Privacy Policy

This Privacy Policy explains how HEINEKEN Hrvatska d.o.o. (Dubovec 22, Karlovac), as the data controller, processes personal data of visitors to star-quality.hr. We are part of the HEINEKEN Group. For global strategic reporting and/or global promotional activities, the independent controller is HEINEKEN International B.V.

We may update this Policy from time to time; material changes will be communicated on the site or by other appropriate means. We recommend checking the update date below the title from time to time.

1. Introduction

This Policy applies to the use of star-quality.hr (hereinafter: the Site). Please read carefully as it explains why and how we process your data in connection with your use of the Site.

2. What data we collect and how we use it

You can browse most of the Site without providing data. The processing activities relevant to this Site are outlined below:

a) Technical logs and security

On each visit, our server may process technical records (IP address, URL, time, user-agent, clicks/views) for security, diagnostics, and maintenance purposes. Legal basis: legitimate interests. Retention: up to 14 months.

b) Age verification (age-gate)

For alcohol-related content we verify that you are 18+. The entered date of birth is used solely for verification; it is not stored. After successful verification, a necessary cookie age_ok is set. Legal basis: legal obligation and legitimate interests.

c) Analytics (with consent)

If you accept “Analytics cookies”, we use Google Analytics 4 with IP anonymization to understand Site usage at an aggregate level and improve content. Legal basis: consent. See the list of cookies and retention in our Cookie Policy.

d) Communication upon your request

If you contact us (e.g., by email), we process the data you provide (name, email, and message) to respond. Legal basis: legitimate interests/performance of a contract. Retention: up to 12 months after resolution.

e) Research and events (occasional)

If we specifically invite you to a survey/panel/focus group or an offline event, we will state in advance which data we collect and for what purpose. Legal basis: legitimate interests or consent, depending on the activity. Retention: up to 24 months after completion.

f) Photo/video content

If we publish photos or videos from events where you can be identified, we do so with your consent or another lawful basis. Retention: up to 6 years from capture unless you withdraw consent or regulations require otherwise.

g) Global reporting (HEINEKEN International B.V.)

Certain aggregated data may be processed for global strategic reporting. Controller: HEINEKEN International B.V. Legal basis: HEINEKEN Group’s legitimate interests. Retention: up to 6 years.

3. Who we share data with

We share data with trusted processors (hosting, maintenance, security, analytics — with consent) and, where necessary, with HEINEKEN Group companies to the extent required for the purposes above. If transfers outside the EEA occur, appropriate safeguards apply (e.g., Standard Contractual Clauses). By law, we may also provide data to competent authorities.

4. Security

We apply technical and organizational measures (HTTPS, access control, backups). However, no online service is 100% secure, so we cannot guarantee absolute security.

5. Retention periods

  • Cookies: as specified in the Cookie Policy.
  • Technical logs: up to 14 months.
  • Inquiries/communication: up to 12 months after resolution.
  • Research: up to 24 months after completion.
  • Photo/video: up to 6 years.
  • Global reports: up to 6 years.

When data are no longer needed for the stated purposes, we delete or anonymize them.

6. Cookies

Much of the technical and analytics data is collected via cookies and similar technologies. See details and your options in the Cookie Policy.

7. Social media

The Site may contain links to our profiles (e.g., Facebook, Instagram, YouTube, LinkedIn). Clicking a link directs you outside our Site; those platforms’ rules apply. We do <strong>not</strong> set social media cookies on the Site itself.

8. Children’s privacy

The Site is not intended for persons under 18 years of age and we do not knowingly collect their data.

9. Your rights

Under the GDPR and applicable laws you have the right to request access, rectification, erasure, restriction, object to processing, data portability, and to withdraw consent (e.g., for analytics) without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with the Croatian DPA (AZOP).

10. Contact

To exercise your rights or for questions regarding data processing, contact: privacy@star-quality.hr.

Last updated: 2025-09-05

Back to top