PRIVACY POLICY
Last updated: Sept 4th 2026
1. Who is responsible for your data
Mezio Distal Lab jednostavno društvo s ograničenom odgovornošću za usluge (Mezio Distal Lab j.d.o.o.)
Ulica Josipa Vogrinca 24, 10000 Zagreb, Croatia
OIB: 10609012529 · MBS: 081709971 (Commercial Court in Zagreb)
Email: info@darionovak.com · Phone: +385 95 504 0974
We are the data controller for the personal data described below. We have not appointed a Data Protection Officer; data protection enquiries go to the email above.
2. What data we collect
- Identity and contact data — name, surname, email address, phone number, country, professional title and practice or clinic name
- Billing data — billing address, company name, OIB/VAT number, payment reference and transaction status. We never receive or store full card numbers
- Program data — which program you purchased, progress, attendance, questions and submissions, feedback and survey answers
- Communications — emails, WhatsApp group messages, ManyChat and Instagram direct messages, support requests
- Images and recordings — photographs and video or audio recordings made at in-person events and during live online sessions
- Clinical case material — where a participant or a treating clinician submits patient images or records for discussion, these are used only with the documented consent of the patient obtained by the treating clinician
- Technical data — IP address, device and browser information, and data collected by cookies and similar technologies as described in Section 8
3. Why we process it and on what legal basis
- Delivering the program you purchased, granting access, support — performance of a contract
- Issuing invoices, bookkeeping, tax and statutory record keeping — legal obligation
- Sending educational newsletters and offers — consent, or legitimate interest for our own similar services to existing customers
- Photographs, video and promotional material from events — legitimate interest for general documentation; consent where an individual is identifiable and features prominently
- Using clinical cases in teaching and marketing — consent of the patient, obtained by the treating clinician; material is de-identified wherever possible
- Site security, fraud prevention, service improvement — legitimate interest
- Advertising measurement and audience building (Meta Pixel and similar) — consent given through the cookie banner
4. Marketing
If you subscribe, we send educational content and offers. You can unsubscribe at any time using the link in every email or by writing to info@darionovak.com. Withdrawing consent does not affect processing carried out before withdrawal.
5. Who we share data with
We do not sell personal data. We share only what is necessary with the following categories of processors and service providers:
- Payments and invoicing — CorvusPay (Croatia), Stripe (Ireland/USA), Solo (Croatia)
- Course platform and hosting — Podia (USA), Oblak.host (Croatia), WordPress and Thrive plugins on our own site
- Email and messaging — Google Workspace / Gmail (USA), MailerLite (Lithuania), ManyChat (USA), WhatsApp / Meta (Ireland/USA)
- Live sessions and recordings — Zoom (USA)
- Clinical planning and documentation — Smilecloud (Romania)
- Video hosting — YouTube / Google (USA)
- Advertising and analytics — Meta Platforms Ireland Ltd (Meta Pixel), and any analytics tool listed in the cookie banner
- Calendar embeds and website functionality — AddEvent, Google Fonts
- Accounting — Profero, obrt za knjigovodstvene usluge (Croatia)
- Public authorities — where required by law
We conclude data processing agreements with our processors where required.
6. International transfers
Some providers listed above are established outside the European Economic Area, principally in the United States. Transfers are made on the basis of the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified, or on the basis of Standard Contractual Clauses together with additional safeguards. You may request further information at info@darionovak.com.
7. How long we keep it
- Accounting and invoicing records: for the statutory period, at least 11 years for accounting documents
- Program access, participant records and support correspondence: for the duration of access and 5 years thereafter
- Newsletter data: until you unsubscribe or withdraw consent, and then a suppression record only
- Event photographs and recordings used in promotion: until you object or withdraw consent
- Cookie and pixel data: for the retention period of the provider, as stated in the cookie banner
8. Cookies and tracking technologies
Our website uses cookies and similar technologies. In addition to those strictly necessary for the site to function, we use:
- Meta Pixel (Meta Platforms Ireland Ltd) — to measure advertising performance and build audiences for our campaigns on Facebook and Instagram
- Website builder and lead-capture cookies (Thrive Themes / Thrive Leads) — to display forms and remember whether you have already seen or submitted them
- Embedded third-party content — AddEvent calendar embeds and Google Fonts, which load from the providers' servers and therefore receive your IP address
Cookies and pixels that are not strictly necessary are set only after you give consent through the cookie banner. You can change or withdraw your choice at any time through the "Cookie settings" link in the footer. Blocking non-essential cookies does not affect your ability to purchase or use a program.
9. Your rights
You have the right to request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and to object to processing based on legitimate interests, including profiling for direct marketing. Where processing is based on consent, you may withdraw it at any time.
To exercise any right, write to info@darionovak.com. We reply within one month.
You also have the right to lodge a complaint with the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, https://www.google.com/url?q=http://www.azop.hr&source=gmail&ust=1788356931288000&sa=E — or with the authority of your own country of residence.
10. Security
We use appropriate technical and organisational measures, including access control, encrypted transmission and restricted sharing of participant data, to protect personal data against unauthorised access, alteration, loss or disclosure.
11. Changes to this policy
We may update this policy. The current version and its date are always published on this page.
1. Who is responsible for your data
Mezio Distal Lab jednostavno društvo s ograničenom odgovornošću za usluge (Mezio Distal Lab j.d.o.o.)
Ulica Josipa Vogrinca 24, 10000 Zagreb, Croatia
OIB: 10609012529 · MBS: 081709971 (Commercial Court in Zagreb)
Email: info@darionovak.com · Phone: +385 95 504 0974
We are the data controller for the personal data described below. We have not appointed a Data Protection Officer; data protection enquiries go to the email above.
2. What data we collect
- Identity and contact data — name, surname, email address, phone number, country, professional title and practice or clinic name
- Billing data — billing address, company name, OIB/VAT number, payment reference and transaction status. We never receive or store full card numbers
- Program data — which program you purchased, progress, attendance, questions and submissions, feedback and survey answers
- Communications — emails, WhatsApp group messages, ManyChat and Instagram direct messages, support requests
- Images and recordings — photographs and video or audio recordings made at in-person events and during live online sessions
- Clinical case material — where a participant or a treating clinician submits patient images or records for discussion, these are used only with the documented consent of the patient obtained by the treating clinician
- Technical data — IP address, device and browser information, and data collected by cookies and similar technologies as described in Section 8
3. Why we process it and on what legal basis
- Delivering the program you purchased, granting access, support — performance of a contract
- Issuing invoices, bookkeeping, tax and statutory record keeping — legal obligation
- Sending educational newsletters and offers — consent, or legitimate interest for our own similar services to existing customers
- Photographs, video and promotional material from events — legitimate interest for general documentation; consent where an individual is identifiable and features prominently
- Using clinical cases in teaching and marketing — consent of the patient, obtained by the treating clinician; material is de-identified wherever possible
- Site security, fraud prevention, service improvement — legitimate interest
- Advertising measurement and audience building (Meta Pixel and similar) — consent given through the cookie banner
4. Marketing
If you subscribe, we send educational content and offers. You can unsubscribe at any time using the link in every email or by writing to info@darionovak.com. Withdrawing consent does not affect processing carried out before withdrawal.
5. Who we share data with
We do not sell personal data. We share only what is necessary with the following categories of processors and service providers:
- Payments and invoicing — CorvusPay (Croatia), Stripe (Ireland/USA), Solo (Croatia)
- Course platform and hosting — Podia (USA), Oblak.host (Croatia), WordPress and Thrive plugins on our own site
- Email and messaging — Google Workspace / Gmail (USA), MailerLite (Lithuania), ManyChat (USA), WhatsApp / Meta (Ireland/USA)
- Live sessions and recordings — Zoom (USA)
- Clinical planning and documentation — Smilecloud (Romania)
- Video hosting — YouTube / Google (USA)
- Advertising and analytics — Meta Platforms Ireland Ltd (Meta Pixel), and any analytics tool listed in the cookie banner
- Calendar embeds and website functionality — AddEvent, Google Fonts
- Accounting — Profero, obrt za knjigovodstvene usluge (Croatia)
- Public authorities — where required by law
We conclude data processing agreements with our processors where required.
6. International transfers
Some providers listed above are established outside the European Economic Area, principally in the United States. Transfers are made on the basis of the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified, or on the basis of Standard Contractual Clauses together with additional safeguards. You may request further information at info@darionovak.com.
7. How long we keep it
- Accounting and invoicing records: for the statutory period, at least 11 years for accounting documents
- Program access, participant records and support correspondence: for the duration of access and 5 years thereafter
- Newsletter data: until you unsubscribe or withdraw consent, and then a suppression record only
- Event photographs and recordings used in promotion: until you object or withdraw consent
- Cookie and pixel data: for the retention period of the provider, as stated in the cookie banner
8. Cookies and tracking technologies
Our website uses cookies and similar technologies. In addition to those strictly necessary for the site to function, we use:
- Meta Pixel (Meta Platforms Ireland Ltd) — to measure advertising performance and build audiences for our campaigns on Facebook and Instagram
- Website builder and lead-capture cookies (Thrive Themes / Thrive Leads) — to display forms and remember whether you have already seen or submitted them
- Embedded third-party content — AddEvent calendar embeds and Google Fonts, which load from the providers' servers and therefore receive your IP address
Cookies and pixels that are not strictly necessary are set only after you give consent through the cookie banner. You can change or withdraw your choice at any time through the "Cookie settings" link in the footer. Blocking non-essential cookies does not affect your ability to purchase or use a program.
9. Your rights
You have the right to request access to your data, correction of inaccurate data, erasure, restriction of processing, portability, and to object to processing based on legitimate interests, including profiling for direct marketing. Where processing is based on consent, you may withdraw it at any time.
To exercise any right, write to info@darionovak.com. We reply within one month.
You also have the right to lodge a complaint with the Croatian supervisory authority: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, https://www.google.com/url?q=http://www.azop.hr&source=gmail&ust=1788356931288000&sa=E — or with the authority of your own country of residence.
10. Security
We use appropriate technical and organisational measures, including access control, encrypted transmission and restricted sharing of participant data, to protect personal data against unauthorised access, alteration, loss or disclosure.
11. Changes to this policy
We may update this policy. The current version and its date are always published on this page.