Home / Privacy Policy

Legal · Last updated 1 January 2026

Privacy Policy

We are a small editorial publisher, not an advertising business. This policy explains exactly what we collect when you read our Croatia guides, why we collect it, how long we keep it and what you can ask us to do about it.

Stone architecture detail representing the publisher's editorial offices in Croatia
1. Who we are

The data controller

This website, curiouslanebrowsng.living, is published by Jadran Editorial House d.o.o., a limited liability company registered in Croatia under company number 14882037, with its registered office at Ulica Kralja Zvonimira 22, 4th floor, 10000 Zagreb, Croatia. For the purposes of the EU General Data Protection Regulation (Regulation 2016/679, “GDPR”) and the Croatian Act on the Implementation of the GDPR, we are the data controller for the personal data described below.

You can reach us at [email protected] or by post at the address above. Data protection enquiries are handled by the editorial director; we are not required to appoint a Data Protection Officer and have not done so.

2. What we collect

Categories of personal data

Data, purpose and legal basis
Contact form submissionsName, email address, chosen topic, travel dates and the content of your message. Used solely to answer your enquiry. Legal basis: consent, and our legitimate interest in responding to readers.
Email correspondenceAnything you send us by email, including your address and signature block. Legal basis: legitimate interest in maintaining correspondence.
Server logsIP address, user agent, requested URL, referring page and timestamp, recorded automatically by our hosting provider. Legal basis: legitimate interest in security, abuse prevention and service reliability.
AnalyticsAnonymised page views, approximate region, device type and reading depth — only if you consent to analytics cookies. Legal basis: consent.
Functional preferencesYour cookie choices, saved guides, currency and language, stored in your browser. Legal basis: consent, except for the record of your consent itself, which is strictly necessary.

We do not knowingly collect data from children under 16, we do not collect special category data, and we do not ask for payment details because we sell nothing on this site.

3. How we use it

Purposes of processing

  • Replying to you. If you write to the editorial desk, we use your details to answer and, where relevant, to follow up on a correction.
  • Improving the guides. Aggregate analytics tell us which Croatia pages are read and where readers stop reading. We never attempt to identify an individual from this data.
  • Keeping the site up. Logs let our host detect attacks, debug errors and manage load.
  • Meeting legal obligations. Retaining records where Croatian or EU law requires it.

We do not sell personal data. We do not share it with advertising networks, data brokers or tour operators. We do not use automated decision-making or profiling that produces legal effects.

4. Sharing and transfers

Who else sees your data

We rely on a small number of processors who act only on our documented instructions and are bound by written data processing agreements:

  • Hosting provider — serves the website and stores server logs within the European Economic Area.
  • Email provider — handles correspondence sent to our @curiouslanebrowsng.living addresses.
  • Privacy-focused analytics provider — processes anonymised usage statistics, only where analytics consent has been given.
  • Google Fonts — our typefaces are requested from Google’s servers, which necessarily receives your IP address in order to deliver the font files. See the cookie policy for detail.

Where any processor transfers data outside the EEA, we rely on the European Commission’s Standard Contractual Clauses or an applicable adequacy decision. We may also disclose data where we are legally obliged to do so by a competent Croatian authority or court.

5. Retention

How long we keep things

Retention periods
Contact enquiries24 months from the last message in the thread, then deleted.
Server logs30 days, then automatically purged.
Analytics data14 months in aggregate form.
Cookie consent record12 months, after which you will be asked again.
Accounting records11 years where Croatian bookkeeping law requires it — this applies only to supplier and contributor invoices, not to readers.
6. Your rights

What you can ask us to do

Under the GDPR you have the right to:

  • Access a copy of the personal data we hold about you.
  • Rectify data that is inaccurate or incomplete.
  • Erase your data where we no longer have a lawful reason to keep it.
  • Restrict processing while a dispute about accuracy or legitimate interest is resolved.
  • Object to processing based on our legitimate interests.
  • Port data you provided to us in a structured, machine-readable format.
  • Withdraw consent at any time, without affecting processing carried out before withdrawal. For cookies, use the preferences panel in the banner or clear your browser storage.

Write to [email protected] with “Data request” in the subject line. We respond within 30 days and may ask a single question to verify your identity. Exercising these rights is free of charge.

If you are unhappy with our response, you may complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, or to the supervisory authority in your country of residence.

7. Security and changes

Keeping data safe

The site is served exclusively over HTTPS. Access to the mailbox and any stored correspondence is limited to editorial staff who need it, protected by multi-factor authentication. No transmission over the internet is ever perfectly secure, but we take reasonable technical and organisational measures appropriate to the limited data we hold, and we will notify affected individuals and AZOP within 72 hours of becoming aware of a reportable breach.

We may update this policy as the site develops. The date at the top of this page always reflects the current version, and material changes will be flagged on the homepage for at least 30 days.