Last updated: January 28, 2026
The Centre for Advanced Academic Studies (CAAS), University of Zagreb, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the EU General Data Protection Regulation (GDPR) and Croatian data protection laws.
The data controller responsible for your personal data is:
Centre for Advanced Academic Studies (CAAS)
University of Zagreb
Don Frana Bulića 4
20000 Dubrovnik, Croatia
We collect and process the following types of personal data:
Note: We only use photos, videos, or audio recordings with your explicit consent via our Media Release Form.
We process your personal data for the following purposes:
Managing applications, enrollments, and program delivery
Legal basis: Contract performance and legitimate interest
Responding to inquiries and providing program information
Legal basis: Legitimate interest and consent
Marketing CAAS programs through photos, videos, and testimonials
Legal basis: Explicit consent only (via Media Release Form)
Analyzing website usage to enhance user experience
Legal basis: Legitimate interest and cookie consent
Meeting legal obligations and maintaining records
Legal basis: Legal obligation
Emergency contacts and ensuring participant welfare
Legal basis: Legitimate interest and vital interests
Under GDPR Article 6, we process your personal data based on:
We do not sell your personal data. We may share your information with:
All third-party processors are bound by GDPR-compliant data processing agreements.
| Data Type | Retention Period |
|---|---|
| Application and program records | 10 years after program completion |
| Financial records | 11 years (legal requirement) |
| Media consent forms | Duration of consent + 10 years |
| Website analytics | 26 months |
| Email correspondence | 3 years after last contact |
| Marketing photos/videos (with consent) | Until consent is withdrawn |
You have the following rights regarding your personal data:
Request a copy of your personal data we hold
Correct inaccurate or incomplete data
Request deletion of your personal data ("right to be forgotten")
Limit how we use your data
Receive your data in a machine-readable format
Object to processing based on legitimate interest
Withdraw consent for photos/videos at any time
File a complaint with the supervisory authority
To exercise any of these rights, please contact us at:
We will respond to your request within 30 days as required by GDPR.
CAAS may take photographs and videos during programs, events, and activities. We use these materials for:
⚠️ Important:
We only use photos and videos with your explicit written consent via our Media Release Form. You can choose to:
How to withdraw media consent: Email us at office@caas.unizg.hr with "Media Consent Withdrawal" in the subject line. We will remove your images/videos within 30 days.
Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device.
Necessary for website functionality (e.g., session management, security)
Help us understand how visitors use our website (Google Analytics)
Remember your preferences and settings
You can manage cookie preferences through your browser settings or by contacting us.
We implement appropriate technical and organizational measures to protect your personal data:
Data transmitted via secure SSL/TLS protocols
Data stored on secure servers with access controls
Only authorized personnel can access personal data
Data backed up regularly to prevent loss
Your personal data is primarily stored within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses, adequacy decisions).
CAAS programs are generally for individuals aged 18 and older. If we collect data from participants under 18, we require parental or guardian consent in accordance with GDPR requirements.
If you believe your data protection rights have been violated, you have the right to lodge a complaint with:
Croatian Personal Data Protection Agency (AZOP)
Agencija za zaštitu osobnih podataka
Martićeva 14
10000 Zagreb, Croatia
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
Centre for Advanced Academic Studies
Don Frana Bulića 4
20000 Dubrovnik, Croatia