- The controller and data protection officer
- The purposes of the processing and the data we process
- Legal ground for the processing of personal data
- Transmitting the personal data
- Transfers of personal data to third countries
- Storage periods
- The rights of data subjects
- Data protection
2. The controller
3. The purposes of the processing and the data we process
We collect and process your personal data with the following purposes of the processing:
- to provide you with information or services that you have requested from us. This information may include your name, address, email address, phone number, and other relevant information;
- to keep in contact with you as our business partners and keep you up to date on our business activities and events. This information may include your name, address, email address, phone number, title, company and other relevant information;
- to fulfill our contractual obligations towards you. This information may include your name, address, email address, phone number, title, workplace, company, type of cooperation with us;
- to improve our website. This information may include your IP address, geographical location, device information, browser type, referral source, length of visit, operating system, number of page views, which pages you viewed and similar information;
- to comply with or abide by legal obligations or requirements;
- to send promotional messages to you relating to our activities, including invitations to other events. This information may include your name, address, email address, phone number, title, company and other relevant information;
- for recruiting new employees. This information may include your name, address, email address, phone number, date of birth, information regarding your education and experiences, CV, photo and other relevant information;
- for successful and effective organization of our events, including promotional activities and publications of audio, video and photographic documentation from events. This information may include your name, title, company, email address, phone number; short biography with picture (speakers/performers), audio, video and photographic documentation from events.
4. Legal ground for the processing of personal data
We process you personal data on the following legal grounds:
- the performance of a contract with you in compliance with Article 6(1)(b) GDPR, when processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
- our legitimate interest in compliance with Article 6(1)(f);
- processing is necessary in order to protect the vital interests of the data subject or of another natural person, in compliance with Article 6(1)(d);
- your consent in compliance with Article 6(1)(a) GDPR, when the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
- to comply with a legal obligation to which we are subject in compliance with Article 6(1)(c) or 6(1)(e).
5. Transmitting personal data
Following the purposes of the processing, ANALYSIS ADRIA can transmit your personal data to the following subjects:
- our affiliated companies within the ANALYSIS ADRIA group;
- contractual data processors, who might process personal data in our name and in accordance with our written instructions and for the purposes as stated above;
- to other recipients, if obliged to do so subject to a court order or order issued by other governement authority or valid law.
6. Transfers of personal data to third countries
We may transfer your personal data to the recipients, located outside the EU/EEA (hereinafter referred to as: »third countries«), namely to our affiliated companies and contractual data processors. Such transfers take place under the safeguard measures as defined in GDPR, if and to the extent that is possible.
6.1. The social media platforms
The social media platforms include TikTok, Facebook, Youtube, Instagram, etc. TikTok, Facebook, Youtube and Instagram are independent personal data processors, who will process your personal data following their privacy policies, such as https://www.facebook.com/policy.php , https://www.tiktok.com/legal/privacy-policy?lang=en&appLaunch=app in https://policies.google.com/privacy?hl=en-US.
6.2. Third parties services (Google)
6.3. Links to other websites
6.4. Transfer of personal data to USA
While using ANALYSIS ADRIA website, your personal data could be transfered and processed in the USA or other third country or it is not possible to prevent such transfer and further process by social media platforms. In such cases, it is possible that the level of data protection does not attain the levels of data protection, as defined in GDPR.
Transfer of personal data to USA / cessation of privacy shield application:
According to the Court of Justice of the European Union decision no. C-311/18, dated from 16th July 2020, the s.c. privacy shield, which had previously and in certain circumstance confirmed an adequate data protection level, no longer represnets a valid legal basis for transfer of personal data from EU to the USA.
What can the personal data transfer to USA mean for you as user and what are potential risks thereof?
The risks derive from the powers and functions of american intelligent agencies and legal situation in the USA, which, according to the Court of Justice of the European Union, no longer ensures an adequate level of personal data protection.
The standard contractual clauses, as accepted by the Commission in 2010 (Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council, 2010/87/EU) are no longer valid. The new standard contractual clauses were adopted by the Commission on 4th June 2021. Until 22nd December 2021, the old contractual clauses remain in force, if concluded before 27th September 2021. After 22nd december 2021, the new contractual clauses only will serve as a valid ground for data transfer.
What measure are we taking to ensure legal transfer of data to USA?
Whenever american providers offer such options, we opt for personal data processing on servers within the EU. In this way, the american intelligence agencies do not have access to personal data thereon.
In case of further use of tools, originating from the USA, we adopt the following measures:
If possible, we will always inform you before any US tools would be used and require your consent. The risks, related to the transfer of personal data to USA, are defined above.
We aim to conclude the standard contractual clauses with the suppliers from the USA.
7. Storage periods
We will process your personal data only for as long as reasonably necessary to fulfill the purposes, for which it was collected or received or to comply with any applicable legal requirements. Where your consent forms the legal basis for the processing of personal data, we will only process your data until your consent had expired or had been withdrawn.
8. The rights of data subjects
The subjects to who the personal data apply have the following rights, which shall be enforced free of charge. Before ensuring the individual’s rights, ANALYSIS ADRIA shall verify its identity. An individual shall make a request on a written form, sent to Mrs. Andreja Kastelic or through email on email@example.com .
ANALYSIS ADRIA shall fulfill such request within 1 month, except when the complexity of the request or numerous requests require longer time period. In the latter case, this period can prolonger for another 2 months period. ANALYSIS ADRIA shall inform the individual about such extension, as well as about the reasons thereof.
- Right of access by the data subject: subject to request, data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from the data subject, any available information as to their source;
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Upon request, ANALYSIS ADRIA shall make a copy of all personal data that is being processed and present it to the data subject.
- Right to rectification: The data subject shall have the right to obtain from ANALYSIS ADRIA without undue delay the rectification of inaccurate personal data concerning him or her.
- Right to erasure (»right to be forgotten«): The data subject shall have the right to obtain from ANALYSIS ADRIA the erasure of personal data concerning him or her without undue delay and ANALYSIS ADRIA shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
- the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- the data subject withdraws consent on which the processing is based and no other legal ground for processing exists;
- the data subject objects to the processing and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
- the personal data have been unlawfully processed;
- the personal data have to be erased for compliance with a legal obligation in Union or Slovenian law.
- Right to restriction of processing: The data subject shall have the right to obtain from ANALYSIS ADRIA restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by the data subject;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
- ANALYSIS ADRIA no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing, pending the verification whether the legitimate grounds of the controller override those of the data subject.
- Right to data portability: The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to ANALYSIS ADRIA, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from ANALYSIS ADRIA to which the personal data have been provided, under the conditions set out in Article 20 GDPR.
- Right to object: Subject to conditions, set out in Article 21 GDPR, the data subject has the right to object the processing of personal data, concerning him or her.
- The withdrawal of consent: When the processing is based on the individual’s consent, he or she has the right to withdraw this consent at any time. Such withdrawal has no impact on the lawfulness of processing based on consent before the consent was withdrawn.
An individual shall file a complaint or make a request regarding the processing of his or hers personal data through email: firstname.lastname@example.org or mail: Tržaška cesta 515, 1351 Brezovica pri Ljubljani. You also have the right to lodge a complaint with the competent supervisory authority. Contact information: Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, phone: 00386 1 230 97 30, email: email@example.com, DPO for the supervisory authority: firstname.lastname@example.org.
9. Data protection
All personal data shall be protected according to the valid data protection laws as well as ANALYSIS ADRIA internal acts. The processed data shall not be used for any other purpose apart from those the data was collected for. ANALYSIS ADRIA takes all technical and organisational measures necessary to ensure high level of personal data protection within its information systems as well as providing the rights of data subjects.
What are cookies?
Different types of cookies
There are two types of cookies:
- Non-persistent cookies (also called per-session cookies) are temporary and are not placed on your system’s hard drive. They are automatically discarded when the Web browser is closed;
- Persistent Cookies are stored on a user’s device to help remember information, settings, preferences, or sign-on credentials that a user has previously saved. The technologies We use may include:
- Web Beacons. Certain section of your Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, the count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).
We use both Session and Persistent Cookies for the purposes set out below:
- Necessary / Essential Cookies
Type: Session Cookies
Administered by: Us
Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users and prevent fraudulent use of user
accounts. Without these Cookies, the services that You have asked for cannot be provided, and We only use these Cookies to provide You with those services.
- Cookies Policy / Notice Acceptance CookiesType: Persistent Cookies
Administered by: Us
- Functionality CookiesType: Persistent Cookies
Administered by: Us
Purpose: These Cookies allow us to remeber choises You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal Experience and to avoid You having to re-enter your preferences every time You use the Website.