Privacy Policy

The public website includes News and a form for sending travel stories to our editors. The form collects your name, e-mail address, title, story and any sources you choose to include. We store submissions in Netlify Blobs and send a review link to our editorial mailbox through Resend so we can review your submission and reply. A submission is never published automatically. Sending a story does not create a member account. Account creation, sign-in and the member app remain closed; the app sections below apply only if they launch separately.

We use submitted stories and contact details only to review the story, check facts and rights, and correspond with the author. The editorial mailbox is restricted to the team and its e-mail provider. Editor links expire after 30 days, and private submissions are removed from the site store after 90 days. We do not publish the author’s e-mail address. Mailbox copies may be retained as needed for correspondence and applicable legal obligations. To ask about or withdraw a submission, e-mail info@travelclubcroatia.com from the address used in the form. Security controls limit repeated submissions using a short-lived, pseudonymous network identifier.

Josip Totić, acting as a natural person, is the controller for the current public website, its privacy-choice storage and enquiries addressed to the website operator. Travel Club Croatia is the website name. Privacy contact: info@travelclubcroatia.com. See the Website Operator page.

This notice does not transfer existing company contracts or historical member-app data to a new controller. The member app remains closed; its controller and notices must be confirmed before it reopens.

• Account details such as name, e-mail address and authentication identifier.
• Travel profile information you choose to add, including home city, visited countries, interests and travel preferences.
• Trip content such as members, itinerary, places, expenses, votes, side quests, questions, answers and photographs.
• Invitation and notification records needed to deliver and protect trip access.
• Public community access requests, including name, e-mail address, city and selected interest. A protected administrator reviews a request before any private WhatsApp group link is sent.
• Illegal-content notices and appeals, including the exact content location, allegation, supporting context, moderation decision and optional reporter contact. Reporter contact is encrypted and available only to authorised moderators.
• Limited technical information used for security, abuse prevention and diagnosing errors. During account creation, Cloudflare Turnstile processes browser and device signals needed to distinguish ordinary visitors from automated abuse. It does not receive the name, e-mail address or password entered in our form. We do not sell personal data.

We use account and trip information to provide the service you request: creating an account, planning trips, sharing information with trip members and delivering invitations. We use limited technical data for our legitimate interest in keeping the service secure and reliable.

Optional discovery e-mails are sent only when you enable them. Side-quest and expense updates can be changed at any time in your profile.

We process illegal-content notices and related decisions to meet applicable legal duties, protect people and the service, provide redress and establish or defend legal claims. Reporter identity is not disclosed to the affected user unless this is strictly necessary and legally justified.

Private trips and their photos are available only to accepted trip members. Public trip discovery shows a limited summary, not the private itinerary, expenses, member e-mail addresses or photographs.

Destination and Erasmus questions and answers are community content visible to signed-in members. They can include the partner institution, topic and home faculty you choose to show. Do not post passport numbers, identity documents, payment-card details, accommodation access codes or other sensitive information.

• Netlify provides hosting, authentication, account confirmation and recovery e-mails, server functions and data storage.
• Cloudflare provides the strictly necessary Turnstile security check during account creation. The Managed widget may adapt the check to browser risk signals. We use separate hostname-restricted widgets, validate every token on the server and do not enable Turnstile pre-clearance.
• Resend delivers editorial submissions, trip invitations and community-related e-mails.
• Browser push services deliver Web Push notifications only after the user enables them. The browser vendor may process the device push endpoint needed for delivery.
• Google Maps Platform provides interactive maps, country boundaries and place suggestions. Map views, search text and normal browser request information may be processed by Google only after you enable Preferences, under the Google Privacy Policy. Place search is unavailable when the approved Google service is not enabled or available; the app does not silently send the search to another public geocoder.

Some service providers or their approved subprocessors may process limited personal data outside the European Economic Area. Where that happens, we require a lawful transfer mechanism, such as an applicable European Commission adequacy decision or approved standard contractual clauses, together with additional safeguards where the transfer assessment requires them.

The exact provider role, processing location and transfer mechanism must match our current contracts and production configuration. You may contact info@travelclubcroatia.com for information about the safeguards relevant to your data or how to obtain a copy where available.

Travel Club Croatia does not make solely automated decisions that produce legal or similarly significant effects for members. The app account is open to adults who complete the security check, confirm their e-mail and accept the current terms; access to the separate private WhatsApp community, moderation and appeals remain human-reviewed. Security controls may automatically reject an invalid or abusive request, but they do not make a legal or similarly significant decision about the person.

Account and active trip data are kept while your account or the relevant trip remains active. Community access requests are deleted after 90 days. Operational security events use keyed pseudonymous account subjects and are normally deleted after 180 days. Operational backups are retained for up to 35 days. Final illegal-content notice records without a pending appeal are normally deleted after 365 days unless a lawful preservation need applies. Account deletion removes or pseudonymizes live account data; erased data can remain in a restricted backup until that backup expires and is not restored into the live service except for disaster recovery.

We use access controls, password plus one-time e-mail-code sign-in, a separate server-signed member session, HttpOnly authentication cookies, private photo delivery, hostname-bound bot protection, hashed invitation tokens, request validation and encrypted HTTPS connections. Backup objects and reporter contact details use application-layer authenticated encryption. A provider token without the Travel Club member-session proof cannot use private APIs. No online service can guarantee absolute security, so users should avoid storing sensitive identity or payment information in the app.

You can correct your profile, change e-mail preferences, download an export of your app data and request deletion. Depending on applicable law, you may also have rights to access, restriction, objection and data portability, and the right to complain to the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, through the contact channels published at azop.hr.

We may need to verify that a request comes from the account owner before acting on it.

Strictly necessary storage supports authentication, security, invitation continuity, Web Push state and recording privacy choices. Preference storage is disabled until you consent. No analytics, advertising, session-recording or personalised marketing provider is active.

Web Push requires a separate browser permission and profile opt-in. Push subscriptions are used only to deliver requested service notifications and can be removed from the profile or browser settings. Lock-screen notifications use a generic alert: names, message text, trip details and amounts remain inside the authenticated app.

See the Cookie and Browser Storage Notice for the complete category, purpose and retention list.

The service is intended for people aged 18 or older. We do not knowingly create accounts for children. Contact us if you believe a child has provided personal data so we can investigate and remove it.