Privacy Policy

Last updated: July 10, 2026

1. Data controller

The controller of your personal data is Eco Group d.o.o., Bukov dol 9, 10000 Zagreb, OIB: 50145493670 ("Old Zagreb Tour", "we"). Contact: info@oldzagreb.com, +385 95 654 6544.

2. What data we collect and why

• Contact form: first and last name, e-mail address and the content of your message — used solely to reply to your enquiry (legal basis: legitimate interest / steps prior to entering a contract).
• Bookings and payment: bookings are processed through the Bokun booking system (Bokun, a TripAdvisor company). Card payment data is entered directly in Bokun's secure checkout and is never stored on our servers. See Bokun's privacy policy.
• Server logs: our hosting provider automatically records IP address, time and requested page for security and error diagnostics (legal basis: legitimate interest).

3. Third-party services

• Bokun — booking and card payment processing.
• SMTP2GO — delivery of contact-form e-mails.
• Google Maps — embedded route maps (Google may set its own cookies when the map loads).
• WhatsApp — optional chat link; opens only if you click it.

4. Cookies

The only cookie the site itself sets is a necessary cookie (ozt_consent) that records your cookie choices for 180 days. Cookie categories:

• Necessary — the Bokun booking system sets functional cookies required for the cart and checkout; always active.
• Functional (Google Maps) — embedded maps load, and Google's cookies are set, only after your consent.
• Statistics (analytics) — not currently in use; if introduced, it will be activated only with your consent.

You can change or withdraw your consent at any time via the "Cookie Settings" link in the page footer.

5. Data retention

Enquiry e-mails are kept for 6 months; booking and invoicing records are kept as required by Croatian accounting and tax regulations.

6. Your rights

You have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to data portability. Contact us at info@oldzagreb.com. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP, azop.hr).