LEGAL INFORMATION
Privacy Policy
Version 28 · Updated 31 October 2026
Controller and contact
Publisher and Service Provider: Bracopone d.o.o., Ulica grada Chicaga 7, 10000 Zagreb, Croatia.
Personal Identification Number (OIB): 45873580345 Court Registration Number (MBS): 081320328 Competent Registration Court: Commercial Court in Zagreb Email: info@bracopone.com
Copone Media is a business and media brand of Bracopone d.o.o. and does not constitute a separate legal entity. Information regarding the editorial teams of individual publications is provided in their respective imprints.
Bracopone d.o.o. acts as the data controller to the extent that it independently determines the purposes and means of processing personal data.
For enquiries concerning data protection or the exercise of data subject rights, please contact info@bracopone.com or write to the Company's registered address.
Where another organisation acts as a joint or independent data controller for a particular project, information regarding its identity and the allocation of responsibilities shall be provided in connection with that project.
Contact details for a Data Protection Officer (DPO) shall be published only where such an officer has been appointed or where required by law.
Information processed
Depending on the nature of the interaction or service, the Company may process the following categories of personal data:
Identification and contact details, including names, email addresses, telephone numbers and company information.
Enquiry details, correspondence, project briefs and quotations.
Order information, invoices, payment and billing records.
Delivery details, complaints and customer service communications.
Newsletter preferences and marketing consent records.
Basic technical logs, including IP addresses, browser information and access timestamps.
Cookie identifiers and similar technical information, in accordance with applicable privacy preferences.
Photographs, video recordings, voice recordings, publicly available professional information, accreditation details and other information relevant to journalistic or photographic activities.
Personal data may be collected directly from individuals, contractual partners, publicly available sources or through lawful journalistic information-gathering activities.
Purposes and legal bases
Personal data is processed only where an appropriate legal basis exists under the General Data Protection Regulation (GDPR).
Enquiries and Quotations
Responding to enquiries and preparing quotations may rely on Article 6(1)(b) GDPR where processing is necessary to take steps at the data subject's request before entering into a contract.
In other circumstances, processing may rely on Article 6(1)(f) GDPR, based on the Company's legitimate interest in maintaining business communications.
Contracts and Orders
Processing necessary for the performance of contracts, order management and delivery of agreed services is based on Article 6(1)(b) GDPR.
Accounting and Legal Obligations
Processing relating to invoices, taxation, accounting records and other statutory obligations is based on Article 6(1)(c) GDPR.
Security and Administration
Processing required for system security, prevention of misuse, establishment or defence of legal claims, and basic administrative operations may rely on Article 6(1)(f) GDPR, subject to an appropriate balancing assessment.
Newsletters, Marketing and Optional Cookies
Where consent is required, newsletters, optional marketing activities and non-essential cookies are processed on the basis of Article 6(1)(a) GDPR, together with applicable national electronic communications legislation.
Journalistic and Editorial Activities
Personal data processed for journalistic and editorial purposes is handled in accordance with the GDPR, applicable statutory derogations and the necessary balance between freedom of expression, freedom of information and data protection rights.
Such processing does not automatically require the consent of every person appearing in photographs or recordings.
Optional technologies
The Company's websites may use analytics and advertising technologies.
Non-essential technologies requiring consent shall not be activated before the user has made the appropriate consent choice.
Consent may be withdrawn through the website's privacy preferences interface.
Refusing marketing consent shall not prevent users from accessing essential website content or completing purchases.
Recipients, transfers and retention
Where necessary for a specified purpose, personal data may be disclosed to:
Website hosting and IT support providers.
Email and communications service providers.
Network security and infrastructure providers.
Order management and payment service providers.
Delivery and logistics companies.
Accounting and legal service providers.
Competent public authorities where legally required.
Stripe may be used for payment card transactions. Its role as a controller or processor depends on the specific processing activity and contractual arrangements.
Analytics and advertising providers may process personal data only where an appropriate legal basis exists, including prior consent for technologies that legally require it.
Transfers of personal data outside the European Economic Area (EEA) shall take place only in accordance with Chapter V of the GDPR.
Further information about specific recipients may be requested through the contact details provided in this Privacy Policy.
Rights and complaints
Subject to the conditions and limitations set out in the GDPR, individuals may exercise the following rights:
Right of access to personal data.
Right to rectification of inaccurate information.
Right to erasure.
Right to restriction of processing.
Right to data portability, where applicable.
Right to object to processing, particularly direct marketing.
Right to withdraw consent at any time where processing is based on consent.
Withdrawal of consent shall not affect the lawfulness of processing carried out before the withdrawal.
Requests may be submitted to info@bracopone.com or sent by post to the Company's registered address.
The Company shall generally respond within one month, subject to the possibility of an extension where permitted by law.
Individuals also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP):
Statutory exceptions relating to journalistic processing may apply where necessary to protect freedom of expression and information.