Privacy Policy
This Privacy Policy describes how Sconium d.o.o., as data controller, collects and processes personal data of visitors to the Dora website (kavana-dora.com). Your privacy matters to us and we handle data in accordance with the General Data Protection Regulation (GDPR) and applicable Croatian implementing legislation.
1. Data controller
The data controller is Sconium d.o.o., with its registered address at Franjevački trg 17, Varaždin, OIB: 09127769488. For any questions regarding data protection please contact us at sc@sconium.com.
2. What data we collect
The Dora website collects two kinds of data:
(a) Technical data from server logs. Our server automatically records the IP address of the accessing device, the date and time of access, the browser type and version, the operating system, and the requested URL and server response code. This data is used solely to ensure stability and protect against abuse, and is retained for a limited period (typically up to 30 days).
(b) Analytics data (only with your consent). We use Google Analytics 4 (GA4) via Google Tag Manager to understand how visitors use the site — we measure visits, pages viewed, and basic interactions such as clicks on the phone number or email address. The data is aggregated and does not directly identify you. You can withdraw your consent at any time by clicking "Cookie settings" in the footer.
3. Legal basis for processing
We process technical data on the basis of legitimate interests (Art. 6(1)(f) GDPR) to ensure the security of our online service. We process analytics data on the basis of your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
4. Cookies
The Site uses the following cookies:
| Cookie | Type | Purpose | Duration |
|---|---|---|---|
cookie-consent | Necessary (first-party) | Stores your cookie consent choice | 1 year |
vz_lang | Functional (first-party) | Remembers your language preference | 1 year |
_ga | Analytics (Google, requires consent) | Distinguishes unique visitors | 2 years |
_ga_HMFZQL9E3R | Analytics (Google, requires consent) | Session state for Google Analytics 4 | 2 years |
Without your consent only the necessary and functional cookies are set. The Google analytics cookies (_ga, _ga_HMFZQL9E3R) are only set after you choose "Accept" in the consent banner. We use Google Consent Mode v2, which means that prior to consent no identifiers or identifying IP address are sent to GA4.
You can withdraw your consent at any time by clicking "Cookie settings" in the footer and choosing "Decline". In addition, Google provides an official GA4 browser opt-out add-on. For more information on how Google processes data, see the Google Privacy Policy.
Google may transfer data outside the European Economic Area (to the United States). As a safeguard, Google relies on Standard Contractual Clauses (SCCs) and the EU–U.S. Data Privacy Framework, providing a level of protection consistent with the GDPR.
In addition to cookies we use one item in the browser's sessionStorage (kavanaDoraMarqueeAnchor) that stores a timestamp marking the start of a decorative animation so it stays in sync across page navigations. It is cleared when the tab closes, contains no personal data, and is strictly necessary for delivering the requested functionality (Art. 5(3) ePrivacy Directive).
The OpenStreetMap and CARTO services that deliver the map on the home page do not set tracking cookies, but they do log your IP address in order to serve map tiles.
5. Third-party services
The home page displays an interactive map powered by OpenStreetMap and CARTO. For more information see their respective privacy policies:
6. Hosting provider
The Site is hosted on the infrastructure of Vercel Inc. For more information see the Vercel Privacy Policy.
7. Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and the right to object. To exercise any of these rights please contact us at sc@sconium.com.
8. Supervisory authority
You may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
9. Changes to this Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with the effective date noted below.
Version 1.2, effective 11 May 2026.