Legal information

Legal notices

⚖️ Disclaimer 🔒 Privacy policy 🍪 Cookies 📋 Terms of use

Last updated: 28 September 2026

This policy explains what personal data we collect when you use hrvatskodrzavljanstvo.info, why, how long we keep it and what rights you have. It follows the Serbian Law on Personal Data Protection (Official Gazette of RS no. 87/2018) and, for visitors from the European Union, the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Who the controller is

The controller is the operator of hrvatskodrzavljanstvo.info. For any question about your data, or to exercise your rights, write to info@hrvatskodrzavljanstvo.info.

2. What we collect and why

Visiting the site

As with any website, the hosting provider's server automatically logs technical request data: IP address, time, page address and browser details. Purpose: operating and securing the site. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: short, according to the hosting provider's settings.

Contact form

Name, email address, subject and message, chosen language, and the IP address and browser details at the time of sending. Purpose: answering your enquiry; the IP address is used only to protect against spam and repeated submissions. Legal basis: your request (Art. 6(1)(b)) and our legitimate interest in preventing abuse (Art. 6(1)(f)). Retention: the IP address and browser details are deleted after 90 days, the message itself after 24 months.

Please do not send us copies of identity documents or any data your question does not need.

Newsletter

Email address, language and time of sign-up. The subscription only becomes active once you confirm it through the link we send you (double opt-in). Purpose: notices about changes to procedures. Legal basis: your consent (Art. 6(1)(a)). Retention: until you unsubscribe. Every email contains an unsubscribe link, and your address is deleted when you use it. Unconfirmed sign-ups are deleted after 30 days.

Sharing your story

Name or initials, city, basis for citizenship, waiting time, rating and the text of your story. After our review this is published publicly on the site. Legal basis: your consent, given by ticking the box in the form. Retention: for as long as the story is published. We remove it on request sent to the email address above.

Visitor statistics (Google Analytics)

Only if you allow it in the cookie settings. Google Analytics 4 then records which pages you visited, for how long, your device type and approximate location (city or country), linked to a random identifier stored in a cookie. Google Analytics 4 does not store IP addresses. Legal basis: consent (Art. 6(1)(a)). Retention: at most 14 months.

Advertising (Google AdSense)

The site shows ads through Google AdSense only if you allow it in the “Ads” category of the cookie settings. Google may then use cookies and similar identifiers to serve ads, measure them, prevent fraud and tailor ads to your interests. For that processing Google acts as an independent controller. More: how Google uses information from sites that use its services. You can also turn off personalised ads in Google Ad Settings. Legal basis: consent (Art. 6(1)(a)).

3. Cookies

A full list of the cookies and similar storage the site uses is on the Cookies tab, where you can also change or withdraw your consent.

4. Who receives the data

  • Our hosting provider, whose servers hold the site and its database, as a processor acting on our behalf.
  • Google (Google Ireland Ltd. and Google LLC) for Analytics and AdSense, only with your consent.

We do not sell data or share it with others for marketing.

5. International transfers

Google may process data in the United States. Such transfers rely on the EU–US Data Privacy Framework and the European Commission's standard contractual clauses.

6. Your rights

You have the right to:

  • access the data we hold about you and receive a copy,
  • have inaccurate data corrected,
  • have your data erased,
  • restrict processing,
  • data portability,
  • object to processing based on legitimate interest,
  • withdraw consent at any time, without affecting processing carried out before the withdrawal.

Send requests to info@hrvatskodrzavljanstvo.info. We reply within 30 days at the latest.

You may also lodge a complaint with a supervisory authority: in Serbia the Commissioner for Information of Public Importance and Personal Data Protection, in Croatia the Personal Data Protection Agency (AZOP), and elsewhere in the EU the authority in your country.

7. Automated decision-making

We do not make decisions about you based solely on automated processing. The exception is Google's selection of personalised ads, and only if you have consented to it.

8. Children

The site is not intended for anyone under 16, and we do not knowingly collect their data.

9. Security

The site uses an encrypted connection (HTTPS). Only authorised people can access messages and other data, through a protected admin panel.

10. Changes to this policy

We may update this policy if the way the site works or the law changes. The date of the latest change is shown at the top of the page.