Legal
Privacy Policy
We respect your privacy and process personal data only as much as needed to respond to you and run the association.
Last updated: 7 November 2026
1. Data controller
The controller of your personal data is Kulturno Umjetničko Društvo "Vinčica" Belajske Poljice, OIB 45398246230, Osječka ul. 11A, 51000, Rijeka, Croatia.
2. Contact details
For any question about this policy or your data, contact us at contact@ailanapustuudio.org or +385 51 506 600, or by post at the address above.
3. Personal data we collect
We collect only data you choose to give us:
- Contact form: name, email, phone (optional), inquiry category, subject and message.
- Volunteer application: name, email, phone, city, area of interest, experience, availability and message.
- Membership application: name, email, phone, address, area of interest, previous experience and message.
- Your cookie preference, stored in your own browser.
We do not knowingly collect special categories of personal data. Please do not include such information in your messages.
4. Purposes of processing
- Responding to inquiries and requests.
- Considering volunteer and membership applications.
- Organising the association's cultural activities with participants.
- Meeting legal obligations that apply to associations.
5. Legal bases
We process data on the basis of your consent (Art. 6(1)(a) GDPR), steps taken at your request before membership (Art. 6(1)(b)), compliance with legal obligations (Art. 6(1)(c)) and our legitimate interest in running the association (Art. 6(1)(f)).
6. Retention periods
Inquiries are kept for as long as needed to answer them and for up to 12 months afterwards. Volunteer data is kept while you volunteer with us and up to 12 months after. Member records are kept for the duration of membership and as long as required by law afterwards.
7. Recipients
Your data is accessed only by authorised members of the association who need it to respond to you. Messages sent by email pass through the email provider used by the association. We do not sell or share your data for marketing.
8. Data security
We take appropriate organisational and technical measures to protect personal data against unauthorised access, loss or misuse. The website is served over an encrypted connection (HTTPS).
9. Your rights
Under the GDPR you have:
- Right of access to your personal data.
- Right to rectification of inaccurate data.
- Right to erasure (“right to be forgotten”).
- Right to restriction of processing.
- Right to data portability where applicable.
- Right to object to processing based on legitimate interest.
- Right to withdraw consent at any time, without affecting earlier processing.
To exercise these rights, write to contact@ailanapustuudio.org.
10. Right to lodge a complaint
If you believe your data is processed unlawfully, you may lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka – AZOP), Selska cesta 136, 10000 Zagreb, www.azop.hr.
11. Cookies
The website uses only essential browser storage by default. See our Cookie Policy for details.
12. Third-party services
Web fonts are loaded from Google Fonts, which receives your IP address when the page loads. Sharing buttons on articles open the selected service only when you click them.
13. Policy updates
We may update this policy when our activities or legal requirements change. The date of the latest version is shown at the top of this page.
