Privacy

Privacy policy

This website processes as little data as possible. There is no contact form, no analytics tooling and no marketing pixels, and the only third-party content (a Google map) loads only after you enable it yourself.

Last updated: 2026-08-25

Data controller

The controller responsible for personal data processed through this website is:

Bocoon, obrt za ugostiteljstvoOwner: Manuel LinčićObala 65, 51521 PunatVAT ID (OIB): 04318159868[email protected]091 455 9199

There is no contact form

This website has no form for you to leave your details in, and we keep no visitor database. If you contact us by phone or email, we use your details solely to answer your enquiry or record a reservation, and we keep them only as long as that requires.

What we process

Server access logs
Our hosting provider (Cloudflare) records the IP address, browser type, access time and requested address. These logs are necessary to deliver the page, keep it secure and prevent abuse. We do not consult them to identify individual visitors.
Your cookie choice
Your choice is stored locally in your own browser (localStorage). It never leaves your device and is not sent to us or anyone else.
Google Maps (only with your consent)
If you enable the map, Google receives your IP address and may set its own cookies. Without your consent the map is not loaded at all.

Legal basis

  • Legitimate interest (Art. 6(1)(f) GDPR) for server access logs, for security and correct operation of the site.
  • Consent (Art. 6(1)(a) GDPR) for loading the Google map. You can withdraw consent at any time, as easily as you gave it.
  • Performance of steps taken at your request and legitimate interest (Art. 6(1)(b) and (f) GDPR) when you contact us by phone or email.

How long we keep data

  • Server access logs are retained by Cloudflare under its own retention periods; we neither download nor archive them.
  • Your cookie choice stays in your browser for 12 months, after which we ask again. You can remove it sooner by clearing site data in your browser.
  • Enquiries you send us by email are kept for as long as answering you and handling any reservation requires.
  • We keep no visitor database, so there is no stored data requiring periodic deletion.

Recipients

We do not sell or share personal data. Only the following are involved in delivering this website:

Cloudflare, Inc.
Hosting and content delivery. Processes technical access logs.
Google Ireland Limited
Displays the map on the Contact page, only after you enable that content yourself.

Transfers outside the EEA

These providers may process data outside the European Economic Area. Where they do, the transfer relies on the European Commission's standard contractual clauses or on the adequacy decision for the United States (EU-US Data Privacy Framework).

Your rights

In relation to your personal data you have the right to:

  • access your data and know whether we process it,
  • have inaccurate data corrected,
  • have your data erased (the “right to be forgotten”),
  • restrict processing,
  • data portability,
  • object to processing based on legitimate interest,
  • withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

[email protected]

Complaint to the supervisory authority

If you believe we process your data unlawfully, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, Croatia, [email protected], www.azop.hr.

Changes to this policy

We change this policy only when what the website actually does changes. The date of the last change is shown at the top of this page.