Privacy policy

This policy describes how Apriori World d.o.o. ("Human2Human", "we", "us") collects, uses, and protects personal data as part of our business and the human2human.education website.

1. Data controller

The data controller is Apriori World d.o.o., based in Zagreb, Croatia. For questions contact us at info@aprioriworld.com.

2. What we collect

We collect only data you voluntarily submit through our form:

• Full name
• Email and phone number
• Inquiry type (school or consulting)
• For organizations: company name, team size, and role (optional)
• For individuals: selected cohort and payment preference (personal or through a company)
• The content of your message

We also log your IP address and user agent on submission to prevent abuse (rate limiting, spam defense). These logs are kept for up to 30 days.

3. Purposes of processing

• Responding to your enquiry and follow-up communication
• Preparing a proposal or call
• Legal obligations (accounting, record keeping of business communication)

4. Legal basis

Processing is based on your consent given when submitting the form (Art. 6(1)(a) GDPR) and on our legitimate interest in responding to business enquiries (Art. 6(1)(f)).

5. Recipients

We use Resend (Resend Inc.) to send emails. To protect the form from spam we use Google reCAPTCHA (Google Ireland Ltd.) and, when enabled, Cloudflare Turnstile (Cloudflare, Inc.) - on submission your browser loads their scripts and they may process data under their own privacy policies. For hosting and anti-spam mechanisms we use our EU-based hosting provider. We do not sell or share data with third parties for marketing purposes.

6. Your rights

You have the right to:

• access your data
• correct inaccurate data
• erase data (right to be forgotten)
• restrict processing
• data portability
• object to processing
• lodge a complaint with the supervisory authority (in Croatia: AZOP)

To exercise these rights contact info@aprioriworld.com.

7. Cookies

This site does not use marketing or tracking cookies. If analytics is enabled we use Plausible - a service that does not use cookies and does not track individual users. Google reCAPTCHA may set cookies necessary for risk assessment, but only activates when you submit the form.

8. Automated decision-making and the EU AI Act

We do not carry out automated decision-making or profiling that produces legal effects on you. reCAPTCHA uses risk scoring solely to filter spam and does not make decisions about you. Our training program is about the use of artificial intelligence, but this website itself does not run AI systems that process your personal data.