Privacy Policy

1. Who we are

Insight Flows operates as a group educational workshop service based at Hondlova 2/9, 10000 Zagreb, Croatia. We can be contacted at info@insight-flows.com or by phone at +385 1 207 8260. For the purposes of data protection law, Insight Flows is the data controller for personal data collected through this website and through workshop registration.

2. What data we collect

We collect personal data only when you voluntarily provide it to us. This includes:

• Name and email address when you submit the contact form on this website
• Phone number if you choose to provide it via the contact form
• The content of any message you send us through the contact form
• Technical data collected automatically when you visit the website, such as your IP address, browser type, and pages visited, if you have consented to analytics cookies

We do not collect sensitive personal data such as financial account details, health information, or government identification numbers through this website or through workshop participation.

3. Why we collect your data and the legal basis

We process your personal data for the following purposes and on the following legal bases under the General Data Protection Regulation (GDPR):

• To respond to your enquiry submitted via the contact form. Legal basis: legitimate interest in responding to communications directed to us, and pre-contractual steps at your request.
• To manage workshop registration and communicate with participants about session logistics. Legal basis: performance of a contract or pre-contractual steps.
• To analyse website usage patterns if you have consented to analytics cookies. Legal basis: your consent.

4. How long we keep your data

Contact form enquiries and related correspondence are retained for up to 24 months from the date of last contact, after which they are securely deleted. Workshop participant records are retained for up to 36 months after the workshop date for administrative and legal compliance purposes. Analytics data, where consent has been given, is retained in accordance with the relevant analytics provider's data retention settings, which we configure to a maximum of 14 months.

5. Who we share your data with

We do not sell, rent, or trade your personal data with third parties. We may share data with service providers who assist us in operating this website and conducting the workshop, such as email hosting providers and website hosting services. These providers act as data processors under written agreements and are required to process data only on our instructions and in accordance with GDPR.

We may disclose data if required by Croatian law or by a competent authority.

6. Your rights under GDPR

As a data subject under GDPR, you have the following rights:

• The right to access the personal data we hold about you
• The right to rectification of inaccurate data
• The right to erasure of your data in certain circumstances
• The right to restriction of processing in certain circumstances
• The right to data portability where processing is based on consent or contract
• The right to object to processing based on legitimate interests
• The right to withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at info@insight-flows.com. We will respond within one month. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) at www.azop.hr if you believe your data has been processed unlawfully.

7. Cookies

This website uses cookies. Please see our Cookie Policy for full details of the cookies we use, their purpose, and how to manage your preferences.

8. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. Our website uses HTTPS encryption for all data transmitted between your browser and our server. Access to personal data is restricted to individuals who need it to perform their duties in connection with the workshop.

9. International transfers

We aim to keep personal data within the European Economic Area. Where any service provider processes data outside the EEA, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when the policy was last updated. We encourage you to review this page periodically. Continued use of the website after any changes constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy or about how we handle your personal data, please contact us at info@insight-flows.com or by post at Hondlova 2/9, 10000 Zagreb, Croatia.