1. Introduction

Welcome to the Croatian Association for Artificial Intelligence (CroAI). We are committed to protecting your personal data and processing it in accordance with the General Data Protection Regulation (GDPR) and relevant national regulations. This Privacy Policy explains the types of data we collect, how we use it, the legal basis for processing, and your rights.

​

2. Data Controller

Data Controller: Croatian Association for Artificial Intelligence (CroAI)
Address: Zavrtnica 17, 10000 Zagreb, Croatia
Email: croai@croai.org

​

3. Legal Basis for Data Processing

We process your personal data based on one or more of the following legal grounds under Article 6 of the GDPR:

• Consent (Article 6(1)(a)) – When you have provided consent for a specific purpose (e.g., receiving newsletters).

• Contractual necessity (Article 6(1)(b)) – When processing is necessary to perform a contract or take steps at your request before entering into a contract.

• Legal obligation (Article 6(1)(c)) – When processing is required to fulfill a legal obligation.

• Legitimate interests (Article 6(1)(f)) – When we have a legitimate interest that does not override your rights and freedoms (e.g., website analytics, security).

​

4. Types of Data We Collect

We collect the following personal data when you complete a form on our website:

Contact Person Information

• Name and surname*

• Email address*

• Address

• Personal Identification Number (OIB)*

• Phone number*

• Position

Company Information

• Company name*

• Company address*

• Company OIB*

• Website

• Company email address

Main Responsible Person Information

• Name and surname*

• Position*

• Email address*

• Phone number*

School and Lecture Information

• School name*

• Grades participating in the lecture* (e.g., 8th grade of primary school, 1st-4th grades of high school)

• Preferred lecture dates

Individual Membership Information

• Name and surname*

• Email address*

• Address*

• Personal Identification Number (OIB)*

• Position

• Phone number

Volunteer Information

• Name and surname*

• Email address*

• Phone number*

• Skills and interests*

All data marked with an asterisk (*) is required for completing specific forms.

Additionally, technical data is collected automatically via cookies and analytics tools (see Section 7).

​

5. How We Use Your Data

Your personal data is used for the following purposes:

• Administration of membership in CroAI

• Communication about services, events, and updates

• Fulfillment of legal obligations

• Analysis and optimization of the website user experience

We do not engage in automated decision-making or user profiling.

​

6. Data Retention

Personal data is retained only as long as necessary for the purposes outlined or as required by law.
Data Retention Periods:

• Membership data: Membership duration + 1 year.

• Data based on consent (e.g., newsletters): Until consent is withdrawn.

• Analytical data (cookies): Anonymized or deleted after six months.

After these periods, data is deleted or anonymized.

​

7. Cookies and Tracking Technologies

We use the following tracking technologies:

• Google Analytics – For tracking website visits.

• Google Tags – For managing activity tracking.

• Hotjar – For analyzing user behavior.

• Mailchimp – For email campaigns.

Cookie Settings: Our website uses cookies, and on your first visit, you can accept or decline non-essential cookies via the cookie banner.
For more information, refer to our Cookie Policy.

​

8. Data Sharing and Transfers Outside the EEA

We do not share your personal data with third parties except in the following cases:

• When required by law

• When using external service providers (e.g., Wix, Google, Mailchimp, Hotjar)

Data Transfers Outside the EU: Some service providers are based in the U.S. or other non-EU countries. We ensure adequate safeguards, such as Standard Contractual Clauses (SCCs).

​

9. Your Rights Under GDPR

Under GDPR, you have the following rights:

• Right of Access – Request a copy of the data we hold about you.

• Right to Rectification – Correct inaccurate or incomplete data.

• Right to Erasure ("Right to Be Forgotten") – Request deletion of data no longer needed.

• Right to Restrict Processing – Restrict processing if you dispute the data's accuracy.

• Right to Data Portability – Transfer your data to another controller.

• Right to Object – Object if you believe we lack a lawful basis for processing.

• Right to Withdraw Consent – Withdraw consent at any time.

To exercise your rights, contact us at croai@croai.org.

​

If you believe your rights have been violated, you can file a complaint with the supervisory authority:

Croatian Personal Data Protection Agency (AZOP)
Address: Ulica grada Vukovara 54, Zagreb
Email: azop@azop.hr
Website: www.azop.hr

​

10. Data Security

We implement technical and organizational measures to protect your data from unauthorized access, loss, or misuse. All CroAI employees have signed confidentiality agreements and are required to comply with GDPR.

​

11. Changes to the Privacy Policy

This Privacy Policy may be updated periodically. Any changes will be posted on our website, and for significant changes, we will notify you via email.

​

12. Contact Us

Croatian Association for Artificial Intelligence (CroAI)
Email: croai@croai.org