Privacy policy

Last updated November 9, 2026

What this policy covers

This policy covers this website, nook.steatoda.com, and nothing else. Steatoda d.o.o. (details above) is responsible for it. If you use Nook at a venue, for example its map or its assistant, the venue’s own privacy policy applies to that.

In short

No cookies, no advertising, no tracking across websites, and we never sell your data.

What we process and why

Delivering the website

The website is hosted by Cloudflare. Like any web server, it has to receive your IP address and basic request data (the page requested, browser type, time) to send you the page and to protect the site from attacks. Your browser may also report failed connections to Cloudflare so that network problems can be fixed. The legal basis is our legitimate interest in running a secure, working website (Art. 6(1)(f) GDPR).

Visitor statistics

We use Cloudflare Web Analytics to see how the site is used. A small script, loaded from static.cloudflareinsights.com, reports which page you viewed, the page you came from, your browser and country, and how fast the page loaded. We only see totals, never individual visitors. The script sets no cookies, stores nothing on your device and does not follow you to other websites. Any content blocker can block it. The legal basis is our legitimate interest in understanding and improving the site (Art. 6(1)(f) GDPR).

Your language choice

If you pick a language with the language switcher, your browser remembers it (in its local storage, under nook.locale) so you get the same language next time. This stays on your device and is never sent to us. You can delete it by clearing this site’s data in your browser.

Emails you send us

If you email us, we use your email address, your name and whatever you write to reply and, if you ask, to prepare an offer. The legal basis is taking steps you asked for before a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep this correspondence as long as the conversation and any business that follows from it need it, and as long as the law requires us to (for example under accounting rules).

Who else receives your data

• Cloudflare, Inc. hosts the site and provides the visitor statistics.
• Our email hosting provider stores the emails you send us.

Both act on our behalf as processors, under data processing agreements. We do not sell your data or share it for advertising.

Transfers outside the EU

Cloudflare is a US company, and data may be processed outside the European Economic Area. Such transfers rely on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or on the Commission’s Standard Contractual Clauses.

How long data is kept

We do not keep server logs or analytics data ourselves. Cloudflare keeps what it processes for us only as long as it needs to for the purposes above, as described in Cloudflare’s privacy policy. Emails are kept as described above.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, and to object to processing based on our legitimate interest. To use any of these rights, email us at the address above.

You can also lodge a complaint with a data protection authority: in Croatia, the Personal Data Protection Agency (AZOP), or the authority in the EU country where you live or work.

We do not make automated decisions about you or profile you.

Changes to this policy

When this policy changes, we update it here and change the date at the top.