Privacy Policy
# Privacy Policy
Last updated: [DATE]
Hrvatski dom Vukovar respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what personal data we may collect through the website [DOMAIN], for what purposes we process it, on which legal bases, how long we keep it, and what rights you have.
## 1. Data Controller
The data controller responsible for the processing of personal data is:
**[FULL LEGAL ENTITY NAME]**
Registration / ID No.: [ID / REGISTRATION NO.]
Address: [ADDRESS]
Email: [EMAIL]
Phone: [PHONE]
For any questions regarding personal data protection, you may contact us at: **[CONTACT EMAIL]**
If you have a Data Protection Officer, add:
**Data Protection Officer:** [NAME / EMAIL]
## 2. What data we may collect
Depending on how you use our website, we may process the following data:
- identification and contact data that you provide to us directly, such as your name, surname, email address, phone number, and the content of your message
- technical data, such as IP address, browser type, operating system, device type, date and time of access, pages visited, and basic server log data
- data related to cookies and similar technologies, in accordance with your settings and consents
## 3. Purposes of processing and legal bases
We process your personal data only where there is an appropriate legal basis.
### a) Communication and responding to enquiries
If you contact us by email or through a contact form, we process your data in order to respond to your enquiry and continue communication where needed.
**Legal basis:**
- taking steps at your request prior to entering into a contract, where applicable
and/or
- our legitimate interest in communicating and responding to enquiries
and/or
- performance of a task carried out in the public interest / exercise of official authority, where applicable to our legal status and activities
### b) Website functionality, security and administration
We process certain technical data in order to ensure website security, prevent misuse, maintain the website, and ensure its proper functioning.
**Legal basis:**
- our legitimate interest in the security, stability, and protection of the website and systems
or
- performance of a task carried out in the public interest / exercise of official authority, where applicable
### c) Analytics and non-essential cookies
If we use analytics or other non-essential cookies, we process such data only on the basis of your consent, where required.
**Legal basis:**
- your consent
## 4. Cookies
The website may use strictly necessary cookies required for the basic functioning of the site and, subject to your consent, analytics or other non-essential cookies.
More information about the types of cookies, their purposes, and retention periods is available in our **Cookies Policy**.
## 5. Recipients of personal data
We may share your personal data with trusted processors and service providers only where necessary for the operation of the website and our services, for example:
- hosting and IT infrastructure providers
- website maintenance and development providers
- analytics providers, if used and if the required consent has been obtained
- other service providers where necessary for the lawful and secure operation of the website
We require all such recipients to ensure appropriate confidentiality and data protection safeguards.
## 6. Transfers outside the EEA
If we use service providers that process personal data outside the European Economic Area, such transfers will take place only with appropriate safeguards in accordance with applicable law.
If no such transfers take place, you may use this shorter version:
**We currently do not transfer personal data outside the European Economic Area, except where necessary for the use of certain trusted service providers subject to appropriate safeguards.**
## 7. Retention period
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by law or necessary for the establishment, exercise, or defence of legal claims.
For example:
- enquiries and correspondence are kept for as long as reasonably necessary to respond and continue communication
- technical logs are kept for as long as necessary for security, diagnostics, and system stability
- data processed on the basis of consent is kept until consent is withdrawn, unless another lawful basis exists for continued processing
## 8. Your rights
Subject to applicable data protection law, you have the right to:
- request access to your personal data
- request rectification of inaccurate or incomplete data
- request erasure of your data where the legal conditions are met
- request restriction of processing where the legal conditions are met
- object to processing where applicable
- request data portability where applicable
- withdraw your consent at any time for processing based on consent, without affecting the lawfulness of processing carried out before withdrawal
To exercise your rights, please contact us at: **[CONTACT EMAIL]**
## 9. Right to lodge a complaint
If you believe that the processing of your personal data infringes your data protection rights, you have the right to lodge a complaint with the competent supervisory authority.
In Croatia, the competent supervisory authority is:
**Croatian Personal Data Protection Agency (AZOP)**
Ulica Metela Ožegovića 16
10 000 Zagreb
Croatia
Web: [insert official website if desired]
Email: [insert official contact if desired]
## 10. Data security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, misuse, or unauthorised alteration.
## 11. Links to other websites
Our website may contain links to other websites. We are not responsible for the content, security, or privacy practices of such websites. We recommend that you review their privacy policies before using them.
## 12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page together with the updated date.