Loading…
Version 2026-08, effective August 1, 2026
This Privacy Policy explains what personal data we collect through this website, the purposes for which we use it, who we share it with, and what rights you have as a data subject under the General Data Protection Regulation (GDPR) and applicable Croatian data protection law.
The controller responsible for personal data collected through this website is:
Depending on which form you fill out, we collect the following categories of personal data:
We process your personal data on the following legal bases: taking steps at your request prior to entering into, or to perform, a contract (processing inquiries and enrollments); your consent (e.g. accepting analytics cookies); and our legitimate interest in protecting the website against abuse, spam, and automated (bot) submissions. Birthday photos are delivered to parents to perform the birthday contract. Photos from events and camps are published on this website only with the consent of a parent or guardian (given at registration or in the camp contract), which you can withdraw at any time.
We use the information collected solely to: respond to inquiries submitted through the contact form, process and confirm program enrollments, communicate with you regarding your request or booking, and, with your consent, understand website usage through anonymized analytics.
This website uses cookies and browser local storage for the following purposes:
| Name | Purpose | Duration | Provider |
|---|---|---|---|
| NEXT_LOCALE | Remembers your selected website language (HR/EN) | 1 year | This website |
| theme (local storage) | Remembers your selected light/dark appearance | Until browser data is cleared | This website |
| cookie-consent (local storage) | Remembers your cookie consent choice | Until browser data is cleared | This website |
| Eduqaonica.Auth.Identity | Your account sign-in session (sign-in page, auth.eduqaonica.com) | Until you close the browser, or up to 14 days if you choose “Remember me” | Eduqaonica (auth.eduqaonica.com) |
| Eduqaonica.Auth.External | Temporary state of a sign-in with Google | Up to 10 minutes | Eduqaonica (auth.eduqaonica.com) |
| Eduqaonica.MfaChallenge | Confirms the second sign-in step (MFA code) | Up to 10 minutes | Eduqaonica (auth.eduqaonica.com) |
| .AspNetCore.Antiforgery.*, .AspNetCore.Mvc.CookieTempDataProvider | Protects the sign-in and registration forms against abuse and shows error messages | Until you close the browser | Eduqaonica (auth.eduqaonica.com) |
| .AspNetCore.Culture | Remembers your selected language on the sign-in page (HR/EN) | 1 year | Eduqaonica (auth.eduqaonica.com) |
| theme (local storage, auth.eduqaonica.com) | Remembers your selected light/dark appearance on the sign-in page | Until browser data is cleared | Eduqaonica (auth.eduqaonica.com) |
| _ga, _ga_* | Anonymized visitor analytics, only with your consent | Up to 2 years | Google LLC (Google Analytics) |
| cf_clearance and similar | Verifies you are not an automated bot when submitting the contact form | Up to 30 days | Cloudflare, Inc. (Turnstile) |
NEXT_LOCALE, theme and cookie-consent are necessary for the website's basic functioning and do not require consent. The same applies to the cookies and local storage of the sign-in page (auth.eduqaonica.com): they are used for signing in, form security and remembering your language and appearance choice. Google Analytics cookies are only set if you accept cookies through our consent banner; you can change your choice by clearing your browser's local storage. The map of our location in the page footer is loaded from Google (Google Maps) when the page opens; Google may set its own cookies in the process, and you can read more in Google's privacy policy (policies.google.com/privacy).
To operate this website, we use the following service providers who process certain data on our behalf and according to our instructions:
We do not sell or rent your personal data to third parties for marketing purposes.
Some of the service providers listed above (e.g. Google, Cloudflare) may process data on servers located outside the European Economic Area (EEA), for example in the United States. In such cases, these providers rely on appropriate safeguards (such as the European Commission's Standard Contractual Clauses) to ensure an adequate level of protection for your data.
We retain personal data only for as long as necessary to fulfill the purpose for which it was collected (e.g. handling an inquiry or the duration of a program enrollment), or in accordance with any applicable legal retention obligations, after which it is deleted or anonymized. Birthday photos are deleted automatically 12 months after the birthday, and we email the parent 30 days earlier so they can download them. A gallery sharing link stops working at the latest when the gallery is deleted, or earlier if the parent revokes it or it expires. Photos from events and camps are removed on request, and we review them at least once a year and remove those no longer needed.
We take reasonable technical and organizational measures to protect your data, including encrypted data transmission (HTTPS), restricted access to data, and working only with trusted service providers, in order to prevent unauthorized access, loss or misuse of your data.
Our website is intended for parents and legal guardians who enroll children in our programs on their behalf. Personal data about children (e.g. name and selected program) is collected only from a parent or guardian during enrollment, never directly from the child, and is used solely to organize our programs and communicate with parents. We do not knowingly collect personal data directly from children through this website. Birthday photos of children are visible only to the parents and guardians of the child's family, and the parent decides whether to share the gallery by link. Photos of children in the public galleries of events and camps are published only with the consent of a parent or guardian and are removed on request ([email protected]).
Under the GDPR, you have the right at any time to:
To exercise any of these rights, please contact us at [email protected].
We may update this Privacy Policy from time to time to reflect changes in our business or legal obligations. The date of the last update is shown at the top of this page; we recommend reviewing it periodically.
If you have questions about this Privacy Policy or would like to exercise your rights regarding your personal data, please contact us at [email protected] or using the information in the Contact section of this website.