Please ensure Javascript is enabled for purposes of website accessibility

Privacy Policy

This Privacy Policy based on the General Data Protection Regulation (GDPR) explains what personal data is collected related to our activities, how we process, use, and protect such data, for what purposes we use it, as well as your rights related to your personal data.

Privacy and protection of personal data are fundamental human rights. It is our duty to care for the personal data we collect, process, and store. Your personal data is our responsibility, and we collect and process it only when necessary, ensuring security measures for its protection.
Croatian Hydrocarbon Agency adheres to the following principles in order to protect the privacy and personal data of all individuals whose personal data we process:
  • We do not collect more personal data than is strictly necessary;
  • We do not use personal data for purposes that you are not aware of in a timely manner;
  • We do not keep personal data if it is no longer necessary;
  • We never sell, borrow or distribute personal information;
  • We do not send personal data to third parties without your knowledge and if it is not lawful;
  • We do not use any automated processing for decision-making or profiling;
  • We do not transfer personal data outside the EU/EEA;
  • We continuously ensure that personal data is securely stored and protected.

It is important to read this Privacy Policy, and we hope you will take the time and attention to do so. We have made an effort to write it as clearly as possible, with the intention of making it understandable to everyone, in order to maintain your full trust in how we handle your personal data.

If you have any further questions about the protection of personal data at the Croatian Hydrocarbon Agency, feel free to contact the Data Protection Officer at any time:

  • By e-mail to: or
  • By mail to the address: Croatian Hydrocarbon Agency, Miramarska cesta 24, 10000 Zagreb
 We regularly improve our Privacy Policy in order to improve the protection of your data.
This Privacy Policy was updated on April 25th, 2024.



Croatian Hydrocarbon Agency, Miramarska cesta 24, 10 000 Zagreb as Controller, is a public body that independently performs tasks within the legally defined scope and competence and determines the purposes and means of processing your personal data and takes care of ensuring all security measures of your personal data


When performing tasks within the legally established scope and competence 

For the purpose of performing activities and tasks within the scope and authority defined by the Act on the Establishment of the Croatian Hydrocarbon Agency (Official Gazette No. 14/14, 73/17, 84/21, 155/23), which include systematic operational support to competent bodies in the fields of hydrocarbon exploration and exploitation, geothermal water for energy purposes, underground gas storage, and permanent disposal of carbon dioxide in geological structures, as well as responsible, high-quality, and efficient management of mandatory petroleum oil reserves, Croatian Hydrocarbon Agency collects and processes necessary and binding sets of personal data within its official authority and for the purpose of public interest, based on legal obligations and when necessary for the fulfillment of contractual obligations in accordance with Article 6 (1) of the General Data Protection Regulation, in accordance with:

  • Act on the Establishment of the Croatian Hydrocarbon Agency (Official Gazette No. 14/14, 73/17,  84/21, 155/23); 
  • Act on the Exploration and Production of Hydrocarbons (Official Gazette No. 52/18, 52/19, 30/21);
  • Act on Safety in Offshore Exploration and Production of Hydrocarbons (Official Gazette No. 78/15, 50/20);
  • Act on the Market for Petroleum and Petroleum Products (Official Gazette. 19/14, 73/17, 96/19); and corresponding bylaws and regulations of the Government of the Republic of Croatia.  and are retained in compliance with the deadlines from these regulations and in compliance with the obligations from the regulations related to archival and documentary materials.


Selection of candidates for employment

When hiring through publicly announced competitions, we collect basic information about you with the intention of entering into an employment contract, which includes your full name, address, email address, phone number, education, work experience, evidence of professional qualifications and lack of criminal record, foreign language proficiency, and any other personal data required by applicable regulations. We gather this set of your personal data to facilitate the selection and employment process.
After the completion of the selection process, we employ the selected candidates and retain all the necessary data in accordance with legal obligations, while requests and personal data of candidates who were not selected for a further period of five years,  in accordance with the deadlines for retention of archival material and deadlines necessary for legal defense purposes.


Web page

While you can use our website without providing any personal data, after contacting us via our email addresses, we collect your personal information (name, email address, address, organization) in order to contact you and respond to your request. The data will be used exclusively for further communication and reply to your inquiry within the scope of our legally established responsibilities and authority. As long as we maintain an open communication for the purpose of establishing business cooperation or performing tasks within the framework of our legally defined activities and responsibilities, we will continue to use your personal data for these purposes.


Use of Cookies

Cookies are small text files that your browser saves on your computer or mobile device when you visit our website, and they help provide customization of the web browser interface.

Our website exclusively uses essential (necessary) cookies, which do not collect or store any of your personal data. These essential cookies are crucial for the proper functioning of the website and facilitate ease of use. Without these cookies, certain parts of the website may not function correctly, so disabling them is not possible.








Session (active during browsing session)

Set for angular to pass in to the header value for "X-UMB-XSRF-TOKEN"




(active during browsing session

Used to store the backoffice antiforgery token validation value.




(active during browsing session

Enables your system to check for the Umbraco software updates.


For the use of other cookies that we do not use on our web browser, and which would collect your personal data, your prior consent is necessary. Even in the absence of your free consent, you can still fully use website and have uninterrupted access to all its content


We cooperate exclusively with reliable business partners who help us provide and improve our services and make our direct communication with you more efficient. We provide access to your personal data to authorized external processors for the purpose of processing personal data on our behalf and on the basis of our explicit instructions based on concluded contracts on the processing of personal data in accordance with Article 28 of the GDPR. These partners are obliged to strictly comply with the obligation of confidentiality in accordance with this Privacy Policy

Our selected external processors are business partners who provide personnel selection services, IT services and maintenance services for business applications and systems, web and e-mail hosting.

In accordance with legal obligations, we share data with competent ministries and other legally established and authorized bodies and institutions.


At any time, you are free to contact us for the purpose of exercising your rights in the field of protection of your personal data. Your rights are as follows:

Right of access to personal data
You have the right to access your personal data and to be informed about which data and how we process it, for what purpose and for what period. We also provide you with the opportunity to obtain a copy of your personal data.  

Right to correction of personal data
You have the right to correct or supplement of inaccurate or incomplete personal data collected by us. 

Right to erasure of personal data  
You have the right to request us to delete your personal data, when the data is no longer necessary for the purpose for which it was collected, when you file a justified complaint or your personal data is processed unlawfully.

Right to object
You have the right to object to certain handling of your personal data that we process in the context of the fulfillment of tasks of public interest or performance of official authority. 

Right to restriction of processing
You can ask us to restrict the processing of data, for example, when deletion, correction or objection regarding your personal data is on hold and/or when we do not have a valid basis for processing your data and you want us to keep it. When processing is restricted, your data will be stored and will not be further processed. For example, if you dispute the accuracy of your data, the processing of such data will be restricted until it is ensured that the data is accurate.

Right to data transfer
Where the processing is carried out by automated means of processing on the basis of a contract or consent, you have the right to receive the personal data you have provided to us in a structured and commonly used machine-readable format and by your decision to transfer such data to third parties.

If you wish to exercise any of the above rights, feel free to send us your inquiry:

  • By e-mail to or
  • By mail to the address: Croatian Hydrocarbon Agency, Miramarska cesta 24, 10 000 Zagreb.

We will respond to your request as soon as possible, and no later than one month from the receipt of your request. In case of inability to securely verify your identity, we will be free to request additional verification of the applicant's identity. 

If you believe that our handling of your personal data is not lawful, you can at any time file a complaint directly with the competent supervisory authority - Croatian Personal Data Protection Agency, Selska cesta 136, 

10 000 Zagreb, phone: 01 4609 000, email:   


We reserve the right to periodically adjust and improve the text of this Privacy Policy, primarily for the purpose of respecting legal changes, i.e. in case of changes in the purposes and methods of processing. However, your rights arising from this Privacy Policy or from the relevant legal regulations will not be limited or reduced. In the event of changes that may affect your rights, we will inform you in a timely and direct manner.




Consolidating resources within a legislative act increases the energy system efficiency by reducing administrative barriers.