Cookie Management Policy
The Ruđer Bošković Institute, Bijenička cesta 54, 10000 Zagreb, uses cookies and similar technologies on the official website www.irb.hr to ensure the proper functioning of the website, remember user preferences and, with the user’s consent, measure website traffic and improve the user experience.
The data controller is the Ruđer Bošković Institute, e-mail: pr@irb.hr.
For questions related to personal data protection, you may contact the Data Protection Officer at gdpr@irb.hr.
1. What are cookies?
Cookies are small text files that a website stores on a user’s device, such as a computer, mobile phone or tablet. Cookies allow the website to recognize the user’s device, remember certain preferences and ensure the technical functionality of the website.
Cookies may be:
- session cookies, which are deleted after the web browser is closed,
- persistent cookies, which remain stored on the device for a certain period of time,
- first-party cookies, which are set by the domain www.irb.hr,
- third-party cookies, which are set by external service providers, such as Google or Microsoft.
2. What types of cookies do we use?
The website www.irb.hr uses the following categories of cookies:
Necessary cookies
These cookies are necessary for the proper functioning of the website, security, basic navigation, access to content and remembering choices related to cookies. Without them, the website cannot function properly. User consent is not required for these cookies.
Analytics cookies
Analytics cookies are used to measure website traffic and understand how users use the website. The website www.irb.hr uses Google Analytics and Microsoft Clarity to measure website traffic and analyze website usage.
Cookie name |
Provider |
Category |
Domain |
Purpose |
Duration |
Legal basis |
|---|---|---|---|---|---|---|
ng-cc-accepted |
IRB, first party |
Necessary |
www.irb.hr |
Stores the user’s cookie-consent choice so that the cookie notice does not appear on every visit and so that the website can apply the selected cookie settings. |
1 year |
technical necessity |
ng-cc-analytics |
IRB, first party |
Necessary |
www.irb.hr |
Stores the user’s choice regarding analytics cookies so that the website can apply or block analytics tools in accordance with the user’s consent. |
1 year |
technical necessity |
_ga |
Google Analytics |
Analytics |
.irb.hr |
Distinguishes unique users for the purpose of producing statistical reports on website traffic. |
Up to 2 years |
consent |
_ga_S4H6CEG76W |
Google Analytics |
Analytics |
.irb.hr |
Stores the state of the user session for a specific Google Analytics container. |
Up to 2 years |
consent |
_clck |
Microsoft Clarity |
Analytics |
.irb.hr |
Stores the Clarity user ID and user preferences for this website, so that visits can be linked to the same pseudonymous user. |
1 year |
consent |
_clsk |
Microsoft Clarity |
Analytics |
.irb.hr |
Connects multiple page views into a single Clarity session. |
1 day |
consent |
CLID |
Microsoft Clarity |
Analytics, third party |
.irb.hr |
Records the first time Microsoft Clarity recognized the user on a website using Clarity. |
1 day |
consent |
ANONCHK |
Microsoft Clarity / Microsoft |
Analytics, third party |
.irb.hr |
Indicates whether MUID is transferred to ANID. Microsoft states that Clarity does not use ANID and that the value is set to 0. |
10 minutes |
consent |
MR |
Microsoft |
Analytics, third party |
.irb.hr |
Used to check whether the MUID identifier needs to be refreshed. |
7 days |
consent |
MUID |
Microsoft |
Analytics, third party |
.irb.hr |
Identifies unique web browsers that visit Microsoft websites and services. Microsoft states that it is used for advertising, website analytics and operational purposes. |
390 days |
consent |
SM |
Microsoft |
Analytics, third party |
.irb.hr |
Used to synchronize the MUID identifier across Microsoft domains. |
session duration |
consent |
3. Types of data that may be processed through analytics cookies
If the user gives consent for analytics cookies, Google Analytics and Microsoft Clarity may process pseudonymous identifiers of the user, device, browser and session, data about visited pages, the time and duration of the visit, the source from which the user arrived at the website, technical data about the device and browser, approximate location derived from the IP address, and data about interactions with content, such as page views, clicks, scrolling, file downloads and similar events.
Google Analytics uses the IP address to derive approximate location, but for users from the EU/EEA, Switzerland and the UK, IP addresses are neither logged nor stored in Google Analytics. Microsoft Clarity may process data about user interactions with the website, including clicks, scrolling, mouse movements, technical and diagnostic data, and data necessary to display session recordings and heatmaps. Sensitive content and data in forms should be masked so that they are not sent to Clarity.
4. How do we manage consent?
When visiting the website for the first time, the user is shown a cookie notice. The user may:
- customize settings by category,
- accept selected cookies,
- accept all cookies.
Necessary cookies are always active because they are required for the functioning of the website. Analytics cookies are set only after the user has given consent.
5. How can the user change cookie settings?
The user can change cookie settings in three ways:
- through the “Cookie Settings” link in the website footer,
- by deleting or blocking cookies in the web browser settings,
- by using available tools provided by service providers, such as the tool for disabling Google Analytics cookies.
If the user blocks or deletes necessary cookies in the browser, certain parts of the website may not function properly.
6. Third-party cookies
The website may use third-party cookies with the user’s consent:
- Google Analytics is used to measure website traffic and produce statistical reports on website usage.
- Microsoft Clarity is used to analyze website usage, including aggregated insights into user interactions with content.
7. Data recipients and transfers outside the European Economic Area
Data collected through necessary cookies is processed within the website of the Ruđer Bošković Institute in order to ensure its proper functioning, security and remembering of the user’s cookie settings.
If the user gives consent for analytics cookies, certain data about website usage may be processed through external analytics service providers that IRB uses to measure website traffic and improve the user experience, particularly through Google Analytics and Microsoft Clarity. In such cases, recipients or processors may include companies from the Google and Microsoft groups, as well as their sub-processors, in accordance with their privacy policies and data processing terms.
When using Google Analytics and Microsoft Clarity services, certain data may be processed or transferred outside the European Economic Area. Such transfers are carried out only if the conditions prescribed by applicable personal data protection regulations are met, including appropriate safeguards such as the European Commission’s standard contractual clauses, adequacy decisions or other valid data transfer mechanisms.
IRB does not use data collected through analytics cookies to directly identify users, but to produce aggregated statistical reports and analyze the use of the website. Non-essential analytics cookies are set only if the user has previously given consent, and the user may withdraw or change that consent at any time through the cookie settings.
8. User rights
If personal data is processed through cookies, the user has rights in accordance with the General Data Protection Regulation, including the right of access, rectification, erasure, restriction of processing, objection and withdrawal of consent.
To exercise these rights and for all questions regarding the processing of personal data, the user may contact the Data Protection Officer at gdpr@irb.hr.
The user has the right to lodge a complaint with the Croatian Personal Data Protection Agency, AZOP, if they believe that the processing of their personal data is contrary to personal data protection regulations.
9. Changes to this policy
IRB may amend this Cookie Management Policy from time to time in order to align it with the actual technical state of the website, changes to the services used or changes in regulations. The updated version will be published on www.irb.hr.
Date of last amendment: 11 June 2026.