To enable you better user experience and full functionality of the web site, this site stores cookies.

We use analytical cookies Google Analytics only with your consent. I accept I decline More information

Privacy Policy for the Webpage

Date of entering into force  December 17th, 2018.

(updated on 13th March 2019)

Data Controller

The company MPG d.o.o., Nova Ves 17, 10000 Zagreb, Croatia, VAT: HR35677542029, e-mail: , phone: +38516064600, respects your privacy and undertakes to protect it during and after your visit to this website (further in the text "Site") as well as on our confenences. In that sense, MPG d.o.o. acts as a Data Controller ("Data Controller "). This Privacy Policy ("Privacy Policy") provides insight into our procedures regarding the collection and processing of personal data.

If you have any questions or comments regarding the Site or Privacy Policy, you can contact us via the contacts listed on the website: e-mail , phone: +38516064600.

Types of personal data that will be processed

MPG d.o.o. collects and processes your personal data (for example, information that can directly or indirectly identify you, in particular by identifiers such as name, surname, address, e-mail address, phone number, OIB, company name if personal data are included in the name of the company if you provide them ("Personal Information"), when:
•    accessing our website
•    contact us via the info e-mail indicated on the Site,
•    contact us or connect with us through social networks,
•    participate in our conferences and events
•    photographing and video recording conferences that we organize,
•    fill in the application form to participate in the conferences that we organize (register / create an account)
•    fill out a survey at the conference
•    participate in the prize contests that we organize
•    we issue a receipt for our product / service in accordance with the Accounting Law
•    we cooperate with you as our suppliers and business partners
•    you come as a participant or lecturer at a conference we can ask you for your ID to determine your identity according to the information you provided in the registration form
•    accessing the content of the conference for which you have applied (lectures, sponsorships zones, entertainment zones, wincoin shops, meals, etc) to determine your identity by reading your accreditation through the RFD reader to determine your identity according to the information you provided in the registration form.

Personal data is processed on the basis of your consent, legitimate interest, for the fulfillment of the contractual obligation and on the legal obligation. Personal Data Processing is limited to the purpose for which they were collected in accordance with the terms of this Privacy Policy.

MPG d.o.o. will not collect Personal Data unless you provide them voluntarily, except for certain Personal Data collected through the Information Systems and Programs used for the Site operation, whose transmission is inherent in the use of Internet communication protocols (for example, IP address when you contact us) and will not require more information than is required for participation in certain activities. If you do not want to provide us with Personal Data (except Personal Data relating to the use of Internet Communication Protocols that are usually collected when visiting the Website), you can still access our Site, but you will not be able to fill in the application form to participate in the conferences that we organize (register / create an account), participate in the prize contests that we organize  or contact us.

At the entrance to the conference area, which will be video recorded and photographed, there is clearly published notice of photographing and video recording and it is clearly indicated that you can be photographed and video recorded, that is our legitimate interest as organizer of the conference. If you do not want to be photographed and recorded, please do not enter the location of the conference.

Video records and photographs where you can recognize yourself will not be published anywhere without your previously consent unless the photographs /video records were taken in the group view.
Processing your personal data for which you have explicitly given us your consent when applying for a conference or at the conference itself, has for the basis consent and the associated rights in accordance with GDPR EU 2016/679 regulations.
Providing information from the visitors / senders is voluntary and there is no contractual obligation or requirement that the visitor / sender does it. Data Controller will not create profiles of collected information and it will not be the existence of automated decision-making.
By registering on the web user gets user account information - username and password. The user is obligated to keep his / her account data and is fully responsible for any damage caused by unauthorized use of his or her account. By ending the registration, the user accepts responsibility for all activities caused by the use of the service at .

In order to fulfill our contractual obligations and to comply with legal and by-laws, we are obliged to process your personal data when you buy our products or use our services, we issue a receipt for all customers in accordance with the Accounting Law. In particular, we are processing personal data of our business partners and suppliers (eg, agreements on the execution of services), along with the contact details of business partners who are physical persons and their employees (eg name and surname, official telephone number / cell phone number, e-mail address ).

If you participate in the prize contests that we organize, we will only collect the necessary personal data to complete the purpose of the prize contest. If we have a requirement that only students may participate in prize contest, we may ask you for proof of study to check if you are eligible as a participant in the prize contest.

• Google Analytics and Google Tag Manager

This website uses cookies to provide better user experience and functionality.

On the Site, we use Google Analytics and Google Tag Manager, Google Inc.'s Web Analytics, 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google") that uses the so-called "cookies”, small files stored on your computer. We collect the log information and information about how many visitors were to specific pages of the Site. Google analyzes the use of the Site and cookies to allow you to analyze Site visits by assigning a unique randomly generated ID to your device that your device identifies when visiting the site later. The lifespan is 24 months, and the cookie provider is Google. If you visit this site for the first time, a notice will be displayed on this page to give us the approval to use cookies. If you give your approval, we will store the cookie on your computer and this notification will not appear until the cookie has a valid lifespan. After the expiration of the cookie duration or if the cookie is erased beforehand, the notification will reappear on your next visit to the Site and the invitation to resubmit will reappear. Information that Google collects regarding your use of the Site (for example your starting URL, the site you are visiting, the web browser you are using, your language preferences, the computer system you are using, or the resolution of your display) are uploaded to Google's US server, they are stored, analyzed and available to us in an anonymous form. Your use data is not associated with your full IP address. On this web page we have activated the IP anonymization function from Google so that your last 8 numbers (type Ipv4) or the last 80 bits (type Ipv6) of your IP address will be deleted.

Google has been certified in connection with the EU-US Privacy Shield so that data processing by Google in the United States applies an appropriate level of personal data protection. You can retrieve your privacy for web analysis at any time by downloading and installing the Google Browser Plugin. For more information about Google Analytics, please see the Google Analytics Terms of Use, the Google Analytics Security and Privacy Policy as well as Google's Privacy Statement.


In accordance with the legitimate interests, the organizer MPG d.o.o. (Data Controller) can notified the conference participants who keep their user profiles active with information about next conferences that MPG d.o.o. organize within the business - technology themes and all in accordance with their interest shown by signing up and registering at the Windays conference.

Personal data will be kept until participants withdraw consent, deactivate their user profile, or until they object to our contact based on a legitimate interest.

For sending the information we use a Microsoft Office 365 system that complies with the General Data Protection Regulation EU 2016/679.

Social networks

On your web site, we can integrate components of Facebook, You Tube, LinkedIn and Twitter.

„Facebook“ is a social network, operated by Facebook, Inc., 1 Hacker Way, Menlo Park, CA 94025, United States. If a person lives outside of the United States or Canada, Data Controller is Facebook Ireland Ltd., 4 square Grand Canal, Grand Canal port, Dublin 2, Ireland. The Privacy Policy provided by Facebook is available at  and provides information on collecting, processing and using personal data on that social network.

„Twitter“ is a social network, operated by Twitter, Inc. 1355 Market Street, Suite 900, San Francisco, CA 94103. If a person lives outside of the United States, Data Controller is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 IRELAND. The Privacy Policy provided by Twitter is available at  and provides information on collecting, processing and using personal data on that social network.

"YouTube" is an Internet service for the video content distribution and Data Controller for EGP and Swiss citizens is Google Ireland Limited, a company incorporated and operated under the law of the Republic of Ireland (registration number: 368047), at: Gordon House, Barrow Street, Dublin 4, Ireland. Privacy Policy provided by You Tube is available at  where they provide information on how they process personal data and protect your privacy when using the YouTube Tube service.

"LinkedIn" is a business social network and for operating in the EU, EGP and Switzerland, Data Controller is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The Privacy Policy provided by LinkedIn is available at:  and provides information on the collection, processing and the use of personal data on that social network.

The purpose, the legal basis of the processing and possible consequences of nondisclosure of Personal Data

When you provide your Personal Data, we will restrict the use for the purpose for which they have been collected in accordance with the terms of this Privacy Policy. Use of your Personal Data includes:

A.    acting according to your request eg answering your questions and comments, receiving registration forms for participating in the conference, communicating with you about your activities at the Site, usage of your photos according your consent, receiving filled surveys, receiving your application to participate in the winning contests that we organize
B.    the investigation of suspicion of fraud, harassment, physical threats or other Site rules violations or any suspicious behavior we consider to be inappropriate;
C.    processing photohraphs / video records of participants at conference organized by MPG d.o., for the purpose of promoting conference, sending newsletters to participants in accordance with interest they shown by signing up and registering at the Windays conference,
D.    invoicing customers, determining your identity as a participant or a lecturer of the conference based on a comparison of your identity card and / or accreditation and the data you entered in the registration form, processing data of our bussiness partners and suppliers.

Giving Personal Data for purpose under A. is voluntary, but in certain situations it is also necessary and nondisclosure of Personal Data can disable MPG d.o.o. to respond to your requests. Data processing under B. and C. is based on a public and legitimate interest and data processing under D is in accordance with the contractual obligation. Our legitimate interest is to record / photograph the conference participants for the promotion of the conference so that it becomes recognizable in the media and better in the future. If we collected your consent for video recording / photographing and publishing the recordings / photographs, such processing has a consent for legal basis. In case you give us consent for marketing purpose, you can in any case withdraw it.


Your Personal Data may be disclosed in the following cases:

•    subjects we use to organize and implement conference (eg photographers of the conference, digital agency that is Administrator of the WinDays Facebook page)
•    authorized PR agencies and subjects that are directly involved in the implementation and realization of specific conference
•    subjects that maintain our IT systems,
•    employees of the MPG d.o.o. which are authorized by MPG d.o.o. for the processing of Personal Data in specific project, which are underwritten obligations of confidentiality
•    law enforcement agencies and law enforcement authorities when required by applicable law, legitimate or public interers (to protect and defend the rights or property of MPG d.o.o and the Site, or to act in urgent circumstances to protect the personal safety of users of MPG d.o.o, the Site or the public )
•    legal advisers of MPG d.o.o. in the case of the need to forward data for legal proceedings,
•    the official sponsor of the conference (Microsoft) for their needs only in accordance with the appropriate legal basis (only for the purpose of creating conference content)
•    other sponsors participating in the conference only with your explicit consent and only certain information: name, last name and email address.
•    Media houses and digital marketing agencies for the purpose of publishing photographs and video records in print media, on websites and social networks

Transfer of Personal Data to Third Countries

MPG d.o.o. transfers Personal Data outside the EEG and Switzerland, especially in the US, but always on the basis of data protection measures in accordance with General Data Protection Regulation (EU)216/679., in particular on the basis of Privacy Shield, thus ensuring adequate protection personal data.


MPG d.o.o. will process your Personal Information only as long as it is necessary to achieve the foregoing purposes. Your Personal Data will be processed until you exercise your right to complaint or until you withdraw the approval, unless there is another legal basis for processing.

MPG d.o.o. will process your Personal Information that have collected from info e-mails within 6 months of the receipt of the inquiry and the data of your accounts created for the Windays Conference application will be keep unlimited to your revocation or will be anonymize (personal data make it anonymous so that the identity of the data subject can no longer be established) immediately after the end of the purpose (end of the conference).

Personal data from our business partners and suppliers are kept up to the end of business cooperation and we do not deliver them to third parties or third countries.

If you have signed up for participation in the prize contest, your personal data will be deleted after 120 days from the end of the contest, except for the winner's personal data that will be retained in accordance with the Law obligation for evidence of delivered prize.

Personal data that we process on the basis of contractual performance and legal obligation are stored in accordance with the applicable regulations in which the storage time has been established (eg Accounting Law).

Exceptionally, your personal data will be kept longer than the above deadlines when it is necessary to achieve mutual legal requirements.

After expiration, personal data stored on paper will be destroyed in a safe manner, such as cutting or burning, while the data stored in electronic form will be irrevocably deleted.

Your rights

MPG d.o.o. informs you that, in accordance with and to the extent permitted by applicable law, you have the right to access to your personal data, right of rectification or erasure of personal data or restriction of processing as well as the right to data portability and the right to lodge a complaint with a supervisory authority. When the legal basis for the processing is approval, you always have the right to withdraw it. When you withdraw the approval, we will suspend the processing of your personal data for which you have withdraw the approval without affecting the lawfulness of processing based on approval before its withdrawal.

Safety practices

Security of your personal data is extremely important to us, so we set the appropriate physical, electronic and control procedures to protect the information we collect. However, due to the inherent open nature of the Internet, we can not guarantee that communications between you and us, or information stored on the Site or on our servers will be completely secure from unauthorized access by third parties. To the fullest extent permitted by applicable law, we shall exclude any liability or liability for any damages that you may have suffered as a result of any loss, unauthorized access, misuse or alteration of any information you submit to the Site.

Changes and updates to our Privacy Policy

MPG d.o.o. reserves the right to modify or update these Privacy Policy at any time and without prior notice. Please periodically check any changes or updates to our Privacy Policy, which will be posted here and will show updated date of entry into force on the first page of Privacy Policy if any changes or updates will be made.

Contact information

If you have any questions or comments regarding the Site or Privacy Policy, you can contact us via our e-mail  or via e-mail , phone: +38516064600.

Data Controller:

MPG d.o.o.
Nova Ves 17, Centar Kaptol,
10000 Zagreb, Croatia

Tel .: +385 (0) 1 6064 600