At North Croatia Team, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this policy carefully to understand our views and practices regarding your personal data.
The controller responsible for your personal data is POTZO, obrt za informatičke usluge, vl. Tomislav Pocedulić (OIB 33547847485), Kneginečka 3, Gornji Kućan, Croatia, operating North Croatia Team. You can reach us at hello@northcroatia.team for anything related to your data.
Our accounts, league and merch orders are intended for people aged 16 and over. By creating an account (by e-mail or with Strava) you confirm that you are at least 16 years old. If we learn that an account belongs to someone under 16, we will delete it. If you believe a child under 16 has given us personal data, please contact us.
We may collect and process the following data about you when you interact with our services:
When you use our contact form, we collect your name, e-mail address, optional phone number, your message, and your IP address (used only to limit spam submissions).
If you choose to connect your Strava account, we request access to your Strava data via the official Strava API. Connecting Strava is entirely optional — the core features of the site work without it. When you connect, we store and process the following:
This data is used solely to display your personal cycling statistics and profile on the North Croatia Team website. It is not shared with third parties, used for advertising, or combined with data from other sources.
You can disconnect your Strava account at any time from your account page, which will delete your stored tokens and cached Strava data from our systems. You can also revoke our app's access directly from your Strava settings.
We use the information we collect in the following ways:
We use administrative, technical, and physical security measures to help protect your personal information. This includes encryption of sensitive data (such as your password) and secure communication channels for transmitting data. While we take reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against interception or other types of misuse.
We do not sell, trade, or rent your personal data. We share it only with the service providers below, who process it on our behalf to run the website, or where required by law or to protect the rights and safety of our users.
Some of these providers are located outside the European Economic Area. Where that is the case, transfers rely on an adequacy decision (for example the EU–US Data Privacy Framework or Switzerland's adequacy status) or the European Commission's Standard Contractual Clauses.
We count visits to our site to understand which pages are used and to improve it. We use Umami, open-source software that we host ourselves on our own server, so nothing is sent to Google or other third parties. It sets no cookies and does not store your IP address. For each page view it records the page, the referring site, approximate country and city (derived from your IP address at the moment of the visit), device type, browser and operating system, and an anonymous identifier that changes every day and cannot be linked to your name or account. We also count a few actions as anonymous totals, with no link to your account: placing a merch order, joining a race, clicking "connect Strava", and subscribing to the calendar. Visits by signed-in administrators are not counted. We delete this data after 13 months.
This is based on our legitimate interest in understanding and improving the site. The data is anonymous and cannot be linked to you. You can object at any time by clicking Reject in our cookie banner or Cookie Preferences in the footer, after which we stop counting your visits on that browser. We also respect the “Do Not Track” setting of your browser. Earlier, until October 2026, we used Google Analytics with your consent; we no longer use it and keep only aggregated statistics from that period.
If you have created an account with us, you can log in to view and update your personal data (e.g., name, phone number, shipping address, gender, nationality, profile photo) and view your order history. To cancel an unpaid order, contact us.
If you wish to delete your account or personal data, you can submit a data deletion request by contacting us at the email or phone number provided below.
Under GDPR, you also have the right to request access to the data we hold about you, request correction of inaccurate data, request restriction of or object to certain processing, request portability of your data, and withdraw any consent you have given at any time (without affecting processing that happened before). To exercise any of these rights, contact us using the details below — we respond within one month.
You also have the right to lodge a complaint with the Croatian data protection authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, or with the supervisory authority in your EU country of residence.
We process your personal data based on the following legal bases: contract performance (to manage your account and orders), legitimate interests (to improve our services through anonymous visit statistics, ensure site security and prevent spam), legal obligation (keeping accounting records), and explicit consent (for Strava data, given when you connect and withdrawable by disconnecting).
We may update this Privacy Policy from time to time to reflect changes in our services or data practices. We will notify you of any significant changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
If you wish to delete your personal data from our records or close your account, you can submit a data deletion request. Please contact us at the email or phone number provided below, and we will delete your account and personal data within 30 days, except records we must keep by law (see How Long We Keep Your Data).
If you have any questions about this Privacy Policy, please contact us: