Privacy Policy

Last updated: 2 July 2026

Women in Aviation Croatia ("we", "us") respects your privacy. This policy explains what personal data we collect through womeninaviationcroatia.org, why we collect it, and what rights you have. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR.

Who is responsible for your data

The data controller is:

Žene u zrakoplovstvu Hrvatske

Registered address: Ulica kneza Domagoja 20, Zagreb

OIB: 82168807153

Registration number (RNO): 21015587

Contact: crew@womeninaviationcroatia.org

For any privacy-related question or request, write to us at the address above.

What data we collect and why

Newsletter

When you subscribe to our newsletter, we collect your email address, and optionally your name and preferred language. We use this only to send you our newsletter and updates about our activities.

- Legal basis: your consent (Art. 6(1)(a) GDPR), given when you submit the signup form.

- Storage: your details are stored in our website's own database and in Brevo (Brevo SAS, France — an EU-based email service provider) which we use to send the newsletter.

- Retention: until you unsubscribe or ask us to delete you.

- Unsubscribing:very newsletter contains an unsubscribe link. You can also email us at any time and we will remove you from both our database and Brevo.

Contacting us by email

Our website contains email links (for general contact, membership, and partnership enquiries). When you email us, we process the data you choose to send — typically your name, email address, and the content of your message — in order to respond to you.

- Legal basis: our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR), or steps prior to entering an agreement (Art. 6(1)(b)) for membership and partnership requests.

- Retention: we keep correspondence as long as needed to handle your enquiry and for reasonable follow-up, after which it is deleted.

Member profiles

With their consent, we publish the names, photos, roles, and short biographies of our members on this website. Members can withdraw consent and request removal of their profile at any time by contacting us.

Photos from events

We publish photos from our events in the website gallery and news posts. If you appear in a photo and would like it removed, contact us and we will remove it.

Server logs

Our hosting provider automatically records standard technical data (such as IP address, browser type, and time of access) in server logs for security and operational purposes. This is based on our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). Logs are kept for a limited time and are not used to identify visitors.

Cookies

We do not use cookies for visitors. This website sets no analytics, advertising, or tracking cookies. The only cookie used is a login cookie for administrators of our content management system, which is strictly necessary and is set only when an administrator signs in. Because we use no non-essential cookies, no cookie consent banner is required.

Analytics and tracking

We do not use any web analytics or tracking tools. Links to our social media profiles (Instagram, LinkedIn) are plain links — no social media scripts, pixels, or embeds run on our website.

Who we share data with

We do not sell or rent your personal data. We share it only with service providers who process it on our behalf:

- Spaceship (US) — hosts the website and its database.

- Brevo (Brevo SAS, France) — sends our newsletter (newsletter subscribers only).

- Our email provider — handles email correspondence.

These providers act as processors under contracts that meet GDPR requirements. Because our hosting provider is based in the United States, data processed by the website (such as newsletter signups and server logs) may be stored on servers outside the European Economic Area. This transfer is safeguarded by the EU Standard Contractual Clauses included in our hosting provider's data processing agreement.

Your rights

Under the GDPR you have the right to:

- access the personal data we hold about you;

- rectify inaccurate data;

- erase your data ("right to be forgotten");

- restrict or object to processing;

- data portability;

- withdraw consent at any time (e.g. unsubscribe from the newsletter), without affecting processing carried out before withdrawal.

To exercise any of these rights, email us and we will respond within one month.

You also have the right to lodge a complaint with the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.

Changes to this policy

We may update this policy from time to time. The current version, with its date, is always available on this page.