This privacy policy explains which personal data the website regenesis.hr collects, the purposes for which it processes them, and which rights you have in relation to those data. The policy is aligned with the General Data Protection Regulation (GDPR) and the Act on the Implementation of the General Data Protection Regulation.
1. Data controller
Udruga darovitih informatičara ReGenesis
Registered office: Ul. Hermana Bužana 7
OIB: 99313488904
E-mail for data protection questions: info@regenesis.hr
2. Which data we collect and why
Comments
When you leave a comment, we collect the data you enter in the comment form — your name and e-mail address (required) and, if you wish, a website address. We also record your IP address and browser data (user agent), which are used to detect unwanted content.
Avatars (Gravatar)
Avatars are displayed with comments through the Gravatar service. An anonymised string of characters (a hash) is created from your e-mail address and sent to the Gravatar service (Automattic Inc., USA) in order to check whether you use that service. Your data are thereby transferred outside the European Economic Area. The service’s privacy policy is available at automattic.com/privacy.
Media files
If you upload images to the website, avoid images with embedded location data (EXIF GPS), because visitors can extract those data from the published images.
Cookies
If you leave a comment, you can choose to have your name, e-mail address and website address saved in cookies to make commenting easier in future. Those cookies last for one year. Cookies required for the administration interface to work are set for logged-in editors.
This website does not use cookies for analytics, visitor tracking or advertising, nor does it load third-party scripts.
Embedded content from other websites
Posts may contain embedded content (for example videos, or posts from other websites). Such content behaves in the same way as if you had visited that other website, which may collect data about you, use cookies and track your interaction with that content.
Server logs
The web server automatically records the IP address, the date and time of access, the requested address, the response status code and browser data. These logs are used solely to ensure the operation and security of the website, including the automatic blocking of addresses from which attacks are carried out. The logs are kept for 14 days, after which they are deleted automatically.
3. Legal basis for processing
- Consent (Article 6(1)(a) of the GDPR) — for publishing comments and saving comment cookies.
- Legitimate interest (Article 6(1)(f) of the GDPR) — for website security, preventing misuse and keeping server logs.
4. Retention periods
We keep comments and their metadata indefinitely, so that we can recognise and approve future comments without checking them again. We keep server logs for 14 days. On request we delete personal data before the periods stated above, unless we are obliged to retain them because of a legal obligation.
5. Who we share data with
We do not sell personal data and we do not share them for marketing purposes. Data are transferred only:
- to the Gravatar service (Automattic Inc.) — solely an anonymised hash of the commenter’s e-mail address;
- to the website hosting provider regenesis.regenesis.hr, which processes data on our instructions.
6. Your rights
You have the right of access to your data, rectification of inaccurate data, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest. If you have left a comment, you may request the export or erasure of all data we hold about you.
Send a request to info@regenesis.hr. We reply to a request within one month at the latest.
If you believe that we are processing your data contrary to the regulations, you have the right to lodge a complaint with the supervisory authority — the Croatian Personal Data Protection Agency (AZOP), azop.hr.
7. Data security
All traffic between your browser and this website is protected by HTTPS encryption (TLS). Access to the administration interface is restricted and protected by measures to prevent unauthorised login attempts.
8. Changes to this policy
We may amend this policy from time to time. Date of the last amendment: 5 September 2026.