Privacy Policy

Last updated: 15th January 2026

This Privacy Policy explains how CoreLogica d.o.o. ("we", "our", or "us") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and ensuring the security of your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Data Controller Information

CoreLogica d.o.o. is the data controller responsible for your personal data. You can contact us at privacy@corelogica.pro or at our registered address: Hebrangova ulica 131, 10398 Zagreb, City of Zagreb, Croatia (Registration Number: 824637914).

Data We Collect

The data we collect depends on how you interact with our services. We collect personal data that you voluntarily provide to us and information automatically collected through your use of our website and services.

Information You Provide to Us

  • Contact Information: Name, email address, phone number, and postal address when you contact us or request our services
  • Communication Data: Messages, enquiries, and feedback you send to us through our contact forms or email
  • Account Information: If you create an account, we collect your username, password, and profile information
  • Preference Data: Dietary preferences, health goals, and food allergies when you request personalised recommendations
  • Survey and Research Data: Responses to surveys, questionnaires, or research studies you participate in

Information We Collect Automatically

  • Technical Data: IP address, browser type and version, device information, operating system, and referring website
  • Usage Data: Pages visited, time spent on pages, click-through rates, and navigation patterns
  • Location Data: General geographic location based on IP address (not precise location)
  • Cookie Data: Information collected through cookies and similar tracking technologies as described in our Cookie Policy

How We Use Your Information

We process your personal data for various purposes based on different legal grounds. Our primary purpose is to provide you with our healthy fast food ranking and analysis services, and how we use your data depends on the services you use and your preferences.

Service Provision and Communication

  • Provide and maintain our healthy fast food ranking and analysis services
  • Respond to your enquiries, questions, and support requests
  • Send you service-related communications and updates about our rankings
  • Provide personalised recommendations based on your dietary preferences and health goals
  • Process and fulfil your requests for information or consultations

Service Improvement and Analytics

  • Analyse website usage patterns to improve our services and user experience
  • Conduct research to enhance our ranking methodology and evaluation criteria
  • Monitor and analyse trends in healthy fast food preferences and choices
  • Develop new features and services based on user feedback and behaviour

Legal and Security Purposes

  • Comply with legal obligations and regulatory requirements
  • Protect against fraud, abuse, and security threats
  • Enforce our terms of service and other agreements
  • Resolve disputes and investigate complaints

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

  • Service Providers: With trusted third-party service providers who assist us in operating our website and services, such as hosting providers, analytics services, and email delivery services
  • Legal Requirements: When required by law, court order, or government regulation
  • Safety and Security: To protect the rights, property, or safety of CoreLogica, our users, or the public
  • Business Transfers: In connection with a merger, acquisition, or sale of business assets, subject to confidentiality obligations
  • Consent: With your explicit consent for specific purposes not covered by this policy

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention period depends on the type of data and the purpose for which it was collected. Contact information is typically retained for the duration of our business relationship plus a reasonable period thereafter. Usage data and analytics information are generally retained for up to two years. Account information is retained until you request deletion or close your account. We will securely delete or anonymise your personal data when it is no longer needed.

Your Rights

Under the General Data Protection Regulation (GDPR) and applicable data protection laws, you have several rights regarding your personal data:

  • Right of Access: You can request information about the personal data we hold about you
  • Right to Rectification: You can request correction of inaccurate or incomplete personal data
  • Right to Erasure: You can request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: You can request that we limit how we process your personal data
  • Right to Data Portability: You can request a copy of your personal data in a structured, machine-readable format
  • Right to Object: You can object to our processing of your personal data for certain purposes
  • Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, secure server environments, access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. We regularly review and update our security practices to ensure the ongoing protection of your personal data.

International Data Transfers

As we operate within the European Union, your personal data is primarily processed within the EU/EEA. If we transfer your data outside the EU/EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission. We will inform you of any international transfers and the safeguards applied.

Children's Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at privacy@corelogica.pro, and we will take steps to remove such information from our systems.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

CoreLogica d.o.o.

Hebrangova ulica 131, 10398 Zagreb, City of Zagreb, Croatia

Email: privacy@corelogica.pro

Phone: +385 14259811

Registration Number: 824637914

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that our processing of your personal data violates applicable data protection laws. In Croatia, you can contact the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka).