The City of Zagreb, as the data controller, collects, processes, and uses certain personal data of its citizens, service users, job candidates and other persons who contact us, while ensuring that the data is processed in accordance with the applicable regulations on the protection of personal data.
This Privacy Policy describes our practices regarding the collection, processing, and use of personal data.
Data being processed
The City of Zagreb shall collect and process personal data of data subjects (natural persons or parties to the proceedings) for the purpose of performing tasks within the scope of authority of the City of Zagreb, in accordance with positive legal regulations of the Republic of Croatia. Personal data are collected directly from the respondents, by inspecting the submissions and documents submitted by the respondents and in the databases of public authorities, in accordance with the concluded agreements.
Officials and employees in the City of Zagreb process personal data of data subjects or other natural persons on the following basis:
- legal basis for data processing (law/regulation, act);
- if the data subject has given his or her voluntary, specific and unambiguous consent to the processing of his or her personal data for one or more specific purposes, if the processing is necessary for the purposes of the legitimate interests of the controller or a third party;
- the processing is necessary in order to protect the vital interests of the data subject or of another natural person;
- if the processing is necessary for the performance of a contract to which the data subject is party or in order to take action at the request of the data subject prior to entering into a contract;
- the processing is necessary for compliance with the legal obligations of the controller;
Personal data shall be collected for specific explicit and legitimate purposes and shall not be further processed in a manner inconsistent with those purposes. The personal data collected are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
The City of Zagreb guarantees the protection of personal data in all procedures falling within the scope of activities of city administrative bodies of the City of Zagreb in accordance with the Personal Data Protection Policy of the City of Zagreb governing the protection of personal data when processing personal data, as well as the supervision and management of personal data in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Types of cookies
The website of the City of Zagreb is static and does not use cookies to collect data.
Our website uses the following categories of cookies:
Mandatory - they are necessary for the technical functionality of the website, or they provide the service you have requested. These cookies do not store information that could identify you.
Cookies used: System session ID (duration: 60 min.), CookieWarningAgreed (duration: 90 min.) and others.
Statistical - they are used to collect data on the use of the website (demographic data, user interests, etc.) in order to improve the user experience. This data is also anonymous.
Cookies used: Google Analytics, AddThis
Functional - allows the website to provide enhanced functionality and personalization, e.g. remembering the language in which the content of the pages of that website is displayed.
Marketing - third-party cookies. These cookies are based on the unique identification of your browser and internet device.
Cookies used: Facebook, Instagram, Youtube, Linkedin...
Data recipients
When it is in accordance with the purpose for which certain data are collected and processed, the City of Zagreb may provide access to your data to third parties who provide us with support in data processing and performing the activities for which the data were collected (accounting, IT support). In this case, third parties guarantee the confidentiality and protection of personal data in accordance with the applicable regulations on the protection of personal data by special contractual provisions.
Also, the City of Zagreb may allow the processing of your data to the competent services and public authorities when required by applicable law.
Data storage period
We process your personal data until the purpose of processing personal data is fulfilled. After the termination of the purpose for which they were collected, we no longer use your personal data, and they remain in our storage system, and we keep them to the extent that we are bound by legal regulations.
Rights of the data subject
At any time, you have the right to request from the City of Zagreb access to your personal data that we process and rectification of incorrectly stated personal data. In certain cases, you have the right to erasure of personal data or restriction of processing pursuant to REGULATION (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, Article 6(1) and Article 9(2) .
You also have the right to object to data processing pursuant to REGULATION (EU) 2016/679, Article 21(1) Article 8(1).
For all inquiries about data processing and personal data protection, you can contact us at
szop@zagreb.hr or in person by phone to the Personal Data Protection Officer at
+385 1 658 5761
If you suspect a breach in the processing of your personal data, you have the right to file a complaint with the Personal Data Protection Agency.
