Privacy and Cookies

AirQuality.city is designed so that its core functions do not require tracking users. The website does not use analytics, marketing or advertising cookies, does not build visitor profiles and does not sell personal data.

Only information needed to operate and protect the portal, reply to messages, send the newsletter to people who have voluntarily subscribed, and run the services used by the site is processed.

Last updated: 26 September 2026.

Data controller

The controller responsible for personal-data processing is:

• Full name: Davor Malnar
• E-mail: contact@airquality.city
• Website: AirQuality.city
• Project: Sensorbox

Sensorbox is an internal project name and is not a separate legal entity.

Technical data generated when using the portal

Like most internet services, AirQuality.city and the infrastructure protecting it may process basic technical information with each request. This can include the IP address, request time, requested URL, browser and device information, HTTP status, technical errors and records associated with suspected abuse.

The information is used to keep the service available, diagnose failures, protect against attacks and investigate security incidents. It is not used to build marketing profiles.

Contact form

When you send a message through the contact form, we process the information you provide, such as your e-mail address, name where supplied, subject and message content. It is used only to handle your request, reply and conduct related follow-up communication.

Please do not submit sensitive personal information that is not necessary for resolving your enquiry.

Newsletter

An e-mail address is required to subscribe to the newsletter. The system may store the subscription time, confirmation information where e-mail confirmation is used, and unsubscribe status.

The newsletter is sent on the basis of consent. You can withdraw that consent at any time through the unsubscribe link in a message or by writing to contact@airquality.city. Withdrawal does not affect processing that was lawful before the unsubscribe request.

Browser preferences

The portal may store essential or user-selected preferences in local browser storage, such as language, light or dark theme and cookie-setting status. This storage supports the interface and is not used to track users across unrelated websites.

Cloudflare Turnstile

The contact and newsletter forms may use Cloudflare Turnstile to protect against automated spam and abuse. During a security check, Cloudflare may process the IP address and technical information about the browser, device and interaction with the form. Turnstile may use storage that is technically necessary to perform that check.^[1]

Maps and OpenStreetMap

AirQuality.city uses map data associated with the OpenStreetMap project. When a map loads, the browser may request map resources directly from OpenStreetMap or the currently configured tile provider, which may receive the IP address and technical request information.^[2]

Purposes and legal bases

Personal and technical information is processed to operate the portal securely and reliably, prevent abuse, communicate with users, send the newsletter and comply with legal obligations.

Legitimate interests are relied on for system security and responding to contact requests, while the newsletter is based on consent. Where processing is required by law or a lawful request from a competent authority, the relevant legal basis under applicable law is used.

Service providers and possible recipients

Information may be accessible only to providers that need it for the technical operation of the portal or communication:

• Hetzner Online GmbH for hosting and server infrastructure
• Proton AG for e-mail communication
• Cloudflare, Inc. for Turnstile form protection
• OpenStreetMap Foundation or the currently configured map-resource provider for map display
• competent authorities where disclosure is required by law

If a separate newsletter provider is introduced, this policy will be updated before that provider is used.

Some providers may process information outside the European Economic Area. Where applicable, transfers rely on an adequacy decision or another lawful transfer mechanism.

Retention periods

Standard technical and security logs are normally retained for up to 30 days. Records associated with a security incident may be retained longer where needed for investigation, remediation or legal claims.

Contact messages are retained for as long as necessary to answer and resolve the enquiry, normally no longer than 12 months after the last communication. Newsletter e-mail addresses are retained until unsubscribe or withdrawal of consent, while a minimal unsubscribe record may be kept for as long as necessary to prevent further sending and document compliance with the request.

Preferences stored in your browser remain there until you delete them or the portal replaces them with a new value.

Cookies and similar technologies

The website does not use analytics, marketing or advertising cookies. Only technically necessary cookies or local storage may be used for form security, remembering explicitly selected preferences and stable website operation.

If AirQuality.city later introduces analytics, advertising or another optional technology requiring consent, it will not be loaded before valid consent is obtained and this privacy policy will be updated.

Your rights

Depending on the circumstances and applicable law, you may request access to your personal data, correction or deletion, restriction of processing, portability where applicable, and object to processing based on legitimate interests. Newsletter consent can be withdrawn at any time.

To exercise your rights, write to contact@airquality.city. You may also lodge a complaint with the Croatian Personal Data Protection Agency, AZOP.

Security

We apply reasonable technical and organisational safeguards, including HTTPS, restricted administrative access, form protection and regular system maintenance. No internet service can guarantee absolute security, but the aim is to keep the amount of collected data small and access limited to what is necessary.

Changes to this policy

This policy may change when portal features, service providers or legal requirements change. The date of the latest update will always be shown on this page.