Data Protection Statement
This Privacy Statement of the Center for Missing and Exploited Children (CENTAR ZA NESTALU I ZLOSTAVLJANU DJECU), Osijek, Dunavska ulica 53, OIB 27772905220, as the data controller, handles your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as national regulations governing the protection of personal data. Appropriate technical and security measures are applied to safeguard personal data against unauthorized access, misuse, disclosure, loss, or destruction.
- Basic Information
This Statement describes the data we collect, how we process it, and the purposes for which we use it, as well as your rights related to your data.
The entity responsible for data processing is: CENTAR ZA NESTALU I ZLOSTAVLJANU DJECU, Osijek, Dunavska ulica 53., OIB 27772905220, as data controller
Data Protection Officer
Contact: Phone +385 31 272943
E-mail: info@cnzd.org
If we utilize external service providers to process your personal data, such processing is carried out on our behalf. In such cases, we remain responsible for protecting your personal data.
- Categories and Purposes of Personal Data Processed
We process and use the following categories of personal data:
- Employees: Name and surname, personal identification number (OIB), date of birth, address, number of children, education, phone number, email address, bank account number, length of work experience, health and pension insurance numbers (HZZO and HZMO), and other related data.
Personal data is collected and processed for the purposes of establishing an employment relationship, concluding employment contracts, exercising employment-related rights, and similar functions.
- Applicants: Name and surname, phone number, email address.
This data is collected solely for the purpose of candidate selection during recruitment.
Clients: Mobile and landline numbers and email addresses are collected with their consent for contact purposes.
- Supervisory Board Members: Name and surname, date of birth, personal identification number (OIB), residence address, bank account number, and bank name.
Personal data is collected and processed for the functioning of the Supervisory Board, communication, and payment of compensation for their work.
- Students, Pupils, and Volunteers: Name and surname, personal identification number (OIB), date of birth, residence address, parental consent (for minors), phone number, and email address.
This data is collected and processed for the execution of contractual obligations and tasks related to the controller’s operations.
- External Collaborators: Name and surname, personal identification number (OIB), address, bank account number and bank name, date of birth, phone number, and email address.
Personal data is collected for the purposes of concluding contracts and communication.
Your personal data is generally deleted upon the termination of the relationship or contract, but no later than the expiration of all legal obligations related to data retention.
All personal data is used exclusively for the purposes for which it was collected and with the consent provided.
Collected data will not be shared with third parties in any way, except for legally mandated purposes.
In some cases, instead of deletion, data may be anonymized. Anonymization permanently removes all information linking the data to an individual. Within the scope of a business relationship, you are required to provide personal data necessary for establishing and maintaining the relationship and fulfilling related contractual obligations. If such data is not provided, we may be compelled to decline the conclusion of a contract, suspend its implementation, or terminate the existing agreement. You are not required to provide consent for the processing of data that is irrelevant or not legally mandated for contract execution.
- Legal Basis for Personal Data Processing
The processing we perform is based on:
- Legal obligations.
- Contract execution and actions preceding the contract.
- Your consent.
- Legitimate interest
- Retention Period
Personal data is stored, archived, and disposed of in accordance with legal regulations, internal acts, and decisions of the controller.
Basic personal data is generally deleted after all legal obligations related to data retention have expired.
- Managing Consent
You can withdraw your consent for contact at any time. Similarly, you can object to our processing of your personal data at any time.
Changes to your consent can be made via a written request sent to the following address: CENTAR ZA NESTALU I ZLOSTAVLJANU DJECU, Osijek, Dunavska ulica 53., OIB 27772905220, as data controller or via email at info@cnzd.org
If you withdraw your consent, your data will not be used in the aforementioned purposes.
Should you wish to give your consent again, you can do it at any time.
If we process your personal data without consent—where such processing is necessary for entering into or fulfilling a contract with us or for meeting legal obligations—you must provide the required data. Failure to do so will prevent us from fulfilling our contractual obligations to you or entering into a contract with you.
Withdrawal of consent does not affect the legality of processing based on consent before its withdrawal.
- User Rights
- Right to Information: You have the right to know whether your personal data is being processed and to access information about such processing
- Right to Rectification: If we process incomplete or incorrect personal data about you, you can request correction or completion at any time.
- Right to Erasure: You can request deletion of your personal data if it has been processed unlawfully or in a manner that disproportionately infringes upon your protected interests. Please bear in mind that immediate deletion may not always be possible due to legal obligations, such as mandatory archival requirements.
- Right to Restrict Processing: You can request the restriction of your personal data processing in the following cases:
- You dispute the accuracy of the data, for a period allowing verification of its accuracy.Processing was unlawful, but you oppose deletion and instead request restricted use.
- We no longer need the data for its original purpose, but you need it to assert legal claims.
- You have objected to data processing
- Right to Data Portability: You can request your personal data in a structured, commonly used, machine-readable format if
- the processing is based on your consent or a contract.
- the processing is carried out via automated processes.
- Right to Object: If your data is processed in the public interest, under public authority, or based on legitimate interests, you can object to such processing if your data protection interests take precedence.
- Right to Complain to a Supervisory Authority: If you believe we have violated Croatian or European data protection regulations during processing of your data, please contact us for clarification. You also have the right to file a complaint with the Croatian Personal Data Protection Agency or any other relevant supervisory authority within the EU.
- Exercising Rights To exercise your rights, contact us using the information provided in Section 1 of this Statement.
- Identity Verification: In cases of doubt, we may request additional information to confirm your identity. This ensures the protection of your rights and privacy.
- Abuse of Rights: If your requests are excessively frequent or clearly intended to abuse your rights, we reserve the right to charge an administrative fee or deny the request.
- Transfer of Personal Data to Third Countries
Data transfers to non-EU countries occur only:
- When legally required.
- With explicit consent from the data subject.
8. Transfer of Data to Third Parties
We commit to safeguarding your personal data and will only share it with third parties under the following conditions:
- With your explicit written consent for a specific purpose or person.
- At the written request of courts or notaries when required for legally mandated tasks (e.g., enforcement, bankruptcy, inheritance, or property-related proceedings).
- To the Ministry of the Interior or the State Attorney’s Office for tasks within their authority.
- To courts, attorneys, or notaries for ongoing proceedings requiring written data disclosure.
- To the Center for Social Welfare within their statutory powers.
- To the Ministry of Finance, tax authorities, pension and health insurance, for purposes under their jurisdiction.
- When required by the Ministry of Maritime Affairs, Transport, and Infrastructure.
- To fulfil contractual obligations to you and comply with legal regulations.
- In other cases where required by law.
10. Technical and Organizational Measures
We have implemented all necessary technical and organizational measures to protect your data from loss, alteration, or unauthorized access. If you have any questions, contact us, and we will respond promptly to address your inquiries, requests, or concerns and assist you in exercising your rights.
Any updates to our data protection policy will be published in this Statement, on our website, and communicated to you in an appropriate manner.
11. Personal Data on the Website
We collect only personal data voluntarily provided by visitors to our official website for purposes such as contact requests, job applications, callback services, or complaint forms. This data is treated confidentially and used exclusively for specified purposes.
Data will not be transferred to third parties unless legally required or requested by an official authority. Website access is logged, recording technical details such as page visits, operating systems used, screen resolution, visit duration, and data transfer volume.
To enhance our services, our website may use cookies stored on the visitor’s device. Preventing cookie storage is possible, but may limit website functionality. Cookies allow us to store visitor preferences, optimize technical processes, and continuously improve our offerings.