Cookie Policy

This Cookie Policy explains how INSTITUT ZA UMJETNU INTELIGENCIJU, obrt za razvoj i primjenu umjetne inteligencije, owned by Patricija Topić (hereinafter: the “Institute”, “we” or “our”) uses cookies and similar technologies on the website institutzaui.hr.

This policy supplements our Privacy Policy and should be read together with it.

1. Legal framework

We govern the processing of personal data and the use of cookies in accordance with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation – GDPR)
• Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018)
• Directive 2002/58/EC (the ePrivacy Directive) and its amendments
• Electronic Communications Act (Official Gazette 76/2022, 14/2024)
• Consumer Protection Act (Official Gazette 19/2022)
• Guidelines of the European Data Protection Board (EDPB) 03/2022 on consent
• Guidelines of the Personal Data Protection Agency (AZOP)

2. What are cookies?

Cookies are small text files that a website stores on a user’s device (computer, tablet or smartphone) during a visit. They allow the website to recognise the device and remember certain data during the current visit or across multiple visits.

Alongside cookies, we also use similar technologies: local storage (localStorage), session storage (sessionStorage), and bot-protection tokens. In this policy we refer to all of these technologies collectively as “cookies”.

3. Legal basis for the use of cookies

We divide cookies into two groups according to the legal basis for processing:

• Functional cookies – set on the basis of legitimate interest (Article 6(1)(f) GDPR) because they are technically necessary for the website to operate. For these we do not request consent.
• Statistical cookies – set solely on the basis of your explicit, freely given, informed and specific consent (Article 6(1)(a) GDPR, in conjunction with Article 5(3) of the ePrivacy Directive).

You provide consent by clicking the “Accept” button in the cookie banner. Without your consent we do not activate any statistical or analytical cookie.

4. Which specific cookies we use

Note on cookie types: cookies that come from the domain institutzaui.hr (WordPress, Complianz) are considered first-party (our own). Cookies whose provider is Google or Cloudflare are considered third-party (external).

4.1. Functional cookies (no consent required)

4.2. Statistical cookies (consent required)

We use Google Analytics to understand how visitors use the website (which pages they visit, how long they stay, where they come from). The data collected is pseudonymised (IP addresses are anonymised before processing).

4.3. Trackers in newsletter emails

Although these are not classic HTTP cookies, in our newsletter messages we use:

• Open-tracking pixel – an invisible image that loads when the recipient opens the email; it gives us open statistics.
• Link click tracking – links in the newsletter pass through our system so that we can measure interest in the content.

Under Article 5(3) of the ePrivacy Directive, these trackers are treated in the same way as cookies. Legal basis: consent (GDPR Article 6(1)(a)) given upon subscribing to the newsletter, which also covers these trackers. You can withdraw your consent at any time by clicking “Unsubscribe” at the bottom of every email.

5. Transfers of data to third countries

Google Analytics processes data in the United States of America. Following the judgment of the Court of Justice of the European Union in the Schrems II case (C-311/18, 16 July 2020), the transfer of personal data to the USA requires additional safeguards.

Google LLC is certified under the EU-US Data Privacy Framework(which entered into force on 10 July 2023 by a decision of the European Commission), providing an adequate level of protection. If you withdraw your consent, Google Analytics will not be activated and no data will be transferred.

6. Your rights

In accordance with the GDPR (Articles 15–22), you have the following rights:

• Right of access – to request information about which of your data we process
• Right to rectification – to request the correction of inaccurate data or the completion of incomplete data
• Right to erasure (“right to be forgotten”) – to request the deletion of your data
• Right to restriction of processing – to request the temporary restriction of processing
• Right to data portability – to request the transfer of your data to another controller
• Right to object – to object to processing based on legitimate interest
• Right to withdraw consent – to withdraw previously given consent at any time, without any consequences (Article 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority – to lodge a complaint with the Personal Data Protection Agency

To exercise these rights, contact us at info@institutzaui.hr. You will receive a response within 30 days of us receiving your request.

7. Withdrawal of consent

You can withdraw your consent just as easily as you gave it. Use:

• The “Cookie Settings” link in the footer of every page
• Your browser settings to delete institutzaui.hr cookies
• Contact us by email at info@institutzaui.hr

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Managing cookies in your browser

In addition, every modern browser allows you to block or delete cookies. Instructions for the most common browsers:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Note: blocking functional cookies may cause some parts of the website to stop working correctly.

9. Data controller

INSTITUT ZA UMJETNU INTELIGENCIJU, obrt za razvoj i primjenu umjetne inteligencije, owned by Patricija Topić
Registered office: Ulica grada Vukovara 269D, 10000 Zagreb, Republic of Croatia
OIB: 79932246060
Email: info@institutzaui.hr
Phone: +385 99 4824 007

Data Protection Officer (DPO): not appointed (appointing a DPO is not a legal obligation for our activity under Article 37 GDPR).

10. Supervisory authorities

If you believe that our processing of your personal data breaches data protection regulations, you have the right to lodge a complaint with the competent supervisory authority:

Personal Data Protection Agency (AZOP)
Selska cesta 136, 10000 Zagreb
Phone: +385 1 4609 000
Email: azop@azop.hr
Web: azop.hr

For matters concerning electronic communications (ePrivacy):
Croatian Regulatory Authority for Network Industries (HAKOM)
Roberta Frangeša Mihanovića 9, 10110 Zagreb
Web: hakom.hr

For matters concerning consumer protection:
Ministry of Economy and Sustainable Development, Directorate for Trade and the Internal Market
Web: mingo.gov.hr

11. Changes to this policy

We reserve the right to amend this Cookie Policy in line with changes in regulations, the technologies used or business practices. Any change will take effect upon publication on this page with an updated “Last updated” date. We recommend reviewing this policy from time to time.