Personal Data Protection – GDPR
Personal Data Protection Statement
The Association of Lions Clubs of Croatia – Lions D-126 will process your personal data in accordance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), applicable national regulations governing personal data protection, and by applying appropriate technical and security measures to protect personal data against unauthorized access, misuse, disclosure, loss, or destruction.
1. Basic Information
This Statement describes which data we collect, how we process it, for what purposes we use it, and your rights related to your personal data.
The data controller is: Association of Lions Clubs of Croatia – Lions D-126, Miramarska 24, 10000 Zagreb
Contact email address: tajnik@lions.hr
Data Protection Officer: tajnik@lions.hr
If we use the services of external providers for the processing of your personal data, such processing is carried out on our behalf, and in such cases we remain responsible for the protection of your personal data.
2. Categories of Personal Data We Process
We process and use the following categories of personal data:
Lions members,
external associates,
users,
business clients,
students, pupils,
regatta participants,
donors.
3. Legal Basis and Purposes of Personal Data Processing
The processing activities we carry out are based on:
Legal obligations – We process your personal data in accordance with applicable regulations and for the purpose of notifications and reports we are obliged to submit under applicable laws.
Contract performance – Personal data is processed for the purpose of performing contracts and fulfilling contractual obligations we have entered into.
Consents – Given by you for the processing of your personal data (e.g. private phone number, mobile number, email address, etc.).
Legitimate interests.
4. Data Retention Period
Personal data is stored, archived, and disposed of in accordance with legal and other regulations or general acts – the Rules on the Protection and Processing of Archival and Registry Records.
Your basic personal data is generally deleted after the expiration of all statutory obligations related to the retention of personal data.
5. Management of Consents
You may withdraw your consent for contact at any time. You may also object to our processing of your personal data at any time.
Changes to consent can be made by submitting a written request to: Association of Lions Clubs of Croatia – Lions D-126
or by email to: tajnik@lions.hr
If you withdraw the given consent, we will no longer use your data for the stated purposes.
If you wish to give your consent again, you may do so at any time.
In cases where the processing of your personal data does not require consent but is necessary for concluding a contract with us, fulfilling a concluded contract, or due to legal obligations, failure to provide such data will prevent us from fulfilling our contractual obligations or entering into a contract with you.
Withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn.
6. Rights of Data Subjects
a) The right to access information and receive confirmation as to whether personal data concerning you is being processed.
b) Right to rectification: If we process incomplete or inaccurate personal data about you, you may request correction or completion at any time.
c) Right to erasure: You may request the deletion of your personal data if it has been processed unlawfully or if such processing constitutes a disproportionate interference with your protected interests. Please note that there may be reasons preventing immediate deletion, such as statutory archiving obligations.
d) Right to restriction of processing: You may request restriction of processing if: • you contest the accuracy of the data during a period allowing us to verify its accuracy • the processing was unlawful and you oppose deletion and request restriction instead • we no longer need the data for the intended purposes but you require it for the establishment, exercise, or defense of legal claims • you have lodged an objection to the processing.
e) Right to data portability: You may request that data you have provided to us be delivered to you in a structured, commonly used, and machine-readable format if: • the processing is based on your consent or a contract • the processing is carried out by automated means.
f) Right to object: If we process your data for tasks carried out in the public interest or based on legitimate interests, you may object to such processing where there are grounds relating to the protection of your data.
g) Right to lodge a complaint with a supervisory authority: If you believe that the processing of your data infringes Croatian or EU data protection regulations, you may contact us to clarify any issues. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency or another competent authority within the EU.
h) Exercising rights: To exercise any of the above rights, please contact us using the contact details provided in section 1 of this Statement.
i) Identity verification: In case of doubt, we may request additional information to verify your identity, for the purpose of protecting your rights and privacy.
j) Abuse of rights: If you exercise your rights excessively and with clear intent of abuse, we may charge an administrative fee or refuse to process your request.
7. Transfer of Personal Data to Third Countries
Personal data may be transferred to third countries (outside the EU) only:
– if there is a legal obligation
– if explicit consent for the transfer has been given by the data subject
8. Transfer of Data to Third Parties
We undertake to protect your personal data and will not disclose or make it available to third parties except in the following cases:
if you expressly consent in writing to the disclosure of specific confidential data for a specific purpose or to a specific person
upon a written request from a court or public notary if the data is required for the performance of their legally assigned duties (e.g. enforcement, bankruptcy, inheritance, or other property-related proceedings)
if the data is required by the Ministry of the Interior or the competent State Attorney’s Office for the performance of their duties
if the data is required by courts, attorneys, or public notaries for proceedings they conduct, upon written request
if the data is required by the Social Welfare Center within its statutory powers
if the data is required by the Ministry of Finance or tax authorities, the Pension and Health Insurance Institute, within their legal competencies
if we are obliged to provide data to the Ministry of the Sea, Transport and Infrastructure
if the data is required for fulfilling contractual obligations towards you or complying with legal obligations
in other cases prescribed by law.
9. Technical and Organizational Measures
We have implemented all necessary technical and organizational measures to protect your data against loss, alteration, or unauthorized access. If you have any questions, feel free to contact us and we will respond as soon as possible and assist you in exercising your rights.
Any changes to our personal data protection policy will be published in this Personal Data Protection Statement on our website, and you will be appropriately informed.
10. Personal Data on the Website
We collect only those personal data that visitors voluntarily provide when submitting contact requests, job applications, callback requests, or complaint forms. Such personal data is used confidentially and solely for a specific purpose.
These personal data are not transferred to third parties, except where there is a legal obligation or an order from a competent authority, in which case the data may be forwarded to the relevant authority. Website access is logged, and technical data such as page visits, operating system, screen resolution, visit time, and data transfer volume are recorded.
For the purpose of improving our services, the website may use “cookies” stored on the visitor’s computer. The use of cookies can be disabled, although this may result in limited functionality. Cookies allow the storage of user preferences, optimization of technical processes, and continuous improvement of services.