Privacy Policy

1. Who is responsible for your data

rijeka.party ("we", "us") is a bilingual editorial guide to nightlife, concerts and club culture in Rijeka, Opatija and the Kvarner region, operated from Croatia. For any question about this policy or about your personal data, contact us at press@rijeka.party. Because we operate in the European Union, the General Data Protection Regulation (GDPR) applies.

2. What we collect

We may process the following categories of data:

• Server and security logs. Our site is served through Cloudflare. Like any web server, it records technical data such as your IP address, browser user agent, requested page and timestamp. This is used to deliver the site, and to detect abuse and attacks.
• Google Analytics data, only with your consent. This may include the page and page title you visited, approximate referral source, visit time and duration, page interactions, device and browser type, and approximate geographic location. Google Analytics uses a pseudonymous identifier in the _ga cookie. For EU visitors, Google uses the IP address to derive approximate location and then discards it before logging.
• Event submissions. If you submit an event through the form on our site, we receive the event name, date, start time, location, category, description, an optional ticket link, an optional poster/image link, and your email address (which we ask for so we can verify and moderate the submission). The form is powered by Google Forms, so this data is delivered into a Google account we control.
• Email correspondence. If you email us, we receive your email address, your message and anything you attach.

We do not collect special categories of data, we do not build user profiles, and we do not run advertising.

3. Why we may process it, and on what legal basis

• To operate and secure the website — legitimate interest (Art. 6(1)(f) GDPR).
• To measure traffic and improve content through Google Analytics — your consent (Art. 6(1)(a) GDPR). You can decline or withdraw consent at any time through the “Privacy settings” button; declining does not affect your use of the site.
• To review, verify and publish an event you submitted, and to reply to you about it — steps taken at your request and our legitimate interest in running an accurate editorial calendar (Art. 6(1)(b) and (f) GDPR).
• To answer your email — legitimate interest in responding to correspondence (Art. 6(1)(f) GDPR).

Note that when we publish an event you submitted, the event details become public. Your email address is not published.

4. Third parties that process data for us

• Cloudflare — hosting, CDN and security for the website.
• Google — Google Forms receives event submissions, while Google Analytics 4 measures site use only after you consent. Analytics does not load before consent; we have disabled Google signals and advertising personalization. Our typefaces are self-hosted on rijeka.party, not loaded from Google Fonts. Read more in Google's Privacy Policy.
• Zoho — our inbound email for the rijeka.party addresses.
• Resend — used to deliver outgoing press and media emails we send.

Some of these providers are based outside the European Economic Area, primarily in the United States. Where that is the case, transfers rely on the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

We do not sell your personal data, and we do not share it for advertising.

5. Our social media accounts

We operate accounts on Instagram and TikTok. We use those platforms' official APIs to publish our own original artwork and announcements to our own accounts. We do not use those APIs to collect, store or analyse data about other platform users. If you interact with us on a social platform — by following, commenting or sending a direct message — that interaction is governed by that platform's own privacy policy, and the platform is the controller of it, not us.

6. How long we keep it

Server and security logs are kept only for the short period our hosting provider retains them. Event-level and user-level data in a standard Google Analytics account is retained for no longer than 14 months; aggregate reports may remain available for longer. Event submissions are kept for as long as the event is relevant to the calendar and archive. Email correspondence is kept as long as needed to handle the matter and for a reasonable period afterwards. You can ask us to delete your data at any time.

7. Your rights

Under the GDPR you have the right to request access to your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. You can withdraw analytics consent through the “Privacy settings” button at the bottom of the page; this disables further measurement and removes analytics cookies available to this domain. To exercise your other rights, email press@rijeka.party and we will respond within one month.

If you believe we have handled your data improperly, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, or with the supervisory authority in your country of residence.

8. Children

This site is a nightlife guide intended for adults. Many listed events are age-restricted by the venue or organizer. We do not knowingly collect personal data from children.

9. Changes to this policy

If we change how we handle data, we will update this page and the "last updated" date above.