Privacy policy

The protection of privacy and personal data is a fundamental human right. It is our duty to ensure the security of your personal data and to collect and process it only when this is necessary and justified. Personal data is a great responsibility and must be collected and processed with the utmost care. The Association undertakes to apply all legal provisions in order to ensure a high level of data protection.

Our rules on the collection and processing of personal data include the following principles:

• We do not collect more data than necessary.
• We use personal data solely for the purposes for which it was collected.
• We do not store personal data for longer than necessary.
• We do not sell, rent or share your personal data with third parties without your explicit consent.
• We process personal data securely and use appropriate protective measures.
• We do not use automated decision-making or profiling based on personal data.

Association of Parents of Children with Disabilities Vukovar Butterflies, Velebitska 16b, 32010 Vukovar, Croatia, OIB 04004139565 (the Association), acts as the data controller in relation to the personal data of all persons whose personal data it processes; it determines the purposes and means of processing personal data and ensures all security measures for personal data.

The Association collects and processes the personal data of members, service users, parents, guardians, employees, volunteers, donors, external associates and other participants in accordance with applicable laws and regulations, including the Associations Act, the Act on the Implementation of the General Data Protection Regulation and other relevant legal acts. The purpose of collecting personal data is primarily to provide support to children with developmental disabilities and their families and to ensure the proper functioning of the Association.

The data collected includes:

• Data on members of the Association, for keeping membership records.
• Basic data on service users, including first name, surname, address, contact details (telephone, email), date of birth, data on education and employment and other relevant information.
• Data on employees, external associates and volunteers needed to manage contractual relationships, organise activities and fulfil legal obligations.
• Data on donors, including name, contact information and donation amounts, for the purpose of keeping financial records and reporting.
• Photographs and video recordings made during the Association’s events and activities, with the consent of participants, for the purpose of promoting the Association’s work.

Data is collected on the basis of legal obligations, the legitimate interests of the Association or with your explicit consent, where required.

We collect and process personal data for the following purposes:

• Keeping records of members of the Association, service users, employees and volunteers.
• Organising and carrying out therapies, workshops, support programmes and other activities for children with developmental disabilities.
• Taking part in projects funded by the European Union and other donors.
• Processing data for the Association’s financial operations and legal obligations.
• Communicating with members, service users, volunteers, donors and associates by email, telephone or other means.
• Promoting the Association’s activities through social networks, websites and other media channels (with the consent of participants).

Personal data of children and service users of the Association, including photographs, audio and video recordings, may be published on the Association’s official pages or social networks only with the prior consent of parents or guardians, or on the basis of the legitimate interest of the Association.

All data collected by the Association is processed in accordance with privacy rules and legal requirements and is kept for as long as necessary to fulfil the purpose for which it was collected, or in accordance with statutory deadlines.

The Association collects and processes the personal data of donors in order to keep records of donations, fulfil legal obligations and ensure the transparency of its financial operations. The data we collect from donors includes:

• First name and surname
• Contact information (address, email, telephone number)
• Donation amount
• Bank details (account number, transaction details) in order to process the payment and issue confirmations

This data is processed on the basis of legal obligations, the legitimate interest of the Association or the explicit consent of the donor. All financial data is stored in accordance with applicable data protection laws and is used solely for tracking donations and issuing the appropriate reports to donors, financial institutions and competent authorities.

Donors’ personal data is kept for as long as necessary to fulfil the purpose for which it was collected, or in accordance with applicable statutory deadlines.

The form on the Contact page delivers the data you enter (name and surname, email, telephone and the content of the message) to us by email. To deliver the message we use the Resend service (Resend, Inc., USA), which processes this data on our behalf as a data processor. We use the data solely to reply to your enquiry.

Cookies are small text files that a website stores in your browser. This website does not use advertising cookies. We set cookies for visit statistics only if you explicitly agree in the notice that appears on your first visit; without consent we do not load any tracking scripts.

Visit statistics (Google Analytics). With your consent we use the Google Analytics 4 service (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to learn how many people visit the website, which pages they read, which websites they come from and how many enquiries arrive through the form. This records data about your device and browser, your approximate location (city, country) and how you use the website; Google Analytics 4 does not store IP addresses. The _ga and _ga_* cookies are kept for up to two years, and data in Google Analytics is deleted after 14 months. We do not use the data for advertising and we have switched off sharing it with Google for other purposes. Google may transfer data to the USA on the basis of the EU-U.S. Data Privacy Framework and standard contractual clauses. The legal basis for processing is your consent (Article 6(1)(a) GDPR).

You can withdraw your consent at any time using the “Cookie settings” link in the footer; the Google Analytics cookies are then deleted from your browser.

Your cookie choice and your accessibility tool settings are stored only in your browser (local storage) and are not sent anywhere.

Links to our profiles on Facebook, Instagram and YouTube lead to those services, which process data according to their own privacy rules. The “Translate this article” button on news posts opens Google Translate, which processes data according to Google’s privacy rules.

As a person whose personal data we process, you have the following rights:

• Right of access: you have the right to request information about which data we collect and how we process it.
• Right to rectification: if you believe that your personal data is inaccurate or incomplete, you can request its correction.
• Right to erasure: in certain circumstances you have the right to request the erasure of your data.
• Right to object: you have the right to object to the way we use your personal data, especially if we process it for direct marketing purposes.
• Right to restriction of processing: you can request the restriction of the processing of your data in specific situations.
• Right to data portability: where applicable, you have the right to request the transfer of your data in a machine-readable format.

If you wish to exercise any of your rights, please contact us by email or by post at the address given in the contact details.

You have the right to lodge a complaint with the competent data protection authority at any time. In the Republic of Croatia this is the Croatian Personal Data Protection Agency (AZOP):

We apply appropriate technical and organisational measures to protect your personal data from unauthorised access, misuse, loss or destruction. Our employees, volunteers and external associates are obliged to observe strict confidentiality measures with regard to the personal data they come into contact with.

We share personal data with third parties only when this is necessary to fulfil legal obligations or when we engage external associates who help us carry out our activities. All our external partners are obliged to apply high data protection standards.

We reserve the right to update this Privacy Policy periodically in order to comply with changes in legislation or in the ways data is processed. All updates will be published on this page. Notwithstanding these changes, your rights guaranteed by this Privacy Policy or by the relevant legal framework will not be restricted. If there are changes that could affect your rights, we will inform you in good time in an appropriate and transparent manner.

For any questions regarding the processing of personal data, you can contact us at:

• Email: info@vukovarski-leptirici.hr
• Telephone: +385 91 910 5880
• Address: Velebitska 16b, 32010 Vukovar, Croatia