Privacy Policy

1. Introduction

This Privacy Policy ("Policy") explains how Eurowork Agency FZ-LLC ("we", "our", "us") collects, uses, discloses, and protects your personal data when you visit or use our website https://www.eurovisa.hr ("Website").

We are committed to protecting your personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (Regulation (EU) 2016/679 – GDPR) and the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

By using this Website, you acknowledge and agree to the practices described in this Policy. If you do not agree, please discontinue use of the Website.

2. Data We Collect

2.1 Data You Provide Voluntarily

• Contact Information: name, surname, email address, phone number (e.g., via forms, newsletter sign-ups).
• User-Generated Content: inquiries, messages, reviews, or other interactions submitted via the Website.
• Payment Information: billing name, email, phone number, billing address and country, the package you choose and the amount paid. Card details are entered directly with our payment processor, Stripe — we receive only the card brand, the last four digits and the expiry date, never the full card number or security code.
• Country of origin: the country you tell us you are coming from when you apply, and — until you do — the country estimated from your IP address. We use it only to show you the right price; the estimate is made on our own server and neither your IP address nor the estimate is stored. IP-to-country data by DB-IP (CC BY 4.0).

2.2 Data Collected Automatically

• Technical Data: IP address, browser type, operating system, language preferences, referring URLs, date/time of visit.
• Cookies and Tracking Technologies: used to improve performance and user experience. See our Cookie Policy.

3. How We Use Your Data

We process personal data for the following purposes:

• To Provide Website Services: including form submissions, communication, and account setup (if applicable).
• To Process Payments: charging the processing fee, determining the price that applies to your country, issuing receipts and handling refunds.
• To Improve Functionality: analyzing traffic and usage to optimize performance.
• Marketing Communication: with your consent, to send promotional emails/newsletters.
• Legal Compliance: responding to lawful requests from authorities or complying with statutory obligations.

4. Legal Basis for Processing (GDPR)

Under the GDPR, we rely on:

• Consent (Art. 6(1)(a)) – for marketing or optional features.
• Performance of a Contract (Art. 6(1)(b)) – to provide requested services.
• Legal Obligation (Art. 6(1)(c)) – where required by law.
• Legitimate Interest (Art. 6(1)(f)) – to improve and secure our Website, provided your rights are not overridden.

5. Lawful Basis for Processing (PDPL – UAE)

As per UAE PDPL, processing is lawful if:

• You have given clear consent.
• Processing is necessary for contractual performance.
• Processing is required to comply with applicable legal obligations.
• We have a legitimate interest, balanced against your fundamental rights and freedoms.

6. Data Transfers

If personal data is transferred outside the:

• EEA (EU users): We use appropriate safeguards such as Standard Contractual Clauses (SCCs).
• UAE: We ensure compliance with cross-border data transfer requirements under PDPL, including transfers to countries with an adequate level of protection or via approved safeguards.

7. Data Sharing

We may share data with:

• Service Providers (Processors) – for hosting, analytics, CRM, or communication tools under strict confidentiality agreements.
• Payment Processor – Stripe processes payments on our behalf. For fraud prevention and its own legal obligations Stripe acts as an independent controller; see its privacy policy at stripe.com/privacy.
• Public Authorities – if required by law or regulation.
• Third Parties – in connection with business transfers (mergers, acquisitions), under legal basis and safeguards.

8. Data Security

We implement technical and organizational measures to protect your personal data, such as:

• Encryption
• Access restrictions
• Secure hosting environments

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain your personal data:

• Only for as long as necessary to fulfil the stated purposes.
• Payment records for as long as accounting and tax laws require.
• Longer if required by law or to defend legal claims.

Once data is no longer needed, it is securely deleted or anonymized.

10. Your Rights

Depending on your jurisdiction, you have the right to:

Under GDPR (EU) and PDPL (UAE)

• Access personal data
• Rectify inaccurate or incomplete data
• Request erasure of your data
• Restrict processing under certain conditions
• Object to processing based on legitimate interest
• Data portability (to another provider)
• Withdraw consent at any time

To exercise any rights, email us at bozoou@gmail.com. We will respond within the timeframe required by applicable laws. For deletion specifically, see User Data Deletion.

11. Cookies

We use cookies to enhance your user experience and analyze website traffic. You may accept or manage cookie settings. Please refer to our Cookie Policy for full details.

12. Children's Privacy

We do not knowingly collect personal data from individuals under the age of 18. If we become aware of such data, we will delete it promptly.

13. Changes to This Policy

We reserve the right to update this Policy at any time. Changes will be posted on this page, and we will revise the "Effective Date" at the top of this document. Please review it regularly.

14. Contact Information