1.) About the Privacy Policy
The purpose of the Privacy Policy of AMEU - Fakulteta ECM (hereinafter: "Privacy Policy") is to inform users of AMEU - Fakulteta ECM's services and other persons (hereinafter also referred to as "individuals") about the purposes and legal basis for the processing of personal data by the company AMEU - Fakulteta ECM, POTREBNO DODATI NASLOV (hereinafter: "Company") and the rights of individuals in this area.
The Company takes special care for the security of your personal data. All personal data provided are treated confidentially and are used only for the purpose for which they were provided. We manage your personal data with the utmost care, in compliance with applicable legislation and the highest standards of data processing. To ensure the security of your personal data, we implement appropriate organizational measures, work procedures, advanced technological solutions, and external experts to achieve the most effective protection of your personal data. We use an appropriate level of protection and reasonable physical, electronic, and administrative measures to protect collected data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data, or unauthorized access to personal data that have been transferred, stored, or otherwise processed.
At the same time, this Privacy Policy further explains the consent you have given for the processing of your personal data.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: "General Data Protection Regulation"), the Privacy Policy includes the following information:
- contact information of the company,
- purposes, legal bases, and types of processing of various types of personal data of individuals,
- retention periods for different types of personal data,
- rights of individuals regarding the processing of personal data,
- the right to lodge a complaint regarding the processing of personal data,
- validity of the Privacy Policy.
2.) Personal Data Collected by the Company
If you are only a visitor to the website, we collect data about you only through the use of cookies. If you are a user of the services or a subscriber to the services offered by the company, we also collect other personal data necessary for the provision of the services you have ordered or use. These personal data include:
- first and last name
- contact email address
- contact phone number
- IP address
- data for issuing an offer based on your inquiry (your address, tax number).
3.) Data Controller
The data controller for personal data processed under this Privacy Policy is AMEU - Fakulteta ECM, POTREBNO DODATI NASLOV
4.) Categories of Individuals Whose Personal Data Are Processed
This Privacy Policy is intended for all who have ordered and/or use our services, or have submitted an inquiry, as well as those who visit our website.
5.) Purposes and Legal Bases for Data Processing
5.1. Processing Based on Contract:
In the course of exercising contractual rights and fulfilling contractual obligations, the company processes your personal data for the following purposes: identification of the individual, preparation of offers, contract conclusion, provision of ordered services, notification of possible changes, additional details and instructions for use of services, resolving potential technical issues, objections or complaints, billing of services, and other purposes necessary for the execution or conclusion of the contractual relationship between the company and the individual.
For billing services, based on tax regulations, we also collect and process your address for correct invoice issuance.
5.2. Processing Based on Law:
Based on legitimate interest, we use your personal data to detect and prevent fraudulent use and abuse of services, to ensure stable and secure operation of our system and services, and for information security measures, compliance with service quality requirements, and detection of technical faults in systems and services.
Based on legitimate interest, we also use your personal data for possible enforcement, judicial and extrajudicial debt collection.
In accordance with the General Data Protection Regulation, in case of suspected abuse, the company may process data about individuals to the appropriate and proportionate extent for identification and prevention of possible fraud or abuse and may, if appropriate, share such data with other service providers, business partners, police, public prosecutor's office, or other competent authorities. To prevent future abuses or fraud, data on the history of identified abuses or frauds related to the individual, including subscription data and, for example, IP address, may be retained for up to five years after termination of the business relationship.
5.3. Processing Based on Consent for Personal Data Processing:
Data processing may also be based on your consent provided to the company.
Consent may relate, for example, to notifications about offers, benefits, and service improvements provided by the company. The purpose of such notifications is to better tailor services to your needs and wishes and thereby increase their usefulness for you. Notifications are sent through channels you have selected in your consent. You can revoke notifications at any time in the manner defined by the Privacy Policy.
You can withdraw or change your consent at any time in the same way you gave it or in another manner defined by the Privacy Policy, with the company reserving the right to identify the client. Changes to consent can also be arranged via email to POTREBNO@DODATI.EMAIL or by written request sent to the company’s registered address.
Withdrawal or change of consent applies only to data processed based on your consent. Your last given valid consent received by us applies. The possibility of revoking consent does not constitute a right to terminate the business relationship with the company.
Data for which you have given consent will be processed, unless revoked, for up to two years after termination of the business relationship with the company.
6.) Limitations on Disclosure of Personal Data
When necessary for the performance of certain tasks contributing to our services, we may authorize other companies and individuals. In such cases, the company may disclose personal data to carefully selected external processors who will enter into a data processing agreement or an equivalent binding document with the company (hereinafter: "Processing Agreement"). External processors will be provided access to such data only to the extent required for the specific purpose. These data must not be used by the external processor for any other purpose and must comply with at least all standards of personal data processing required by applicable law. External processors are contractually bound to maintain the confidentiality of your personal data.
The company may also disclose personal data to competent state authorities based on a justified request with a legal basis. For example, AMEU - Fakulteta ECM will respond to requests from courts, law enforcement agencies, and other state authorities, which may include authorities from other EU member states.
7.) Personal Data Retention Period
The retention period is determined according to the category of individual data. Data are retained no longer than necessary to achieve the purpose for which they were collected or further processed, or until the expiration of limitation periods for fulfilling obligations or legally prescribed retention periods.
Billing data and related contact information about individuals may be retained for the purpose of fulfilling contractual obligations until full payment of the service or at most until the expiration of limitation periods related to the claim, which by law may range from one to five years. Invoices are retained for 10 years after the end of the year to which the invoice relates, in accordance with the law governing value-added tax.
Other data obtained based on your consent are retained for the duration of the business relationship and for two years after termination, unless a longer retention period is prescribed by law. If an individual who gave consent for personal data processing has not entered into a business relationship with us, their consent is valid for two years from the date of consent or until its withdrawal.
After the retention period expires, data are deleted, destroyed, blocked, or anonymized unless the law provides otherwise for specific types of data.
8.) Rights of Individuals Regarding the Processing of Personal Data
We ensure the exercise of your rights regarding the processing of your personal data without undue delay. We will decide on your request within one month of receipt. In case of complexity or a large number of requests, the deadline may be extended by up to two additional months. If extended, we will inform you within one month of receiving the request, including reasons for the delay.
Requests regarding the exercise of your rights are accepted at the email address POTREBNO@DODATI.EMAIL or by mail to AMEU - Fakulteta ECM, POTREBNO DODATI NASLOV.
If you submit a request electronically, we will provide information electronically where possible, unless you request otherwise.
If there is justified doubt about the identity of the individual submitting a request regarding any of their rights, we may request additional information necessary to confirm the identity of the individual to whom the personal data relate.
If requests from an individual are manifestly unfounded or excessive, especially because they are repetitive, the company may:
- charge a reasonable fee considering administrative costs of providing information or communication or taking the requested action, or
- refuse to act on the request.
We provide you with the following rights regarding the processing of your personal data:
(i) right of access to data
(ii) right to rectification
(iii) right to erasure ("right to be forgotten")
(iv) right to restriction of processing
(v) right to data portability
(vi) right to object
(i) Right of Access to Data
You always have the right to know whether personal data concerning you are being processed and, if so, access to the personal data and the following information:
- purposes of processing,
- types of personal data processed,
- recipients or categories of recipients to whom personal data have been or will be disclosed,
- the envisaged period for which personal data will be stored or, if not possible, the criteria used to determine that period,
- the existence of the right to request from the controller correction or erasure of personal data or restriction of processing of your personal data, or the right to object to such processing,
- the right to lodge a complaint with a supervisory authority,
- where personal data are not collected from you, all available information about their source.
(ii) Right to Rectification
You have the right to obtain without undue delay the correction of inaccurate personal data concerning you and to have incomplete personal data completed, including by providing a supplementary statement.
(iii) Right to Erasure ("Right to be Forgotten")
You have the right to obtain the erasure of your personal data without undue delay when one of the following grounds applies:
- personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- you withdraw consent on which the processing is based and there is no other legal ground for processing,
- you object to the processing and there are no overriding legitimate grounds for the processing,
- personal data have been unlawfully processed,
- personal data must be erased to comply with a legal obligation under EU or Slovenian law.
(iv) Right to Restriction of Processing
You have the right to obtain restriction of processing of your personal data when one of the following applies:
- you contest the accuracy of the data, for a period enabling the controller to verify the accuracy,
- processing is unlawful and you oppose erasure and request restriction instead,
- the controller no longer needs the personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims,
- you have objected to processing based on legitimate interests until it is verified whether the legitimate grounds of the controller override yours.
Where processing of your personal data has been restricted according to the previous paragraph, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.
We will inform you before lifting the restriction on processing your personal data.
(v) Right to Data Portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance from the company, where processing is based on your consent and carried out by automated means. At your request, where technically feasible, personal data may be transmitted directly to another controller.
(vi) Right to Object
Where your data are processed based on legitimate interest for marketing purposes, you may object to such processing at any time.
We will cease processing your personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
9.) Right to Lodge a Complaint Regarding the Processing of Personal Data
You may send any complaint regarding the processing of your personal data to the email address POTREBNO@DODATI.EMAIL or by mail to AMEU - Fakulteta ECM, POTREBNO DODATI NASLOV.
If we do not decide on your request within the statutory deadline or if we reject your request, you have the right to lodge a complaint with the Information Commissioner.
You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU data protection regulations.
If you have exercised the right of access and after receiving the decision believe that the personal data you received are not the personal data you requested or that you have not received all requested personal data, you may submit a reasoned complaint to the company within 15 days before lodging a complaint with the Information Commissioner. We must decide on your complaint as a new request within five working days.
10.) Final Provisions
All matters not regulated by this Privacy Policy are governed by applicable legislation.
The company reserves the right to amend this Privacy Policy. We will inform you of any changes by publishing them on the official website of AMEU - Fakulteta ECM 30 days before they become effective.
If you have questions about the Privacy Policy or the data we hold about you, please write to us at POTREBNO@DODATI.EMAIL.
11.) Validity of the Privacy Policy
This Privacy Policy is published on the website of AMEU - Fakulteta ECM and takes effect on 25.5.2018.
AMEU - Fakulteta ECM