This policy applies from the date of its publication on the website.
1. Controller
Generator multidisciplinarnih koprodukcija, an association that operates Galerija Miroslav Kraljević, Šubićeva 29, 10000 Zagreb, Croatia, OIB 54082733015. Contact for data protection questions: info@g-mk.hr.
2. Data we process
Newsletter. Through the form on the Newsletter signup page (MC4WP plugin) we collect your email address and the mailing lists you choose. The data is stored with Mailchimp (Intuit Inc., USA), which acts as processor. Transfers to the USA are based on the EU-US Data Privacy Framework, under which Intuit is certified, and on standard contractual clauses. Every newsletter contains an unsubscribe link.
Email. If you write to info@g-mk.hr, we process your email address, name and the content of your message in order to reply.
Server logs. The hosting provider, ESBE studio, owner Vjeran Gusak (Slavonski Brod, Croatia), acting as processor, records technical data about visits: IP address, date and time, requested page and browser. This data is used for security and for anonymous visit statistics (Awstats or Webalizer type tools).
Cookies. The website does not set cookies, does not track visitors and uses no analytics. If this changes, this policy will be updated and your consent requested. The website has no comments, user registration or contact form.
Links to Facebook, Instagram and Vimeo are plain links. Data is passed to these services only when you open them, under their own privacy policies.
3. Legal basis
- Newsletter: consent (Art. 6(1)(a) GDPR), which you may withdraw at any time via the unsubscribe link or by writing to info@g-mk.hr.
- Replies to enquiries: legitimate interest (Art. 6(1)(f) GDPR).
- Server logs: legitimate interest in the secure and proper operation of the website (Art. 6(1)(f) GDPR).
4. Retention
- Newsletter: until you unsubscribe.
- Correspondence: as long as needed for the communication, at most 5 years.
- Server logs: at most 3 months.
5. Recipients
We do not sell or share data with third parties, except the recipients listed above (Mailchimp, ESBE studio) and where required by law.
6. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction of processing, objection, data portability and withdrawal of consent. Send requests to info@g-mk.hr. We reply within one month.
You have the right to lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
7. Changes
We may update this policy. The current version is always published on this page.
