GDPR – European General Data Protection Regulation
(in force since 25 May 2018)

What is Personal Data?

Personal data is any information relating to an identified or identifiable natural person (individual), regardless of the form in which it is expressed. It consists of data by which you can be identified. Examples of personal data include: personal identification number (EMŠO), tax number, health insurance number, telephone number, vehicle registration number, personal bank account number, etc.

Special categories of personal data include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health, or data concerning a natural person's sex life or sexual orientation, criminal convictions, etc.

How and for how long will we store your personal data?

Personal data collected on the basis of your explicit consent will be stored in an electronic or physical filing system of personal data.

Collected personal data may be kept in the filing system solely within our institution until the withdrawal of your consent to the processing of personal data, or for as long as necessary to achieve the purpose for which the data is processed or to satisfy statutory requirements. All personal data filing systems are diligently protected using modern technical security measures. We commit not to disclose your personal data to third parties without prior notice and obtaining your explicit written consent, nor to process it in any manner incompatible with our information purposes.

Withdrawal of consent for personal data processing

You have the right to withdraw your consent to the processing of personal data at any time, for one or all processing purposes to which you previously agreed. A written statement of withdrawal of consent can be sent to our postal address or to the email address available on our website.

Upon receipt of your withdrawal of consent, our institution will erase all collected personal data and immediately cease using it.

Your rights regarding personal data protection

The regulation grants you comprehensive rights regarding the protection of your personal data, including:

• The right to erasure ("right to be forgotten") and rectification of inaccurate personal data.
• The right to request that the controller rectifies or completes inaccurate or incomplete personal data relating to you without undue delay.
• The right to request the immediate erasure of personal data being processed about you.
• The controller must notify you without undue delay of any rectification, completion, or erasure of personal data.

Right to restriction of processing

• You have the right to request that the controller restrict the processing of your personal data in the event of inaccuracy, unlawfulness, cessation of the purpose of processing, or the lodging of an objection.
• Right to data portability.
• You have the right to request from the controller the personal data concerning you that is being processed.
• You have the right to request that the controller transmit the personal data directly to another controller, where technically feasible.

Right to object

In addition to the right to withdraw consent, you may at any time object in writing to the processing of your personal data for informational or direct marketing purposes. In the event of an objection to processing for marketing purposes, the controller will immediately cease using your personal data for such purposes.

You can exercise any of these rights by submitting a written request to the controller. You may send your request by postal mail to our address or by email to the address provided on our website.

Right of access to personal data concerning you

You have the right to obtain confirmation from the controller as to whether or not personal data concerning you is being processed, and where that is the case, access to the personal data and the following information: the purposes of processing, the categories of personal data concerned, the recipients of your personal data, the envisaged retention period, and the source of the personal data.

Right to lodge a complaint

In the event of a violation of personal data protection rules, you have the right to lodge a complaint against the controller with the competent supervisory authority: Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Zaloška 59, 1000 Ljubljana, or via email: gp.ip@ip-rs.si.

Important information regarding the processing of your personal data

We undertake to process all collected data strictly within the scope of the stated purposes of personal data management, and in compliance with the Personal Data Protection Act, relevant sector legislation, and Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (GDPR), which entered into force on 25 May 2018.

Personal data protection policy of the public institution Kulturni dom Nova Gorica

Data Controller Details

Javni zavod Kulturni dom Nova Gorica
Bevkov trg 4, 5000 Nova Gorica, Slovenia
Phone: +386 5 33 540 10
Website: www.kulturnidom-ng.si
Email address

Data Protection Officer (DPO) Details

Company / Person: DATAINFO.SI, d.o.o. / Benjamin Lesjak
Role: Data Protection Officer (DPO)
Phone: +386 2 620 43 00
Website: www.datainfo.si
Email address