for the website https://headhearthands.eu
- Introduction
Eko Brezna Association (hereinafter referred to as: “Data Controller”, “we” or “us”), with its registered office at Mate Ujevića 18, 35000 Slavonski Brod, Croatia, operates the website headhearthands.eu (hereinafter referred to as: “Website”) within the framework of the Erasmus+ project “Head-Heart-Hands – 3H for Climate Agents of Change”.
This Privacy Policy describes how we collect, use, store and protect your personal data when you visit our Website or communicate with us. This Policy is compliant with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 of the European Parliament and of the Council and the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/18).
- Data Controller
The controller of your personal data is:
Name: Eko Brezna Association
Address: Mate Ujevića 18, 35000 Slavonski Brod, Croatia
Phone: +385 91 574 4371
Email: eko.brezna.info@gmail.com
- Types of Personal Data We Collect
When using our Website, we may collect the following categories of personal data:
3.1. Data you provide directly to us
When you contact us via the contact form or email, we may collect: your name and surname, email address, phone number (if provided), and the content of your message or inquiry.
3.2. Data collected automatically
When you visit our Website, we automatically collect certain technical data through the Google Analytics service (implemented via Google Tag Manager): IP address (anonymised), browser type and version, operating system, pages you visit on our Website, time and date of visit, duration of visit, referral source, and device information (desktop, mobile device, tablet).
- Purpose and Legal Basis for Processing
We process your personal data for the following purposes:
Responding to your inquiries and communicating with you – legal basis: legitimate interest (Article 6(1)(f) GDPR) or performance of a contract (Article 6(1)(b) GDPR).
Analysis of Website usage and improvement of user experience – legal basis: consent (Article 6(1)(a) GDPR) which you provide via the cookie banner.
Ensuring the security and functionality of the Website – legal basis: legitimate interest (Article 6(1)(f) GDPR).
Fulfilling legal obligations – legal basis: legal obligation (Article 6(1)(c) GDPR).
- Sharing Data with Third Parties
We may share your personal data with the following categories of recipients:
Google LLC (Google Analytics and Google Tag Manager) – for the purpose of analysing traffic on the Website. Google processes data in accordance with its privacy policy available at policies.google.com/privacy.
Hosting service providers – for the purpose of technical maintenance of the Website.
Project partners within the Erasmus+ 3H project – exclusively when necessary for the implementation of project activities and in compliance with the principle of data minimisation.
We do not sell, rent or otherwise commercialise your personal data to third parties.
- International Data Transfers
By using Google Analytics services, your data may be transferred and processed outside the European Economic Area (EEA), including the United States of America. Google LLC participates in the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection in accordance with the European Commission’s adequacy decision.
- Data Retention Period
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected:
Data from contact forms is retained for up to 2 years from the last communication, unless legal obligations require longer retention.
Analytics data (Google Analytics) is retained in accordance with the data retention settings in Google Analytics, which are configured for a period of 14 months.
- Your Rights
In accordance with the GDPR, you have the following rights regarding your personal data:
Right of access – you have the right to obtain confirmation as to whether your personal data is being processed and access to that data.
Right to rectification – you have the right to request the rectification of inaccurate personal data.
Right to erasure – you have the right to request the erasure of your personal data in certain circumstances (“right to be forgotten”).
Right to restriction of processing – you have the right to request the restriction of processing of your data.
Right to data portability – you have the right to receive your data in a structured, commonly used and machine-readable format.
Right to object – you have the right to object to the processing of your data based on legitimate interest.
Right to withdraw consent – if processing is based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing prior to withdrawal.
To exercise any of the above rights, please contact us via email: eko.brezna.info@gmail.com. We will respond to your request within 30 days.
- Right to Lodge a Complaint with a Supervisory Authority
If you believe that the processing of your personal data is not in compliance with the GDPR, you have the right to lodge a complaint with a supervisory authority. In the Republic of Croatia, the competent supervisory authority is the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, www.azop.hr.
- Data Security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, destruction or disclosure. Our Website uses SSL/TLS encryption for secure data transmission.
- Protection of Minors’ Data
Our Website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without appropriate parental or guardian consent, we will take steps to delete that data.
- Changes to the Privacy Policy
We reserve the right to amend this Privacy Policy at any time. All amendments will be published on this page with an indicated effective date. We recommend regular review of this Policy.
- Contact
For any questions regarding this Privacy Policy or the processing of your personal data, please contact us at: eko.brezna.info@gmail.com or by post at: Eko Brezna Association, Mate Ujevića 18, 35000 Slavonski Brod, Croatia.
This Privacy Policy enters into force on 9 January 2026.