Privacy policy

What happens to your data when you visit sunset-castle.com — short and without the small print. Last updated: 31 October 2026.

Analytics

Google Analytics only with your consent

Cookies

Analytics cookies only after “Accept analytics”

Notifications

Your e-mail only if you enter it

Contact

Instagram @sunsetcastle_events

Change cookie settings

1. Who is responsible for your data

sunset-castle.com is run by the organisers of the Sunset Castle events, Promocija d.o.o. and Housemates, from Rijeka, Croatia. For questions about this policy or your data, send us a message on Instagram at @sunsetcastle_events. As we operate in the European Union, the General Data Protection Regulation (GDPR) applies.

2. What we collect

• Technical logs. The site is served through Cloudflare, which records technical data such as your IP address, browser details, the requested page and the time of access. This is used to deliver the site and to detect abuse and attacks.
• Google Analytics 4 — only with your consent. The pages you visit and their titles, the approximate source of your visit, the time and length of the visit, interactions with the site (scrolling, clicks on outbound links such as tickets or Instagram, video views, submitting the sign-up form — without the e-mail address itself), device and browser type and approximate location. Google Analytics uses a pseudonymous identifier in the _ga cookie. For visitors in the EU, Google uses the IP address only to derive an approximate location and does not log it. Google signals and ad personalisation are switched off.
• Event notifications. The e-mail address you enter in the sign-up form on the homepage. The form runs on Google Forms, so the address arrives in a Google account we manage. We use it only to tell you the date, line-up and ticket sale start of upcoming events.

We do not collect special categories of data and we do not build user profiles.

3. Embedded videos and maps

On the homepage and the event pages a YouTube video starts playing in the background once the page has loaded, and the event and venue pages embed a Google map. YouTube and Google Maps (Google) then receive your IP address and may set their own cookies. Fonts are served from our own domain, not from Google Fonts.

4. Why we process data and on what legal basis

• To run and secure the site — legitimate interest (Art. 6(1)(f) GDPR).
• To measure visits with Google Analytics — your consent (Art. 6(1)(a) GDPR). You can decline or withdraw it at any time with the “Privacy settings” button that appears bottom right when you reach the end of a page, or with the button at the top of this page. Declining does not affect your use of the site.
• To send event notifications — your consent (Art. 6(1)(a) GDPR), given by entering your e-mail address, which you can withdraw at any time.

5. Cookies and local storage

• sunset-analytics-consent — remembers your analytics choice. Kept in your browser’s local storage, never sent anywhere, until you clear it.
• _ga, _ga_* — Google Analytics, only with consent, up to 2 years. If you withdraw consent, we delete them.
• YouTube and Google Maps cookies — for video playback and the map, under Google’s policies.

6. Third parties that process data for us

• Cloudflare — hosting, CDN and security.
• Google — Google Analytics 4 (only with consent), Google Forms for notification sign-ups, YouTube for videos and Google Maps for maps.

Some of these providers are located outside the European Economic Area, mainly in the USA. Transfers are then based on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

7. How long we keep data

Google Analytics data is kept for up to 14 months. Your notification e-mail address is kept until you ask us to delete it or until we stop sending notifications, after which it is deleted.

8. Your rights

You have the right to access, rectify and erase your data, to restrict or object to processing and to data portability, and to withdraw consent at any time without affecting the lawfulness of processing before the withdrawal. Send your request as a message on Instagram to @sunsetcastle_events. If you believe your data is processed unlawfully, you can lodge a complaint with the Croatian Personal Data Protection Agency (azop.hr) or your local supervisory authority.

9. Changes to this policy

We will update this policy when the way we process data changes. The date of the last change is shown at the top of the page.