Privacy and Cookie Policy

Privacy and Cookie Policy

Last updated: 25.06.2026.

This policy explains which personal data we collect through the website
3dtvornica.hr, for what purposes, on what legal basis, how long we keep it,
and what rights you have in relation to your data.

1. Data controller

The controller of personal data is:

Crisis Innovation Lab d.o.o.
OIB (Croatian tax number): 21346389624
Address: Vijenac Ivana Meštrovića 44, 31000 Osijek, Croatia
E-mail for privacy enquiries: [email protected]

We have not appointed a Data Protection Officer (DPO), as this is not a legal requirement
for the scope of our processing. For any privacy questions, please contact the e-mail address
above.

2. What data we collect

On the website we collect data solely through cookies and similar technologies, and only to
the extent you have approved with your consent:

  • Necessary data - data required for the proper operation and security of
    the website and to remember your consent decision.
  • Statistical data - aggregated data about visits (which pages are viewed,
    visit duration, approximate location, device type). Processed only with your consent.
  • Marketing data - data about interaction with our ads and your visit to
    the website in order to measure advertising performance. Processed only with your consent.

3. Purposes of processing and legal basis

Category Purpose Legal basis
Necessary Basic operation and security of the website, remembering the consent decision Legitimate interest / necessary to provide the service (Art. 6(1)(f) GDPR)
Statistics Measuring visits and improving content Consent (Art. 6(1)(a) GDPR)
Marketing Measuring ad performance and showing more relevant ads Consent (Art. 6(1)(a) GDPR)

4. Services and providers we use

  • WordPress - the website's content management system (session,
    security). Necessary.
  • Real Cookie Banner - remembering the status of your consent. Necessary.
  • Google Analytics 4 - provider: Google Ireland Limited.
    Measurement ID: G-3Y7LP55PV6. Statistics, only with consent.
  • Google Ads / Google Tag - provider: Google Ireland Limited.
    Marketing, only with consent.

5. International data transfers

By using Google Analytics 4 and Google Ads, data may be transferred and processed outside
the European Economic Area, including in the United States. The transfer is protected under the
EU-US Data Privacy Framework, in which Google is certified, and additionally
by the Standard Contractual Clauses (SCC) approved by the European Commission. The transfer
takes place only if you have given consent for the corresponding cookie category.

6. Data retention period

  • Consent (record of your decision) - kept for up to 12 months, after
    which we ask for your consent again.
  • Google Analytics 4 - retention of user and event data: 14 months.
  • Google Ads - conversion data is kept in accordance with Google's
    policies and the campaign settings.

Necessary cookies are deleted at the end of the session or within a short period required
for their purpose.

7. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the following rights:

  • Access - to find out whether and which of your data we process.
  • Rectification - to request correction of inaccurate data.
  • Erasure ("right to be forgotten") - to request deletion of data.
  • Restriction of processing - to request restriction in certain cases.
  • Objection - to object to the processing.
  • Portability - to request transfer of the data in a machine-readable format.
  • Withdrawal of consent - to withdraw a given consent at any time (see section 9).

To exercise your rights, contact [email protected].
You also have the right to lodge a complaint with the supervisory authority -
the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136,
10000 Zagreb, azop.hr.

8. Cookies

On your first visit we show you a consent banner on which you can separately allow or reject
each cookie category. Necessary cookies are always active because they are required for the
website to work. Statistics and Marketing are disabled by default until you give consent.

9. Withdrawal of consent

You can change or withdraw your consent at any time without consequences by clicking the
cookie icon (bottom left of the page) or via this page. Withdrawing consent does not affect the
lawfulness of processing based on consent before its withdrawal.

10. Changes to this policy

We may update this policy from time to time. The date of the last update is shown at the top
of the page. We will announce significant changes in an appropriate manner.