Privacy policy
How EUCRI processes and protects personal data associated with this website and business enquiries.
Last updated: 27 September 2026.
1. Controller and contact
EUCRI – European Union Cosmetic Regulatory Institute, Radnička cesta 80, 10000 Zagreb, Croatia, can be contacted at info@eucri.com for all privacy matters.
2. Data we process
When you submit an enquiry, we may process your name, business email address, telephone number if voluntarily provided, organisation, country, selected service, message content and technical data needed to secure the form. Do not send special-category personal data or confidential formulas before a secure exchange method has been agreed.
3. Purposes and legal bases
We use enquiry data to respond, assess potential cooperation and take steps before entering into a contract. Security records and rate limiting are based on our legitimate interest in protecting the system and preventing spam.
4. Recipients and hosting
The website and business email use Hostinger infrastructure. Data may be shared with contracted technical or professional service providers only to the extent needed for the relevant purpose and subject to appropriate safeguards.
5. Retention
Enquiries that do not lead to a contractual relationship are generally retained for no longer than 12 months unless longer retention is needed for a legal claim or statutory duty. A security hash of the network address used for rate limiting is retained for approximately 60 minutes.
6. Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability or object to processing. Send requests to info@eucri.com. You may also lodge a complaint with the Croatian Personal Data Protection Agency or another competent supervisory authority.
7. Policy updates
We may update this policy when our procedures, services or legal requirements change. The current version is always published on this page.