Privacy policy on web site

General information

This Privacy Policy (hereinafter: Policy) describes what personal data we collect, how they are processed and for which purposes they are used, as well as your rights associated with your data.

HCR-CTRO d.o.o, Sortina 1d, 10020 Zagreb, VAT 08884831822 processes personal data of its clients and visitors of the website in line with applicable regulations governing the protection of personal data (General Data Protection Regulation 2016/679).

The person in charge of data control is the information officer.

We respect your privacy and process your personal data fairly and lawfully, solely according to a valid lawful basis, or according to your consent.

Ways and purposes of personal data processing


Through the Questionnaire we collect data on your satisfaction with our services, as well as suggestions for improvement. The Questionnaire is anonymous, your e-mail address is not required, so we do not collect any personal data through the Questionnaire.

Symposium Registration Form

Through the Registration Form we collect data on physical and legal persons attending the Symposium for the purpose of registering the participants, sharing the Symposium Program and other related information. The data are stored for a year and are not available to third persons.


If you contact us with an inquiry, we will process the given data only to provide a requested information. The Information officer is responsible for replying to your inquiries.

Personal data recipients

HCR-CTRO will share your personal data with other recipients solely following your explicit consent or on the basis of legal obligation, i.e. a justified requirement made by an authorized public body (e.g. courts).

Personal data protection

Personal data collected are processed with mandatory application of appropriate legal, technical, and organizational protection measures to prevent any unauthorized data processing. Access to your personal data is limited to those employees who need them in order to provide our services. We continually educate our employees about the importance of data confidentiality and protection of privacy. We collect only the data necessary for the processing in question and we do not keep them longer than necessary, i.e. determined by legislation.

Rights of our clients

Our clients shall, at any time, be granted the right to:

  • deletion of personal data (unless there are justifiable reasons for data retention)
  • withdrawal of consent for data processing
  • if you believe that any of your rights have been violated, you can lodge a complaint with the Personal Data Protection Agency by contacting:
    Martićeva ulica 14, HR – 10 000 Zagreb, email: 

Contact person

Requests, complaints or inquiries regarding personal data processing and protection may be sent to the e-mail address
In accordance with the applicable legislation governing the protection of personal data, every request / inquiry shall be resolved as soon as possible and at the latest within 30 days of its receipt.

When you contact us and establish these requirements, we will invest reasonable efforts to confirm your identity and prevent unauthorized processing of your personal data.