Privacy policy

This policy explains which personal data Kotor Adventures (“we”, “us”) processes when you visit this website or send us a booking request, why, and what your rights are.

Who is responsible

Kotor Adventures

Booking requests

When you ask about a tour we receive the details you give us: your name, email address, phone number (optional), the tour, preferred date, number of guests and any notes. You can send them through the form on our contact page, or by WhatsApp or email from your own apps. We use them only to answer you and to arrange your tour — the legal basis is taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).

Requests sent through the form are delivered to our inbox by our email provider and may be stored in our content management system (Sanity) so we can keep track of them. If you contact us via WhatsApp, WhatsApp (Meta) also processes your messages under its own privacy policy.

We keep booking requests only as long as we need them to handle your request and any tour that follows, and for as long as tax or accounting law requires.

Visiting this website

• Hosting (Vercel): to deliver the pages, our host processes technical data such as your IP address, browser type and the time of the request in short-lived server logs.
• Content and photos (Sanity): page content and photos are delivered from Sanity's servers, so your browser connects to them and they see your IP address.
• Map (Google): the map on the contact page only loads when you click “Show map”. Google then receives your IP address and may set cookies; see Google's privacy policy.

Our legal basis for this is our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR), and for the map, your choice to load it. We don't use analytics or advertising cookies.

Some of these providers are based outside Montenegro and the European Union (for example in the United States). Where that is the case, the transfer relies on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Your rights

You can ask us for access to your data, its correction or deletion, to restrict or object to its processing, and to receive it in a portable format. Just write to us. You may also complain to a data protection authority — in Montenegro, the Agency for Personal Data Protection and Free Access to Information; if you live in the EU, also the authority in your country.

Changes

We update this policy when the way we handle data changes. The date at the top shows the latest version.