Privacy Policy

The data controller is Obrt za prijevoz i turističke usluge "Tonci Tours", owned by Tonči Grgičević.

• Jelsa 107, 21465 Jelsa, Croatia
• OIB: 97712107598
• Email: reservations@toncistours.com
• Phone: +385 91 929 1894

If you use our contact form, we collect your name, email address, and whatever you choose to tell us — preferred date, number of guests, the tour you are interested in, and your message.

We use this only to answer you and to arrange the tour or transfer you asked about. The legal basis is that the processing is necessary to take steps at your request before entering into a contract (Article 6(1)(b) GDPR).

The form is delivered to our inbox by Web3Forms, acting as a processor on our behalf. We keep inquiry emails for up to three years so we can handle follow-up questions and repeat bookings, then delete them.

We advertise on Facebook and Instagram. If — and only if — you give consent, we use Meta's advertising tools to understand which adverts lead to real inquiries, and to show our tours again to people who have already visited the site.

The legal basis is your consent (Article 6(1)(a) GDPR).

When you have consented, the following is shared with Meta:

• The pages you view on this site, and which tour you were looking at.
• Your IP address, browser type, and the Meta cookie identifiers _fbp and _fbc.
• When you submit an inquiry, your email address and first name — sent from our server in hashed form, meaning they are converted into an irreversible code before they leave us. Meta uses this only to check whether it matches an existing account.

The recipient is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Meta may transfer this data to the United States. Those transfers rely on the EU–US Data Privacy Framework and on Standard Contractual Clauses approved by the European Commission.

These cookies are stored for three months. Your consent choice itself is stored for six months in a necessary cookie named cc_cookie, so we do not have to ask you on every page.

If you do not consent, none of this happens: no Meta cookies are written, no Meta scripts load, and nothing is sent to Meta — including when you submit the inquiry form.

You can change or withdraw your choice at any time: Cookie settings. Withdrawing consent deletes the Meta cookies from your device.

This site is hosted by Vercel Inc. Like any web host, Vercel records technical information about requests — IP address, timestamp, and the page requested — to keep the service running and secure. The legal basis is our legitimate interest in operating a functioning website (Article 6(1)(f) GDPR). These logs are short-lived and we do not use them to identify individual visitors.

• We do not sell your personal data.
• We do not use your data for automated decision-making or profiling that produces legal effects for you.
• We do not load any advertising or analytics scripts before you consent.

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased
• Restrict or object to processing
• Receive your data in a portable format
• Withdraw consent at any time, without affecting processing that already took place

To exercise any of these, write to reservations@toncistours.com. We will respond within one month.

If you believe we have handled your data improperly, you can complain to the Croatian supervisory authority:

• Agencija za zaštitu osobnih podataka (AZOP)
• Ulica Metela Ožegovića 16, HR–10000 Zagreb
• Email: azop@azop.hr
• Phone: +385 1 4609 000

If we change how we use your data, we will update this page and the date at the top. Where the change affects what you consented to, we will ask you again rather than assume your previous answer still applies.