Privacy Statement

The controller of your personal data is:

For any questions regarding the processing of your personal data or exercising your rights, you can contact us at the email address above.

Genealogus is a trade that does not employ a data protection officer, as there is no legal obligation to do so. All inquiries are handled directly with the owner of the trade.

We process your personal data for the purpose of:

• ·responding to your inquiries and preparing a quote
• ·concluding and executing a contract for genealogical research and the creation of a family tree
• ·communicating with you during the research
• ·issuing invoices and fulfilling accounting and tax obligations
• ·ensuring the security and functionality of the website
• ·possibly filing, exercising or defending legal claims

We do not use your data for profiling or for automated decision-making. We do not send newsletters or promotional messages unless you have explicitly subscribed to them, and you can cancel such a subscription at any time.

We never sell or transfer your personal data to third parties for marketing purposes.

• ·Inquiries via the contact form and email that do not result in cooperation: up to 12 months from the last communication.
• ·Data related to a concluded contract and conducted research: for the duration of the cooperation and 5 years after its completion, for possible subsequent inquiries, research supplements and the defence of legal claims.
• ·Invoices and accounting documentation: 11 years, in accordance with the regulations of the Republic of Croatia.
• ·Data processed on the basis of consent: until withdrawal of consent.
• ·Technical server logs: usually up to 12 months.

After the expiry of these periods, the data is deleted or permanently anonymized.

We do not share your data with third parties unless necessary to provide the service or required by law. Data may be available to the following categories of recipients:

• ·providers of website development and hosting services (Base44 platform, Render server infrastructure and Cloudflare network services), who process data exclusively on our instructions
• ·the email service provider (Google Ireland Ltd., Gmail service), through which we receive and maintain communication with you
• ·the accounting service, for the part of the data necessary for issuing and posting invoices
• ·providers of postal and delivery services, when the completed family tree is delivered physically
• ·competent authorities, when there is a legal obligation

We note that during the research we search public and archival sources (state archives, registry offices, parish offices, publicly available databases). In this process we collect data from those institutions, and do not provide them with your personal data except that necessary for submitting a request to inspect the material.

Some of our service providers (for example Google, Cloudflare) may carry out part of the processing outside the European Economic Area, usually in the United States of America. Such transfers are carried out on the basis of appropriate safeguards provided for by the General Data Protection Regulation, primarily the EU-US Data Privacy Framework and the standard contractual clauses of the European Commission.

Our website uses cookies (small files stored on your device) so that it can function properly and so that we can understand how it is used.

Necessary cookies are required for the basic operation of the website, remembering the selected language (Croatian, English or German) and security. They are set without your consent because without them the website cannot work.

Analytical cookies are used for anonymous measurement of visits and are set only with your consent.

You can change cookie settings at any time in your web browser, where you can also delete or block them. Please note that disabling necessary cookies may affect the proper functioning of the website.

We take reasonable technical and organizational measures to protect your data from unauthorized access, loss or misuse. This includes an encrypted connection (HTTPS), password-protected data access and restricting access to the owner of the trade only. No method of data transmission over the internet is completely secure, so please do not send us sensitive documents without prior agreement on the delivery method.

Our services are intended for adults. We do not knowingly collect data about persons under 16 via the contact form. If we find that we have received such data without the consent of a parent or guardian, we will remove it without delay.

Data about minor family members appearing in the family tree is processed exclusively on the basis of data provided by the client, with the responsibility of the client described in point 2.4.

At any time you have the right:

• ·of access - to request information on whether we process your data and a copy of that data
• ·to rectification - to request correction of inaccurate or completion of incomplete data
• ·to erasure - to request deletion of data when there is no longer a purpose for processing, except when we are obliged to keep it by law
• ·to restriction of processing - in cases provided for by the Regulation
• ·to object - to object to processing based on our legitimate interest
• ·to data portability - to request data in a structured, machine-readable format
• ·to withdraw consent - at any time, without affecting the lawfulness of processing prior to withdrawal

You can send a request to genealogus.hr@gmail.com. We will respond without delay, and at the latest within one month of receiving the request.

If you believe we process your data contrary to regulations, you have the right to file a complaint with the supervisory authority:

We may occasionally change this Privacy Statement to align it with changes in our business or regulations. The current version is always published on this page, with the date of the last update indicated. We recommend that you review it periodically.