EduSS Adult Education Institution Privacy Policy

EduSS Adult Education Institution (hereinafter referred to as “the Institution”) has established these “EduSS Adult Education Institution Privacy Policy” to protect the personal data provided on the website https://www.uciliste-eduss.hr/ and on pages linked to the Institution on social media. Please carefully read the “EduSS Adult Education Institution Privacy Policy” to better understand how and why personal data is collected, used, and protected.

Personal Data
Personal data refers to any information about an individual that can be used to identify them, directly or indirectly, particularly using identifiers such as name, identification number, location data, online identifiers, and other characteristics related to their physical, physiological, genetic, mental, economic, cultural, or social identity. Personal data includes information like name, surname, identification number, image, voice, address, phone number, IP address, even health history, favorite literature, or music, if such data can directly or indirectly identify an individual.
Before collecting personal data, the data collector must provide information about the purpose of the collection, the legal basis for it, who the data may be shared with, and the individual’s right to access, correct, or delete their data.

Processing of Personal Data
Data processing includes activities such as collection, recording, storage, viewing, disclosure, transfer, and destruction of data. The General Data Protection Regulation (GDPR) applies to data processing for employees, consumers, clients, citizens by public administration, patients, students, members of associations, social media users, and any other processing of personal data not covered by the categories above.
Certain high-risk data processing activities, such as systematic assessment of personal aspects through automated means, extensive processing of sensitive data, criminal convictions, or public space surveillance, require an impact assessment according to the Regulation.

Legal Basis for Processing
For lawful processing of personal data, at least one of the following legal bases must be met:
(a) The data subject has given consent for the processing of their personal data for one or more specific purposes. Consent must be freely given, specific, informed, and unambiguous.
(b) Processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject before entering into a contract.
(c) Processing is necessary to protect the vital interests of the data subject or another person.
(d) Processing is necessary for compliance with a legal obligation of the data controller.
(e) Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
(f) Processing is necessary for legitimate interests pursued by the controller or a third party, except where such interests are overridden by the data subject’s rights and freedoms.

Collection of Personal Data for the Institution
When browsing the Institution’s website https://www.uciliste-eduss.hr, no personal data is collected that would allow personal identification; browsing is anonymous. Users will be informed when personal data is required for specific services. Providing personal data is voluntary.
Personal data is provided when filling out online application forms, contact forms, requests for information about activities, correspondence via email at official Institute addresses, or participation in online competitions. In such cases, data such as name, OIB (personal identification number), company or organization name, address, email, phone number, date and place of birth, and other necessary information may be requested.
By entering personal data in the designated fields, you confirm that you voluntarily provide your data and consent to its use for the purpose it was given. If you wish to receive information about the Institute’s activities, you may give consent by checking the appropriate box.

Purpose, Method of Processing, and Storage of Personal Data
Personal data is collected to better process applications for enrollment at the Institution, respond to inquiries, and inform interested parties about existing and new services provided by the Institute, either independently or in cooperation with our partners.
All personal data is used solely for the purpose it was collected and for which consent was given. When making inquiries to the Institute, you consent to receiving responses through the same communication channel through which the inquiry was made, and for the Institute to retain your personal data for the minimum time required to fulfill the purpose of the data collection. Personal data will be retained longer only if required by law, for ongoing legal proceedings, or to prevent fraud.

Use of Personal Data
Collected data may be used to personalize your user experience, deliver the type of content or services most relevant to you, improve website and social media functionality, enable quicker response to your inquiries, and improve the administration of promotions, contests, surveys, or other similar content.
Personal data may also be used to send promotional offers or information related to the Institution’s services.

Managing Personal Data
The Institution will not sell, distribute, or lease your personal data to third parties, except where explicit consent is given, or if required by law.
We apply appropriate measures to protect personal data and procedures to prevent unauthorized access to personal data and ensure that the data is used in line with its processing purpose. Unauthorized attempts to transmit or alter data on the Institution’s websites are strictly prohibited.
An exception exists when personal data is shared with our partners to enable certain functionalities on our website. In such cases, we will ensure that our partners process your personal data according to these Privacy Policy.

User Rights
Users have the right to access their personal data, withdraw consent for processing at any time, correct incomplete or inaccurate data, and request the deletion of data after the purpose of processing has been fulfilled and consent has been withdrawn.

Management of Consent for Data Processing
By consenting to the use of personal data via a sign-up for activity updates from the Institute, you allow the storage and use of your personal data for marketing purposes for a period of 5 years, unless you withdraw consent earlier.
This consent includes sharing your personal data with companies such as Google Ireland (Google), Facebook Ireland Ltd. (Facebook), Instagram Inc. (Instagram) for targeted advertising, and The Rocket Science Group LLC d/b/a MailChimp for sending marketing emails.
You can withdraw consent at any time by clicking on the link provided in the subscription without giving any reason.
If you believe that the personal data collected and used in the manner described above is inaccurate, or if you wish to stop its use, please contact our Data Protection Officer at sluzbenik@uciliste-eduss.hr.

Limitation of Liability
Although all available technical, organizational, and personnel measures are taken to prevent unauthorized disclosure of your personal data, we cannot guarantee that personal data collected will never be accidentally disclosed contrary to the provisions of these “EduSS Adult Education Institution Privacy Policy“ The Institution is not liable for any damage caused to users or third parties due to the accidental disclosure of personal data, to the maximum extent permitted by law.

Links to Other Websites
The Institution’s website may contain links to other websites. Once you leave our website using these links, we cannot be responsible for the protection of any data you provide on those websites as they are not covered by this Privacy Policy. Please read the privacy policies of those websites.

Use of Cookies
Cookies are small files that the website or service provider sends and stores on your computer’s memory through your internet browser (if enabled), which helps activate previously communicated information, data, and settings when you visit the website again. Cookies help us understand your preferences based on past and current activity, enabling us to provide a better user experience. The data collected does not allow personal identification of users.
If you do not want your computer to receive cookies from https://www.uciliste-eduss.hr/, you can disable them through your internet browser settings. In such a case, some features of the website may not function properly.

Website Traffic Measurement
The Institution uses Google Analytics to measure website traffic. If you want to disable cookies from this service, you can do so at the following link: https://tools.google.com/dlpage/gaoptout  

Facebook Data Protection Provisions
The Institution’s website contains a Facebook social media component. If a user is logged into Facebook at the same time, Facebook can detect visits to the Institute’s website and specific subpages. This information is collected by the Facebook component and sent to the user’s Facebook account. The user can use Facebook settings at http://facebook.com/about/privacy/ to learn more or disable data sharing.

Instagram Data Protection Provisions
The Institution’s website contains an Instagram social media component. If a user is logged into Instagram, Instagram can detect visits to the website and specific subpages. The information is collected by the Instagram component and sent to the user’s Instagram account. To disable data sharing, you can visit https://help.instagram.com/155833707900388 or https://www.instagram.com/about/legal/privacy/.