Privacy Policy

Last Updated: 4 March 2026

Smart Skill Academy ("we", "us", "our") operates the website smart-skill-academy.com. This Privacy Policy describes how we collect, use, store, and protect personal data when you visit our website or contact us. We are committed to complying with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Croatian data protection law.

1. Data Controller

The data controller responsible for your personal data is Smart Skill Academy, ul. Ivana Bunića Vučića, 10000 Zagreb, Croatia. You can contact us at info@smart-skill-academy.com or by telephone at +385 17 789 553.

2. What Personal Data We Collect

We may collect the following categories of personal data:

  • Contact information: name, email address, phone number, provided voluntarily through our contact form.
  • Message content: the content of messages you send us through the contact form.
  • Technical data: IP address, browser type, device type, pages visited, and time spent on pages, collected automatically through cookies and server logs.
  • Cookie preferences: your choices regarding cookie categories, stored in a cookie on your device.

3. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

  • To respond to your enquiries submitted through our contact form.
  • To improve the functionality and content of our website based on usage data.
  • To comply with legal obligations applicable to our business operations in Croatia.
  • To maintain records of communications for legitimate business purposes.

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

  • Consent (Article 6(1)(a)): for non-essential cookies, where you have given explicit consent through our cookie banner.
  • Legitimate interests (Article 6(1)(f)): for responding to enquiries and maintaining website security.
  • Legal obligation (Article 6(1)(c)): where processing is required to comply with Croatian law.

5. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy. Contact form submissions are retained for a period of two years from the date of receipt, after which they are securely deleted. Technical log data is retained for a maximum of twelve months. Cookie preference records are stored for the duration set by the cookie itself, typically twelve months.

6. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data with service providers who assist us in operating our website, subject to appropriate data processing agreements. We may disclose data where required by Croatian law or by order of a competent authority.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

  • Right of access: to request a copy of the personal data we hold about you.
  • Right to rectification: to request correction of inaccurate or incomplete data.
  • Right to erasure: to request deletion of your personal data where no legitimate basis for retention exists.
  • Right to restriction: to request that we limit how we use your data in certain circumstances.
  • Right to data portability: to receive your data in a structured, commonly used format.
  • Right to object: to object to processing based on legitimate interests.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@smart-skill-academy.com. We will respond within 30 days. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) at azop.hr.

8. Cookies

Our website uses cookies. Please refer to our Cookie Policy for detailed information about the cookies we use, their purposes, and how to manage your preferences.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures are reviewed and updated as necessary.

10. International Transfers

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically. Continued use of our website following any changes constitutes acceptance of the updated policy.

12. Contact

For any questions or concerns regarding this Privacy Policy or our data processing practices, please contact us at info@smart-skill-academy.com or write to us at ul. Ivana Bunića Vučića, 10000 Zagreb, Croatia.