Our Privacy Protection Principles

The privacy of individuals and the protection of personal data are fundamental human rights. At the Faculty of Croatian Studies, University of Zagreb, we have a duty to care for the privacy of individuals whose personal data we process and store. Personal data are a responsibility and must be collected and processed only when necessary.

The Faculty of Croatian Studies, University of Zagreb adheres to the following principles with the aim of protecting the privacy of its current, former and prospective students, doctoral students, employees, external associates, users and visitors:

• We do not collect more personal data than is necessary.
• We do not use personal data for purposes about which you have not been properly informed.
• We do not keep your personal data longer than necessary.
• We never sell, lend or distribute personal data.
• We do not send personal data to third parties without your knowledge, except where this is lawful and necessary.
• We do not use automated processing for decision-making or profiling.
• We do not transfer personal data outside the EU/EEA except for the purposes of international cooperation and exchange programmes.
• We continuously ensure that personal data are stored securely and protected.

It is important to read this Privacy Policy, and we hope you will take the time to become familiar with it. We have tried to write it clearly and understandably, with the aim of maintaining your trust in the way we handle your personal data.

This Privacy Policy will be continuously updated and improved in accordance with changes in personal data processing activities.

This Privacy Policy was updated on 29 October 2025.

Data Controller

The Faculty of Croatian Studies, University of Zagreb acts, in relation to the personal data of students, participants in study programmes, employees, research and teaching staff, external associates and visitors, as the data controller determining the purposes and means of processing your personal data and ensuring all appropriate security measures.

How and What Data Do We Collect?

When Applying for Study Programmes

In accordance with the conditions of the call for applications for admission to the first year of university undergraduate, integrated and professional undergraduate study programmes, applications are submitted through the National Information System of Applications to Higher Education Institutions (NISpVU), under the responsibility of the Agency for Science and Higher Education (AZVO) as data controller and CARNET as data processor providing the IT infrastructure.

In the further course of the enrolment procedure, in addition to the data obtained from NISpVU, the Faculty may collect additional personal data of prospective students during the admission procedure for the Single Major university undergraduate study programmes in Communication Studies and Psychology, in accordance with publicly announced conditions and criteria.

In accordance with the conditions of the public call and the ranking criteria in the admission procedure for postgraduate doctoral studies, personal data are collected directly from CVs, data on previous education and all other information necessary to prove fulfilment of the criteria.

In accordance with our legal obligation, for all students we also collect a photograph for the purpose of issuing the student identity card (the so-called Smart X-Card).

Personal Data of Students, Employees, External Associates, Users and Visitors

In accordance with the Act on Scientific Activity and Higher Education and other subordinate legislation, the Faculty performs higher education, professional and scientific activities through its public authority and, among other things, keeps the following records:

• records of applicants in admission procedures,
• records of students enrolled in study programmes, as well as in special educational and scientific programmes and EU projects,
• records on examination results and other study obligations, student work, extracurricular activities, participation in competitions, and professional and scientific achievements,
• records of documents issued on completion of studies and acquired academic and professional titles and degrees,
• other records prescribed by laws, subordinate legislation, implementing acts and general regulations.

In doing so, the Faculty collects, processes and stores personal data of:

• former and current employees of the Faculty, professors, assistant professors, lecturers, assistants and external associates,
• current, former and prospective students of study programmes,
• members of the Faculty Council and members of the Student Council of the Faculty,

in accordance with the retention periods and procedures prescribed by the Act on Higher Education and Scientific Activity, the Archives and Archival Institutions Act, and related subordinate legislation and internal regulations.

Scientific Research

Within its own scientific and research activities, for the purposes of scientific research, personal data of data subjects are collected on the basis of previously obtained informed consent, in compliance with recognised ethical standards for scientific research and with strict application of the Code of Ethics of the University of Zagreb, respecting the principle that data subjects cannot be subsequently identified.

Library

The Faculty library may also be used by external users. In such cases, only the student identity card (Smart X-Card) is inspected for identification during the use of library materials, while personal data are not stored.

Video Surveillance

Based on legitimate interest, the Faculty uses a video surveillance system for the purpose of protecting property and ensuring the safety of students, employees, external associates and visitors. The monitored area around and within the Faculty premises is clearly marked with visible notices. Video surveillance recordings are stored for one month from the date of recording.

Website

Although you may use our website without providing personal data, once you contact us through our e-mail addresses, the Faculty collects your personal data. Your personal data, such as your name and surname and e-mail address, are processed and stored solely so that we may contact you and respond to your request.

The Faculty will not share your personal data with third parties or allow them access. The data will be used exclusively for the purpose of further communication and responding to your inquiry.

To access certain content on our website, registration via the AAI@EduHr electronic identity assigned by the home institution is required.

Our websites contain links to other websites and social networks. This Privacy Policy does not apply to them, so we recommend that you read the privacy policies of every website you visit, especially where you leave your personal data.

Authorised Data Processors

We provide access to your personal data to authorised data processors for the purpose of processing personal data on behalf of the Faculty, solely on the basis of our explicit instructions and under agreements ensuring a high level of personal data protection.

These business partners are obliged to strictly respect confidentiality in accordance with this Privacy Policy, concluded contracts and the obligations arising from the General Data Protection Regulation.

Within its activities, the Faculty uses the services of business entities acting as data processors who process personal data of students, participants in study programmes and postgraduate doctoral studies, employees, research and teaching staff, external associates and visitors for the purposes of fulfilling legal obligations in the field of scientific activity and higher education, IT support, maintenance of video surveillance systems and software solutions.

Some data are also exchanged and disclosed, based on legal obligations, to public authorities such as the Ministry of Science and Education, the Agency for Science and Higher Education, CARNET and the University Computing Centre (SRCE).

Cookies

Our website uses only necessary cookies to ensure website functionality.

Your Rights

You are free to contact us at any time in order to exercise your rights regarding the protection of your personal data. Your rights include:

If you wish to exercise any of the above rights, you may contact us:

• by post to: Faculty of Croatian Studies, University of Zagreb, University Campus Borongaj, Borongajska cesta 83d, 10000 Zagreb, Republic of Croatia,
• by e-mail at: dekanov.ured@fhs.hr.

We will respond to your request as soon as possible, and no later than one month from the date of receipt. If we are unable to reliably confirm your identity, we may request additional verification.

Right to Lodge a Complaint with the Supervisory Authority

You may at any time lodge a complaint directly with the competent supervisory authority, in particular in the EU country where you have your habitual residence, place of work or place of the alleged infringement, if you believe that the processing of your personal data is not lawful.

Privacy and Employee Personal Data Protection Officer

Associate Professor Sandro Skansi

Improvement of This Privacy Policy

We reserve the right to periodically adapt and improve the text of this Privacy Policy, primarily in order to comply with legal changes and changes in the purposes and methods of processing.

We will not restrict your rights arising from this Privacy Policy or from the relevant legal regulations. In the event of changes that may affect your rights, we will inform you in a timely and appropriate manner.