, and advertisements, only if the user has given explicit consent.

Consent for photography and use of images is not a condition for participating in tours or using services, unless photography is an integral part of a specifically agreed service.

Users may withdraw consent for future use of photos and videos at any time by contacting: info@croatiaoutdoor.com. Withdrawal does not affect the legality of processing carried out prior to withdrawal.

8. Cookies and Analytics Tools

The website croatiaoutdoor.com uses cookies and similar technologies to enable basic website functionality, analyze traffic, improve user experience, and support marketing activities.

We may use tools such as Google Analytics, Google Ads, Facebook/Meta advertising tools, Instagram and other Meta platforms, newsletter tools such as Brevo and/or Mailchimp, and other technical tools required for website operation, reservations, and payments.

More detailed information about cookies is available in our Cookie Policy.

9. Recipients of Personal Data

Personal data may be accessible to the following categories of recipients, when necessary for the stated purposes: employees and associates of BDC d.o.o., website development, maintenance and hosting providers, reservation and payment system providers, accounting services, newsletter and email marketing providers, analytics and marketing providers such as Google and Meta, competent authorities when required by law, and other service providers acting as data processors or independent controllers depending on their role.

Where applicable, data processing agreements are concluded with data processors.

10. International Data Transfers

Some service providers we use, such as Google, Meta, Brevo, Mailchimp, or other digital tools, may process data outside the European Economic Area.

In such cases, data transfers are carried out in accordance with applicable data protection laws, including appropriate safeguards such as Standard Contractual Clauses, adequacy decisions, or other permitted legal mechanisms.

11. Data Retention Period

We retain personal data only as long as necessary for the purposes for which it was collected, unless longer retention is required by law.

Generally: inquiry and communication data is kept for up to 12 months after the last communication; reservation and service data is kept for up to 12 months unless longer retention is required for legal, accounting, tax, or regulatory obligations; newsletter data is kept until consent is withdrawn or the user unsubscribes; cookie data is stored according to the Cookie Policy and the settings of each tool; photos and videos are used until consent is withdrawn or until the purpose for which consent was given ceases to exist.

Data that must be retained due to legal obligations, such as accounting documentation, is stored for the periods prescribed by applicable regulations.

12. User Rights

Users have the right to access their personal data, rectify inaccurate or incomplete data, erase personal data where legal conditions are met, restrict processing, object to processing, data portability where applicable, withdraw consent at any time when processing is based on consent, and lodge a complaint with a supervisory authority.

To exercise their rights, users may contact: info@croatiaoutdoor.com.

If a user believes their personal data is being processed unlawfully, they may contact the Croatian Personal Data Protection Agency, Selska cesta 136, 10000 Zagreb, Croatia, or via the official contact channels available on the Agency’s website.

13. Data Security

BDC d.o.o. implements appropriate technical, organizational, and security measures to protect personal data from unauthorized access, loss, misuse, alteration, or destruction.

Access to personal data is limited to individuals who require it for the performance of their duties and service provision.

14. Children’s Data

Our services may also be used by minors, but only with the consent of a parent, guardian, or other authorized adult, especially in relation to reservations, payments, participation in tours, or use of equipment.

We do not knowingly collect personal data from children without appropriate parental or guardian consent.

15. Changes to the Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in our business, website functionality, tools used, or applicable regulations.

The updated version will be published on croatiaoutdoor.com.

Last updated: June 1, 2026.

Scroll to Top