We guarantee the security of all your data.

This Privacy Policy (the "Policy") explains how GNK DINAMO, as the data controller (hereinafter: "GNK DINAMO", "Controllers"), collects, uses and manages personal data found on the website www.gnkdinamo.hr, as well as the data we process during our regular operations.

GNK DINAMO, as the provider of the website www.gnkdinamo.hr, is committed to protecting and respecting your privacy. Please read this Policy carefully to understand why and how we collect your personal data and how it will be used.

If you wish to contact us regarding this Policy or your personal data, please use the following contact details:

Address: GNK Dinamo, Maksimirska 128, 10000 Zagreb

E-mail: [email protected]

We collect your personal data the moment you access the website www.gnkdinamo.hr. At that moment we will collect your IP address, which may also be considered personal data.

In addition, if you browse our pages and decide, for example, to contact us by filling in a contact or other provided form (for example for sign-in/registration), we will also process your personal data.

Alongside processing data for the purpose of contacting us to send inquiries, comments or for similar (equivalent) purposes, personal data is also processed in the following situations:

• If you decide to become our member we will collect your data: first name, last name, OIB (personal identification number), address, contact e-mail and telephone, date of birth - how old you are (data from the membership application), photograph, date of joining and when you ceased to be a member, special membership categories (if applicable),
• If you decide to donate we will process your data such as first name, last name, OIB, passport number, address, donation amount (donation data),
• If you decide to leave us a question we will process your first name, e-mail, contact telephone and the subject of the message,
• If you wish to receive notices about our activities, work, organisation of various events and similar, we will process your e-mail address through which we will inform you about everything you yourself wish to be informed about,
• Situations in which we collect other types of data such as the date and time of access to the page, information about the hardware, software or internet browser you use, as well as your computer's operating system, the application version and your language settings. We may collect information about clicks and your access to the page www.gnkdinamo.hr that were shown to you,
• When you contact our employees or other prominent members and request help or ask a question in order to exercise one of your rights guaranteed by applicable regulations, we will also process your personal data,
• When you contact us via social media we collect the data you made available to us when submitting an inquiry or request,
• When you leave content and comments on our social media we process them in the form in which you published them, i.e. made them available to the public on the internet (social network),
• When you wish to exercise one of your rights relating to the protection of personal data we will process data such as your first name, last name, OIB, address and similar in order to identify you and help you resolve what concerns you. We may always request additional identifiers for your security,
• When you call any of our professional associates or employees, we will ask for your first name, last name and contact if necessary to provide an answer to your inquiry,
• For the purpose of fulfilling an order from the purchase of our products or tickets for football matches, ensuring participation in prize games,
• For security purposes when we use video surveillance. The premises are recorded in order to prevent disorder at sporting competitions and to protect property and other persons,
• For the purpose of keeping a register of visitors. The data from the front of the identification document (first name, last name, document number) is processed, as well as the time of arrival and the person the visitor is visiting (if applicable). The purpose is record-keeping and identification,
• When you complete a satisfaction survey or submit any inquiry related to our work, or if you wish to send an open job application or want to give feedback on our work and activities, etc.

We collect the above-mentioned specific categories of your personal data either on the basis of consent, including the consent shown to you upon arrival at www.gnkdinamo.hr via the pop-up window, or on the basis of legitimate interest. The latter, for example, in cases involving cookies that are necessary for the functioning of www.gnkdinamo.hr or when we send you certain notices about our activities that are important to you as a member so that you/we can fulfil the goals, tasks, obligations and rights arising both from regulations and from our Statute or other internal acts. We collect your photograph as a member also on the basis of consent, except where the competent authorities of the Republic of Croatia request it from us for the purpose of maintaining security at the stadium/stadiums (sporting competitions), in particular for national security or the security of other persons or for the defence of legal claims.

In cases where we must fulfil our obligations arising from the applicable regulations of the Republic of Croatia, we will not process data on the basis of the two previously mentioned legal grounds (for example, when you wish to be our member or decide to donate funds, or when we exercise one of your rights guaranteed to you by the General Data Protection Regulation, all in order to fulfil our obligations prescribed by applicable regulations, or when we fulfil obligations from the regulations on the prohibition of disorder at sporting competitions). We particularly note that, with regard to our minor members, the consent of a parent as the legal/legal representative is required.

When you purchase something, i.e. when we process data for the purpose of an order, the legal basis is the processing of personal data necessary for the performance of a contract to which the data subject (you) is a party, or in order to take steps at the request of the data subject prior to entering into a contract.

Sometimes, when you contact us yourself with your problems or inquiries, we will process the data at your request because without processing the data we will not be able to help you.

If the processing is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent must be notified to the data controller at e-mail: [email protected] or at the address: Maksimirska 128, 10000 Zagreb, marked "for data protection". Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal. The consent for the use of cookies that you gave us via the pop-up window may be withdrawn in the same way.

Please pay attention to the mandatory scope of data we request from you, because if you do not provide the requested information that is designated as mandatory in order to carry out the activity you requested or expected, unfortunately, you will not be allowed to participate in it. Thus, in certain cases, without the requested data, the activity will not be technically feasible.

The typical categories of data we collect from you when you visit www.gnkdinamo.hr are the following: IP address, name, e-mail address, telephone number i.e. contact telephone and/or other information you provide when filling in some of the available forms on the website (for example a message you leave us) or information you leave us when you communicate with us via e-mail.

Other data that the controller processes, which does not directly concern your membership in GNK DINAMO, the purchase of products and/or tickets, are comments you leave on social media, data during participation in prize competitions which may also contain video recordings or other creative content depending on the competition, data necessary for carrying out donations (OIB, passport number…), data from your profile through which you follow us on social media, data related to disorder at sporting competitions or the protection of persons at them; recordings of matches or other events through various channels by which we enable everyone to subsequently watch content they missed.

We collect your personal data for the purpose of:

• using all services on the website www.gnkdinamo.hr,
• responding as efficiently as possible to your inquiry and processing your requests,
• statistical data processing,
• marketing activities i.e. promotion of work and results,
• re-viewing and availability of video content from sporting competitions,
• sending notices and materials (for example related to our activities - campaigns, gatherings, meetings, conferences, organised events for members, etc.), sending leaflets and contacting in order to inform you about the work, rights and obligations,
• improving the quality of content, functionality and services we provide to you through the website,
• security at sporting competitions (which also includes recording the premises where this takes place),
• the purchase of products we offer as GNK DINAMO,
• maintaining security at and around the stadium (at sporting competitions) and on GNK Dinamo premises, especially when matches are taking place,
• cooperation with the competent authorities, which also includes the police,
• improving our work and helping citizens,
• exercising rights and obligations from the applicable regulations and from the Statute,
• keeping records of persons who have been banned from visiting the stadium or persons for whom the police have documented participation in the resale of tickets,
• engagement in the bodies and/or functions of GNK DINAMO (for example Trustees).

The processing of the data of coaches and players differs from the above. With regard to players and coaches, the following is also processed: citizenship, place of birth, photographs, documents (passport/identity card), validity date, qualifications, health condition, data on engagement, matches, experience, data from the concluded contract, goals and their fulfilment, recordings of conferences, education attended, etc.

The purposes of processing include: registration and status of the player/coach, regulation of legal residence, obtaining work permits, applications for tournaments, organisation of accommodation and travel, insurance, monitoring of goals and progress, won/lost matches, goals scored, minutes played, etc.

With regard to journalists and their accreditations, for the purpose of security and fulfilment of notification obligations, we request from journalists and representatives of other services: first name, last name/company name, vehicle registration plate, and possibly a photograph for the accreditation.

Please note that at any time you have the right to request the following from GNK DINAMO as the data controller:

• to grant you access to your personal data - you can ask GNK DINAMO which of your personal data it uses, and you can also request access to that personal data. You have the right to know the purpose of processing, which categories of your personal data we keep, the bodies or categories of bodies with which we share your personal data, the data retention period, as well as the source of the data in cases where the data is collected indirectly.
• to provide you with a copy of the personal data we keep - you can contact us if you want a copy of some or all of the personal data we keep about you.
• to request correction of incorrect data - we want your personal information to be accurate and up to date. You can ask us to correct or remove information that you think is inaccurate or outdated.
• to request deletion of personal data - you can request that we stop processing or even request the deletion of the personal data about you that we keep. If we need your personal data to perform a contractual obligation towards you, the controller may become unable to perform such contractual obligations. Also, if your personal data is needed so that the controller can fulfil certain legal obligations (e.g. tax obligations), your request may not be able to be fulfilled.
• restricting the processing of your data (by us and/or third parties) in certain processes or entirely - if you wish to contest the accuracy of the data, or we no longer need the personal data for the purpose of processing but you need it for the establishment, exercise or defence of legal claims, or you have objected to processing on a ground that the controller considers legitimate, you have the right to request the restriction of the processing of personal data.
• to lodge an objection to the way we use your data - remember that you have the right to object to the processing of personal data based on a legal basis that the controller considers legitimate.
• to request the transfer of data to another controller (right to data portability) - if the processing is based on your consent or is carried out by automated means, you have the right to request the controller to transfer the data to another controller.

To exercise any of the above rights, please use the contact details from the section About the Privacy Policy.

If you are not satisfied with how we have collected or used your personal data, you may lodge a formal complaint with the Personal Data Protection Agency.

We keep the personal data we collect about you in a secure environment. Your personal data is protected from unauthorised access, disclosure, use, alteration or destruction by any organisation or individual with whom we cooperate.

Some data is still stored in paper form, but we tend to digitise all the personal data we process. The processed data is stored on the premises of the controller and in secure IT systems, but sometimes we store data on the servers of our trusted service providers.

The data is not exported outside the EU.

Access to the data is also held by the processor that maintains the GNK DINAMO membership system – the company Dekod, Strojarska cesta 20, Zagreb, OIB: 49600228271. This company independently maintains and owns the ticket-sales system, and you can contact them at: [email protected]

The protection of privacy is important to us, therefore we will never share your personal data with third parties except for the purposes described in this policy. We will inform you of any sharing and transfer of data.

In the course of carrying out its tasks and other activities, GNK DINAMO cooperates with other organisations and commercial companies that provide us with their services (for example a company that maintains our website or a company that maintains the membership and ticket-purchasing system). This means that we sometimes share your personal data with our trusted partners, using secure IT systems. When we do so, the data is transferred to servers located in the EU.

The purposes for which we share data with our trusted partners are keeping IT systems secure; processing payments; advertising agencies and other marketing activities such as digital advertising and social media advertising, in order to help us carry out advertising and marketing campaigns and analyse their effectiveness; third parties providing delivery services - necessary for delivering products, e.g. postal/delivery services; our lawyers, auditors, security service or the competent authorities of the Republic of Croatia (for example the police).

These service providers are obliged to use the data in accordance with the signed contracts, keeping its secrecy and confidentiality. We also oblige them to adequately protect your data and to treat it as a business secret.

The controller cannot fully influence the processing of data by Google, Meta (Facebook, Instagram) and X in the context of your use of the said social networks and tools.

This policy does not apply to services and third parties that have separate privacy policies; however, in accordance with the regulations relating to the protection of personal data, the controller is obliged to inform its users also about the data collected by Google when providing its services to other legal and natural persons.

For statistical analysis and measurement, the website www.gnkdinamo.hr also uses some Google tools, specifically Google Analytics. Please read the parts of this policy carefully so that you know how Google processes your personal data.

You can find more about Google's privacy policy at the link: https://policies.google.com/privacy?hl=hr

The data Google collects includes unique identifiers, browser type and settings, device type and settings, operating system, mobile network data including the operator name and telephone number, and the application version number.

Furthermore, Google collects data about the interaction of applications, browsers and devices with Google services, including the IP address, crash reports, system activity, and the date, time and referrer URL of the data subject's request.

Google collects data when one of Google's services on your device contacts Google's servers - for example when you install an application from the Play Store or when a service checks whether automatic updates are available. If you use an Android device with Google applications, your device periodically contacts Google's servers to provide data about the device and connect to our services. This includes data such as device type, mobile operator name, crash reports and the applications you have installed.

For what purposes does Google collect your data

Google may use your data to ensure the proper operation of services, for example by monitoring outages or resolving the issues you report.

Furthermore, Google uses the data for analytical and measurement purposes. For example, Google analyses data about your visits to Google websites and also uses data about the ads you have interacted with.

When you visit websites that use Google Analytics, Google and the Google Analytics customer Google may link data about your activity on that website with activities on other websites that use Google advertising services. Google uses the collected data, such as the e-mail address, for direct interaction with you. For example, it may send you a notice if it detects suspicious activity, such as an attempt to sign in to your Google account from an unusual location, or it may notify you of upcoming changes or improvements to services.

In the event that you contact Google, Google records a log of the request to make it easier to resolve your issue.

Google uses automated systems that analyse your content in order to provide tailored search results, tailored ads or other features adapted to the way you use our services.

Google also analyses your content in order to detect abuse such as unwanted, malicious or illegal content. To recognise patterns in data, Google also uses algorithms. For example, Google Translate helps people communicate in different languages by detecting common language patterns in the phrases you ask to be translated.

For the purposes described above, Google may combine the collected data from its services and all your devices. Depending on your account settings, your activity on other websites and in other applications may be linked to your personal data in order to improve Google's services and the ads Google shows.

If other users already have your e-mail address or other identifying data, Google may show them your publicly visible Google account data, for example your name and photograph. This way, for example, they can more easily recognise the e-mail you send them.

Finally, we wish to inform you that GNK DINAMO operates business profiles using Facebook, YouTube and Instagram as well as X, and you can view their privacy policies, i.e. confidentiality statements, as well as the way in which they use your personal data, at:

• FACEBOOK (Meta): https://www.facebook.com/policy.php
• YOUTUBE (Google): https://policies.google.com/privacy?hl=hr
• INSTAGRAM (Meta): https://help.instagram.com/519522125107875
• X: https://x.com/en/privacy

In the event that you have questions regarding the collection and processing of data by Meta (Facebook and Instagram), Google (YouTube) and/or X, or you wish to exercise one of your rights guaranteed by the General Data Protection Regulation, please contact:

FOR YOUTUBE: Google Ireland, Ltd., Gordon House Barrow St, Dublin 4, Ireland

Data Protection Officer contact: https://support.google.com/policies/contact/general_privacy_form

If you are not satisfied with the way your personal data is collected and processed, you may contact the lead supervisory authority for YouTube, the Irish Data Protection Commissioner, or the Personal Data Protection Agency of the Republic of Croatia.

FOR FACEBOOK and INSTAGRAM: META PLATFORMS IRELAND Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Data Protection Officer contact: https://hr-hr.facebook.com/policy.php / https://www.facebook.com/help/contact/540977946302970

If you are not satisfied with the way your personal data is collected and processed, you may contact the lead supervisory authority for Meta, the Irish Data Protection Commissioner, or the Personal Data Protection Agency of the Republic of Croatia.

FOR X: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland

If you are not satisfied with the way your personal data is collected and processed, you may contact the lead supervisory authority for X, the Irish Data Protection Commissioner, or the Personal Data Protection Agency of the Republic of Croatia.

In view of the above, and given that the controller uses tools and services of providers that also operate outside the European Union, we are obliged to inform you that these third parties may transfer your data to the USA. On 10 July 2023, the European Commission adopted a new adequacy decision on the basis of which personal data may be freely transferred from the European Union to companies in the USA that participate in the Data Privacy Framework.

The adequacy decision is based on Article 45 of the General Data Protection Regulation and represents a mechanism that ensures the safe and lawful transfer of data to third countries. Companies in the USA that wish to participate in the Data Privacy Framework must undergo a self-certification procedure and be entered on the list of companies that have joined the Data Privacy Framework.

Also, if our contractual partner has its seat in the USA, we will regularly review existing contracts and verify the security standards our partner guarantees in order to ensure the protection of all our data subjects in line with the latest standards approved and suggested by the competent institutions.

GNK DINAMO will not keep your personal data longer than the period for which the data is needed in order to fulfil the purpose of its use.

We will keep requests for the exercise of your rights for at least 5 years from the resolution of the request, unless proceedings have been initiated before the competent authorities, in which case the data and documentation are kept until the final conclusion or longer if so required by the regulations of the Republic of Croatia; data on payments, i.e. data related to membership fees, for 11 years, etc. We keep data on the admission/expulsion of a member in accordance with the Associations Act (NN 151/22).

Every association is obliged to keep a list of its members. The list may be kept electronically or in another suitable manner and must contain data on the personal name, OIB, date of birth, date of joining, membership category (if established), date of termination of membership, and may also contain other data. The list of members must always be available for inspection to all members and competent authorities, upon their request.

If you are interested in the details and retention periods, you may additionally and always contact our data protection officer at [email protected].

When you participate in a promotional offer, prize games or surveys, we store your personal data for the duration of such a campaign and for at most one more year.

If you have consented to direct marketing, we store your personal data until you withdraw your consent and/or request deletion, i.e. cessation of processing.

The visitor register is kept for 90 days.

To maintain the website and ensure its functionality, GNK DINAMO uses the technology commonly known as "cookies".

A cookie is a small text file that is stored on a computer or mobile device when visiting a particular website. With the help of cookies, the website remembers your actions and preferred settings (such as login, language, font size and other display-related preferences) over a longer period, so you do not need to re-enter them each time you return to the website or browse its different pages. Cookies may be temporary (session) or permanent. Thanks to cookies, you can browse our pages without difficulty and you will be shown results that are relevant to you.

You can access the cookies stored on your computer when you visit our website. If you wish to delete cookies that are already on your computer, please consult your browser under instructions and click on the "Help" menu.

We process cookies that are not necessary for the functioning of our website only with your consent. You can accept, partially accept or refuse the use of cookies, just check the settings in your browser. However, we note that some of the features of our website may not work without cookies. When requesting consent, we will present the purpose for which we will process this type of information and we will inform you of your rights.

You can find more information about cookies in the Cookie Policy. Also, you can regulate your cookie choices at any time via the pop-up window.

www.gnkdinamo.hr contains links to third-party websites. These pages may also bear GNK DINAMO insignia, but the domain need not be owned by GNK DINAMO.

This policy applies only to this website and to the pages connected with it, except for ulaznice.hr i.e. https://tickets.gnkdinamo.hr/, so when connecting to other websites we advise you to read their privacy policies. With regard to the said page connected with ulaznice.hr, please contact [email protected] or the Data Protection Officer of the company that manages the said page and is responsible for its security: Dekod d.o.o., from Zagreb.

GNK DINAMO would like to send you information about its activities, aid campaigns it organises, initiatives we are working on, activities we would like to organise together with you and which you might be interested in. However, we are allowed to send marketing material, notices and promotional leaflets only if you opt in to that and give us your consent. Please note that even if you have agreed to receive our notices (newsletter) you can opt out of receiving them at any time. If you no longer wish us to contact you for the stated purposes, please choose that option at the end of our marketing message (e-mail/newsletter/other type of notice) or send us a mail at [email protected]

Notices about our work, and in particular those related to GNK DINAMO membership, may also be sent on the basis of legitimate interest. In that case too, you can always object to the processing at the bottom of such a notice or send a mail to [email protected]

This policy enters into force on the day of its publication on www.gnkdinamo.hr

The policy was last revised on 15 June 2026.