Data Privacy Policy

This privacy policy explains how biohubtrixum d.o.o. collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and complying with all applicable data protection laws, including the General Data Protection Regulation (GDPR).

Last updated: 15 March 2026

Data Controller Information

The data controller for your personal information is biohubtrixum d.o.o., a Croatian limited liability company registered at Zvonimirova ulica 29, 10400 Zagreb, Croatia (Registration Number: 524163798, VAT Number: HR52748596317). We are responsible for determining how and why your personal data is processed.

Data Collection

We collect personal data that you provide to us directly and information that is automatically collected when you use our website. The data we collect includes your contact information when you enquire about our services, technical information about your device and browser when you visit our website, and usage data about how you interact with our platform. This data collection enables us to provide our educational analytics services and improve your experience with our platform.

Information You Provide

• Contact details (name, email address, phone number)
• Institution information (organisation name, role, country)
• Service enquiry details and messages
• Account information for our analytics platform
• Communication preferences and consent records

Information Automatically Collected

• IP address and device identifiers
• Browser type and version
• Operating system information
• Website usage patterns and navigation data
• Referral sources and search terms

How We Use Your Information

We use of your data is based on legitimate business interests, contractual necessity, and your consent where required. How we use your information depends on the services you use and your relationship with us. We process your contact information to respond to enquiries and provide customer support, analyse usage data to improve our services and website functionality, and use communication preferences to send relevant updates about our educational analytics solutions when you have consented to receive them.

Primary Uses

• Responding to service enquiries and providing customer support
• Delivering our educational analytics and benchmarking services
• Processing transactions and managing client accounts
• Improving our website functionality and user experience
• Ensuring compliance with legal and regulatory requirements

Marketing Communications

With your explicit consent, we may send you information about our educational analytics services, industry insights, and product updates. You can withdraw your consent at any time by using the unsubscribe link in our emails or contacting us directly.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: For marketing communications and non-essential cookies
• Contract: To provide our educational analytics services
• Legitimate Interest: To improve our services and website functionality
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We do not sell or rent your personal information to third parties. We may share your data with trusted service providers who assist us in delivering our services, such as hosting providers, analytics services, and customer support platforms. All third parties are contractually bound to protect your data and use it only for the specified purposes.

Third-Party Services

• Cloud hosting providers for data storage and processing
• Analytics services to understand website usage patterns
• Email service providers for communication delivery
• Customer support platforms for service delivery

International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including adequacy decisions by the European Commission or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law. Contact enquiry data is typically retained for three years, client account data is retained for the duration of the service relationship plus seven years for legal and accounting purposes, and website usage data is retained for up to two years for analytics purposes. You can request deletion of your data at any time, subject to legal retention requirements.

Your Rights

Under GDPR and other applicable data protection laws, you have several rights regarding your personal data. These include the right to access your personal information, request correction of inaccurate data, request deletion of your data in certain circumstances, object to processing based on legitimate interests, request restriction of processing, and data portability where technically feasible. To exercise any of these rights, please contact us using the information provided below.

Specific Rights Include

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Object: Object to processing based on legitimate interests
• Right to Restrict Processing: Request limitation of data processing
• Right to Data Portability: Request transfer of data to another service provider

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encrypted data transmission, secure data storage with access controls, regular security assessments and updates, and staff training on data protection principles.

Children's Privacy

Our services are designed for educational institutions and professionals. We do not knowingly collect personal information from children under 16 years of age without appropriate consent mechanisms in place. If you believe we have inadvertently collected information from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us about data protection matters, please reach out to us. You can contact us by email at privacy@biohubtrixum.top, by phone at +385 11558622, or by post at biohubtrixum d.o.o., Zvonimirova ulica 29, 10400 Zagreb, Croatia. Our business hours are Monday to Friday, 10:00 to 19:00.

Supervisory Authority

You have the right to lodge a complaint with the relevant data protection supervisory authority if you believe we have not handled your personal data in accordance with applicable law. In Croatia, the supervisory authority is the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka).