1. Data controller
The controller of personal data is EXOSOME d.o.o., OIB 44214617041, with its registered office at Šoltanska 16, 21000 Split (hereinafter “we” or “the organiser”).
For any questions about data protection, you can contact us at info@split-cadaver-course.com.
2. What data we collect
- Application form: first and last name, OIB, profession, email address, phone (optional), chosen package and message (optional).
- Email enquiries: the information you provide in your message.
- Technical data: IP address, browser type and time of access, recorded in server logs for security and the proper operation of the site.
3. Purposes and legal bases
- Processing your application and communicating about dates, price and payment — taking steps at your request before entering into a contract and performing the contract (Art. 6(1)(b) of the General Data Protection Regulation, GDPR).
- OIB (Croatian personal identification number) — collected solely to verify that the applicant is a physician or dentist, which is a prerequisite for taking part in the course.
- Consent on the application form — given by ticking the box before submitting (Art. 6(1)(a) GDPR). You can withdraw your consent at any time.
- Information about future courses — only with your consent.
- Accounting and tax obligations — legal obligation (Art. 6(1)(c) GDPR).
- Security and technical operation of the site — our legitimate interest (Art. 6(1)(f) GDPR).
4. Who has access to the data
We do not sell data. Only people and service providers we need for this purpose can access it, and only to the extent necessary:
- website hosting and email provider: Hostinger
- institutions involved in organising the course, only where necessary
- the Croatian Medical Chamber, only if attendance is reported for CME credits
5. Transfers outside the EEA
We do not transfer data outside the European Economic Area. If this becomes necessary, we will only do so with appropriate safeguards under the GDPR.
6. How long we keep data
- application data: 2 years after the course
- accounting records: periods required by law
- server logs: according to the hosting provider's settings, usually short
After that, we delete or anonymise the data.
7. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing. Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of processing before withdrawal.
Send your request to info@split-cadaver-course.com. We reply without undue delay and within one month at the latest.
If you believe the processing breaches the regulations, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
8. Data security
We apply reasonable technical and organisational safeguards, including an encrypted (HTTPS) connection and restricted access to data. No data transfer over the internet can be guaranteed to be completely secure.
9. Cookies
Information about cookies can be found in the Cookie policy.
10. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with the date of the last update.