This Privacy Policy explains how Waldpass d.o.o., Velika Cesta 35, Buzin, 10010 City of Zagreb, OIB: 97380541015, (further text: "Waldpass") processes your personal data. Waldpass is focused on protection of your personal data and their processing in accordance with the General Data Protection Regulation and the Croatian Law Implementation of the General Data Protection Regulation and/or any other applicable law or regulation relating to the protection of Personal Data. Please read these rules carefully in order to understand why and how we are collecting your personal data and how we intend to use it.

Waldpass is a data controller of your personal data. You can contact us via e-mail: or on address: Velika Cesta 35, Buzin, 10 010 City of Zagreb.

Our DPO can be contacted at:

Purposes of the processing of personal data

Waldpass collects personal information for the purpose of improving our business and your user experience, and for marketing purposes. For these reasons, Waldpass has a comprehensive privacy program designed to respect and protect data privacy rights, project analysis and implementation, marketing and other types of technical support. 

All Waldpass personnel are expected to conduct Waldpass business legally and ethically and with respect to maintaining privacy in communication.

Your personal data is processed because of the legal requirements, or processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract or for the purposes of our legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subjects which require protection of personal data.  

Personal data categories

When a user engages in specific activities on the website Waldpass may ask the user to provide certain additional personal information. In that case, prior to providing additional personal information, the user is required to review this Privacy Policy and agree to their use with respect to additional information.

Waldpass collects and uses personal information to enable users to use the activities through the website, improve the operation of the website, create a database of users or costumers to improve service and/or marketing, and improve advertising and promotional activities. Also, personal data can be used to resolve complaints, resolve problems related to the delivery of purchased products, perform other administrative tasks and establish contact with customers. 

On the web site, Waldpass collects personal information of the respondents such as name, age, gender, email address, zip code, city, IP address and language preference, delivery address, registration information (if you want to register in our website), card information, location information.

Furthermore, Waldpass is collecting and processing Personal Data:

The following persons may have access to personal data in the performance of their scope of work: legal entities involved in the execution of legal relations with users such as IT support and other companies associated with Waldpass e.g. Paypal whose system we use on our Website, companies that deliver on our behalf and for our account, public bodies that require the delivery of personal data in accordance with the regulations binding on Waldpass and about which Waldpass keeps the processing activites records.

Basis for the processing

Waldpass respects that every user should be able to ensure that their data is accurate, complete and up to date. If the user considers that his personal data is incomplete, inaccurate or out of date, he can contact Waldpass by sending an e-mail to, 

Your rights

You have the following rights:

Right of access: you have the right to obtain from us a confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data. Information’s about access include but are not limited to – the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipient to whom the personal data have been or will be disclosed. However, right of access is not an unconditional right and rights and interests of other individuals may limit your right of access.You have the right to receive a copy of the personal data undergoing processing. For any further copies you request, we may charge a reasonable fee based on administrative costs.
Right to rectification you have the right to obtain from us without undue delay the rectification of inaccurate your personal data. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, for example by providing a supplementary statement.
Right to erasure (‘right to be forgotten’) under certain conditions, you have the right to obtain from us the erasure of your personal data and we are required to erase such personal data.
Right to restriction of processing under certain conditions, you have the right to obtain from us restriction of processing your personal data. In that case, such data will be marked and can be processed only for certain purposes.
Right to object Under certain conditions you have at any time the right to object to processing of your personal data, on grounds relating to his or her particular situation or when personal data are processed for direct marketing purposes you have the right to demand from us to stop the processing of your personal data.
Right to data portability Under certain conditions, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without our hindrance.To exercise any of the above rights, please use the contact information provided at the beginning of this Policy.  If you think that your rights have been violated you have the right to file a complaint with Croatian Personal Data Protection Agency, Martićeva 14, 10000, Zagreb.

Storing of personal data

Your personal data that is collected will be stored in a safe environment. Your personal data is protected from any unauthorized access, disclosure, use, alteration or destruction by any organisation or individual.

The processed data is stored in our premises and IT systems, but sometimes we store the data on the servers of our trusted service providers.

Waldpass will ensure that personal data is kept in a secure place (which includes reasonable administrative, technical and physical protection to prevent unauthorized use, access, disclosure, copying or alteration of personal data), which can only be accessed by authorized persons. 

Information collected for aforementioned purposes will be stored only as long as it is necessary for that purposes. Your personal data will not be kept in a form that enables your identification longer than Waldpass reasonably considers it is necessary to fulfil the purpose for which they have been collected and processed. Waldpass will store certain personal data for a period of time that is laid down by law or regulation binding Waldpass to store data.

If you have given us your consent, your personal data will be processed until consent is withdrawn. If you file a grounded objection against the processing of personal data based on legal interest your personal data will not be processed in the future.

It is important to note that in case of revision, we will make sure that 1 year after you have told us which cookies you accept and/or gave your consent, you renew your consent. Also, personal data can be processed until the end of a court, administrative or extrajudicial proceeding, including the period for submitting legal remedies. Waldpass shall keep certain personal data for a period of time that is laid down by law or regulation binding the controller to store data.

Transfer of personal data

Waldpass as a controller can transfer Personal Data outside the EU if it is necessary for the execution of contracts between Waldpass and the data subject or for fulfilling legal obligations. In that case Waldpass, at the time when personal data are obtained, provides the data subject with information about intends to transfer Personal Data to a third country and specify which country or international organisation with a name of organisation. Transfer of Personal Data is only allowed to countries which provide adequate level of data protection; through model contracts or binding corporate rules; or by complying with an approved certification mechanism or Privacy Shield Frameworks when transferring personal data from the European Union and Switzerland to the United States.

In addition, we may provide your personal information to our trusted partners who maintain our IT system or provide services on behalf of Waldpass, e.g. for marketing, financial, advertising and other services inside and outside Waldpass. However, these service providers are obliged, according to the relevant contracts, to use the data entrusted to them only in accordance with our guidelines and exclusively for the purpose we have strictly determined. We also oblige them to adequately protect you information and to consider it a business secret. 


In order to maintain our website and to ensure its functionalities are on the expected level, Waldpass uses technology known as “cookies”. Cookies are small files that are sent to your computer and can later be accessed. They can be temporary or permanent. Thanks to cookies, you can search our web sites without difficulties and access information that are relevant for you.

You can find more information about cookies in our Cookie Policy.

Other websites

These rules apply only to the use and utilization of data that Waldpass collects from website visitors, newsletter subscribers and customers (respondents). Other websites that can be accessed through have their own confidentiality and data collection statements and the ways in which they are used and published. 

Waldpass is not responsible for the working systems of third parties.

Waldpass uses a service from the Rocket Science Group, LLC called Mailchimp ( to send out newsletters. Mailchimp is a cloud-based email service that allows a user to reliably deliver email to their costumers. The Rocket Science Group LLC collects information about users who use their website ( and about users who use the services offered on their website, which include the development, analysis, transmission and management of e-mails. 

The Rocket Science Group LLC also collects data from end users (customers). The Rocket Science Group LLC collect data from end users such as email address, phone number, IP address or token number. Data collected by The Rocket Science Group LLC may be transferred to third countries (United States and other countries where The Rocket Science Group LLC service providers are located). You can read more about this on the Mailchimp website:

Entry into force and changes to the Privacy Policy 

These Rules shall enter into force upon publication on the Website. 

We keep our Privacy Policy under regular review, and we will place any updates on this web page.

Share your driving habits.
Meet the Waldpass community in your area.
→ Facebook
→ LinkedIn
→ Newsletter

Only a caring Waldpass community can make the roads safer for both the people and wildlife.