Privacy Policy

1. COOKIE POLICY AND PRIVACY POLICY

1.1. Data Controller
BOBO d.o.o., Dr. Andrije Mohorovičića 40, 51410 Opatija, OIB: 92331059341
Contact: [email protected]

1.2. Personal Data Protection
As the data controller, BOBO d.o.o., Dr. Andrije Mohorovičića 40, 51410 Opatija, protects your privacy and processes only the personal data necessary for the purpose for which they were collected, such as your name, surname, phone number, email address, or any other information related to you personally that may be considered personal data. We collect and process personal data fairly, lawfully, and transparently, ensuring their accuracy, completeness, timeliness, and security.

1.3. Purpose of Data Collection
We collect and process data to respond to your requests or provide the requested service.

The data we collect and process include:
-Identification data (e.g., name and surname)
-Contact details (e.g., phone number, email address)

1.4. Data Retention Period
Your personal data will be retained indefinitely or for the periods prescribed by applicable laws and regulations in the Republic of Croatia, for the period stated in the consent, or until the consent is withdrawn through a request for withdrawal.

1.5. Data Sharing and Transfer
We do not share your personal data with third parties or transfer them to other countries. Your personal data will only be disclosed to third parties explicitly mentioned in the consent or those required by applicable laws and regulations in the Republic of Croatia.

1.6. Data Subject Rights
Right of Access – You may request information on whether your personal data is being processed and, if so, access and details regarding the processing.
Right to Rectification – You have the right to request the correction of inaccurate and incomplete personal data.
Right to Erasure – You may request the deletion of your personal data. If the request is justified and legal regulations do not require us to retain the data, they will be deleted without undue delay. If there are reasons preventing or restricting compliance with the request, we will inform you accordingly.
Right to Restriction of Processing – You may request that we restrict the processing of your personal data if you contest their accuracy (for the period necessary to verify accuracy), if processing is unlawful but you oppose deletion, if you have objected to processing, or if we no longer need the data but you require them for legal claims.
Right to Withdraw Consent – When processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to Complaint and Objection – You have the right to file a complaint regarding data processing with the supervisory authority. In Croatia, you can file a complaint with the Personal Data Protection Agency (AZOP).

For any inquiries regarding your personal data, contact us at:
BOBO d.o.o., Dr. Andrije Mohorovičića 40, 51410 Opatija or via email at [email protected].

2. General Information for Website Visitors

2.1. Cookies

Your browser stores cookies on your computer’s hard drive. These are text files that you can delete at any time. Most web browsers accept cookies automatically, but you can change your browser settings individually.

You can configure your browser to notify you when cookies are set and decide on acceptance on a case-by-case basis or disable them entirely. If you do not accept cookies, some functions of our portal may be limited.

Stored cookies after your session:

-pid: Set if you arrive from a partner site with a link to BOBO d.o.o., storing only the partner ID. Duration: 30 days

-first: Generated upon your first visit to our website, storing the URL from which you arrived. Duration: 90 days

These cookies help analyze and manage marketing campaigns. The processing is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR), as BOBO d.o.o. has a legitimate interest in evaluating and controlling the success of its advertising campaigns.

lng: Stores the client’s language preference. Duration: 1 year

cookieconsent_status: Set once you accept cookies, preventing repeated notifications. Duration: 1 year

-seen_on: This cookie is used if you arrive at our property or travel description page via one of our promotional ads on another website. It is then stored with the respective website from which you accessed our page.
If you make a reservation, the cookie helps determine whether a Conversion Tracking code should be executed on the reservation page. This allows us to analyze which promotional ads lead to bookings. However, no personal data is referenced in this process.
Duration: 30 days.

-XSRF-TOKEN: This cookie is used to protect data from unauthorized modifications by third parties. It is not tied to a fixed expiration time and is reissued each time the page is accessed.

These cookies are used to improve the ease of use of our website. The processing of this data is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR).
BOBO d.o.o. has a legitimate interest in having its service offerings evaluated by customers to ensure quality and increase sales. Since this data is processed from individuals who have shown interest in our offers and services, it does not infringe on their fundamental rights.

2.2. Local Storage

To make your experience on our website as seamless as possible, in addition to cookies, we also use a technique called Local Storage (also known as “local data” or “local memory”).
With this method, data is stored locally in the browser’s cache, meaning it remains available even after you close the browser window or exit the program—unless you clear the cache.
The following information is stored:

appFileName: Stores the name of the included JavaScript file. This is necessary to clear local storage (and other browser memory) when a new JavaScript file is available. This ensures that the memory in your browser matches what is referenced in our code.
appFileDate: Stored alongside appFileName, this records the date. It is primarily intended for development tracking, allowing us to quickly identify and resolve potential issues.
navBarFontSize: Stores the font size of the main navigation menu. Since different languages have varying word lengths, the font size is dynamically set and saved to ensure the main menu always fits in a single line.
search: Stores your search parameters.

The use of local storage is intended to enhance the user experience. The processing of this data is based on Article 6(1)(f) of the General Data Protection Regulation (GDPR).
BOBO d.o.o. has a legitimate interest in optimizing the ease of use of its online presence to increase sales of its products and services. Since the data being processed relates to individuals who have shown interest in our offers and services, it does not infringe on their fundamental rights.

If you do not wish to use the local storage function, you can manage it through your browser settings, depending on the platform and operating system of the respective application.

2.3. Google Analytics

To continuously improve our offerings, we collect statistical data on their usage. For this purpose, we use Google Analytics. This ensures that there is no connection with the cookies mentioned above.
Google requires us to provide the following statement:

This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, which are text files stored on your computer that enable an analysis of your use of the website.
The information generated by the cookie about your use of this website is typically transmitted to and stored on a Google server in the USA. However, due to the IP anonymization we have activated, your IP address is shortened, ensuring that it cannot be directly linked to you as a user.
On behalf of the website operator, Google will use this information to analyze your use of the website, compile reports on website activity, and provide additional services related to website and internet usage to the website operator. The IP address transmitted by your browser within Google Analytics will not be merged with other Google data.
You can prevent cookies from being stored by adjusting your browser settings accordingly. However, please note that in this case, you may not be able to use all the functions of this website in full. Additionally, you can prevent Google from collecting and processing data (including your IP address) generated by cookies regarding your website use by downloading and installing the browser plug-in available at the following link:
Google Analytics Opt-Out.

The collected data is deleted after 26 months.

2.4. Google Ads

This website uses Google Ads, an online advertising program by Google Inc.. In connection with this, Conversion Tracking is also used.
When you access our website through a Google advertisement, Google Ads places a cookie on your computer. This cookie expires after 90 days and does not contain any personally identifiable data.
If you use our website while the cookie is still active, Google and we can recognize that you clicked on a relevant ad and were redirected to our website. Each Google Ads client receives a different cookie, meaning cookies cannot be tracked across multiple Ads clients’ websites.
The data collected through conversion cookies allows us to generate conversion statistics, helping us determine the total number of users who engaged with our ads and were directed to our website. However, no personal data is shared with us.
If you do not agree with this tracking process, you can disable Google Conversion Tracking cookies in your browser settings. Please refer to your browser’s Help function for guidance on how to do this.
For more information about Google’s privacy policy, visit:
Google Privacy Policy.

2.4. All-In-One Image CAPTCHA plugin

To ensure an adequate level of data security when submitting forms, we use the All-In-One Image CAPTCHA plugin during registration as a travel agency, for agency logins, and in the contact form.
This plugin primarily serves to distinguish whether an entry was made by a real person or if it is an attempt at misuse through automated or machine processing, preventing spam bots from filling out forms.
The service includes the transmission of IP addresses.

2.5. Purposes of Processing and Legal Bases for Google Services

We use Google Ads services to monitor the success of our marketing campaigns and manage them effectively. This would not be possible without making data available.

Google Analytics is used to gather information about the usage of our website, enabling us to optimize its user experience and improve usability.

We use the All-In-One Image CAPTCHA plugin to protect forms from misuse or potential hacker attacks, ensuring the security of your personal data.

We have a legitimate interest in monitoring the success of our marketing campaigns, managing them effectively, gathering information on website usage, protecting the website from misuse, and optimally promoting our products to increase sales.
This would not be possible without making data available.
The legal basis for data processing in this context is Article 6(1)(b) of the General Data Protection Regulation (GDPR).

2.6. Links to Other Websites

BOBO d.o.o. is not responsible for the content of third-party websites that may be accessed via links from this website.
BOBO d.o.o. explicitly disclaims any association with unlawful or ambiguous content.

3. Facebook Fanpage

If you visit our Facebook Fanpage, your personal data will be collected. If you are logged in, this includes the profile information you have provided to Facebook. In any case, your IP address and browser information will be processed.
These data are processed jointly by Facebook Ireland and us as joint controllers.
You can read the relevant agreement here:
Facebook Page Controller Addendum.

Processing is carried out in accordance with Article 6(1)(f) of the EU General Data Protection Regulation (GDPR), based on our legitimate economic and communication interests in providing an informational and communication channel on social media, specifically Facebook.
All rights outlined in this Privacy Policy also apply to our Facebook Fanpage.