Privacy policy
Manager information
Institute Circle is an international non-governmental non-profit organization that was founded in 2008 and works in the field of human rights, humanitarian work, development cooperation and intercultural dialogue.
Contact details:
Email: info@zavod-krog.si I www.zavod-krog.si
Personal data and principles of personal data processing
"Personal data" means any information relating to a specific or identifiable individual (hereinafter: the individual to whom the personal data relates), and an identifiable individual is one who can be directly or indirectly determined, in particular by specifying an identifier, such as name, identification number, location data, online identifier, or by specifying one or more factors that characterize the physical, physiological, genetic, mental, economic, cultural or social identity of that individual.
"Processing" of personal data means any act or set of acts carried out in relation to personal data or sets of personal data with or without automated means, such as collection, recording, editing, structuring, storage, adaptation or modification, retrieval, access , use, disclosure by transmission, dissemination or otherwise making available, adaptation or combination, restriction, deletion or destruction.
As a personal data controller, we ensure that your personal data:
-
processed lawfully, fairly and transparently;
-
collected for specific, explicit and lawful purposes and not further processed in a manner incompatible with these purposes, unless it is further processed for archiving purposes, for scientific or historical research purposes or for statistical purposes,
-
adequate, relevant and limited to what is necessary for the purposes for which they are processed,
-
accurate and, where necessary, properly updated;
-
stored in a form that allows the identification of the individuals to whom the personal data relate only for as long as is necessary for the purposes for which the personal data is processed (personal data may be stored for a longer period if it will be processed solely for archiving purposes, for scientific or historical research purposes or statistical purposes), whereby we also implement appropriate technical and organizational measures to protect the rights and freedoms of the individual to whom the personal data relates,
-
processed in a way that ensures adequate security of personal data, including protection against unauthorized or illegal processing and against accidental loss, destruction or damage through appropriate technical or organizational measures.
Processing of personal data
We only process your personal data in the following cases:
-
the individual to whom the personal data relates has consented to the processing of his personal data for one or more specified purposes;
-
the processing is necessary for the performance of a contract to which the individual to whom personal data relates is a contracting party, or for the implementation of measures at the request of such an individual prior to the conclusion of the contract;
-
processing is necessary to fulfill a legal obligation applicable to the controller;
-
processing is necessary to protect the vital interests of the data subject or other natural person;
-
processing is necessary for the performance of a task in the public interest or in the exercise of public authority assigned to the controller;
-
processing is necessary due to the legitimate interests pursued by the controller or a third party, except when such interests are overridden by the interests or fundamental rights and freedoms of the individual to whom the personal data relate, which require the protection of personal data, in particular when the individual to whom refers to personal data, children (this point is not used for processing by public authorities in the performance of their tasks).
Storage of personal data
We only keep your personal data for as long as we need it for the purposes for which we keep it, to meet your needs or fulfill our legal obligations.
If the regulations governing the retention of documentary and archival material do not specify otherwise, we use the following criteria to determine the retention period of your data:
-
when you are our contractual customer, we store your personal data for the duration of the contractual relationship;
-
when you participate in a promotional offer, we store your personal data for the duration of the promotional offer;
-
when you contact us with an inquiry, we store your personal data for the duration of the inquiry processing;
-
when you have given permission to be informed about our activities, we keep your personal data until you unsubscribe;
-
if cookies are installed on your computer, we keep them for as long as is necessary to achieve their purposes.
We may retain some personal data in accordance with our legal or regulatory obligations, as well as to enable us to administer our rights (for example, to enforce our claims in court) or for statistical or historical purposes. When we no longer need your personal information, we remove it from our systems and records or anonymize it so that we can no longer identify you through it.
Security of personal data storage
We are committed to the safe storage of your personal data, taking into account all appropriate security measures. We contractually require trusted third parties who handle your personal information to do the same. We always do our best to protect your personal information, and when we receive it, we use appropriate procedures and security features to try to prevent unauthorized access. Since the transmission of information over the Internet is not completely secure, we cannot guarantee the security of your data that you submit to our website, so any transmission is at your own risk.
Links to third-party websites and social media logins
Our websites and applications may from time to time contain links to the websites of entities with which we work. If you follow a link to any of these websites, please note that these websites have their own privacy policies for which we are not responsible and are not subject to. Please review these policies before submitting any personal information to these websites.
We also offer you the option to use social media login. If you do so, you should be aware that you are sharing your profile information with us, depending on your preferences on the social media platform. Please visit the relevant social media platform and review its privacy policy to understand how your personal information is shared and used in that context.
Your rights and options
-
Right to withdraw consent: where the processing of your personal data is based on your consent, you can withdraw that consent at any time. You can withdraw your consent in the same way you gave it (e.g. electronically).
-
Right of access: You can ask us for information about the personal data we hold about you, including information about what types of your personal data we hold, what we use it for, where/how we collect it, if not directly from you and to whom it has been disclosed, if applicable, the retention period of your personal data, what your rights are related to your personal data, and information on the possible existence of automated decision-making (including profiling) and the reasons for it, as well as the meaning and intended consequences of such processing for you.
-
Right to rectification: You can ask us to correct inaccurate personal data we hold about you.
-
Right to restriction: you can request us to restrict the processing of your personal data if:
-
dispute the accuracy of your personal data, namely for the period we need to verify the accuracy of the data,
-
the processing is illegal and you request restriction of processing instead of deletion of your personal data,
-
we no longer need your data, but we need to keep it to assert, exercise or defend your legal claims,
-
you object to the processing, at the time of checking whether our legal basis prevails over yours.
-
-
Right to portability: at your request, when technically feasible, we will transfer your personal data to another controller if the processing is based on your consent or is relevant for the performance of the contract and if the processing is carried out by automated means.
-
Right to object: if the processing is based on your consent or is relevant for the performance of the contract and if the processing is carried out by automated means, you can object at any time to the processing of personal data related to these reasons for reasons related to your particular situation. Where your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data for such marketing purposes, including profiling. In addition, you have the right to object to the processing of personal data for reasons related to your particular situation, in relation to these reasons, when personal data are processed for scientific or historical research purposes or statistical purposes, unless the processing is necessary for the performance of the task , which is carried out in the public interest.
-
Automated decision-making, including profiling: you have the right to request from us that a decision based solely on the automated processing of your personal data does not apply to you, if this decision has legal effects for you or significantly affects you.
-
Right to file a complaint: In the event of an alleged violation of applicable privacy laws, you may file a complaint with the data protection supervisory authority in the country where you reside or where the alleged violation occurred.
-
Right to erasure: You can ask us to erase your personal data if:
-
personal data are no longer necessary for the purpose for which they were collected or otherwise processed,
-
the processing is based on your consent and you withdraw your consent, and there is no other legal basis for the processing,
-
the processing is based on your consent and you object to the processing, and there is no other legal basis for the processing,
-
your personal data has been processed illegally,
-
it is necessary to fulfill legal obligations;
-
personal data were collected in connection with the offer of information society services that are offered directly to the child. The processing of a child's personal data is legal when the child is at least 16 years old. When a child is under 16 years of age, such processing is only lawful if such consent is given or approved by the child's parent or guardian.
-
We may require proof of your identity to process your request.
Contact
If you have any questions or concerns about how we treat and use your personal data, or wish to exercise any of the above rights, please contact us at info@zavod-krog.si.