Controller
Tourist Board of the Town of Novi Marof (Turistička zajednica Grada Novog Marofa), Antuna Mihanovića 3, 42220 Novi Marof, Croatia, OIB 43160525483. For any question about personal data, write to info@tz-novi-marof.hr or tz.novimarof@gmail.com.
Processor
The website and the app are built and maintained by OUTMORE d.o.o., Augusta Šenoe 2, Ivanovec, 40000 Čakovec, Croatia, OIB 76989405930, under a contract with the Tourist Board. All servers are with Hetzner Online GmbH in Germany (European Union). No data is sent outside the European Union.
Delivering pages
Like any web server, ours sees the IP address, time, page address and browser type with each request. The website server does not store them. The route planner server keeps an access log for security and troubleshooting, deleted automatically after 14 days. The legal basis is a task carried out in the public interest – promoting the tourist destination (Article 6(1)(e) GDPR).
Counting visits, without cookies
To know which pages and routes people look at, we count visits on the server itself, from the page request your browser sends anyway. There is no script or cookie for this on the site and nothing is stored on your device. The server deletes the IP address when writing its log, and every ten minutes only adds up: the page opened, the language, the type of device (phone, tablet or computer) and the website you came from (for example Google or Facebook). The log is deleted after three days, and the daily totals are kept for 25 months so two seasons can be compared. The legal basis is the public interest, as above.
Statistics with your consent
If you choose “Accept” in the “Your privacy” panel, we also record what you do on the website and in the planner: which route or attraction you open, whether you download the GPX, save the map for use without signal, start and finish navigation and share a route. This comes with a random identifier that lasts only while the browser tab is open, and the country you are visiting from. We determine the country from the IP address at the moment of the request, in our own database on our server (DB-IP, CC BY 4.0); we store only the country code, never the IP address or your position. The legal basis is your consent (Article 6(1)(a)). You can withdraw it at any time with “Privacy settings” in the footer. The data is kept for 25 months.
What stays only in your browser
Your choice in the “Your privacy” panel, progress in the “Six bunkers” game, ticks on the gear list and the copy of pages and the map for use without signal are stored only in your browser. They are not sent to us or anyone else, and you delete them by clearing the site data in your browser settings.
Location
On the “Start” page and in the planner’s navigation, your browser places you on the map and follows your progress along the route, with your permission. Your position is processed only on your device and is not sent anywhere. You can withdraw the permission at any time in your browser settings.
Map and weather forecast
The map is delivered by our server maps.outmore.hr, which sees your IP address and the map area you are viewing but does not store them. The weather forecast on route pages is delivered by our server prognoza.outmore.hr, which sees your IP address and the position of the route’s start (not your position). It fetches the data from the Norwegian Meteorological Institute (MET Norway) without passing on your IP address. Forecast data: MET Norway (CC BY 4.0).
Links to other services
The share buttons (WhatsApp, Viber, Facebook, Messenger, Telegram, email, SMS) and “Directions to the start” (Google Maps) open that service only when you click. There are no scripts of theirs on the site, so they do not know you visited us until you click. After the click, their privacy rules apply.
Your rights
You have the right of access, rectification, erasure and restriction of processing, and the right to object. Send your request to info@tz-novi-marof.hr. We reply without undue delay and at the latest within one month. If you believe your rights have been infringed, you can lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr).