Legal
Privacy Policy
Udruga MIR | Mindfulness i Regija processes personal data in line with the EU General Data Protection Regulation (GDPR) and Croatian implementing law. We take your trust seriously and collect only what we genuinely need.
1. Data controller
Udruga MIR | Mindfulness i Regija, Kralja Zvonimira 79, HR-34310 Pleternica, Croatia. Contact: info@mindfulnessregija.org.
2. What we collect
We collect only what you actively provide: an email address (for the newsletter), plus name and any other information you enter in our membership, contact, or event forms.
Technical logs (IP address, browser type) are processed only for security and basic, anonymised traffic statistics.
3. Purpose and legal basis
Newsletter: to send updates, invitations, and information about MIR. Legal basis: your consent (Art. 6(1)(a) GDPR).
Membership and event sign-ups: to process your application and handle related communication. Legal basis: contract or pre-contractual steps (Art. 6(1)(b)) and our legitimate interest in running the association (Art. 6(1)(f)).
Contact form: to respond to your enquiry. Legal basis: consent and legitimate interest.
4. Your rights
At any time you have the right to: access your data, rectify or erase it, restrict or object to processing, port your data, and withdraw consent without any disadvantage.
Requests: info@mindfulnessregija.org. You also have the right to lodge a complaint with the Croatian Data Protection Agency (azop.hr) or your local supervisory authority.
5. Retention and sharing
Retention: membership data up to 5 years after membership ends; event sign-ups 2 years after the event; contact messages 1 year; newsletter until you unsubscribe; invoices and accounting records 11 years, as required by Croatian law.
We do not sell your data. We share it only with providers processing it on our behalf: Supabase (database, EU), Cloudflare (hosting), Resend (email delivery, USA) and Stripe (card payments, USA/EU). Transfers outside the EU rely on EU Standard Contractual Clauses and/or the EU-US Data Privacy Framework.
Newsletters contain no open or click tracking.
6. Cookies
This site uses only essential technical cookies required for basic functionality. We do not use tracking, profiling, or advertising cookies.
7. Security
The database is located in the EU, with encryption in transit (HTTPS). Only authorised MIR board members have access.
8. Changes to this policy
We may update this policy from time to time. The date at the bottom of the page reflects the latest version. We will notify subscribers of material changes.
Last updated: October 2026