Privacy Notice
The Zagreb City Libraries (hereinafter: KGZ) are an organised network of public libraries and a cultural institution founded by the City of Zagreb. Through the joint efforts of its employees and with the support of its partners and collaborators, KGZ provides educational, informational, and cultural services to its users. In order to provide these services, KGZ requires your personal data.KGZ is committed to protecting your privacy and ensuring that any information collected and stored about you is processed in a transparent manner. Please read this notice carefully to understand how and why KGZ collects your personal data, how they are stored, with whom they are shared, what the legal basis for collecting your data is, and what your rights are.
A personal data item is any information relating to an individual whose identity is identified or can be identified.
All personal data collected, stored, or otherwise processed by KGZ are handled fully in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: General Data Protection Regulation), as well as any other applicable data protection legislation currently in force.
Data controller. The data controller is the ZAGREB CITY LIBRARIES, OIB: 93571946376, Zagreb, Starčevićev trg 6. This means that KGZ determines the methods and purpose of processing your personal data.
All data collected by KGZ about you are collected in accordance with the General Data Protection Regulation, i.e., based on a valid legal basis for collection.
Data collected about you by KGZ. KGZ collects data necessary to establish a contractual relationship with you, under which you become a member of KGZ and use its services, to fulfil legal obligations toward you or third parties, or because it is in KGZ’s legitimate interest—for example, to organise operations and improve services.
Examples of data collected include: your full name, personal identification number, contact address, information about previous loans, signature on the physical registration form, information about your education, gender, status and other contact information.
Legal bases for collecting your personal data
- Fulfilment of a contractual obligation
Certain information about you, such as your first and last name, or registration date, is collected so that KGZ can provide you with services and register you in the membership records.
Information about your place of permanent or temporary residence—or proof that your permanent or temporary residence is in the City of Zagreb, or if not, that you are studying or employed in the City of Zagreb—is necessary to confirm that KGZ can provide the service and allow you to become a member. According to KGZ Rules, any person who has permanent or temporary residence in the City of Zagreb or is studying or employed there, may become a member of the Library. KGZ does not keep these data but is required to verify the relevant documentation (e.g., ID card, proof of education, or employer certificate).
- Processing in compliance with a legal obligation
Some information about you must be collected by KGZ to comply with legal obligations. For example, your personal identification number (hereinafter: OIB) is required to enable KGZ to fulfil its responsibilities as a user of the OIB under the Personal Identification Number Act (NN, No. 60/2008), and to record your OIB in the official registry that KGZ is legally obligated to maintain and use in its daily operations.
- For the purpose of establishing, enforcing, or defending legal claims
Certain information about you may also be collected to establish or enforce legal claims against you, particularly to protect library materials. The protection of library materials is one of KGZ’s legal obligations, derived from Article 7 of the Library and Library Activity Act.
- For the purpose of legitimate interest
Certain information about you, such as your borrowing history, is kept to help organise and manage library operations more effectively. Borrowing history is used to track titles and authors of interest to KGZ users and to provide more tailored services. Access to this information is limited to authorised staff and you; it is not shared with third parties. Based on this record, you can check which titles you have borrowed at any time, either online or in person at any library within the KGZ network. Upon request, staff can suggest authors or titles that might interest you based on your borrowing history.
If you do not want your borrowing history collected, you can request this during your next visit to one of the libraries from the KGZ network. KGZ will delete your borrowing history at your request and will no longer collect this type of data.
Information about you—such as your age, status, education level, or gender—is collected in order to help KGZ better organise its operations, gain a deeper understanding of its users, and use these insights to improve the services provided to you or to develop new services that may be of interest to you.
Status, gender, and education data are used exclusively for statistical purposes and are never used for marketing or shared with third parties.
These data are shared only with national and international library associations and the Croatian Bureau of Statistics in aggregated and anonymised form, preventing any link to an identifiable individual.
- With consent
You can easily withdraw your consent by: informing a staff member during your next visit to a KGZ library, updating your information yourself via your user profile, or contacting KGZ via e-mail.
If you provided your contact information, it will not be shared with third parties or used for marketing purposes; it will only be used to improve KGZ services.
However, KGZ may contact you as an existing user and member with whom it has a contractual relationship, solely to provide notifications about services and events at KGZ.
Access to your personal data. Authorised staff who require access to your personal data to perform the tasks within their job description have access to your personal data, in order to provide you with services and ensure the smooth operation of the system.
KGZ partners and collaborators, such as auditors, tax authorities, legal advisers, or external IT service providers, may also access your personal data.
Your personal data are not transferred outside the Republic of Croatia and are never shared with third parties for marketing or promotional purposes.
Security of your personal data. KGZ takes care to protect your personal data. Information about you is protected by appropriate organisational and technical measures designed to prevent unauthorised access or misuse of your personal data.
In case of any suspected misuse, loss, or unauthorised access to your personal data, please notify KGZ without delay.
Retention of your personal data. Your personal data will only be retained as long as necessary to fulfil the purpose for which they were collected, unless a longer retention period is prescribed by contract, law, or internal regulation.
Once your data are no longer needed, KGZ will delete your personal data from its systems and destroy any physical copies.
Your rights. Even if your personal data are already being processed, you have the right to manage them in the ways listed below.
Access. You have the right to access your personal data at any time and to request an overview of all personal data being processed.
Objection. You have the right to object to certain personal data processing activities, for example, the processing of personal data based on KGZ’s legitimate interest, such as direct contact, or to request a restriction on the processing of your personal data.
Transfer. You have the right to request the transfer of your data to another service provider. This right allows you to request that KGZ provide you with all your data in a machine-readable format or transfer it directly to another service provider.
Updating. You have the right to update, correct, or supplement your personal data at any time by logging into your user profile or by visiting any library within the KGZ network in person.
Deletion. You may request the deletion of your personal data held by KGZ by visiting any library within the KGZ network in person.
Complaint. If you have a complaint regarding KGZ’s collection, storage, or processing of personal data, you may submit a complaint to the supervisory authority for personal data protection:
Croatian Personal Data Protection Agency
Martićeva ulica 14
HR - 10000 Zagreb
Phone: 00385 (0)1 4609-000
Fax. 00385 (0)1 4609-099
E-mail: azop@azop.hr
Web: www.azop.hr
Please note that KGZ will record all communication regarding such requests in order to resolve any potential disputes.
To exercise your rights, you may contact the ZAGREB CITY LIBRARIES in writing at the address Starčevićev trg 6, HR - 10000 Zagreb, or via e-mail at: sluzbenik@kgz.hr. Your request will be answered within one month, unless it concerns a complex or complicated request. In cases where KGZ is unable to grant your request, the decision will include an explanation.
