PRIVACY POLICY STATEMENT
OŠ Prizma and DV Maleni talenti respect your privacy and base their websites on technologies that provide a better and safer online experience. This Privacy Policy Statement refers to the collection and processing of your personal data on the website [www.prizmazagreb.com](http://www.prizmazagreb.com) (hereinafter: the website). By using this website, you agree to the methods of data collection and processing described in this Statement.
---
Collection and Processing of Personal Data
To maintain the functionality of the website and provide the services requested by users, OŠ Prizma and DV Maleni talenti may collect and use personal data of users. Through the website [www.prizmazagreb.com](http://www.prizmazagreb.com), depending on the purpose, personal data such as your name and surname, email address, home or business address, telephone number, etc., may be collected.
By entering your personal data in the designated fields, you give consent for such data to be used for the purpose for which it was provided.
OŠ Prizma and DV Maleni talenti collect data about your computer, which may include your IP address, browser type, access time, and website addresses. They may also collect data about users outside this website, based on consent forms and for the purposes stated therein.
Collected data, as well as data obtained through the provision of services, are processed for the purposes for which they were provided — i.e. the use of the website and provision of requested services, as well as to provide you with information about the services available to you.
OŠ Prizma and DV Maleni talenti may use the data to provide more efficient user service, to facilitate website use by eliminating the need for repeated data entry, or to adapt the website to your preferences and interests.
They do not sell, rent, or lease their user lists to third parties. With an obligation to maintain confidentiality, OŠ Prizma and DV Maleni talenti may share data with data processors for specific purposes such as statistical analysis, customer support, delivery organization, or similar needs.
You are hereby informed that you have the right to access, correct, or withdraw previously given consent (in whole or in part), as well as the right to object to data processing for information purposes.
---
Use of Cookies
The website [www.prizmazagreb.com](http://www.prizmazagreb.com) uses cookies — text files placed on a user's device by a web server. Cookies are created when your browser loads a website, which then sends data to the browser to create the file. Cookies are retrieved by the browser and sent back to the server upon your return to the website.
Cookies are used for website functionality and to enhance the user experience. They may be temporary (stored only during a session) or persistent (stored even after leaving the website).
The websites of OŠ Prizma and DV Maleni talenti do not contain cookies that can run programs or install viruses on your computer.
The site uses Google Analytics for statistical purposes; you can read the third-party cookie policy on Google Analytics’ pages. Other similar analytics tools may also be used periodically.
---
Preventing Cookies
If you do not agree to the use of cookies, you can easily delete or disable them on your computer or mobile device using your browser settings. For more information, visit your browser’s help pages or [www.allaboutcookies.org](http://www.allaboutcookies.org).
Please note that disabling or deleting cookies may affect the functionality or appearance of the website.
---
Security of Your Personal Data
The website [www.prizmazagreb.com](http://www.prizmazagreb.com) protects your personal data from unauthorized access, use, or disclosure. Data is stored on secure servers in a controlled environment protected from unauthorized access.
---
Terms and Amendments
The terms of this Privacy Policy govern the use of all data collected while it is in effect. OŠ Prizma and DV Maleni talenti reserve the right to amend this Statement at any time to include new information and to keep you informed about how your data is protected. You are encouraged to review this page periodically for updates.
---
Contact Information
OŠ Prizma and DV Maleni talenti welcome your comments, suggestions, or concerns regarding this Privacy Policy.
You can contact us by phone at 099 466 9999.
REGULATION ON THE PROCESSING AND PROTECTION OF PERSONAL DATA
Pursuant to Article 3, paragraph 1 of the General Data Protection Regulation (EU) 2016/679 and the Article of the Statute of the School of Nature, Science and Mathematics Prizma, Ksaver, at the meeting held on May 1, 2025, and the Statute of the Kindergarten Maleni talenti, the Governing Council at its meeting held on May 1, 2025, hereby adopts the following:
I. GENERAL PROVISIONS
Article 1.
In processing and protecting personal data of individuals, Škola prirode, znanosti i matematike Prizma, Ksaver (hereinafter: the School) and Dječji vrtić Maleni talenti (hereinafter: the Kindergarten) are bound by the General Data Protection Regulation (EU) 2016/679.
Article 2.
The School and the Kindergarten are data controllers as defined by Article 4 of the Regulation, determining the purposes and means of processing in accordance with EU and national law.
Article 3.
The terms used in this Regulation have meanings as defined in the GDPR, including “personal data,” “processing,” “data controller,” “processor,” “recipient,” “third party,” “consent,” and “data breach.”
Article 4.
The School and the Kindergarten process personal data lawfully, fairly, and transparently, only for explicit and legitimate purposes, keeping data accurate and up to date, and ensuring appropriate security measures.
---
II. DATA PROTECTION OFFICER
Article 5.
The School and the Kindergarten appoint a Data Protection Officer (DPO) from within their staff, whose contact details are published on their websites and communicated to the supervisory authority. The DPO informs and advises, monitors compliance, and maintains confidentiality.
---
III. DATA PROCESSING
Article 6.
Personal data is processed only if one of the following applies:
* the data subject has given consent,
* processing is necessary for a contract,
* compliance with a legal obligation,
* protection of vital interests,
* performance of a task in the public interest, or
* legitimate interests of the controller or a third party.
Article 7.
Consent must be freely given, specific, informed, and unambiguous. For children under 16, consent must be given by a parent or legal guardian.
Article 8.
Data subjects are informed about all relevant details of data processing, including purpose, legal basis, retention, recipients, and their rights.
---
IV. RIGHTS OF DATA SUBJECTS
Article 9.
Data subjects have the right to access, correct, or delete their data, and to lodge complaints with the supervisory authority.
Article 10.
Whenever possible, the School and the Kindergarten pseudonymize data, especially when publishing information in line with the Right to Information Act.
---
V. DATA STORAGE SYSTEM
Article 11.
The School and Kindergarten collect and process personal data of:
* employees,
* service users (children),
* parents/guardians,
* children with special needs,
* school board and council members,
* job candidates,
* external collaborators.
Article 12.
A record of processing activities is maintained and includes contact details, purpose, data categories, recipients, retention periods, and security measures.
Article 13.
The principals appoint persons responsible for data processing and protection.
---
VI. SECURITY MEASURES
Article 14.
Written data is kept in locked cabinets; digital data is password-protected and stored on secure devices.
Article 15.
Authorized personnel must take all technical, personnel, and organizational measures to protect data from loss, unauthorized access, or misuse.
Article 16.
This Regulation is published on the notice board and takes effect on **May 1, 2025**.
Acting Principal, OŠ Prizma
Tamara Skala
Principal, DV Maleni talenti
Danijela Vujnović
RECORD OF PROCESSING ACTIVITIES FORM
Record of Personal Data Processing Activities
Data Controller:
School of Nature, Science and Mathematics *Prizma*, Ksaver
Address: Jandrićeva 42, Zagreb
Phone number: +385 99 466 9999
E-mail: [skola@prizmazagreb.com](mailto:skola@prizmazagreb.com)
School Representative: Principal Tamara Skala
Data Protection Officer: Tamara Skala
---
Data Controller:
Kindergarten *Maleni talenti*
Address: Remetski kamenjak 10, Zagreb
Phone number: +385 98 823 988
E-mail: [malenitalenti@educarena.com](mailto:malenitalenti@educarena.com)
Kindergarten Representative: Principal Danijela Vujnović
Data Protection Officer: Danijela Vujnović
---
Purpose of Processing (Description):
Processing of personal data of children attending the Kindergarten and the School.
The purpose of processing is determined by:
* law,
* the need to perform contracts for the provision of services by the Kindergarten and the School,
* the controller’s legitimate interests with the consent of the data subject.
---
Method of Giving Consent by the Data Subject for the Collection and Processing of Personal Data:
Written consent of the data subject provided upon submitting an application for a child’s enrollment in the School or Kindergarten.
---
Category of Data Subjects and Types of Data:
Children – users of the services of the School and Kindergarten.
Types of Data:**
1. Name and surname
2. Date and place of birth
3. Residential address
4. Nationality
5. Citizenship
6. Personal Identification Number (OIB)
7. Name of the class or educational group attended by the child
8. Program attended by the child
9. Name and surname of parents
10. Parents’ residential addresses
11. Parents’ occupations
12. Parents’ contact phone numbers and e-mail addresses
---
Categories of Recipients to Whom Personal Data Has Been or Will Be Disclosed:
Founder – natural person, *Tamara Skala*
---
Planned Retention Period for Personal Data:
Five (5) years from the date the child leaves the School or Kindergarten.
---
General Description of Technical and Organizational Security Measures for Data Protection:
Data in written form is kept in binders stored in locked cabinets.
Data stored electronically is protected by assigning usernames and passwords known only to authorized employees responsible for data processing.
For additional security and confidentiality, data is also stored on portable storage devices.
---
This Decision enters into force on the date of its adoption.
Acting Principal of OŠ Prizma
Tamara Skala
Principal of DV Maleni talenti
Danijela Vujnović