Privacy Policy

Last updated: [LAST UPDATED DATE]

This Privacy Policy explains how CROWN (“CROWN”, “we”, “us”, “our”) collects, uses, and protects personal data when you visit croatia.org (the “Site”). It applies to UK and EU visitors and is written to meet the requirements of the UK GDPR, the EU GDPR, the Data Protection Act 2018, and the Privacy and Electronic Communications Regulations (PECR).

This policy is provided as general guidance and is not a substitute for legal advice. We recommend having it reviewed by a qualified solicitor before publishing, particularly the sections on cookies and international data transfers, to confirm it accurately reflects how CROWN actually operates.

1. Who we are

CROWN is the data controller responsible for your personal data collected through this Site.

  • Website: croatia.org
  • Contact email: [CONTACT EMAIL]
  • Postal address: [POSTAL ADDRESS]
  • Data Protection Officer (if applicable): [DPO NAME/EMAIL]

2. What personal data we collect

We collect the following categories of personal data:

  • Contact form data: when you submit a contact form or otherwise get in touch, we collect the information you provide, such as your name, email address, and the content of your message.
  • Analytics data: when you browse the Site, we automatically collect information about your visit, such as your IP address, browser type, device information, pages viewed, and how you interact with the Site.
  • Cookie and tracking data: we and our third-party partners may use cookies and similar technologies to recognise your device and track your activity across the Site and, in some cases, other websites (see Section 5, “Cookies”).

3. How we use your data and our lawful basis

We use your personal data for the following purposes, relying on the lawful bases shown:

  • Responding to enquiries submitted via the contact form — lawful basis: your consent, and/or our legitimate interest in responding to people who contact us.
  • Understanding and improving the Site through analytics (e.g. which pages are popular, how visitors navigate the Site) — lawful basis: your consent (via our cookie banner) and/or our legitimate interest in maintaining and improving the Site, where consent is not legally required.
  • Advertising and personalisation, where third-party ad-tracking cookies are used — lawful basis: your consent, given via our cookie banner. We do not set advertising or tracking cookies until you have consented.
  • Legal compliance, such as responding to lawful requests from authorities — lawful basis: legal obligation.

Where we rely on consent, you can withdraw it at any time (see Section 8, “Your rights”).

4. Who we share your data with

We do not sell your personal data. We may share data with:

  • Service providers who help us run the Site, such as web hosting, analytics providers, and email/contact-form processors, acting under our instructions.
  • Advertising and analytics partners: [COOKIE TOOLS LIST] — only where you have given cookie consent for these categories.
  • Legal and regulatory bodies, where required by law, court order, or to protect our legal rights.

5. Cookies

The Site uses cookies and similar technologies. We use the following categories:

  • Strictly necessary cookies: required for the Site to function (e.g. remembering your cookie preferences). These do not require consent.
  • Analytics cookies: help us understand how visitors use the Site (e.g. [COOKIE TOOLS LIST]). These are only set with your consent.
  • Advertising/tracking cookies: used by us or third parties to show relevant adverts and measure their effectiveness, and which may track your activity across other websites. These are only set with your consent.

When you first visit the Site, you will be shown a cookie banner where you can accept or reject non-essential cookies, and it will always be as easy to reject as to accept. You can change your preferences at any time by [DESCRIBE HOW — e.g. “clicking the cookie settings link in the footer”], or by adjusting your browser settings to block or delete cookies (note that this may affect Site functionality).

6. International data transfers

Some of our service providers (for example, analytics or hosting providers) may process data outside the UK or European Economic Area (EEA). Where this happens, we take steps to ensure your data is protected to a standard equivalent to UK/EU law, such as relying on an adequacy decision or using Standard Contractual Clauses (or the UK International Data Transfer Addendum) with the relevant provider.

7. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this policy:

  • Contact form enquiries: [RETENTION PERIOD]
  • Analytics data: typically retained in aggregated or pseudonymised form according to our analytics provider’s default retention settings, or as configured by us.
  • Cookie consent records: kept for as long as needed to demonstrate compliance.

8. Your rights

Under UK/EU GDPR, you have the following rights in relation to your personal data:

  • The right to be informed about how your data is used (this policy).
  • The right of access to the personal data we hold about you.
  • The right to rectification of inaccurate or incomplete data.
  • The right to erasure of your data, in certain circumstances.
  • The right to restrict processing of your data, in certain circumstances.
  • The right to object to processing based on legitimate interests or for direct marketing.
  • The right to data portability, allowing you to obtain and reuse your data.
  • Rights related to automated decision-making, including profiling — we do not currently use automated decision-making that produces legal or similarly significant effects, but this right applies if that changes.
  • The right to withdraw consent at any time, where we rely on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at [CONTACT EMAIL]. We will respond within one month, as required by law.

9. How to complain

If you have concerns about how we handle your personal data, please contact us first at [CONTACT EMAIL] so we can try to resolve the issue. You also have the right to lodge a complaint with the UK’s data protection regulator:

  • Information Commissioner’s Office (ICO)
    Website: ico.org.uk
    Telephone: 0303 123 1113

If you are located in the EU, you may also have the right to complain to your local data protection authority.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for legal, operational, or regulatory reasons. The “Last updated” date at the top of this page shows when it was last revised. We encourage you to review this page periodically.

11. Contact us

If you have any questions about this Privacy Policy or how CROWN handles your personal data, please contact us at:

Post: [POSTAL ADDRESS]

Email: [CONTACT EMAIL]