Privacy policy
Last updated: 12 September 2026.
This policy explains which personal data we collect when you use this website, why we collect it, how long we keep it and what rights you have. It follows the General Data Protection Regulation (GDPR) and the Croatian Act implementing the General Data Protection Regulation.
Who the controller is
The controller of your personal data is Pannonia Consulting d.o.o., Ljudevita Posavskog 6, 35400 Nova Gradiška, Croatia. The company is entered in the court register of the Commercial Court in Osijek, permanent service in Slavonski Brod, under company registration number (MBS) 030193639, VAT and personal identification number (OIB) 40964427563.
For any question about how we handle personal data, write to info@pannonia-consulting.hr.
We have not appointed a data protection officer, as this is not required for our activity and the scale of our processing.
What we collect and why
An enquiry through the contact form
When you send us an enquiry we collect your name, e-mail address, the name of your organisation (optional), the area the enquiry concerns and the text of your message. We use this only to reply to you and to carry on the conversation that follows from your enquiry. The enquiry is stored in the website database and sent to our e-mail address.
Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in answering an enquiry (Article 6(1)(b) and (f) of the Regulation).
A user account for eCourses
When you open an account we collect your first and last name, e-mail address (which also serves as your username), password and the name of your organisation (optional). We do not store the password in readable form but as a cryptographic hash, so not even we can see it.
The account gives you access to the online courses. Legal basis: performance of the contract for using the service (Article 6(1)(b)).
Course progress and the certificate of completion
Your progress through the lessons and the results of the knowledge checks stay in your browser and are not sent to our server. If you clear your browser data, the progress goes with it. The name you type on the certificate of completion is used only to print that certificate in your own browser; we neither receive nor store it.
Pannonia Learning Builder
For authors we grant access to the course building tool, we store the course content they create, the images they upload, a record of the permissions requested and granted, with the date, and the interface language they chose. The course content belongs to its author; we process it in order to run the tool and to allow the course to be exported and published.
Videos are never uploaded to our server; they are embedded in a course as links to YouTube or Vimeo.
Cookies
We use only the cookies necessary for the site to work:
- login cookies set by WordPress so that you stay signed in to your account,
- a form security token that prevents forms from being misused.
We use no analytics or marketing cookies and we do not track your behaviour on the site. The fonts are hosted on our own server, so your browser does not connect to any outside service because of them.
If a video is embedded in a course or a page, your browser connects to YouTube or Vimeo when it plays, and those platforms may then set cookies of their own. We embed YouTube in its no-tracking-cookie mode (youtube-nocookie.com). Their own privacy policies apply to the processing they carry out.
Who else can see your data
- The web hosting provider: MyDataKnox (mydataknox.com), which processes the data on our instruction and with which we have a data processing agreement in place.
- YouTube and Vimeo: only when you play an embedded video.
- Competent authorities: where we are required to do so by law.
We do not sell personal data and we do not pass it to third parties for marketing. We do not transfer data outside the European Economic Area, except to the extent that the video platforms named above do so.
How long we keep your data
- Enquiries: 2 years from the last communication, after which we delete them.
- User account: for as long as the account exists. You may ask for your account to be deleted at any time.
- Content in the Learning Builder: for as long as the author has an account and permission to work in the tool.
Your rights
At any time you have the right to:
- ask for access to the data we hold about you and for a copy of it,
- ask for the correction of inaccurate data or for incomplete data to be completed,
- ask for your data to be erased (the “right to be forgotten”),
- ask for the restriction of processing, or object to processing based on legitimate interest,
- ask for the portability of your data in a machine-readable format,
- withdraw your consent where processing rests on it, without affecting the lawfulness of processing before the withdrawal.
Send your request to info@pannonia-consulting.hr. We will answer within one month at the latest. If you believe we are processing your data unlawfully, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
Security
Access to the data is limited to the people who need it for their work. Passwords are stored encrypted, and the traffic between your browser and the site is protected. Content entered by users is sanitised before it is stored, to prevent malicious code from being injected.
Children
Our services are not intended for children under 16 and we do not knowingly collect their data. If we learn that we have collected it without the consent of a parent or guardian, we will delete it.
Changes to this policy
We may amend this policy from time to time, for instance when we introduce a new service or tool. The date of the last change is given at the top of the page. We will announce any significant change on the site or by e-mail to account holders.