Last updated: 20 October 2026
1. Data Controller
The controller responsible for processing personal data on this website is:
SPORT SUB d.o.o.
SPORT SUB društvo s ograničenom odgovornošću za turizam i trgovinu
Operator of the diving RABAC dive centre
Maslinica 3
52221 Rabac (City of Labin)
Croatia
Managing Director: Philipp Oliver Jung
Phone: +385 98 1924 007
Email: info@diving-rabac.com
Croatian Tax Identification Number (OIB): 00242698724
For any questions regarding data protection or to exercise your rights, please contact us using the email address above.
2. General Information About Data Processing
We take the protection of your personal data seriously and process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Croatian data protection legislation.
Personal data means any information relating to an identified or identifiable individual. This may include your IP address, name, email address or information about how you use our website.
We process personal data only where a valid legal basis applies.
Depending on the circumstances, the relevant legal bases are:
- Article 6(1)(a) GDPR: Your consent.
- Article 6(1)(b) GDPR: Performance of a contract or steps taken before entering into a contract.
- Article 6(1)(c) GDPR: Compliance with a legal obligation.
- Article 6(1)(f) GDPR: Legitimate interests, particularly the secure and reliable operation of our website.
3. Website Hosting and Server Logs
Our website is hosted by:
ALL-INKL.COM – Neue Medien Münnich
Owner: René Münnich
Hauptstrasse 68
02742 Friedersdorf
Germany
When you visit our website, technical connection information may be processed by our hosting provider.
This may include:
- IP address of the requesting device
- Date and time of access
- Requested page or file
- HTTP status code
- Amount of data transferred
- Browser and operating system information
- Referring URL, where transmitted
This information is processed to provide the website, maintain system security, troubleshoot errors and prevent misuse.
The legal basis is Article 6(1)(f) GDPR.
Data is stored according to the hosting provider’s technical and organisational arrangements. The exact retention period of server logs will be verified before final publication.
Contractual arrangements concerning data processing under Article 28 GDPR are in place with ALL-INKL.COM. The contractual allocation to the responsible company is currently being clarified administratively.
4. Secure Data Transmission
Our website uses HTTPS and TLS encryption to protect data transmitted between your browser and our server.
This helps reduce the risk of unauthorised access during transmission. However, absolute security of data transmission over the internet cannot be guaranteed.
5. Contact by Email or Telephone
If you contact us by email or telephone, we process the information you provide.
This may include:
- Your name and contact details
- Email address or telephone number
- Content of your enquiry
- Information about requested diving trips, courses or group travel
- Additional information you voluntarily provide
We use this information to respond to your enquiry, communicate with you and, where applicable, prepare or perform a contract.
The legal basis is Article 6(1)(b) GDPR for contract-related enquiries or Article 6(1)(f) GDPR for other legitimate business enquiries.
We retain the information only as long as necessary for these purposes or to comply with statutory retention obligations.
6. Cookies and Similar Technologies
Our website uses technically necessary cookies and, where applicable, other technologies that require your consent.
Necessary cookies support the secure operation of our website and functions specifically requested by visitors.
Non-essential cookies and external services requiring consent are activated only after you have given your consent.
You can change your preferences or withdraw your consent at any time through the cookie settings on our website.
Further details about services, cookies, their purposes and retention periods are provided in the consent interface.
7. Consent Management with Real Cookie Banner
We use Real Cookie Banner, a WordPress consent management plugin provided by devowl.io.
This plugin enables you to accept or reject services requiring consent and change your preferences later.
To manage and document consent decisions, the following information may be processed:
- Consent decisions and refusals
- Time of the decision
- Consent identifier
- Technical information about the consent interface
- Where applicable, IP addresses and other technically necessary information
The processing is intended to manage consent and demonstrate compliance with data protection obligations.
The legal basis is primarily Article 6(1)(c) GDPR and, where applicable, Article 6(1)(f) GDPR.
Consent information is retained according to the storage and retention settings configured in Real Cookie Banner.
8. Multilingual Website with Polylang
We use Polylang to provide our website in different languages.
Polylang may use the technically necessary cookie pll_language to remember your selected language.
- Cookie name:
pll_language - Purpose: Remembering the selected website language
- Retention period: Up to one year
- Provider: SPORT SUB d.o.o.
This cookie supports the requested language functionality and is treated as technically necessary.
The legal basis is Article 6(1)(f) GDPR together with the applicable exemption for strictly necessary cookies.
9. Google Maps
Our contact page includes an interactive map provided by Google Maps.
The provider for users in the European Economic Area is:
Google Ireland Limited
Gordon House, Barrow Street
Dublin 4, Ireland
The embedded map is protected by a content blocker and is intended to load only after your explicit consent.
If you consent, your browser may connect to Google’s servers. This may involve processing your IP address, browser information and other usage data. Google may use cookies or similar technologies.
Personal data may also be processed outside the European Union or European Economic Area.
The legal basis for processing that requires consent is Article 6(1)(a) GDPR. You may withdraw your consent at any time through the cookie settings.
Our contact address remains available without loading the embedded map.
Further information: https://policies.google.com/privacy
10. Google Analytics 4
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us analyse how visitors use our website and improve our online services. For example, we can understand which pages are visited, how visitors find our website and how they interact with our content.
The information processed may include:
- Pages viewed and events triggered
- Date, time and duration of website visits
- Device and browser information
- Approximate geographic location
- Traffic sources and referral information
- Pseudonymous online identifiers and cookie information
- IP addresses during technical transmission and processing
Consent and Google Consent Mode
Google Analytics is activated on our website only after you have given your explicit consent.
We use Real Cookie Banner PRO together with Google Consent Mode V2 to manage and communicate your consent preferences.
Before you give your consent, Google Analytics tracking tags are not loaded. If you decline statistical data processing, Google Analytics remains disabled.
After you provide consent, data processing for statistical purposes is enabled. The relevant consent signals are communicated to Google through Google Consent Mode.
The legal basis for this processing is Article 6(1)(a) of the General Data Protection Regulation (GDPR), together with applicable legal requirements concerning the storage of and access to information on users’ devices.
You can withdraw or change your consent at any time with effect for the future through the privacy settings on our website. These settings can be accessed using the privacy preferences icon.
Data processing and international transfers
Google may process personal data in connection with Google Analytics. This may involve processing or transferring personal data outside the European Economic Area (EEA), particularly to the United States.
Such transfers are subject to applicable data protection requirements and international data transfer mechanisms.
We use Google Analytics for statistical website analysis and do not use it for personalised advertising.
Data retention
The retention period configured in Google Analytics 4 for event data and user-level data covered by the relevant retention settings is 14 months.
Certain aggregated reports and other data may be subject to different retention periods. Information about cookies and their storage periods is available in our privacy settings.
Further information
For more information about Google’s data protection practices, please visit:
https://policies.google.com/privacy
11. Locally Hosted Fonts
Our website uses fonts including Open Sans and Montserrat.
These fonts are hosted locally on our web server with the assistance of the WordPress plugin OMGF.
The normal display of our website therefore does not require a connection to Google Fonts. Font files are delivered directly from our hosting server.
12. External Links and Central Booking Platform
Our website may include links to external websites and services. When you follow an external link, the privacy information of the relevant provider applies.
The online booking platform for diving RABAC is operated centrally at https://diving-rabac.com.
When you follow a booking link to that domain, the subsequent processing of booking and customer information is governed by the privacy information published there.
Consent preferences on this website are not automatically transferred to another domain.
13. Recipients of Personal Data
Where necessary for website operation, handling enquiries or fulfilling legal obligations, personal data may be disclosed to service providers.
These may include hosting providers and, where consent has been given, providers of external services.
Data processing agreements are entered into where required by law.
Personal data is only disclosed for other purposes where an appropriate legal basis exists.
14. Data Retention
We retain personal data only for as long as necessary for the relevant processing purpose.
Longer retention may apply where required by law or where necessary to establish, exercise or defend legal claims.
Specific retention periods may vary depending on the categories of data and the purposes of processing.
15. Your Data Protection Rights
Subject to the applicable legal requirements, you have the following rights under the GDPR:
- Right of access (Article 15 GDPR)
- Right to rectification (Article 16 GDPR)
- Right to erasure (Article 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object to certain processing activities (Article 21 GDPR)
- Right to withdraw consent at any time with future effect (Article 7(3) GDPR)
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact info@diving-rabac.com.
16. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe your personal data is being processed unlawfully.
The Croatian supervisory authority is:
Agencija za zaštitu osobnih podataka (AZOP)
Ulica Metela Ožegovića 16
10000 Zagreb
Croatia
Email: azop@azop.hr
Website: https://azop.hr
Under the applicable rules, you may also contact another competent supervisory authority.
17. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in legal requirements, website functionality or the services we use.
The latest version will be published on our website.