Skip to main content

DOOR

Scientific Journal

PRIVACY POLICY AND PERSONAL DATA PROTECTION

DOOR is a scientific journal of the State Attorney’s Office of the Republic of Croatia, publishing scientific and professional works on legal topics, interviews with persons from the legal world, commentaries and analyses of case law from Croatian and international courts, reviews of legislative reforms, analyses of new laws, secondary legislation, international agreements and conventions, as well as reviews of books, conferences and professional meetings.

Further information about DOOR journal can be found at the following web address: www.doorh.hr.

For any enquiries regarding the processing of personal data, please contact us at the following e-mail address: door@dorh.hr.

WHAT IS PERSONAL DATA?

Personal data means any information relating to an identified or identifiable natural person (data subject), such as name, surname, address, date of birth, e-mail address and similar.

WHAT IS PERSONAL DATA PROCESSING?

Personal data processing is an operation or set of operations which DOOR Scientific Journal, in carrying out its duties and powers, performs on personal data of a specific natural person, such as collection, storage, retrieval of data, etc.

HOW IS PERSONAL DATA PROCESSED?

DOOR Scientific Journal processes personal data in accordance with:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the General Data Protection Regulation or GDPR),

• Act on the Implementation of the General Data Protection Regulation (Official Gazette, No. 42/18),

• State Attorney’s Office Act (Official Gazette, No. 67/2018),

• other relevant regulations.

WHY DOES DOOR SCIENTIFIC JOURNAL PROCESS PERSONAL DATA AND WHAT IS THE LEGAL BASIS FOR PROCESSING?

DOOR Scientific Journal processes your personal data for the following purposes:

• Publication of scientific and professional works – we process authors’ personal data (name, surname, affiliation, e-mail address, biography) for the purpose of publishing works in the journal. The legal basis for processing is the performance of a task carried out in the public interest (publication of scientific works) and the exercise of official authority vested in the controller.

• Communication with authors and reviewers – we process personal data for the purpose of communicating about the status of works, reviews, publications and other activities related to the journal’s operations. The legal basis for processing is the performance of a task carried out in the public interest.

• Managing subscriptions and newsletters – we process personal data (e-mail address) for the purpose of sending notifications about new journal issues and other relevant information. The legal basis for processing is user consent.

DATA COLLECTION VIA THE WEBSITE

DOOR Scientific Journal respects the privacy of website visitors. Personal data about visitors is not collected, except in cases where visitors themselves submit such data via electronic mail. In cases where the identity of the visitor/sender is known, their data is used solely for the purpose for which it was submitted. Nevertheless, visitors who submit personal data electronically should take into account the limitations of modern information and communication technologies regarding security and the protection of personal data privacy. Data collected, should the sender provide it voluntarily, includes: name, surname and e-mail address.

For the security and proper functioning of the system, the server records technical data about each request: the IP address, the time of access, the address of the requested page and the browser identifier. When an article is downloaded as a PDF, the time of the download, the browser identifier and a shortened IP address (without its last group of digits) are recorded, so that the number of downloads of each article can be counted. This data is not used to establish the identity of visitors. The processing of such data is necessary for the purposes of the legitimate interests of the controller (security and proper functioning of the website, and monitoring the readership of published works), within the meaning of Article 6(1)(f) of the GDPR. These tasks and powers are prescribed by the provisions of the GDPR and the Act on the Implementation of the GDPR.

Visit statistics are kept only with the visitor’s consent, within the meaning of Article 6(1)(a) of the GDPR. Details are given in the section on cookies. The personal data collected shall not be used for automated individual decision-making, including profiling.

USE OF ARTIFICIAL INTELLIGENCE (AI) – CHAT ASSISTANT

DOOR Scientific Journal uses an AI Chat Assistant as an auxiliary tool to enhance user experience on the website. The Chat Assistant enables users to quickly find information about the journal, articles, authors and other content.

When using the AI Chat Assistant:

• Data collected – text queries entered by users into the chat are collected and processed solely for the purpose of generating responses. The Chat Assistant does not collect users’ personal data unless users themselves enter such data into the conversation.

• Purpose of processing – providing automated responses to user queries about journal content, website navigation and general information.

• Data storage – queries and replies are recorded in the journal’s database for the purpose of monitoring the operation and improving the quality of the Chat Assistant. They are kept for 12 months and are then deleted automatically. The IP address is not stored with them, only its cryptographic hash. The data is not used to identify users. The conversation is also kept in the local storage of the user’s browser so that it can continue when the user moves to another page.

• Recipients of data – to generate a reply, the text of the query and the earlier messages of the same conversation are forwarded to the provider of the language model service, OpenAI (for the European Economic Area: OpenAI Ireland Limited, Dublin, Ireland), which processes them as a processor. The request is sent from the journal’s server, so OpenAI does not receive the user’s IP address or other data about the user’s device. According to the provider’s terms, data sent in this way is not used to train its models, and queries and replies are kept on its servers for 30 days (to continue the conversation and to prevent abuse) and are then deleted, unless longer retention is required by law.

• Transfers to third countries – OpenAI may also process the data outside the European Economic Area, including in the United States of America. Such transfers are based on the European Commission’s standard contractual clauses or on an adequacy decision.

• Knowledge base – so that the Chat Assistant can search the journal’s content, the published content is stored with the same provider: articles, information about issues, the public profiles of authors and the standing pages. It remains there until the journal deletes it.

• Recommendation – users are advised not to enter personal data (such as name, address, telephone number) into conversations with the Chat Assistant unless necessary for providing the requested service.

The legal basis for data processing in the context of the AI Chat Assistant is user consent (by using the Chat Assistant, users consent to the processing of entered data) and the legitimate interest of the controller (improving user experience).

DISCLOSURE OF PERSONAL DATA

DOOR Scientific Journal, in carrying out its duties and powers, may have a legal obligation to forward personal data to other state bodies, if so prescribed by law. Personal data processing may also involve international transfer of such data (to European and international institutions), if necessary for the performance of the journal’s tasks. Legal obligations may arise from national regulations or European Union regulations.

Your data collected via the website (technical data about visitors) may be forwarded to providers of information and communication solutions and services acting as processors. A contract has been concluded with said processors detailing the handling of personal data; therefore, they are unable to process your personal data without our instruction or forward it to third parties.

SECURITY OF PERSONAL DATA

DOOR Scientific Journal collects and processes personal data in a manner that ensures appropriate security and confidentiality in their processing, as well as enabling effective implementation of data protection principles, data minimisation, scope of processing, storage period and accessibility.

DOOR Scientific Journal takes all available technical and organisational protection measures to prevent accidental or unlawful destruction, loss, alteration, unauthorised use, disclosure, access to or inspection of data.

RETENTION PERIOD FOR PERSONAL DATA

DOOR Scientific Journal processes personal data until the purpose of processing has been fulfilled. After the purpose for which they were collected ceases, personal data is no longer used, and such data remains in the storage system and is retained in accordance with regulations on archival material preservation, particularly in the case of published works where authors’ data is retained permanently for the purpose of scientific documentation.

WHAT ARE YOUR RIGHTS REGARDING PERSONAL DATA PROCESSING?

In general, rights regarding personal data processing include the right of access to one’s own personal data, the right to rectification of one’s own personal data, the right to erasure of one’s own personal data, the right to restriction of processing of one’s own personal data and the right to object, which rights are detailed in the GDPR and the Act on the Implementation of the GDPR.

Likewise, taking into account the purpose for which personal data is processed, these rights are not absolute but are subject to limitations prescribed by the GDPR and applicable laws. We note that authors’ personal data from published works cannot be erased from archived journal issues, as they form part of scientific documentation and public archives.

EXERCISING YOUR RIGHTS

If you have questions regarding the processing of your personal data or wish to exercise any of your rights related to personal data processing, you may contact the Data Protection Officer at the following e-mail address: door@dorh.hr.

In accordance with the General Data Protection Regulation, the controller must respond to requests within one month.

WHO SUPERVISES PERSONAL DATA PROCESSING?

In case of suspected privacy violations and unlawful processing, you have the right to lodge a complaint with the supervisory authority:

Croatian Personal Data Protection Agency

Ulica Metela Ožegovića 16

10000 Zagreb

Croatia

E-mail: azop@azop.hr

Website: www.azop.hr/

USE OF COOKIES

The website www.doorh.hr uses cookies and related technologies, such as the browser’s local storage (localStorage). Cookies are small files stored on the visitor’s device that allow the website to recognise the visitor’s settings on the next visit.

Essential cookies are always set because they are necessary for the website to work. Visit statistics tools are loaded only after the visitor consents to them. Marketing cookies are not used, and visitors are not tracked across other websites.

On the first visit a cookie notice is displayed with the options “Accept all”, “Reject all” and “Settings”. The website can be used in full even if visit statistics are rejected.

Cookie Categories

1. Essential cookies and records

These are necessary for the basic functioning of the website and cannot be disabled. They remember the selected language, your cookie choice and your accessibility settings, and enable the Chat Assistant when you use it.

2. Analytics tools (only with consent)

These help us understand how the website is used: which pages and articles are read, where visitors come from, and which browsers and devices they use. They are not loaded until you give your consent. Two tools are used, and neither sets cookies:

  • WP Statistics – statistics kept on the journal’s own server. It records the pages viewed, the page the visitor came from, the type of browser and device, and the approximate location (country and city). The IP address is not stored in its original form, only as a cryptographic hash.
  • Ahrefs Web Analytics – a service of Ahrefs Pte. Ltd. (Singapore). The script is loaded from the server analytics.ahrefs.com, to which the address of the page viewed, the page the visitor came from, the browser identifier and language, the screen size and the IP address are transmitted. According to the service provider, the IP address is not stored and is used only to determine the approximate location and a daily pseudonymous visitor identifier.

Legal basis for processing:

  • Essential cookies and records: legitimate interest (proper functioning of the website)
  • Analytics tools: your consent

Cookies and Records We Use

Cookies set for all visitors:

  • pll_language – remembers the selected language of the website (Croatian or English); expiry: 1 year
  • door_lang_pref – remembers the selected language so that the same language is shown on the next visit; expiry: 1 year
  • PH_HPXY_CHECK – technical cookie of the hosting provider’s server infrastructure, used to check and protect traffic; expiry: until the browser is closed

Cookies and records created only when you use a particular feature of the website:

  • mwai_session_id and PHPSESSID – created when the Chat Assistant is used; they link the messages of the same conversation; expiry: until the browser is closed
  • mwai-chat-default – the text of the conversation with the Chat Assistant, kept in the browser’s local storage (localStorage) so that the conversation can continue on the next page; expiry: until you delete it
  • door-accessibility-settings – accessibility settings (font size, contrast, etc.), kept in the browser’s local storage; expiry: until you delete them
  • door_cookie_consent – your choice regarding visit statistics, kept in the browser’s local storage; expiry: 13 months
  • wordpress_* and wp-settings-* – set only for members of the editorial staff after they log in to the administration system; expiry: until logout, at most 14 days (interface settings: 1 year)

Storage of Your Cookie Choice

Your choice is stored in your browser’s local storage (localStorage), not in a cookie, and is valid for 13 months. After that period the cookie notice will be displayed again.

How to Change Your Choice or Withdraw Consent?

You can change your choice at any time using the “Cookie Settings” link in the footer of the website. If you withdraw your consent, the visit statistics tools will no longer be loaded.

You can also manage cookies in your browser settings: you can delete them or disable them permanently. Instructions are available on the help pages of each browser (Mozilla Firefox, Google Chrome, Microsoft Edge, Apple Safari, Opera). Blocking or deleting essential cookies may affect some features of the website, such as remembering the selected language.

More detailed information about cookies is available at www.allaboutcookies.org.

Your Rights Regarding Cookies

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access – you have the right to access the data stored in cookies
  • Right to withdraw consent – you can withdraw your consent at any time via the cookie settings
  • Right to erasure – you can delete cookies from your browser
  • Right to information – you can request information about the data we collect

For questions regarding cookies and data protection, you can contact us at: door@dorh.hr.

CHANGES TO THE PRIVACY POLICY

The Privacy Policy is regularly updated to ensure it remains accurate and current. All amendments and additions are published in a timely manner on the website www.doorh.hr in accordance with the principle of transparency.

Last updated: 13 October 2026.