Guide Pola • Legal information
Clear information about our processing of personal data under the GDPR and applicable Croatian law. Last updated: August 17, 2026.
The controller is GUIDEPOLA, a joint craft business for tourist guiding and travel-agency services, owned by Rossana Matejčić Miljević and Siniša Miljević, Šibenska ulica 14, 52100 Pula, Croatia; Croatian tax ID (OIB) 99914412628; craft registration number (MBS) 97912824. For privacy questions or to exercise your rights, email ciaotrav@gmail.com or call +385 98 824 371.
When you submit an inquiry, we process the information you enter: name, email address, optional phone or WhatsApp number, preferred date, party size, requested tour, and message. Technical providers may also process information strictly needed to deliver and protect the site, such as IP address, browser type, request date and time, and security logs. Please do not include sensitive information that is not needed for your request.
We use your information to respond, prepare a proposal, and take pre-contractual steps at your request; to confirm and deliver a booked service; to meet tax, accounting, and other legal duties; and, where necessary, to protect the site and prevent abuse based on our legitimate interests. We do not use inquiry details for newsletters or direct marketing without separate consent.
Information is available only to people who need it to handle your inquiry or service. We may use hosting, security, and email-delivery providers, including ChatGPT Sites/OpenAI infrastructure, Cloudflare, and Resend, which process information under applicable contractual and legal safeguards. When needed for your requested service, we share only necessary details with guides, drivers, producers, museums, or other partners identified in the proposal.
Some technology providers may process information outside the European Economic Area. Where this occurs, the transfer relies on an adequacy decision, the European Commission’s Standard Contractual Clauses, or another safeguard permitted by the GDPR.
Inquiries that do not lead to a booking are generally retained for up to 24 months after the last communication unless a complaint or legal requirement justifies longer retention. Booking, payment, invoice, and complaint records are kept for the periods required by Croatian law. Technical logs are retained only as reasonably necessary for security and service continuity.
You may request access, correction, deletion, restriction, or portability of your information and object to processing based on legitimate interests. When processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. We do not make solely automated decisions that produce legal or similarly significant effects.
To exercise your rights, email ciaotrav@gmail.com; we may request reasonable information to verify your identity. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia, www.azop.hr. We will update this policy when the site, our services, or legal requirements change.