Privacy & consent
Clear permission, minimal data.
1. Who controls the data
FKK Croatia is an editorial project operated by Adriatic Ritual d.o.o., Zidarska 40A, 51260 Crikvenica, Croatia (OIB 46603124571; MBS 040496172). Adriatic Ritual d.o.o. is the controller of personal data collected through this website. Privacy enquiries can be sent to privacy@fkkcroatia.com.
2. The double-opt-in flow
When activated, the website will display a Brevo-hosted signup form configured for double confirmation. Submitting an address triggers a confirmation message. The address joins the marketing list only after the recipient clicks the confirmation link. No promotional email is sent before that confirmation.
3. Data used for travel updates
- Email address and any optional language preference entered in the form.
- Signup, confirmation, unsubscribe and consent timestamps needed to prove and manage permission.
- Basic technical and security information processed by Brevo to deliver the form and confirmation message.
The legal basis is consent. Consent can be withdrawn at any time through the unsubscribe link or by contacting the address above.
4. Email processor and retention
Brevo will process signup and email-delivery data on FKK Croatia's behalf under its own security and data-processing terms. Unconfirmed requests should not be treated as subscribed contacts. Confirmed records are kept until unsubscribe or a justified suppression period required to honour the opt-out.
5. Purchases
The €14.90 launch-price planner checkout, any valid discount, payment, tax, receipt and secure file delivery will be handled by Lemon Squeezy as merchant of record. FKK Croatia does not collect card details. Lemon Squeezy's checkout presents its own terms and privacy information before payment.
6. Local storage and external services
The guide stores language and saved-place preferences only on the visitor's device. The interactive map requests tiles from OpenStreetMap providers. Fonts and landscape imagery may be requested from their credited providers. The site does not use the newsletter field as an analytics identifier.
7. Your rights
Subject to applicable law, a person may ask for access, correction, deletion, restriction, portability or withdrawal of consent, and may complain to the relevant data-protection authority. Identity may need to be verified before fulfilling a request.
8. Before subscriptions open
- Authenticate the sending domain in Brevo.
- Enable “Double confirmation” and a branded confirmation template.
- Connect only the public hosted-form URL - never an API key in browser code.
- Test signup, confirmation, unsubscribe and suppression before opening the site publicly.