Holistic Croatia is run from Croatia and follows the EU General Data Protection Regulation. This page says what we collect, why, and what you can do about it. It is written to be read, not survived.
Who is responsible
Holistic Croatia is the data controller for personal data processed through holisticcroatia.com. For any question or request under this policy, write to hello@holisticcroatia.com.
What we collect
Browsing the site: nothing that identifies you. Our analytics are cookieless and aggregate — page URL, referrer, browser, operating system, device type and country — derived without storing your IP address and without a persistent identifier. We cannot single you out, and we cannot sell what we do not have.
Creating an account: your email address and a password we never see in plain text. Accounts exist so business owners can claim and edit a listing. Browsing needs no account.
Claiming or submitting a listing: the business details you enter, plus the email address you write from. This is the data that ends up published on the listing page.
Writing to us: your email address and whatever you put in the message, kept as long as it takes to resolve the matter.
Legal basis
Account data and listing submissions: performance of a contract with you, Art. 6(1)(b) GDPR. Aggregate analytics and keeping the service secure and working: our legitimate interest in running a usable site, Art. 6(1)(f). We do not rely on consent for tracking, because we do not track.
Who processes data for us
Supabase — database, file storage and authentication, hosted in the EU. Cloudflare — content delivery and protection against abuse. Plausible Analytics — cookieless, EU-hosted analytics. Resend — transactional email. Each acts as a processor under contract; none may use your data for its own purposes.
Business data on listing pages
Listing pages carry business contact information — trading name, address, phone, website, opening hours — collected from public sources including the venue’s own website, official registries and the Google Places API. Where a business is a sole trader, that can also be personal data. If you are the owner and want an entry corrected, hidden or removed, write to support@holisticcroatia.com and we will action it.
How long we keep things
Account data: until you delete the account. Listing data: while the listing is published. Support email: up to 24 months. Aggregate analytics: indefinitely, because they contain nothing personal.
Your rights
Access, rectification, erasure, restriction, portability and objection — all of them, exercised by email, free of charge, answered within 30 days. If our answer does not satisfy you, you may complain to the Croatian Personal Data Protection Agency (AZOP).
Transfers and changes
Data stays in the EU. Where a processor operates outside it, transfers rely on Standard Contractual Clauses. If this policy changes materially, the date at the top of this page changes with it and we say what changed.