The Ruđer Bošković Institute, Bijenička cesta 54, 10000 Zagreb, uses cookies and similar technologies on the official website www.irb.hr to ensure the proper functioning of the website, remember user preferences and, with the user’s consent, measure website traffic and improve the user experience.

The data controller is the Ruđer Bošković Institute, e-mail: pr@irb.hr.

For questions related to personal data protection, you may contact the Data Protection Officer at gdpr@irb.hr.

1. What are cookies?

Cookies are small text files that a website stores on a user’s device, such as a computer, mobile phone or tablet. Cookies allow the website to recognize the user’s device, remember certain preferences and ensure the technical functionality of the website.

Cookies may be:

• session cookies, which are deleted after the web browser is closed,
• persistent cookies, which remain stored on the device for a certain period of time,
• first-party cookies, which are set by the domain www.irb.hr,
• third-party cookies, which are set by external service providers, such as Google or Microsoft.

2. What types of cookies do we use?

The website www.irb.hr uses the following categories of cookies:

Necessary cookies

These cookies are necessary for the proper functioning of the website, security, basic navigation, access to content and remembering choices related to cookies. Without them, the website cannot function properly. User consent is not required for these cookies.

Analytics cookies

Analytics cookies are used to measure website traffic and understand how users use the website. On www.irb.hr, Google Analytics is used to measure website traffic and may set analytics cookies only with the user’s consent. Microsoft Clarity is used to analyse website usage, but it is configured in cookieless mode, meaning that it does not set Clarity cookies on the user’s device.

Note on Microsoft Clarity: Microsoft Clarity is used on www.irb.hr in cookieless mode. In this mode, Clarity does not store cookies such as _clck, _clsk, CLID, ANONCHK, MR, MUID or SM on the user’s device. Clarity may process limited website usage data, such as page views, clicks, scrolling, technical data and diagnostic data, but without permanently linking users through Clarity cookies.

3. Types of data that may be processed through analytics cookies

If the user gives consent for analytics cookies, Google Analytics may process pseudonymous identifiers of the user, device, browser and session, data on pages visited, the time and duration of the visit, the source of arrival on the website, technical data about the device and browser, and approximate location derived from the IP address. Google Analytics uses the IP address to derive approximate location, but for users from the EU/EEA, Switzerland and the UK, IP addresses are neither logged nor stored in Google Analytics.

Microsoft Clarity is used in cookieless mode. In this mode, Clarity may process data on user interactions with the website, including clicks, scrolling, mouse movements, technical and diagnostic data, as well as data necessary to produce aggregated insights, session recordings and heatmaps, but without setting Clarity cookies on the user’s device and without permanently linking visits by the same user through Clarity cookies. Sensitive content and data in forms are masked so that they are not sent to Clarity.

4. How do we manage consent?

On the first visit to the website, the user is shown a cookie notice. The user may:

• customise settings by category,
• accept selected cookies,
• accept all cookies.

Strictly necessary cookies are always active because they are necessary for the operation of the website. Analytics cookies, such as Google Analytics cookies, are set only after the user has given consent for them. Microsoft Clarity is configured in cookieless mode and does not set Clarity cookies regardless of the user’s choice.

5. How can the user change cookie settings?

The user can change cookie settings in three ways:

• through the “Cookie settings” link in the footer of the website,
• by deleting or blocking cookies in the web browser settings,
• by using available tools provided by service providers, such as the tool for opting out of Google Analytics cookies.

If the user blocks or deletes strictly necessary cookies in the browser, certain parts of the website may not function properly.

6. Third-party cookies

The website may, with the user’s consent, use third-party cookies related to Google Analytics, which is used to measure website traffic and produce statistical reports on website usage. Microsoft Clarity is used as an external analytics tool for aggregated insights into user interactions with content, but it is configured in cookieless mode.

7. Data recipients and transfers outside the European Economic Area

Data collected through strictly necessary cookies is processed within the website of the Ruđer Bošković Institute in order to ensure its proper functioning, security and the remembering of the user’s cookie settings.

If the user gives consent for analytics cookies, or if analytics tools configured without cookies are used, certain website usage data may be processed through external analytics service providers used by IRB to measure website traffic and improve the user experience, in particular through Google Analytics and Microsoft Clarity.

When using Google Analytics and Microsoft Clarity services, certain data may be processed or transferred outside the European Economic Area. Such transfers are carried out only if the conditions prescribed by applicable personal data protection regulations are met, including appropriate safeguards such as the European Commission’s standard contractual clauses, adequacy decisions or other valid data transfer mechanisms.

IRB does not use data processed through analytics tools to directly identify users, but to produce aggregated statistical reports and analyse website usage. Optional analytics cookies are set only if the user has previously given consent for them, and the user may withdraw or change that consent at any time through the cookie settings.

8. User rights

If personal data is processed through cookies, the user has rights in accordance with the General Data Protection Regulation, including the right of access, rectification, erasure, restriction of processing, objection and withdrawal of consent.

To exercise these rights and for any questions about the processing of personal data, the user may contact the Data Protection Officer at gdpr@irb.hr

The user has the right to lodge a complaint with the Croatian Personal Data Protection Agency, AZOP, if they consider that the processing of their personal data is contrary to personal data protection regulations.

9. Changes to this policy

IRB may occasionally amend this Cookie Management Policy in order to align it with the actual technical state of the website, changes in the services used or changes in regulations. The updated version will be published on www.irb.hr

Date of last amendment: 19 June 2026.

• Website Terms of Use
• Accessibility Statement
• Personal Data Protection and IRB Privacy Policy