1.) About the Privacy Policy
The purpose of the Privacy Policy of AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana (hereinafter: "Privacy Policy") is to inform users of AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana's services and other persons (hereinafter also referred to as "individuals") about the purposes and legal basis for the processing of personal data by the company AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana, Kardeljeva ploščad 1, 1000 Ljubljana (hereinafter: "Company") and the rights of individuals in this area.
The Company takes special care for the security of your personal data. All personal data provided are treated confidentially and are used only for the purpose for which they were provided. We manage your personal data with the utmost care, in compliance with applicable legislation and the highest standards of data processing. Among other measures, we ensure the security of your personal data through appropriate organizational measures, work procedures, advanced technological solutions, and external experts with the aim of providing the most effective protection of your personal data. We use an appropriate level of protection and reasonable physical, electronic, and administrative measures to protect collected data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data, or unauthorized access to personal data that have been transferred, stored, or otherwise processed.
At the same time, this Privacy Policy further explains the consent you have given for the processing of your personal data.
In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: "General Data Protection Regulation"), the Privacy Policy includes the following information:
- contact information of the company,
- purposes, legal bases, and types of processing of various types of personal data of individuals,
- retention periods for different types of personal data,
- rights of individuals regarding the processing of personal data,
- the right to lodge a complaint regarding the processing of personal data,
- validity of the Privacy Policy.
2.) Personal Data Collected by the Company
If you are only a visitor to the website, we collect data about you only through the use of cookies. If you are a user of services or a subscriber of services offered by the company, we also collect other personal data necessary for providing the services you have ordered or use. These personal data include:
- first and last name
- contact email address
- contact phone number
- IP address
- data for issuing an offer based on your inquiry (your address, tax number).
3.) Data Controller
The data controller for personal data processed in accordance with this Privacy Policy is AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana, Kardeljeva ploščad 1, 1000 Ljubljana
4.) Categories of Individuals Whose Personal Data Are Processed
This Privacy Policy is intended for all who have ordered and/or use our services, or have submitted an inquiry, as well as those who visit our website.
5.) Purposes and Legal Bases for Data Processing
5.1. Processing Based on Contract:
In the course of exercising contractual rights and fulfilling contractual obligations, the company processes your personal data for the following purposes: identification of the individual, preparation of offers, conclusion of contracts, provision of ordered services, notification of possible changes, additional details and instructions for using services, resolving possible technical problems, objections or complaints, billing of services, and other purposes necessary for the execution or conclusion of the contractual relationship between the company and the individual.
For billing services, based on tax regulations, we also collect and process your address for correct invoice issuance.
5.2. Processing Based on Law:
Based on legitimate interest, we use your personal data to detect and prevent fraudulent use and abuse of services, to ensure stable and secure operation of our system and services, and for information security measures, compliance with service quality requirements, and detection of technical faults in systems and services.
Based on legitimate interest, we also use your personal data for possible enforcement, judicial and extrajudicial debt collection.
In accordance with the General Data Protection Regulation, in case of suspicion of abuse, the company may process data about individuals to an appropriate and proportionate extent for the purpose of identification and prevention of possible fraud or abuse and may, if appropriate, share such data with other service providers, business partners, police, state prosecutors, or other competent authorities. To prevent future abuses or frauds, data on the history of identified abuses or frauds related to the individual, including subscription data and, for example, IP address, may be retained for up to five years after the termination of the business relationship.
5.3. Processing Based on Consent for Personal Data Processing:
Processing may also be based on your consent provided to the company.
Consent may relate, for example, to notifications about offers, benefits, and service improvements provided by the company. The purpose of such notifications is to better tailor services to your needs and wishes and thereby increase their usefulness for you. Notifications are sent through channels you selected in the consent. You can revoke notifications at any time in the manner defined by the Privacy Policy.
You can withdraw or change your consent at any time in the same way you gave it or in another manner defined by the Privacy Policy, whereby the company reserves the right to identify the client. Changes to consent can also be arranged via email to ish@ish.si or by written request sent to the company's registered office.
Withdrawal or change of consent applies only to data processed based on your consent. Your last valid consent received by us is effective. The possibility to revoke consent does not constitute a right to terminate the business relationship with the company.
Data for which you have given consent are processed, in the absence of withdrawal, up to two years after the termination of the business relationship with the company.
6.) Limitations on the Disclosure of Personal Data
If necessary, we will authorize other companies and individuals to perform certain tasks contributing to our services. In such cases, the company may disclose personal data to carefully selected external processors who will enter into a data processing agreement or an equivalent binding document with the company (hereinafter: "Processing Agreement"). We will provide or make such data accessible to external processors only to the extent required for the specific purpose. External processors must not use these data for any other purposes and must comply with at least all data processing standards required by applicable law. External processors are contractually obliged to maintain the confidentiality of your personal data.
The company will also provide personal data to competent state authorities based on justified requests with a legal basis. For example, AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana will respond to requests from courts, law enforcement agencies, and other state authorities, which may include authorities of other EU member states.
7.) Personal Data Retention Period
The retention period depends on the category of individual data. We keep data for no longer than necessary to achieve the purpose for which they were collected or further processed, or until expiration of limitation periods for fulfilling obligations or legally prescribed retention periods.
Billing data and related contact information about individuals may be retained for fulfilling contractual obligations until full payment of the service or at most until expiration of limitation periods related to the claim, which by law can range from one to five years. Invoices are kept for 10 years after the end of the year to which the invoice relates, in accordance with the law governing value-added tax.
Other data obtained based on your consent are kept for the duration of the business relationship and two years after its termination, unless a longer retention period is prescribed by law. If an individual who gave consent for personal data processing has not entered into a business relationship with us, their consent is valid for two years from the date of consent or until its withdrawal.
After the retention period expires, data are deleted, destroyed, blocked, or anonymized unless the law provides otherwise for specific data types.
8.) Rights of Individuals Regarding Personal Data Processing
We ensure the exercise of your rights regarding the processing of your personal data without undue delay. We will decide on your request within one month of receipt. In case of complexity and a larger number of requests, the deadline may be extended by up to two additional months. If extended, we will inform you within one month of receiving the request, including reasons for the delay.
Requests regarding the exercise of your rights are accepted at the email address ish@ish.si or by mail to AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana, Kardeljeva ploščad 1, 1000 Ljubljana.
If you submit a request electronically, we will provide information electronically where possible, unless you request otherwise.
If there is justified doubt about the identity of the individual submitting a request regarding any of their rights, we may request additional information necessary to confirm the identity of the individual to whom the personal data relate.
If requests from the individual to whom the personal data relate are manifestly unfounded or excessive, particularly because they are repetitive, the company may:
- charge a reasonable fee considering administrative costs of providing information or communication or taking the requested action, or
- refuse to act on the request.
We provide you with the following rights regarding the processing of your personal data:
(i) right of access to data
(ii) right to rectification
(iii) right to erasure ("right to be forgotten")
(iv) right to restriction of processing
(v) right to data portability
(vi) right to object
(i) Right of Access to Data
You always have the right to know whether personal data concerning you are being processed and, if so, to access the personal data and the following information:
- purposes of processing,
- types of personal data processed,
- recipients or categories of recipients to whom personal data have been or will be disclosed,
- the envisaged retention period of personal data or, if not possible, the criteria used to determine that period,
- the existence of the right to request from the controller correction or erasure of personal data or restriction of processing of your personal data, or the right to object to such processing,
- the right to lodge a complaint with a supervisory authority,
- where personal data are not collected from you, all available information as to their source.
(ii) Right to Rectification
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed, including by means of providing a supplementary statement.
(iii) Right to Erasure ("Right to be Forgotten")
You have the right to obtain without undue delay the erasure of your personal data when one of the following grounds applies:
- personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
- you withdraw consent on which the processing is based and there is no other legal ground for processing,
- you object to the processing and there are no overriding legitimate grounds for the processing,
- personal data have been unlawfully processed,
- personal data must be erased to comply with a legal obligation under EU or Slovenian law.
(iv) Right to Restriction of Processing
You have the right to obtain restriction of processing of your personal data when one of the following applies:
- you contest the accuracy of the personal data, for a period enabling the controller to verify the accuracy,
- processing is unlawful and you oppose erasure and request restriction instead,
- the controller no longer needs the personal data for processing purposes, but you require them for the establishment, exercise, or defense of legal claims,
- you have objected to processing based on legitimate interests until it is verified whether the legitimate grounds of the controller override yours.
Where processing of your personal data has been restricted according to the previous paragraph, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.
Before lifting the restriction on processing your personal data, we will inform you.
(v) Right to Data Portability
You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the company, where processing is based on your consent and carried out by automated means. At your request, where technically feasible, personal data can be transmitted directly to another controller.
(vi) Right to Object
Where we process your data based on legitimate interest for marketing purposes, you may object to such processing at any time.
We will cease processing your personal data unless we demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
9.) Right to Lodge a Complaint Regarding Personal Data Processing
You may send any complaint regarding the processing of your personal data to the email address ish@ish.si or by mail to AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana, Kardeljeva ploščad 1, 1000 Ljubljana.
If we do not decide on your request within the legal deadline or reject your request, you have the option to lodge a complaint with the Information Commissioner.
You also have the right to lodge a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU data protection regulations.
If you have exercised the right of access to data and after receiving the decision you believe that the personal data you received are not the personal data you requested or that you did not receive all requested personal data, you may submit a reasoned complaint to the company within 15 days before lodging a complaint with the Information Commissioner. We must decide on your complaint as a new request within five working days.
10.) Final Provisions
For all matters not regulated by this Privacy Policy, applicable legislation shall apply.
The company reserves the right to amend this Privacy Policy. We will inform you of changes by publishing them on the official website of AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana 30 days before the changes take effect.
If you have questions about the Privacy Policy or the data we hold about you, please write to us at ish@ish.si.
11.) Validity of the Privacy Policy
This Privacy Policy is published on the AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana website and takes effect on 25.5.2018.
AMEU - Fakulteta za humanistični študij, Institutum Studiorum Humanitatis, Ljubljana