Privacy Policy
Burzovni list, operator of burzovnilist.com (details in the Impressum). Contact for all personal-data questions: info@burzovnilist.com.
| Data | Purpose | Legal basis |
|---|---|---|
| email address and password (stored exclusively as a hash) | user account: registration, sign-in, password recovery | performance of a contract (Art. 6(1)(b) GDPR) |
| portfolio data you enter yourself (ticker, quantity, average price) | the "My portfolio" feature — a record you keep yourself | performance of a contract (Art. 6(1)(b) GDPR) |
| technical/analytics visit data (cookies — Google Tag Manager / Google analytics) | web analytics — understanding how the site is used | consent (Art. 6(1)(a) GDPR) — strictly opt-in; nothing loads without consent |
| server logs (IP address, user agent, request time) | security, abuse detection and troubleshooting | legitimate interest (Art. 6(1)(f) GDPR) |
We use email exclusively for sign-in and password recovery — no newsletters, no marketing. Note: the site's fonts load from Google Fonts servers; when fetching a font your browser transmits your IP address to Google (a technical necessity of resource loading).
Supabase — user-account authentication and the portfolio database; the project is hosted in the eu-central-1 region (Frankfurt, EU). Vercel Inc.(USA) — hosting and serving of the site via a global CDN; server logs arise at Vercel. Transfers to the USA rely on the EU–US Data Privacy Framework and standard contractual clauses. Google(Google Ireland Ltd.) — web analytics via Google Tag Manager, strictly with your consent; Google may process data outside the EU/EEA on the basis of the EU–US Data Privacy Framework and standard contractual clauses. We do not sell data, nor share it with third parties for marketing purposes.
Account and portfolio data is kept while the account exists, and for at most 30 days after account deletion (backups). Server logs are kept for at most 12 months. The cookie consent record is valid for at most 12 months, after which consent is requested again.
You have the right to: access your data, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time (without affecting the lawfulness of processing before withdrawal). Cookie consent is withdrawn via "Cookie settings" in the footer of every page.
You exercise all rights by email to info@burzovnilist.com — we respond without undue delay, at the latest within 30 days. You also have the right to complain to the supervisory authority: the Croatian Personal Data Protection Agency (AZOP), azop.hr.
Last change: 17.07.2026. Changes to this policy are published on this page; material changes will be highlighted on your next visit. See also the Cookie Policy and Terms of Use.
This is an English translation provided for convenience. In case of dispute, the Croatian version prevails: Croatian version.