This Cookie Policy applies to the website zicotours.com (hereinafter: the “website”) operated by:

Zico turizam d.o.o.
Matije Mrazovića 7
10000 Zagreb, Croatia
OIB: 18947907582

The website uses cookies and similar technologies to ensure proper functioning, improve user experience, and collect analytical and marketing data. This policy explains what cookies are, which cookies we use, why we use them, and how you can manage your settings.

A cookie is a small text file that a website stores on your computer, tablet, or mobile device when you visit it. Cookies help the website remember your actions and preferences (for example, language or other settings) so you don’t have to re-enter them on every visit.

We distinguish between:

• First-party cookies – set directly by our website.
• Third-party cookies – set by an external service provider whose tool is integrated on our website (e.g. analytics tools, social networks, booking platforms).

In addition to cookies, the website may also use scripts – pieces of code that ensure interactivity and proper functioning of the website.

Our website uses necessary technical cookies, analytical cookies, and marketing cookies. We also embed third-party widgets (TripAdvisor reviews, Bokun booking calendar) that may set their own cookies after you give consent.

These cookies are set by the CookieAdmin plugin, which we use to display the cookie notice and remember your choice. Without these cookies we would not be able to respect your decision regarding accepting or rejecting cookies.

All consent data is stored exclusively in our website database – nothing is sent to external services.

Our website uses the TourMaster travel theme, which sets first-party session cookies to remember which tours you have viewed during your visit. These cookies are essential for site navigation and do not transfer any data to third parties.

Our website runs on WordPress, which may set technical cookies during certain interactions (e.g. when submitting forms or performing specific actions on the site). These cookies do not collect personal data and are deleted when you close your browser or shortly after.

We use the Bokun booking calendar to allow visitors to check availability, book, and pay for tours directly on our website. Bokun is our booking platform and processor. The widget sets a first-party session cookie necessary for the booking and payment process to work.

These cookies are technically necessary for the booking functionality. For more information about Bokun’s privacy practices: https://www.bokun.io/privacy-policy

We use Google Analytics 4, integrated through the Google Site Kit plugin, to monitor website traffic and user behavior (e.g. which pages are visited, for how long, where visitors come from). This data helps us improve content and user experience.

Google Analytics sets first-party cookies that assign an anonymous identifier to each visitor. Data is sent to Google’s servers. Google is a signatory of the EU-U.S. Data Privacy Framework, which ensures an adequate level of protection when data is transferred to the U.S.

These cookies are activated only with your prior consent via the cookie banner. For more information about Google’s privacy policy: https://policies.google.com/privacy

We use the Independent Analytics Pro plugin to gain a basic overview of visits (number of visitors, traffic sources, browser, country). This plugin operates entirely on our server – data is not sent to third parties and everything is stored in our website’s database.

The plugin does not set any cookies on your device and does not collect personal identifiers. Because no cookies are used and no personal data is processed, this tool does not require your consent.

The Google Site Kit plugin also includes Google Ads integration, which allows us to measure conversions from advertising campaigns and use remarketing features. Google Ads sets cookies that track interactions related to advertising.

These cookies are activated only with your prior consent via the cookie banner. For more information: https://policies.google.com/technologies/ads

We embed a TripAdvisor review widget on our website to display guest reviews. The widget loads from TripAdvisor’s servers and sets a third-party cookie for visitor tracking purposes. Reviews are submitted directly on the TripAdvisor platform, not on our website.

The widget is loaded only after you give consent for marketing cookies. For more information about TripAdvisor’s privacy practices: https://www.tripadvisor.com/PrivacyPolicy

Note: Depending on widget version and user interaction, TripAdvisor may set additional cookies. The full list is available in TripAdvisor’s privacy policy.

The PageSpeed Insights and Google Search Console modules within Site Kit provide us with data on website loading speed and how our pages appear in Google search results. These modules do not set cookies on visitors’ devices – they only collect technical and aggregated data via Google’s servers.

For the contact form we use the WPForms Lite plugin, which includes built-in antispam protection. This protection runs exclusively in the background on our server and does not set cookies on your device, nor does it communicate with external services for the protection itself.

WPForms antispam protection is a technically necessary security measure and is fully GDPR-compatible – it does not require your consent.

We base the processing of data through cookies on the following legal grounds:

• CookieAdmin consent cookie: Legitimate interest of the data controller (Art. 6(1)(f) GDPR) – technical necessity for managing user consent and respecting selected settings.
• TourMaster theme cookies: Legitimate interest of the data controller (Art. 6(1)(f) GDPR) – technical necessity for site navigation and remembering visited tour pages.
• WordPress core cookies: Legitimate interest of the data controller (Art. 6(1)(f) GDPR) – technical necessity for basic website functionality.
• Bokun booking widget cookies: Performance of a contract (Art. 6(1)(b) GDPR) – technically necessary for the booking and payment process.
• Google Analytics cookies: User consent (Art. 6(1)(a) GDPR) – activated only after the user accepts analytical cookies via the cookie banner.
• Independent Analytics Pro: Legitimate interest of the data controller (Art. 6(1)(f) GDPR) – basic server-side analytics. No cookies are set and data is not shared with third parties.
• Google Ads cookies: User consent (Art. 6(1)(a) GDPR) – activated only after the user accepts marketing cookies via the cookie banner.
• TripAdvisor widget cookies: User consent (Art. 6(1)(a) GDPR) – the widget loads only after the user accepts marketing cookies.
• WPForms antispam protection: Legitimate interest of the data controller (Art. 6(1)(f) GDPR) – protection of the contact form from abuse. Does not set cookies or process personal data, therefore does not require consent.

When you first visit our website, a cookie notice will be displayed in which you can choose which cookies you accept (Accept All / Reject All / Customize). You can change or withdraw your choice at any time by clicking the consent icon located on the website.

You can also manage cookies directly through your browser settings:

• Chromium-based browsers (Chrome, Edge, Opera, …): Settings → Privacy and security → Cookies and other site data
• Firefox-based browsers (Firefox, LibreWolf, Waterfox, …): Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data

Note: Disabling necessary cookies may cause certain website functions to work incorrectly. Disabling Bokun cookies will prevent online bookings from working.

In accordance with the General Data Protection Regulation (GDPR), you have the right at any time to:

• Access – obtain confirmation whether we process your data and access that data.
• Rectification – request correction of inaccurate data or completion of incomplete data.
• Erasure – request deletion of data (“right to be forgotten”), subject to legal exceptions.
• Restriction of processing – request that we temporarily suspend the processing of your data.
• Data portability – receive your data in a structured, machine-readable format.
• Object – object to processing based on legitimate interest.
• Withdraw consent – withdraw consent for processing at any time without negative consequences.

To exercise any of these rights, contact us:

• Email: info@zicotours.com
• Contact form on the website

We will respond as soon as possible, and no later than within 30 days.

If you believe that the processing of your personal data is not in accordance with applicable regulations, you have the right to lodge a complaint directly with the competent supervisory authority:

Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16
HR – 10 000 Zagreb, Croatia
Email: azop@azop.hr
Tel: +385 (0)1 4609-000
Fax: +385 (0)1 4609-099
Web: https://azop.hr/

Zico turizam d.o.o. reserves the right to change this Cookie Policy in accordance with changes in business operations, and particularly in the event of changes in the technologies used or legislation. We will publish each change on this page with an updated date. We recommend that you periodically check this page to stay informed about the current processing conditions.

Last updated: May 2026.