A centre for security, development and the rule of law

Privacy policy

Privacy policy

PRIVACY POLICY

 

We are aware of the importance of personal data privacy, especially as we use such data to provide relevant services and information to our visitors. The EU General Data Protection Regulation (GDPR), adopted by the European Union, mandates high standards on how your personal data is collected, processed and stored, gives you the right to access the personal data and request its erasure, and much more. In accordance with the legislation and recognizing the importance of this matter, we have prepared below explanations on the protection of your personal data when visiting this website and the rights you have as data subjects. Please read these explanations carefully before giving us consent to collect or process your personal data.

 

WHAT IS PERSONAL DATA?

 

Personal data means any information relating to an identified or identifiable natural person, i.e. an individual, regardless of the form in which it is expressed. Personal data is information that identifies you as an individual, in particular by reference to identifiers such as a name, surname, e-mail address, etc.

 

The controller of personal data on this website is the Institute DCAF Ljubljana, Gospodinjska ulica 8, 1000 Ljubljana, Slovenia.

 

WHERE DO WE STORE YOUR PERSONAL DATA AND FOR HOW LONG?

 

The personal data that you provide to us digitally is stored on rented servers of the hosting service provider but can also be stored at companies whose tools we use. For example, the provider of the e-mail communication tool stores information about the recipients. We will retain the collected personal data no longer than is necessary to achieve the purpose for which it is being processed, to comply with legal obligations, or until the moment you have decided to withdraw your consent.

 

COLLECTION, PROCESSING AND USE OF PERSONAL DATA

 

We will collect, manage and process your personal data as needed to comply with our legal obligations or on the basis of your explicit consent. The data collected by your consent are primarily intended for communicating with you and improving our services. We undertake that we will not share or sell your personal data to a third party without giving you prior notice and obtaining your explicit written consent.

 

WITHDRAWAL OF CONSENT FOR PROCESSING PERSONAL DATA

 

At any time, you have the right to withdraw your consent for the processing of personal data for a particular purpose or for all purposes with which you have consented.

 

For the withdrawal of your consent, please send a written request to: Institute DCAF Ljubljana Gospodinjska ulica 8, 1000 Ljubljana, Slovenia,  or by e-mail to: info@dcaf-ljubljana.si.

 

In case of withdrawal of your consent, we will delete all collected personal data or exclude them from automatic processing in accordance with the specificities of your request.

 

Please be aware that the withdrawal of your consent will not impact the lawfulness of processing based on your consent before it was withdrawn and the use of personal data as needed to comply with our legal obligations.

 

YOUR RIGHTS IN THE FIELD OF PERSONAL DATA PROTECTION

 

  • Right to erasure or right to be forgotten

 

At any time, you have the right to obtain from us the correction of inaccurate or incomplete personal data.

 

 

At any time, you also have the right to obtain from us access to the personal data that we have collected and the right to obtain immediate erasure of your personal data.

 

Whenever we correct inaccurate or incomplete data or delete your personal data, we are obliged to notify you about this without undue delay.

 

  • Right to restriction of processing

 

At any time, you have the right to obtain from us restriction of processing of personal data, which applies under specific circumstances such as when your personal data is found inaccurate, the processing activity is unlawful however you oppose to the erasure of your personal data, we no longer need your personal data for the purposes of processing, or when objecting to the processing of your personal data.

 

  • Right to data portability

 

At any time, you have the right to receive the personal data we are processing concerning you.

 

 

At any time, you have the right to request that we transmit those data another controller.

 

  • Right to object

 

Any use of your personal data for direct market purposes requires your explicit consent. In the case that you receive direct marketing messages from us, you have the right to request that we stop processing your personal data for such purposes.

 

  • Right of access

 

 

At any time, you have the right to obtain from us confirmation as to whether your personal data are being processed and, where that is the case, access to the personal data and the following information: the purpose of the processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be disclosed, the envisioned period for which the personal data will be stored and the source of the personal data.

 

  • Personal data breach

 

In the case of a personal data breach, we will without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the competent supervisory authority. 

 

  • Important information concerning the processing of personal data

 

We commit ourselves to processing all collected personal data only in the context of the aforementioned purposes and in accordance with the Law on Personal Data Protection and other relevant legislation, as well as in accordance with Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data (GDPR).