Privacy Policy
Last updated: 12 October 2026
This page explains what personal data we collect through this website, why we collect it, and what your rights are.
Who is responsible
The data controller is:
Josip MlačićUlica Veljka Kovačevića 28, 21450 Hvar, Croatia
OIB: HR48474408245
For any question about your data, or to exercise any of the rights below, contact us through the WhatsApp number listed on this website.
What we collect
If you apply for a job through our careers page, we collect the information you enter in the application form: your name, email address, nationality, nautical licence details, previous seasons of experience, your availability, and your written answers to our questions.
We ask for nationality only to know whether we need to arrange work paperwork for you. We do not ask for passport numbers, identity documents, health information or any other sensitive category of data through this website. Do not send us that information through the form.
If you send a request for a private yacht day in the 2027 season, we collect what you enter in that form: your name, email address, WhatsApp number if you give it, the day you are interested in, your preferred date, the number of guests, and anything you choose to tell us about the occasion, allergies or dietary needs, or your plans. Tell us about allergies only to the extent we need to plan the food on board.
If you contact us through WhatsApp, we hold whatever you choose to send us in that conversation.
This website uses Google Analytics to understand how visitors use the site. That data is aggregated and does not identify you personally.
Why we collect it, and on what basis
We use application data for one purpose only: to assess whether you are a good fit for a skipper position with us, and to contact you about it.
We use yacht request data for one purpose only: to answer your request, confirm availability and price for the 2027 season, and plan the day with you.
In both cases the legal basis is taking steps at your request before entering into a contract, under Article 6(1)(b) of the GDPR.
We do not use application or request data for marketing. We do not sell it. We do not share it with other companies.
Who can see it
Inside our company, your application is visible to the small group of people who make hiring decisions. A yacht request is visible to the small group of people who handle bookings.
We use service providers to handle the data on our behalf: n8n, which receives the form submissions; Notion, where applications and requests are stored; and Telegram, where our team receives a short notice of each new yacht request (name, the day requested, number of guests and date). They act as processors under our instructions.
How long we keep it
We keep applications until 31 March 2027, so that we can consider you for the following season. After that date we delete them.
We keep yacht requests until 31 December 2027, the end of the season they refer to. After that date we delete them, unless you have booked with us, in which case we keep what the booking requires.
If you ask us to delete your application or request earlier, we do it.
Your rights
Under the GDPR you can ask us to show you the data we hold about you, correct it if it is wrong, delete it, or restrict how we use it. You can also object to our processing.
Write to us and we will action it. There is no charge and no form to fill in.
If you are not satisfied with how we handle your request, you can complain to the Croatian Personal Data Protection Agency (AZOP).
Changes to this policy
If we change how we handle personal data, we update this page and change the date at the top.