GENERAL TERMS AND CONDITIONS GOVERNING PROCESSING OF PERSONAL DATA
We are aware that the protection of personal data is the fundamental right of natural persons. SIQ Ljubljana (here-in-after referred to as the controller) values privacy and takes utmost care to protect your personal data.
By subscribing to SIQ news and/or information on educational and training events, you declare that you are familiar with these general terms and conditions and that the stated personal data are true and correct, and give your consent to SIQ, the controller, to process your personal data for the purposes for which they were collected.
As a controller, we undertake to process your personal data in accordance with the law regulating the protection of personal data and with the European personal data protection requirements.
Data that we process
– Electronic communication
The purpose of electronic communication is to communicate the most current news of SIQ activities. To this end, we require the following data: your name and surname, e-mail address, IP, date and time of subscription, name of the organization (optional) and job title (optional).
Your data will be used for the purpose of electronic communication of news until your consent is withdrawn.
– Traditional mail (SIQ Report)
The purpose of distributing the SIQ Report by traditional mail is to spread information on SIQ activities and results. To this end, we require the following data: your name and surname, name of the organization and its address (street, post code, city, state), your e-mail address (optional).
Your data will be used for the purpose of communication by mail until your consent is withdrawn.
INFORMATION ON EDUCATIONAL AND TRAINING EVENTS
The purpose is to keep natural persons informed of upcoming educational and training events held by individual SIQ departments with which the natural persons cooperate. To this end, we require the following data: your name and surname, e-mail address, IP, date and time of your subscription, name of the organization and your job title (optional).
Your data will be used for the purpose of electronic communication of information on educational and training events until your consent is withdrawn.
REGISTRATION TO TRAINING
– Registration to training
The registration to training is required for the purpose of the implementation of training, providing proof of attendance, invoicing, and keeping natural persons informed of the training in question.
For a successful registration to training, SIQ requires the following data: name and surname, job title, name of the organization, address of the organization (street, post code, city, state), VAT ID number of the organization, e-mail address, telephone number, info on being registered for VAT (optional), fax number (optional).
– Subscription to receiving information on training events
On registration to training or on visiting the SIQ webpage, natural persons can subscribe to receiving information on selected training events. For the purposes of targeted marketing and spreading information on current training events, data subjects are segmented on the basis of the expressed interest.
Natural persons may themselves select training events of their interest.
– Registration to training in closed groups (a form)
Requiring the completion of the form, we get contact data of a natural person from the organization asking for the implementation of training in a closed group. Natural persons filing registration provide us with the following data: name, surname, e-mail address (optional), telephone number and name of the organization.
1. RIGHTS OF THE DATA SUBJECT
At any time, the data subject shall have the right to demand the rectification, completion, erasure or restriction of processing of personal data concerning him or her by e-mail to the controller’s e-mail address email@example.com.
The data subject shall have the right to obtain from the controller an e-mail confirmation as to whether or not personal data concerning him or her are being processed.
The data subject can unsubscribe from receiving SIQ news and/or information on educational and training events in the following ways:
– By a click on the “Unsubscribe” button which can be found in the footnote of each e-mail of the type;
– By an e-mail to firstname.lastname@example.org.
If the data subject considers that there was a personal data breach, the data subject shall notify the personal data breach to the competent supervisory authority (Information Commissioner).
If the controller wants to use the personal data for other purposes than for those for which they were collected, the controller shall notify that to the subject data and acquire from the subject data a new consent.
2. PERSONAL DATA PROTECTION AND RETENTION PERIOD
The shall protect personal data of data subjects in accordance with personal data protection policies and requirements for safeguarding laid down by the law of the Republic of Slovenia and EU regulations.
Safeguards encompass legal, organizational and appropriate logistic and technical procedures and measures to ensure:
· Security of premises, devices and system software;
· Security of personal data processing application software;
· Security in transmitting personal data and in their transfer;
· The prevention of access to unauthorised person to personal data processing information assets and to personal data files;
· The implementation of regular testing, assessment and evaluation of the efficiency of technical and organizational measures to ensure safe processing;
· The conditions for timely restoration of availability and accessibility of personal data in the event of a physical or technical incident.
The data subject is aware and agrees that the personal data he or she has provided to the controller shall be retained by the controller for the period stated in the section “Data that we process” of this document. Other data may be retained by the controller only for the period necessary to fulfil the purpose for which they were collected after which the personal data shall be permanently erased or rendered anonymous in such a manner that the data subject is no longer identifiable.
EXEMPTION FROM LIABILITY
The controller shall not be liable for damage suffered by the data subject as a result of incorrect, false, incomplete or obsolete personal data provided to the controller by the data subject.
The controller shall be liable for the damage caused by processing only where it has not complied with obligations of the General Data Protection Regulation or legislation regulating personal data protection, or when it has acted contrary to its provisions. The controller shall be exempt from liability if it proves that it is not in any way responsible for the event giving rise to the damage.
3. CONTACT DATA OF THE COLLECTOR
SIQ Ljubljana is available for any further questions regarding the processing of personal data.
Your questions can be addressed to:
Mašera-Spasićeva ulica 10, SI-1000 Ljubljana, Slovenia
email@example.com, + 386 1 4778 100
Slovenian Institute of Quality and Metrology (SIQ Ljubljana) undertakes to protect your personal data in line with the law regulating the protection of personal data.
The data disclosed to us shall be used only for the purpose of circulating news and information material. In no case shall the data be disclosed to a third party.