LEGAL

Privacy Policy

1. Controller 

The controller responsible for the processing of personal data through this website is:

For any questions relating to privacy or the processing of your personal data, please contact us at the email address above.

2. Personal data we collect

UTPM may process personal data when you visit our website, contact us, submit an inquiry or otherwise interact with us. This may include your name, company name, business position, email address, telephone number, message content and other information that you voluntarily provide.

When you access our website, certain technical information may also be processed automatically, such as IP address, browser type, device information, operating system, date and time of access, requested pages and technical log information.

Where relevant to our business activities, we may also process professional contact information obtained through business introductions, professional networks, publicly available company sources or direct business relationships.

3. Purposes and legal bases

We process personal data only where there is a valid legal basis.

Personal data submitted through the contact form, email, telephone or other direct communication may be processed in order to respond to your inquiry, assess a potential cooperation, prepare or perform a business relationship or take steps at your request before entering into a contract. The legal basis is Article 6(1)(b) GDPR.

Professional and business contact information may also be processed where necessary for legitimate business development, relationship management, partner communication and the operation of UTPM’s business. The legal basis is Article 6(1)(f) GDPR. UTPM’s legitimate interest is the development and maintenance of professional B2B relationships and the operation of its business.

Where processing is necessary to comply with accounting, tax, corporate or other statutory obligations, the legal basis is Article 6(1)(c) GDPR.

Technical information necessary for the security, stability and proper operation of the website may be processed on the basis of UTPM’s legitimate interest under Article 6(1)(f) GDPR.

Non-essential analytics, functional or marketing technologies, if used, will only be activated where legally required after obtaining your consent pursuant to Article 6(1)(a) GDPR. Further information is provided in our Cookie Policy.

4. Contact form

When you contact UTPM through the website, we process the information you provide solely for handling your inquiry and any subsequent business communication.

Providing mandatory information is necessary so that we can respond to your request. Optional information does not need to be provided. Submitting an inquiry does not subscribe you to marketing communications.

5. Recipients and service providers

Personal data may be made available to service providers supporting UTPM where this is necessary for the relevant purpose. These may include website hosting and maintenance providers, IT and email service providers, accountants, tax advisers, legal advisers and other professional service providers.

Such recipients may process information only within the scope required for their services and subject to applicable confidentiality and data-protection requirements. Personal data may also be disclosed to public authorities where UTPM is legally required to do so.

UTPM does not sell personal data.

6. International transfers

Where a service provider processes personal data outside the European Economic Area, UTPM will ensure that an appropriate legal mechanism is in place in accordance with the GDPR, such as an adequacy decision of the European Commission, Standard Contractual Clauses or another legally recognised safeguard.

7. Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected.

General business inquiries that do not result in a business relationship will normally be deleted or anonymised within 24 months after the last substantive communication, unless there is a legitimate reason for longer retention.

Where a business relationship is established, relevant correspondence and documentation may be retained for the duration of that relationship and thereafter for applicable statutory retention periods and limitation periods. Accounting, tax and other legally required records are retained for the period prescribed by applicable law. Technical security logs are retained only for the period reasonably required for website security and troubleshooting.

8. Your rights

Under the GDPR, depending on the circumstances, you may have the right to request access to your personal data, rectification of inaccurate data, erasure, restriction of processing, data portability and to object to processing based on legitimate interests.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Requests may be sent to ng@utpm.hr. UTPM will respond in accordance with the timelines established by the GDPR, normally within one month.

You also have the right to lodge a complaint with the Croatian supervisory authority:

Agencija za zaštitu osobnih podataka — AZOP Selska cesta 136 10000 Zagreb, Croatia Email: azop@azop.hr

9. Automated decision-making

UTPM does not use personal data collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects.

10. Data security

UTPM applies appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. However, no transmission of information over the internet can be guaranteed to be completely secure.

11. External websites

The website may contain links to websites operated by third parties, including partners, mandates, ventures or social media platforms. UTPM is not responsible for the privacy practices or content of third-party websites. Visitors should review the privacy information provided by those third parties.

12. Changes to this Privacy Policy

UTPM may update this Privacy Policy where necessary to reflect changes in its website, services, legal obligations or processing activities. The current version will always be published on this website together with the date of the latest update.