Privacy and cookies
This page explains what data prijateljidivljine.com collects, why, how long we keep it and what your rights are. Last updated: 3 October 2026.
Who processes the data
The data is processed by the operator of prijateljidivljine.com (“we”). The website is non-profit: we sell nothing, accept no payments or donations and show no ads. For any privacy question, write to [email protected].
In short
- You can read the website without registering and without giving any personal data.
- Analytics cookies (Google Analytics) are only set if you accept them.
- We do not sell data, use it for advertising or build profiles.
- The only data we publish is what volunteers enter themselves for the help network, and only after we approve it.
Visiting the website and hosting
The website and its dynamic parts (help network, blog, contact form and administration) run on the infrastructure of Cloudflare, Inc. (USA). On every visit your browser sends the technical data that every web server receives: IP address, time and address of the request, and information about your browser and device. Cloudflare processes it as our processor to deliver the website and protect it against attacks and abuse. The legal basis is our legitimate interest in a secure and properly working website (Article 6(1)(f) GDPR).
We do not store this data in our database and do not link it to you. Cloudflare is certified under the EU-US Data Privacy Framework, which is the basis for the transfer of data to the USA. As part of its protection against malicious traffic, Cloudflare may in exceptional cases set a technically necessary security cookie, for example when it shows a security check.
Cookies and browser storage
Without your consent we only use what is strictly necessary for the website to work or for a function you asked for (Article 5(3) of Directive 2002/58/EC). Everything else, namely Google Analytics, only loads after you click “Accept”.
| Name | Type and who sets it | Purpose | Duration |
|---|---|---|---|
| pd_consent | browser local storage (localStorage), us; necessary | remembers your choice in the cookie banner (accepted or declined) | until you delete it in your browser |
| _ga | cookie, Google Analytics; only with consent | distinguishes visitors by a random identifier | 2 years |
| _ga_TG4593Q83M | cookie, Google Analytics; only with consent | keeps the state of the visit (session) | 2 years |
| pd_admin | cookie, us; necessary, only for administrators and editors | login to the website administration | until the browser is closed (at most 12 hours), or 30 days if you choose to be remembered when logging in |
| pdBlog | browser session storage (sessionStorage), us; necessary | remembers whether the blog has a published post, so this is not checked on every page; contains no personal data | until the tab is closed |
You can change your choice at any time with the “Cookie settings” link at the bottom of every page, or here: open cookie settings. If you choose “Decline”, the Google Analytics cookies are deleted. You can also delete cookies and local storage in your browser settings.
Google Analytics (only with consent)
If you click “Accept” in the cookie banner, Google Analytics 4 loads, a service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Before that, the website sends no request to Google at all. Analytics shows us how many people visit the website, which pages help them, what kind of devices they use and roughly which countries they come from. Advertising features are switched off, and Google Analytics 4 does not store full IP addresses.
The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time without affecting the lawfulness of processing before the withdrawal. Google may transfer data to Google LLC in the USA; Google is certified under the EU-US Data Privacy Framework. Data in Google Analytics is kept for 14 months, and the cookies in your browser for at most 2 years.
Help network: map of volunteers, vets and associations
When you sign up as a volunteer, you enter your name, town and WhatsApp number and, optionally, the kinds of animals you take in, an email address and a note. The sign-up is stored in our database at Cloudflare and is not public until we approve it. To show you on the map, we send the name of the town (only the name of the town) to the Nominatim service of the OpenStreetMap Foundation, which returns the approximate coordinates of the town.
After approval, the following are shown publicly on the map and in the list: name, town and the town’s position on the map, WhatsApp number, kinds of animals, note and email address if you entered one. The purpose is that people who find an injured or abandoned animal can contact you quickly. The legal basis is your consent, which you give by sending the sign-up (Article 6(1)(a) GDPR). The entry stays published until you ask us to delete it; you can withdraw your consent at any time by email to [email protected], and we will then delete the entry.
We enter the details of vets and associations ourselves from publicly available business contacts, based on the legitimate interest of helping people quickly find help for an animal. If you want an entry corrected or removed, let us know.
When you search for a place on the map, your browser sends the text you typed directly to the Nominatim service. If you click “My location”, your browser first asks for your permission, and your location is only used in your browser to calculate distances; it is not sent to us. The map is loaded from OpenStreetMap servers (tile.openstreetmap.org) and the map library (Leaflet) from unpkg.com; these servers see your IP address. The OpenStreetMap Foundation is based in the United Kingdom, for which there is a European Commission adequacy decision on data protection.
Contact
You can write to us by email at [email protected], through the contact form, via WhatsApp (button on the website) or in our Facebook group. From the contact form we receive your name, email address, subject, message and an attachment if you send one (for example a photo of the animal). The form does not store this data on the website; it forwards it as an email to our mailbox at our email provider MXroute. There, like emails you send us directly, it is stored on MXroute’s servers in the USA.
We only use the data to answer and help you; the legal basis is your request and our legitimate interest in answering it (Article 6(1)(b) and (f) GDPR). The transfer to the USA is necessary to answer your inquiry (Article 49(1)(b) GDPR), and we keep the email only as long as needed to handle it. If you write to us via WhatsApp or Facebook, the messages are also processed by WhatsApp Ireland Limited or Meta Platforms Ireland Limited under their own policies. The WhatsApp buttons only open WhatsApp when you click them.
Blog and administration
Blog posts are published by us; visitors have no user accounts and there are no comments on the website. Login to the administration exists only for the website’s administrators and editors. It uses the pd_admin cookie, and passwords are stored only in protected form (hash). Images in posts are stored at Cloudflare.
Blog post pages and tag lists (addresses starting with /clanak/ or /tag/) have a GTranslate machine-translation menu, which is loaded from cdn.gtranslate.net; that server sees your IP address. If you choose a language in the menu, the text is translated by Google’s translation service.
External content and links
Fonts are loaded from our own website, not from Google’s servers. The website embeds no videos, no ads and no social media buttons that track visitors. Links to Facebook, WhatsApp and other websites lead to external services where their own privacy policies apply.
Who receives data
- Cloudflare, Inc. (USA): hosting, database, image storage and protection of the website; transfer based on the EU-US Data Privacy Framework.
- Google Ireland Limited and Google LLC: Google Analytics, only with your consent.
- OpenStreetMap Foundation (United Kingdom): map display and place search in the help network.
- MXroute (USA): email server for emails and contact form messages; the transfer is necessary to answer your inquiry (Article 49(1)(b) GDPR).
- WhatsApp and Meta: only if you contact us through those services yourself.
We do not sell data or give it to anyone else unless the law requires it. We make no automated decisions about you.
Your rights
Under the General Data Protection Regulation (GDPR) you have the right to:
- access your data and get a copy of it,
- have inaccurate data corrected,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.
To exercise your rights, write to [email protected]; we will reply within one month at the latest. If you believe we process your data unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or with the supervisory authority in your country.
Changes
If we change how the website works or what data we collect, we will update this page and the date at the top.