Buoyfriend Privacy Policy

Version: 2.0

Previous version: 1.0

1. Introduction

Welcome to the Buoyfriend platform, operated by Buoyfriend d.o.o., Trnjanska cesta 45A, 10000 Zagreb, Croatia (hereinafter: “Buoyfriend”, “we”, “us”, or “our”).

Buoyfriend is a digital platform that enables users to search for, book, and pay for mooring capacities for vessels, as well as to use other services provided at individual Locations by Operators.

This Privacy Policy explains which personal data we collect, how we process it, for what purposes we use it, on which legal bases such processing is based, how long we retain it, with whom we may share it, and what rights you have with respect to your personal data.

We are committed to protecting your privacy and processing personal data in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and other applicable legislation.

By using the Buoyfriend platform, you confirm that you have read and understood this Privacy Policy.

 

2. Data Controller

The controller of the personal data processed under this Privacy Policy is:

Buoyfriend d.o.o.
Trnjanska cesta 45A
10000 Zagreb
Croatia

(hereinafter: “Buoyfriend”).

If you have any questions regarding the processing of your personal data or wish to exercise your rights under applicable data protection legislation, you may write to us at:

policy@buoyfriend.com

 

3. Definitions

For the purposes of this Privacy Policy, the terms below have the following meaning:

Platform means the Buoyfriend web platform, accessible via the Buoyfriend.com website and other related digital services, which enables the search for, booking, and payment of mooring capacities for vessels, as well as the use of other services.

User means any natural or legal person who uses the Platform or its services.

Operator means the legal entity that manages a particular Location.

Location means a particular area, facility, or infrastructure where an Operator enables users to use mooring capacities or other services.

Personal data means any information relating to an identified or identifiable natural person, as defined by applicable data protection legislation.

 

4. What Personal Data We Collect

In order to provide the Platform's services, we may collect and process the following categories of personal data:

4.1 User account data

When registering a user account or using certain services of the Platform, we may collect the following data:

• first and last name,
• email address,
• telephone number,
• country,
• language preferences,
• other data voluntarily provided to us by the user.

4.2 Vessel data

In order to carry out bookings, check-ins, or other services, we may collect vessel data, such as:

• vessel name,
• registration number,
• vessel type,
• vessel length,
• other data required to carry out a particular service.

4.3 Booking and service-use data

When using the Platform, we may collect data relating to the use of our services, such as:

• the selected Location,
• the selected mooring capacity,
• the date and time of the booking or check-in,
• the duration of use,
• the services used,
• the amount of the service,
• the payment status,
• the booking or transaction number,
• issued invoices and other documentation relating to the service provided.

4.4 Payment data

Payments are processed through authorized payment service providers.

Buoyfriend does not store complete payment card data.

However, we may process data related to the execution of the payment, such as:

• the payment status,
• the transaction identifier,
• the payment reference number,
• other data required to confirm a successfully completed transaction.

4.5 Technical data

When using the Platform, certain technical data is also automatically collected, such as:

• IP address,
• browser type and version,
• operating system,
• device type,
• date and time of access,
• system logs,
• other technical data required to ensure the safe and reliable operation of the Platform.

4.6 Communication with users

If you contact us, we may retain the content of your communication and the data necessary to handle your question, request, or complaint.

4.7 Location data

If expressly permitted by the user, the Platform may access the location data of the user's device for the purpose of providing certain services, such as:

• displaying nearby Locations,
• facilitating the selection of mooring capacities,
• verifying the user's presence at a Location, where required for services based on the “first come, first served” (FCFS) principle,
• other purposes for which the user has given explicit consent.

Location data is used solely for the purpose of providing the selected service and is not used for the continuous tracking of users' movements.

 

5. Purposes and Legal Bases of Processing

We process your personal data only where there is an appropriate legal basis for doing so under applicable data protection legislation.

We may process your personal data for the following purposes:

5.1 Provision of the Platform's services

We process personal data in order to provide the Platform's services, including:

• the registration and management of the user account,
• the search for, booking, and use of mooring capacities,
• the processing of payments,
• the issuance of invoices and other business documentation,
• communication relating to bookings and the use of services,
• the provision of user support.

Legal basis: performance of a contract, or the taking of steps at the user's request prior to entering into a contract.

5.2 Compliance with legal obligations

We may process personal data in order to comply with legal obligations applicable to Buoyfriend, including:

• accounting,
• tax,
• financial,
• other obligations set out under applicable regulations.

Legal basis: compliance with a legal obligation.

5.3 Ensuring security and preventing misuse

We may process personal data in order to:

• ensure the safe operation of the Platform,
• prevent fraud and other forms of misuse,
• protect users, Operators, and the Platform,
• verify the entitlement to use particular services (for example, verifying the user's presence at a Location for services based on the FCFS principle),
• establish, exercise, or defend legal claims.

Legal basis: the legitimate interests of Buoyfriend or third parties.

5.4 Improvement of the Platform

We may use data to:

• analyze the use of the Platform,
• fix errors,
• develop new functionalities,
• improve the user experience,
• ensure the stable and secure operation of the Platform.

Where possible, such data is processed in aggregated or anonymized form.

Legal basis: the legitimate interests of Buoyfriend.

5.5 Marketing communications

If the user gives appropriate consent, or where permitted under applicable legislation, we may use their contact data to send:

• newsletters,
• information about new services,
• promotional offers,
• other content relating to the Platform.

The user may withdraw their consent at any time.

Legal basis: the user's consent, or another legal basis where permitted by legislation.

5.6 Enforcement of payments and protection of contractual rights

We may process personal data where necessary to establish, exercise, or recover claims arising from the use of the Platform's services, including the processing of data necessary to demonstrate the service provided and compliance with contractual obligations.

Legal basis: the legitimate interests of Buoyfriend or the Operator, and performance of a contract.

 

6. Disclosure of Personal Data

We do not sell or rent your personal data and do not disclose it to third parties, except where necessary for the provision of the Platform's services, compliance with legal obligations, protection of our legitimate interests, or where another appropriate legal basis exists.

We may disclose your personal data to the following categories of recipients:

6.1 Operators

Where necessary to carry out a booking, the use of mooring capacities, or other services at a particular Location, we may disclose the relevant personal data to the competent Operator.

Only the personal data necessary to carry out the particular service is disclosed.

6.2 Service providers

To ensure the operation of the Platform, we use various external service providers, such as providers of hosting, cloud infrastructure, payment services, electronic invoicing, email, technical support, and other services necessary for the operation of the Platform.

Such providers may process personal data either as data processors or as independent controllers, depending on the nature of the service they provide and their role under applicable legislation.

Where a particular provider acts as an independent controller, the processing of personal data is governed by its own privacy policy, terms of business, and other applicable documentation.

6.3 Competent authorities

If required by law or by a competent authority, we may disclose personal data to courts, administrative bodies, law enforcement authorities, or other competent institutions.

6.4 Legal, accounting, and other professional advisors

Where necessary to protect our rights, legitimate interests, or the rights of Operators, or to comply with legal obligations, we may disclose personal data to lawyers, accounting service providers, auditors, or other professional advisors who are bound by confidentiality in the course of their work.

 

7. Retention of Personal Data

We retain personal data only for as long as necessary for the purpose for which it was collected, or for as long as required by applicable regulations.

The retention period depends on the type of data and the purpose of its processing.

In general:

• user account data is retained for as long as the user uses the Platform, or until the user account is deleted, unless the law provides otherwise; 
• data relating to bookings, payments, invoices, and other services provided is retained for as long as required by applicable accounting, tax, or other regulations; 
• data processed on the basis of consent is retained until the consent is withdrawn, unless another legal basis exists for continued processing; 
• technical logs and other system data are retained for as long as necessary to ensure the security, stability, and reliable operation of the Platform.

Upon expiry of the retention period, we securely delete, anonymize, or otherwise process the personal data so that the individual can no longer be identified, unless applicable legislation provides otherwise.

 

8. Users' Rights

Under applicable data protection legislation, you have the following rights with respect to your personal data:

8.1 Right of access

You have the right to request confirmation as to whether we process your personal data, and to obtain information about such processing and a copy of the personal data we hold.

8.2 Right to rectification

If you believe that your personal data is inaccurate or incomplete, you may request its rectification or completion.

8.3 Right to erasure

In the cases set out under applicable legislation, you may request the erasure of your personal data.

This right cannot be exercised where we are required to retain the data in order to comply with legal obligations or to establish, exercise, or defend legal claims.

8.4 Right to restriction of processing

In the cases set out under legislation, you may request that we temporarily restrict the processing of your personal data.

8.5 Right to data portability

Where the conditions set out under applicable legislation are met, you may request that we provide you with the personal data you have provided to us in a structured, commonly used, and machine-readable format, or that we transmit it to another controller, where technically feasible.

8.6 Right to object

Where we process personal data on the basis of our legitimate interests, you have the right to object to such processing in the cases set out under legislation.

8.7 Withdrawal of consent

If the processing is based on your consent, you may withdraw it at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

8.8 Right to lodge a complaint

If you believe that the processing of your personal data does not comply with applicable legislation, you have the right to lodge a complaint with the competent data protection supervisory authority.

To exercise your rights or for questions regarding the processing of personal data, you may contact us at any time at:

policy@buoyfriend.com

We will respond to your request within the time period and in the manner set out under applicable legislation.

The exercise of your rights is, as a rule, free of charge. If a request is manifestly unfounded, excessive, or repetitive, we reserve the right to charge a reasonable administrative fee or to refuse the request, where permitted under applicable legislation.

 

9. Security of Personal Data

We implement appropriate technical, organizational, and administrative measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure, or destruction.

When selecting and implementing security measures, we take into account the nature of the personal data, the risks of its processing, and the technical and organizational solutions currently available.

Although we strive to maintain a high level of security, no method of electronic data transmission or electronic storage can guarantee complete security. We therefore cannot guarantee the absolute security of personal data.

 

10. International Transfers of Personal Data

Your personal data may be processed or stored outside the country of your residence, or outside the European Economic Area (EEA), where this is necessary for the provision of the Platform's services.

In such cases, we ensure that personal data is transferred only subject to appropriate safeguards, in accordance with applicable data protection legislation, such as European Commission adequacy decisions or other lawful transfer mechanisms.

 

11. Cookies and Similar Technologies

The Platform uses cookies and other similar technologies to ensure proper functioning, improve the user experience, analyze the use of the Platform, and for other purposes described in our Cookies Policy.

More information on the types of cookies used, their purpose, and the options for managing them is available in a separate Cookies Policy, which forms an integral part of the Platform's documentation.

 

12. Changes to the Privacy Policy

We may update this Privacy Policy from time to time due to changes in legislation, the development of the Platform, or other legitimate business reasons.

Each updated version will be published on the Platform together with the date on which it takes effect.

If any changes materially affect the manner in which personal data is processed or your rights, we will notify you in an appropriate manner, where required under applicable legislation.

Continued use of the Platform after the updated Privacy Policy takes effect means that you have acknowledged it.

 

13. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, or wish to exercise your rights, you may contact us at:

Buoyfriend d.o.o.
Trnjanska cesta 45A
10000 Zagreb
Croatia

Email: policy@buoyfriend.com

Validity of the document

This Privacy Policy takes effect on the date of its publication on the Platform and replaces all previous versions.

 

This version enters into force on 1 August 2026.