Cookie Policy

This Cookie Policy explains how INSTITUT ZA UMJETNU INTELIGENCIJU, obrt za razvoj i primjenu umjetne inteligencije, owned by Patricija Topić (hereinafter: the “Institute”, “we” or “our”) uses cookies and similar technologies on the website institutzaui.hr.

This policy supplements our Privacy Policy and should be read together with it.

1. Legal framework

We govern the processing of personal data and the use of cookies in accordance with the following regulations:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (General Data Protection Regulation – GDPR)
• Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018)
• Directive 2002/58/EC (the ePrivacy Directive) and its amendments
• Electronic Communications Act (Official Gazette 76/2022, 14/2024)
• Consumer Protection Act (Official Gazette 19/2022)
• Guidelines of the European Data Protection Board (EDPB) 03/2022 on consent
• Guidelines of the Personal Data Protection Agency (AZOP)

2. What are cookies?

Cookies are small text files that a website stores on a user’s device (computer, tablet or smartphone) during a visit. They allow the website to recognise the device and remember certain data during the current visit or across multiple visits.

Alongside cookies, we also use similar technologies: local storage (localStorage), session storage (sessionStorage), and bot-protection tokens. In this policy we refer to all of these technologies collectively as “cookies”.

3. Legal basis for the use of cookies

We divide cookies into three groups according to the legal basis for processing:

• Functional cookies – set on the basis of legitimate interest (Article 6(1)(f) GDPR) because they are technically necessary for the website to operate. For these we do not request consent.
• Statistical cookies – set solely on the basis of your explicit, freely given, informed and specific consent (Article 6(1)(a) GDPR, in conjunction with Article 5(3) of the ePrivacy Directive).
• Marketing cookies – set solely on the basis of your consent (the same legal basis as for statistical cookies). They are used to measure the performance of our advertising on Facebook and Instagram and to build advertising audiences.

You provide consent by clicking the “Accept” button in the cookie banner, or per individual category through the settings of the same banner. Without your consent we do not activate any statistical or marketing cookie.

Alongside the three categories above, the banner also displays a “Preferences” category. At present no service or cookie is attached to it.

4. Which specific cookies we use

Note on cookie types: cookies that come from the domain institutzaui.hr (WordPress, Complianz) are considered first-party (our own). Cookies whose providers are Google, Meta or Cloudflare are considered third-party (external).

4.1. Functional cookies (no consent required)

4.2. Statistical cookies (consent required)

We use Google Analytics to understand how visitors use the website (which pages they visit, how long they stay, where they come from). The data collected is pseudonymised (IP addresses are anonymised before processing).

4.3. Marketing cookies (consent required)

On this site we use the Meta Pixel (ID 1091165709304543), Meta’s measurement code. We use it to measure how many visits and enquiries came from our advertising on Facebook and Instagram, and to build advertising audiences. The Pixel records which pages you opened and whether you submitted an enquiry through the contact form.

The Meta Pixel is not loaded until you give consent for the marketing category. If you do not give consent, or you withdraw it, the code is not executed and no data is sent to Meta.

5. Transfers of data to third countries

Google Analytics processes data in the United States of America. Following the judgment of the Court of Justice of the European Union in the Schrems II case (C-311/18, 16 July 2020), the transfer of personal data to the USA requires additional safeguards.

Google LLC is certified under the EU-US Data Privacy Framework (which entered into force on 10 July 2023 by a decision of the European Commission), providing an adequate level of protection. If you withdraw your consent, Google Analytics will not be activated and no data will be transferred.

Meta Pixel data is processed by Meta Platforms Ireland Limited (Ireland), with onward transfer to Meta Platforms, Inc. in the United States of America. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework. For the collection and transfer of data through the Pixel, the Institute and Meta Platforms Ireland Limited act as joint controllers within the meaning of Article 26 GDPR, in line with the judgment of the Court of Justice of the European Union in Wirtschaftsakademie (C-210/16). If you do not give consent for the marketing category, the Pixel is not loaded and no data is sent to Meta.

6. Your rights

In accordance with the GDPR (Articles 15–22), you have the following rights:

• Right of access – to request information about which of your data we process
• Right to rectification – to request the correction of inaccurate data or the completion of incomplete data
• Right to erasure (“right to be forgotten”) – to request the deletion of your data
• Right to restriction of processing – to request the temporary restriction of processing
• Right to data portability – to request the transfer of your data to another controller
• Right to object – to object to processing based on legitimate interest
• Right to withdraw consent – to withdraw previously given consent at any time, without any consequences (Article 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority – to lodge a complaint with the Personal Data Protection Agency

To exercise these rights, contact us at info@institutzaui.hr. You will receive a response within 30 days of us receiving your request.

7. Withdrawal of consent

You can withdraw your consent just as easily as you gave it. Use:

• The “Cookie Settings” link in the footer of every page
• Your browser settings to delete institutzaui.hr cookies
• Contact us by email at info@institutzaui.hr

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

8. Managing cookies in your browser

In addition, every modern browser allows you to block or delete cookies. Instructions for the most common browsers:

• Google Chrome
• Mozilla Firefox
• Apple Safari
• Microsoft Edge

Note: blocking functional cookies may cause some parts of the website to stop working correctly.

9. Data controller

INSTITUT ZA UMJETNU INTELIGENCIJU, obrt za razvoj i primjenu umjetne inteligencije, owned by Patricija Topić
Registered office: Ulica grada Vukovara 269D, 10000 Zagreb, Republic of Croatia
OIB: 79932246060
Email: info@institutzaui.hr
Phone: +385 99 4824 007

Data Protection Officer (DPO): not appointed (appointing a DPO is not a legal obligation for our activity under Article 37 GDPR).

10. Supervisory authorities

If you believe that our processing of your personal data breaches data protection regulations, you have the right to lodge a complaint with the competent supervisory authority:

Personal Data Protection Agency (AZOP)
Selska cesta 136, 10000 Zagreb
Phone: +385 1 4609 000
Email: azop@azop.hr
Web: azop.hr

For matters concerning electronic communications (ePrivacy):
Croatian Regulatory Authority for Network Industries (HAKOM)
Roberta Frangeša Mihanovića 9, 10110 Zagreb
Web: hakom.hr

For matters concerning consumer protection:
Ministry of Economy and Sustainable Development, Directorate for Trade and the Internal Market
Web: mingo.gov.hr

11. Changes to this policy

We reserve the right to amend this Cookie Policy in line with changes in regulations, the technologies used or business practices. Any change will take effect upon publication on this page with an updated “Last updated” date. We recommend reviewing this policy from time to time.