HR EU member state
Cookie consent rules in Croatia
What Electronic Communications Act and AZOP expect from your cookie banner: when you need consent, how the reject option should look, and what has been enforced.
Sources checked 28 October 2026. Not legal advice.
Cookie law
Zakon o elektroničkim komunikacijama (Electronic Communications Act)
Official guidance
Banner languages
Croatian
What the rules say
- AZOP rejects legitimate interest as a legal basis for non-essential cookies — consent is required.
- Rejecting cookies must be as easy as accepting them.
- A banner with only an 'accept' option, or with acceptance pre-selected, is not compliant.
- Explain the actual cookie categories, purposes, retention periods and any international transfers.
- Only transmission and cookies necessary for a service the visitor requested are exempt.
How PrivacyPill handles this
- Nothing optional runs before a choice. Google tags start with Consent Mode v2 set to denied; other scripts marked with data-pp-category wait until their category is allowed.
- Equal first-layer buttons. "Accept all" and "Reject non-essential" sit side by side with the same weight, and a settings button lets visitors withdraw consent at any time.
- Consent per purpose. Analytics, marketing and functional cookies can be allowed separately in the preferences panel.
- Languages. Croatian isn't built in yet — rewrite the English texts in the customizer to show your own translation.
- Proof of consent. Every choice is logged pseudonymously with the banner version, exportable as CSV.
Frequently asked questions
Sources
- azop.hr/obrada-osobnih-podataka-kolacici/
- azop.hr/obrada-osobnih-podataka-putem-kolacica-eng-cookies/
This page summarises official sources checked on 28 October 2026. It isn't legal advice; regulators update guidance, so follow the links for the current text.