In brief

AirQuality.city processes only the information required to operate and protect the website, reply to messages submitted through the contact form, and send newsletters to users who have voluntarily subscribed.

The website does not use analytics, marketing, or advertising cookies, does not create user profiles, and does not sell personal data.

Last updated: 23 July 2026.

Data controller

The controller responsible for processing personal data is:

• Full name: Davor Malnar
• E-mail: contact@airquality.city
• Website: AirQuality.city
• Project: Sensorbox

Sensorbox is an internal project name and is not a separate legal entity.

Information we process

Technical information

When you visit the website, the server and security services may process your IP address, the date and time of the request, the requested URL, browser and device information, HTTP status, technical errors, and suspected abuse attempts.

This information is used to keep the website secure and stable, diagnose problems, and protect it from attacks.

Contact form

When you send a message through the contact form, we process the information you provide, such as your e-mail address, message content, and your name or message subject where provided.

We use this information only to process your request, reply, and conduct related follow-up communication. Do not submit sensitive personal information that is not required to resolve your request.

Newsletter

When you subscribe to the newsletter, we process your e-mail address, subscription time, confirmation information where e-mail confirmation is used, and unsubscribe status.

The newsletter is sent on the basis of your consent. You may withdraw consent at any time by using the unsubscribe link in a message or contacting contact@airquality.city.

Browser preferences

The website may store essential preferences that you select in your browser's local storage, such as language, light or dark theme, and cookie settings. These preferences are not used for tracking or advertising.

Cloudflare Turnstile

The contact and newsletter forms may use Cloudflare Turnstile to protect them from automated abuse.

During verification, Cloudflare may process your IP address and technical information about your browser, device, and interaction with the form. Turnstile may use strictly necessary cookies or similar storage required to perform the security check.

More information is available in the Cloudflare Privacy Policy.

Maps and OpenStreetMap

The website displays maps associated with the OpenStreetMap project. When a map is loaded, your browser may request map resources directly from OpenStreetMap or the currently configured map provider. That provider may receive your IP address and technical request information.

More information is available in the OpenStreetMap Foundation Privacy Policy.

Purposes and legal bases

We process information for:

• secure and stable website operation and abuse prevention, based on legitimate interests
• processing and replying to contact requests, based on the legitimate interest in communicating with users
• sending the newsletter, based on consent
• compliance with legal obligations and lawful requests from competent authorities

Service providers and recipients

Information may be accessible only to providers that require it to operate the website:

• Hetzner Online GmbH — hosting and server infrastructure
• Proton AG — e-mail communication
• Cloudflare, Inc. — Turnstile form protection
• OpenStreetMap Foundation or another currently configured map-resource provider — map display
• competent authorities where disclosure is required by law

If a separate newsletter provider is introduced, this policy will be updated before that provider is used.

Some providers may process information outside the European Economic Area. In such cases, transfers rely on an adequacy decision or another appropriate legal mechanism.

Retention periods

• standard technical and security logs: normally up to 30 days
• logs connected with a security incident: until the incident has been analysed and resolved, and longer where required for legal claims
• contact messages: for as long as required to reply and resolve the request, normally no longer than 12 months after the last communication
• newsletter e-mail address: until unsubscribe or withdrawal of consent
• minimal unsubscribe or consent-withdrawal record: for as long as required to prevent further sending and demonstrate compliance with the request
• browser preferences: until you delete them or the website replaces them

Cookies and similar technologies

The website does not use analytics, marketing, or advertising cookies.

Only strictly necessary cookies or local storage may be used for form security, remembering explicitly selected preferences, and stable website operation. Consent is not required for this essential storage.

If analytics, advertising, or another optional technology is introduced in the future, it will not be loaded before valid user consent is obtained, and this policy will be updated.

Your rights

Depending on the circumstances, you may request access to, correction or deletion of, or restriction of processing of your personal data; object to processing based on legitimate interests; request data portability where applicable; and withdraw newsletter consent.

To exercise your rights, contact contact@airquality.city.

You may also lodge a complaint with the Croatian Personal Data Protection Agency — AZOP.

Security

We apply reasonable technical and organisational safeguards, including HTTPS, restricted administrative access, form protection, and regular security maintenance.

No internet-based system can guarantee absolute security.

Changes to this policy

We may update this policy when website features, service providers, or legal requirements change. The date of the latest update will be displayed on this page.