Ministry of Science and Education,
Address: Zagreb, Donje Svetice 38,
Phone: +385 1 4594 294
1. DATA PROTECTION OFFICER – CONTACT INFORMATION
Mr Ivan Đuzel, phone: +385 1 4594 294, SzZOP@mzo.hr
2. PURPOSE AND LEGAL BASIS FOR PROCESSING OF PERSONAL DATA
2.1. Your personal data that is required to perform official tasks and exercise official authority of the Ministry of Foreign and European Affairs will be processed according to point (e) of Article 6(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation – hereinafter ‘the General Regulation’). Such tasks and authority are regulated by the General Regulation and the Croatian Act on the Implementation of the General Regulation, and include:
- responding to questions and queries
- providing legal advice
- taking actions to ensure the control of compliance with the General Regulation
- conducting procedures relating to objections and complaints addressed to us as a supervisory authority.
2.2. Your personal data will be processed in compliance with the legal obligation for the purposes of point (c) of Article 6(1) of the General Regulation to:
- respond to a request to exercise the right of access to information.
2.3. Your personal data will be processed based on legitimate interests for the purposes of point (c) of Article 6(1) of the General Regulation in relation to:
- participation in events
- registration of clients’ visits to the Ministry of Science and Education.
2.4. Your personal data will be processed based on your consent for the purposes of point (a) of Article 6(1) of the General Regulation to:
- improve the functionality of the our website and user experience.
- Cookies are created when the user’s browser downloads a webpage, which then sends data to the browser and makes a text file. The browser receives and sends cookies to the webpage server when the user visits the webpage again.
- Flickr: https://www.flickr.com/help/privacy
- Google Analytics: https://policies.google.com/privacy
- Instagram: https://help.instagram.com/196883487377501
- Juicer: https://www.juicer.io/privacy
- Sendgrid: https://sendgrid.com/policies/privacy/services-privacy-policy/
- Twitter: https://twitter.com/privacy
- Vimeo: https://vimeo.com/privacy
4. YOUR RIGHTS REGARDING PROCESSING OF PERSONAL DATA
To exercise your rights, you can contact us by mail or email using the contacts on the following page: http://www.mvep.hr/en/other/personal-data-protection-commisioner/
Your rights are as set out below.
4.1. Right of Access to Personal Data
You have the right to access your personal data processed by us and request detailed information on the purposes of the processing, the types/categories of personal data including consultation of your own personal data, on the recipients or categories of recipients and the envisaged storage period. Access to personal data may be restricted only in cases regulated by EU legislation or national legislation, when the restriction respects the essence of fundamental rights and freedom of others.
4.2. Right to Rectification of Personal Data
You have the right to request the rectification or completion of your personal data if they are inaccurate, incomplete or not up to date. To do this, please send your request to us, the controller, by mail or email. Please note that in your request it is necessary to specify in what way the data is inaccurate, incomplete or not up to date and in which sense it should be rectified. Also, it is necessary to provide documentation substantiating your assertions.
4.3. Right to Erasure
You have the right to request the erasure of your personal data where one of the following applies:
- the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; • you have withdrawn the consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
- you have objected to the processing pursuant to Article 21(1) of the General Regulation and there are no overriding legitimate grounds for the processing;
- the data have been unlawfully processed;
- the data have to be erased in compliance with a legal obligation in Union or Member State law to which the controller is subject;
- the data have been collected in relation to the offer of information society services referred to in Article 8(1) of the General Regulation.
4.3.1. Exceptions Related to the Exercise of the Right to Erasure are Provided for in Article 17(3) of the General Regulation
The aforementioned right to erasure is not applicable to the extent that processing is necessary:
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right to erasure of personal data is likely to render impossible or seriously impair the achievement of the objectives of that processing;
- for the establishment, exercise or defence of legal claims. 4.4. Right to Restriction of Processing of Personal Data You have the right to obtain restriction of processing of personal data from the controller if: • you contest the accuracy of the data;
- the processing is unlawful, and you oppose the erasure of the data;
- the controller no longer needs the data for the purposes of the processing, but you have requested them for the establishment, exercise or defence of legal claims;
- you have objected to the processing of the data.
4.5. Right to Object
If we process your data for the purposes of performing tasks of public interest, or in the exercise of our official authority, or when invoking our legitimate interests, you may object to such processing.
5. GRANTING THE RIGHT TO USE PERSONAL DATA
We may forward your personal data to providers of information and communication solutions and services that act as processors.
We have signed contracts with such processors detailing the handling of personal data, which means that they are not able to process your personal data without our permission or forward them to third parties.
In certain circumstances, we have the legal obligation to forward your personal data, and the processing of such data may also involve their international transfer. Such a legal obligation may arise from national or EU legislation. For example, joint supervisory activities of Member States’ supervisory authorities may sometimes be necessary, or actions might need be taken to collect payments of fines imposed but not paid. Therefore, your data is forwarded to other parties when we are bound by the relevant regulation to the extent necessary to achieve the identified purpose.
Your personal data will not be forwarded to third parties for direct marketing purposes.
6. SECURITY OF PERSONAL DATA
We collect and process personal data in a way that ensures adequate security and confidentiality in their processing and enables the effective application of data protection principles with regard to data minimisation, the scale of processing, the storage period and availability.
We take all appropriate technical and organisational data protection measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure, insight or access.
All employees of the controller are obliged to safeguard personal data by signing a confidentiality statement.
Employees of the Ministry of Science and Education are obliged to keep all personal and other confidential data they encounter in the course of their duties as a professional or other appropriate type of secret, in accordance with the law governing data confidentiality. That obligation continues to be in force after the termination of employment.
7. PERSONAL DATA STORAGE PERIOD
We process your personal data until the purpose of the processing is fulfilled. Upon termination of the purpose for which they were collected, we no longer use your personal data; they remain in our storage system for the period of time laid down by the General Regulation on keeping archival material.
8. CONTACT INFORMATION
If you have any questions regarding the processing of your personal data,
you can contact us via email: SzZOP@mzo.hr
The event will be audio-video recorded and photographed. The videos and photographs may be published on the event webstite of the organisers. By atteding the event, you agree that you have been fully informed.
I agree that my first and last name, job title and organisations is included in the list of participants given to all participants
All personal information provided during accreditation will be processed in accordance with the General Data Protetcion Regulation (GDPR)