Privacy policy

1. Collecting personal data

When you visit our website, we may collect the following data:

• Usage data: IP address, browser type, visit duration and the pages you view (collected via cookies).
• Preference data: Information about your allergies and preferred regions that you voluntarily enter in your profile.
• Health data: If you use the Symptom diary, we record the intensity of your allergy symptoms by category (nose, eyes, breathing, skin, general condition) along with your notes. This data falls under a special category of personal data under Article 9 of the GDPR and is collected solely with your explicit consent.
• Push notifications: If you enable push notifications, we store an identifier used to send notifications.

2. Purpose of data collection

We collect personal data in order to:

• Provide personalised information about pollen levels for your allergens
• Send alerts when pollen levels cross your threshold
• Improve the functionality of our website and the user experience
• Analyse site usage to improve the service

3. Cookies and analytics

We use several tools to measure visits. Some of them do not require cookies, while others are activated only after your consent.

• Plausible Analytics (no cookies, EU processing): counts visits without identifying users. Legal basis: legitimate interest.
• Google Analytics 4 (cookies, Consent Mode v2): measures behaviour. Activated after consent.
• PostHog (EU, Frankfurt; cookies): event counting and funnels. Activated after consent.

Session recording (session replay) is completely disabled across the entire site. The Symptom diary is never recorded, neither visually nor as a replay. Only an anonymous record count is logged, without content, a user identifier or the symptom severity level.

Policy details: Plausible, Google, PostHog.

You can change your consent through your browser settings or by reopening the cookie banner.

4. Health data (Symptom diary)

The Symptom diary lets you track your allergy symptoms. This data is a special category of personal data under the GDPR (Article 9) and is processed solely with your explicit consent.

• Data is collected only if you explicitly consent to the processing of health data
• We use it to show your personal symptom history and to recognise patterns
• Anonymised, aggregated data may be used to improve the service (e.g. symptom statistics by region)
• Your personal health data will never be sold or shared with third parties
• You can delete all your diary data at any time
• You can withdraw consent by contacting us at kontakt@alergija.hr, after which we will delete all your health data

Health data is stored on secure servers with encryption, and access to it is restricted by Row Level Security policies that ensure only you can see your own data.

5. Sharing data

Your personal data will not be sold to third parties. We may share data only in accordance with legal obligations or with your explicit consent.

6. Data security

The alergija.hr portal takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

7. User rights

As a user you have the right to:

• Request access to the personal data we store about you
• Correct inaccurate or incomplete data
• Request deletion of personal data
• Restrict the processing of data or object to the processing

8. Changes to the privacy policy

We reserve the right to change this privacy policy at any time. All changes will be published on this page, and the date of the last change will be updated at the top of the document.