Privacy Policy
Personal data
The data controller is AltRock d.o.o., a Croatian tourism business and travel agency owned by Martin Glavić, with its registered address at Lupoglav 24.D, 52426 Lupoglav, Croatia.
For privacy enquiries, contact martin@saorsa.hr.
We use information you provide through our contact form, by email or by telephone to respond to enquiries, prepare proposals and organise agreed services. This may include your name, contact details and information about your preferred tour or group.
Processing is based on taking steps at your request before entering into a contract or performing a contract. General correspondence and website security rely on legitimate interests, while legally required records rely on legal obligations.
Providing information is voluntary, but without the details needed to respond, we may be unable to process your enquiry. Sending an enquiry does not subscribe you to promotional messages.
Access and retention
Where necessary, data may be accessed by authorised personnel and providers of hosting, email and website maintenance services. Partners involved in organising agreed services receive only necessary information.
We retain enquiry data for as long as necessary to respond, prepare a proposal and complete related correspondence. Once this purpose ends, we delete the data unless further retention is necessary to comply with legal obligations or establish, exercise or defend legal claims.
Technical logs are retained for as long as necessary to protect website security and investigate potential security incidents.
Cookies and external links
Information about the cookies we use, their purposes and lifetimes is available in the website’s cookie settings.
Where consent is required, you can accept or reject cookies and subsequently change or withdraw your choice.
External websites, including social networks linked from our website, are governed by their providers’ privacy policies.
Your rights
Where applicable, you may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.
Send requests to martin@saorsa.hr. We normally respond within one month and will inform you of any legally permitted extension.
You may lodge a complaint with the Croatian Personal Data Protection Agency or another competent supervisory authority.
Data protection
We apply appropriate technical and organisational measures to protect personal data. The current version of this policy is available on this page.
Last updated: 10 October 2026