Privacy Policy

1. Introduction

Steady Way Central ("we", "us", "our") operates the website steady-way-central.com and organizes educational workshops on personal financial planning for young families. We are committed to protecting your personal data and handling it in accordance with the General Data Protection Regulation (GDPR), the Croatian Personal Data Protection Act (Zakon o provedbi Opće uredbe o zaštiti podataka), and other applicable legislation.

This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and what rights you have in relation to your data. Please read it carefully before using our website or registering for a workshop.

2. Data Controller

The data controller responsible for your personal data is:

• Name: Steady Way Central
• Address: Radnička cesta 39, 10000 Zagreb, Croatia
• Email: info@steady-way-central.com
• Phone: +385 1 209 2222

3. What Personal Data We Collect

We collect personal data in the following situations:

• Contact form and workshop registration: Name, email address, phone number, and the content of your message.
• Newsletter subscription: Email address only.
• Website usage: Technical data such as IP address, browser type, pages visited, and time of visit, collected through cookies and server logs.

We do not collect sensitive personal data (special categories of data under GDPR Article 9) and we do not request financial information through our website.

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance (Article 6(1)(b) GDPR): Processing your contact and registration data to respond to your inquiry and organize workshop participation.
• Consent (Article 6(1)(a) GDPR): For newsletter subscriptions and non-essential cookies, where you have given explicit consent.
• Legitimate interests (Article 6(1)(f) GDPR): For website security, fraud prevention, and improving our services, where our interests do not override your rights.
• Legal obligation (Article 6(1)(c) GDPR): Where processing is required to comply with Croatian or EU law.

5. How We Use Your Data

We use your personal data to:

• Respond to your inquiries and registration requests
• Confirm and organize workshop participation
• Send you workshop-related information and updates (where you have consented)
• Send newsletters (where you have subscribed)
• Improve our website and workshop content
• Comply with legal obligations

We do not use your data for automated decision-making or profiling.

6. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. We may share data with:

• Service providers: Technical providers who assist us in operating the website and sending communications, bound by data processing agreements.
• Legal authorities: Where required by Croatian or EU law, court order, or regulatory authority.

Any third-party processors we engage are required to maintain appropriate security measures and may only process data on our instructions.

7. Data Retention

We retain personal data for as long as necessary for the purposes described in this policy:

• Contact and registration data: up to 2 years from last contact, unless you request earlier deletion
• Newsletter subscription data: until you unsubscribe
• Website technical data: up to 12 months
• Data required for legal compliance: as long as required by applicable law

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no compelling reason for continued processing.
• Right to restriction: Request that we restrict processing of your data in certain circumstances.
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at info@steady-way-central.com. We will respond within 30 days. You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) at azop.hr.

9. Cookies

Our website uses cookies. For detailed information about the cookies we use, their purpose, and how to manage them, please see our Cookie Policy.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include secure connections (HTTPS), access controls, and regular security reviews. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

11. International Transfers

We primarily process data within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page reflects when the policy was last updated. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

13. Contact

For any questions about this Privacy Policy or your personal data, contact us at:

• Email: info@steady-way-central.com
• Phone: +385 1 209 2222
• Address: Radnička cesta 39, 10000 Zagreb, Croatia