Privacy policy

This policy describes how personal data is processed on the website of the PAXMED project. It applies to every page on this domain, including the enquiry form and the content published under News and Documents.

Controller

The controller of personal data is the Josip Juraj Strossmayer University of Osijek, Catholic Faculty of Theology in Đakovo, Petra Preradovića 17, 31400 Đakovo, Croatia.

For any question about the processing of personal data on this website, write to simo.sokcevic@djkbf.hr.

Data we collect

Enquiry data. When you contact us through the form on the Contact page or directly by email, we process your name, email address, phone number if you enter one, the type of enquiry and the content of your message. Please enter only what we need in order to reply, and do not include health data, religious beliefs or other sensitive information. A message sent through the form reaches us by email. So that no enquiry is lost if an email fails to arrive, a copy is also saved to a spreadsheet (Google Sheets) held by the contractor who maintains this website, who uses it for that purpose only.

Protecting the form from abuse. When you start filling in the form, the page loads Google reCAPTCHA (Google Ireland Limited), which checks whether the message is sent by a person or an automated program. To do so, Google receives your IP address, information about your browser and device and how you use the page, and may set a cookie. The service is not loaded until you enter the form. Google's Privacy Policy and Terms of Service apply to it.

Server logs. The server records the IP address, the date and time of the request, the requested address, the server response and the type of browser. These records are required for the operation and security of the website and are not used to track visitors.

Event photographs. We publish photographs from public project events — conferences, round tables and workshops — in which participants may be recognisable.

Purposes and legal basis

• Answering an enquiry. Processing is necessary in order to take steps at your request, or rests on the consent you give by sending the message. You may withdraw that consent at any time.
• Operation and security of the website. The legitimate interest of the controller in keeping the site available and protected from abuse, including protecting the form from automated messages (reCAPTCHA).
• Analytics. If introduced, solely on the basis of the consent you give in the cookie notice; you can withdraw it using the Cookie settings link.
• Reporting on the project. Photographs and reports from public events are published as part of a task carried out in the public interest — informing the public about a project financed from public funds.

Retention

Enquiry messages are kept for as long as the correspondence lasts and for at most two years after the last contact, unless a longer period is required by law. Server logs are kept for at most twelve months. Photographs and event reports are part of the project documentation and remain published for the duration of the project and afterwards, in line with the obligation to retain documentation on projects financed by the European Union.

Who else has access

We do not sell data and do not pass it to third parties for their own purposes. Access, limited to what the service requires, is held by the provider hosting the website and the content management system, the provider of the email service used for correspondence, the contractor who maintains the website (the enquiry copy in the spreadsheet), and the competent authorities where the law requires it. The servers running this website and the content management system are located in the European Union.

To protect the form and keep a copy of enquiries we use services provided by Google (reCAPTCHA and Google Sheets). Google may process data outside the European Union, subject to the safeguards required by the General Data Protection Regulation (the EU–US Data Privacy Framework and standard contractual clauses).

Cookies and analytics

When you first open the website, a cookie notice asks you to choose “Essential only” or “Accept”. You can change your choice at any time using the Cookie settings link at the bottom of the page.

Essential cookies and records. These are needed for the website to work and to protect forms from spam, so we do not ask for consent:

• a record of your choice in the cookie notice, kept in your browser until you delete it;
• a note that you have already seen the opening animation on the home page, deleted when you close the browser tab;
• Google reCAPTCHA, which loads only once you start filling in the contact form and may set its own cookie to protect the form from abuse.

Analytics cookies. These are set only if you choose “Accept”. The website does not currently use any analytics tools. If we introduce them, we will list them here, together with what they collect and how long the data is kept, and they will load only after you have given your consent. We do not use advertising scripts.

Fonts and all images are served from this domain and its subdomain, so opening a page sends no request to anyone outside the project. News and documents are the exception: the page refreshes them from the content management system running on a subdomain of the same project, so that server also sees your IP address, exactly as the website server does.

Links to other websites

The site links to external sources, such as the websites of the Faculty, the University and partner institutions. Data processing on those sites is the responsibility of their owners and is governed by their own policies.

Your rights

Under the General Data Protection Regulation you have the right to:

• request access to the data we process about you;
• request the correction of inaccurate or the completion of incomplete data;
• request erasure of your data;
• request restriction of processing;
• object to processing based on legitimate interest or on a task carried out in the public interest;
• request the transfer of the data you provided, in a machine-readable format;
• withdraw consent, without affecting the lawfulness of processing carried out before the withdrawal.

Send your request to simo.sokcevic@djkbf.hr. We will reply within one month of receiving it.

Removing a photograph

If you recognise yourself in a published photograph and do not want it to stay on the site, tell us and we will remove it without delay and without asking for a reason. It is enough to give the address of the page and describe where you are in the photograph.

Complaint to the supervisory authority

If you believe your data is being processed contrary to the regulations, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr.

Changes to this policy

We will update this policy whenever the way the site works changes — for example when the enquiry form starts sending messages directly, or when a new kind of content is introduced. The date of the last change is shown next to this document.