Privacy Policy

Privacy Policy

Last updated: 26 October 2026

This Privacy Policy explains how we collect, use and protect your personal data when you visit crowdfundingacademy.eu (the “Website”) or take part in our workshops, academies, conventions and other activities. We process personal data in line with the EU General Data Protection Regulation (GDPR) and applicable Croatian law.

1. Who we are (Data Controller)

The controller of your personal data is:

For any question about this policy or your data, contact us at the email above.

2. What data we collect

Depending on how you interact with us, we may collect:

We do not intentionally collect special categories of data (such as health data) unless strictly necessary and with an appropriate legal basis.

3. How and why we use your data (purposes and legal bases)

PurposeLegal basis (GDPR Art. 6)
Responding to your enquiries and messagesLegitimate interest / taking steps at your request
Processing applications and running workshops, academies and eventsPerformance of a contract / taking steps at your request
Sending updates or newsletters (where you signed up)Consent
Operating, securing and improving the Website and analyticsLegitimate interest and, for non-essential cookies, consent
Meeting legal, accounting and reporting obligations (including EU-funded project reporting)Legal obligation / legitimate interest

4. Cookies and analytics

The Website uses cookies and similar technologies, including analytics and embedded content (for example YouTube videos). Non-essential cookies are only set with your consent. For full details, see our Cookie Policy.

5. Who we share data with

We do not sell your personal data. We may share it with:

Some providers may process data outside the EU/EEA. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. How long we keep your data

We keep personal data only as long as necessary for the purposes above, or as required by law (for example accounting records). When data is no longer needed, we delete or anonymise it.

7. Your rights

Under the GDPR you have the right to: access your data; have it corrected or erased; restrict or object to processing; data portability; and withdraw consent at any time (without affecting prior processing). To exercise any right, contact us at info@brodoto.com.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), azop.hr.

8. Children’s data

Some of our activities involve children and young people. Where we process a child’s personal data, we do so with the consent of a parent or guardian and in line with our Child Protection Policy. We keep such data to the minimum necessary.

9. Security

We apply appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, but we work to protect your data at all times.

10. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date above shows the latest version. Significant changes will be communicated on the Website where appropriate.