Legal
Privacy Policy
1. Who we are
This website, tallyscoutnimbl.boats, is operated by Tallyscoutnimbl Nautika d.o.o., company number (OIB) 48219375061, registered at Obala Lazareta 3, 21000 Split, Croatia. We are the data controller for personal data processed through this site. You can reach us at [email protected].
2. Data we collect
We collect only what we need to run the site and answer your questions:
- Contact form data — your name, email address, the topic you select and the content of your message.
- Technical data — IP address, browser type, device information and pages requested, recorded automatically in server logs for security and troubleshooting.
- Consent records — your cookie choice, stored in your browser so we do not ask again.
- Analytics data — aggregated, pseudonymised usage statistics, collected only if you accept analytics cookies.
We do not knowingly collect data from children under 16, and we do not collect special categories of data.
3. How we use data and our legal bases
Under the EU General Data Protection Regulation (GDPR), we rely on: consent (Article 6(1)(a)) for analytics and functional cookies; steps prior to entering a contract (Article 6(1)(b)) when you ask us about our editorial services; and legitimate interests (Article 6(1)(f)) for keeping the site secure and answering general enquiries. We never use your data for automated decision-making that produces legal effects.
4. Cookies
We use essential cookies and similar storage to run the site and remember your consent choice. Analytics and functional cookies are used only with your permission. Full details, including a table of every cookie, are in our Cookie Policy.
5. Third-party processors
We use a small number of service providers who process data on our behalf under written data processing agreements: a web hosting provider that stores server logs, an email service provider that delivers messages sent through the contact form, and — only if you consent — an analytics provider. Processors may use data only to provide their service to us. We do not sell or rent personal data.
6. International transfers
Where a processor stores data outside the European Economic Area, we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses, together with any supplementary measures required.
7. Retention
- Contact enquiries: 24 months after our last exchange, then deleted.
- Server logs: 30 days, unless needed to investigate a security incident.
- Analytics data: 14 months in aggregated form.
- Consent record: stored in your browser until you clear it or change your choice.
8. Your rights under the GDPR
You have the right to access your data, correct it, erase it, restrict or object to processing, receive it in a portable format, and withdraw consent at any time without affecting earlier processing. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or the supervisory authority in your country.
9. Your rights under the CCPA
If you are a California resident, the California Consumer Privacy Act, as amended, gives you the right to know what personal information we collect, to request deletion or correction, and to opt out of the sale or sharing of personal information. We do not sell or share personal information for cross-context behavioural advertising. We will not discriminate against you for exercising these rights.
10. Data Protection Officer
For any privacy question or to exercise your rights, contact our Data Protection Officer at [email protected] or by post at Obala Lazareta 3, 21000 Split, Croatia. We respond within one month, extendable in complex cases as the law allows.
11. Changes to this policy
We may update this policy when our practices or the law change. The date at the top shows the latest version.