The aim of the privacy policy is to inform the users of services, co-workers, employees and other people ("individuals" in the following text) that collaborate with Library-Cultural Center Lendava ("organization in the following text). About the function, legal basis, safety measures and individual rights. For the propose of data processing that is done by our organization.
We value your privacy, so we always carefully protect your data.
The personal data is processed in accordance with the Regulation (EU) 2016/697 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement ("General Regulation" in the following text) that is valid for the Slovenian legislation from the field of protection of personal data and other legislation which gives us the legal basis for procession of personal data.
Privacy policy includes information about how our organization administrates the personal data that is received from a individual on legal basis.
1) Administrator
The administrator of personal data is:
Library – Cultural Center Lendava
Lendvai Könyvtár és Kulturális Központ
Glavna ulica - Fő utca 12.
9220 Lendava - Lendva
Phone.: +386 (0)2 575 1353
E-Mail: info@kkl.si
2) Authorized Representative
In accordance with Article 37 of the General Regulation for data protection. We selected the following authorized representative.
DATAINFO.SI, d.o.o.
Tržaška cesta 37c, SI-2000 Maribor
www.datainfo.si
E-mail dpo@datainfo.si
Phone: +386 (0) 2 620 4 300
Personal Data
The meaning of personal data is the following. It is any kind of information about the individual or Identifiable individual that can be directly and indirectly identified. Especially if there is an identifier such as name, ID number, location data and web identifier,. Or there are any features such as physical, physiological, genetic, mental, cultural or societal identity of the individual.
4) Purposes and Basis of processing of Data
Organization collects and processes the personal data on the following legal basis
- The processing is necessary for the completion of the legal obligations that apply to the administrator.
- The processing is necessary for the implementation of the contract of the individual to whom the data relates to. Or to implement actions on the request of the individual before entering the contract.
- The processing is necessary because of the legal interest which are endeavored by administrator or third parties.
- The individual on which the personal data relates to consented into the processing of his personal data for one or more specific purpose.
- The processing of personal data is necessary to protect the life interests of the individual or other natural person.
4.1 )Fulfillment of a Legal Obligation
On the basis of the regulation the organization processes personal data of its employees this is made possible by employment and social security law. The organization on the basis of the legal obligation processes the following data: name and surname, sex, birth date, EMŠO, tax number, place, municipality, state of birth, citizenship, domicile, etc. The legal basis for the processing of personal data are: Exercising of the Public Interest in Culture Act, Library Act, Protection of Documents and Archives and Archival Institutions Act, Act on the Provision of Funds for Certain Urgent Programmes of the Republic of Slovenia in the Field of Culture and other laws in the fields of the culture. In the above mentioned cases the processing of data is allowed. The data can be processed if it is public interest. All applicable sectoral regulations from the sector all accessed on the link of the ministry: https://www.gov.si/drzavni-organi/ministrstva/ministrstvo-za-kulturo/zakonodaja/.
4.2) Implementation of a Contract
In the case that the individual signs the contract with the organization. It represents the legal basis for the processing of personal data. Personal data can be processed for the signing and implementation of the contract. As in the case selling tickets, subscriptions and membership in the library, etc. If the individual dose not provide the required personal information the organization can not sign the contract. Furthermore, it is also impossible for the organization to provide services or other products in accordance with the contract. As it does not have the necessary personal information to realize the request. The organization based on its legitimate activities can inform its users about services, events, education and other activities over the email. The individual has the right to whenever to cancel the communication.They can terminate all the communication and processing personal data. This can be done with email or mail addressed to the organization.
4.3) Legitimate Interests
The organization can process the personal data on basis of legitimate interest. For which the organization strives. This is prohibited in the case that the such interest are in the conflict with the fundamental rights and freedoms of the individual. To whom the personal data is referring to and requires privacy policy. In the case of legitimate interest of the organization the assessment is made in the accordance with the General Regulation. The processing of personal data for the purpose of direct marketing is regarded as legitimate interest. The organization can process personal data of individuals that was collected from the public records or in the context of legal pursuit of services. This also includes offering of goods, services, employment, information about the benefits, events, etc. To achieve this aim the organization can use post, telephone, email or other means of telecommunication to reach the individual. For the purpose of direct marketing the organization can process the following data. Name and surname of the individual, the address permanent or temporary residence and phone number or email. The stated personal data can be processed for direct marketing without explicit consent of the individual. The individual is able to request the termination of such communication and processing of personal data anytime they want. This can be done over the link given in the message, as a request over the email or over the post addressed to the organization.
4.4) Processing on the Basis of Consent
If the organizations does not have a legal basis provided by law, contractual duties or lawful interest. It can ask the individual for permission. That makes it possible to process some of the personal data. When given the consent by individual those are:
- Domicile address, and e-mail address for notifications and communication.
- Photos, video recordings and other things that refer to the individual (e.g. photos on the different websites of the organization) and for the documenting of activities an notifying the public about the work and events of the library.
- Other purposes if the individual consents to.
If the individual gives the consent of the use of his personal data, but at some moment does not want it anymore. They are able to terminate the consent with a notice over the e-mail or over the post on the address of the organization. The termination does not affect the data processing before the notice of termination.
4.5) Processing of Date Needed for the Protection of Life Interest of the Individual
The organization can process personal data of the individuals. To whom the personal data refers to as long it is necessary for the protection of their life interest. In the case of emergency the organization can search for an identity document. It also can check if the person exist in their data base. Then they can analyze the history and contact the family. In such case the organization does not need the consent of the individual. The stated above only applies when there is an emergency of protecting someones life interest.
5) Storage and Deletion of Personal Data
The organization will store the personal data as long the process for which the data was collected needs to be executed. In the case that the data is processed on the legal basis. It will store the data as long the law requires it. It has to be note that some of the data is stored for the duration of the work with the organization. An some is stored permanently. The personal data which is processed on the basis of contract between the organization and the individual. The organization stores the data for 6 years after the contract expires. The exception to the rule is when there is a disagreement between the parties based on the contract. In such case the personal data is stored for 10 years. After the disagreement has been settled by court, arbitrage or court settlement. In the case that there was no disagreement between the parties the personal date is stored for 5 years from the day of the peaceful resolution. The personal data which is collected by the organization with the consent of individual or legitimate interest. Is stored until the consent is canceled by the individual or upon the request for deletion. After cancellation or request for deletion is give the personal date is deleted in 15 days. The organization can delete the personal data before the cancellation when the aim of the processes is achieved or determined by law.
There is an exception when the organization can reject the request for deletion of personal data. It has to be in accordance with the General Accordance. Those are the following. The right of freedom of speech and notification. Meeting the legal requirement of the processing of personal data. Public heath interest. Archiving in public interest. Scientific and historical research reasons. Statistical reasons or legal requirements. After the legal period of storage has expired the organization has to permanently delete personal data. So they cannot be connected to any person.
6) Contractual processing of personal data and transfer of data
The organization can entrust individual personal data on the basis contract of Data Processing Agreement to contractual processor. The contractual processors can only process the personal data exclusively in the name administrator. Than is done in the frame of the authorization that is written into a written contract or any other legal act. And it is in accordance in this privacy policy.
Contractual processor whit whom the organization collaborates are the following.
- Accounting services and other services of legal and business consultation.
- Maintenance workers (Video surveillance.
- IT systems maintainers.
- Providers of e-mail services, providers of software and cloud services (e.g. Arnes, Microsoft, Google).
- Providers of social media and web advertisement (Google, Facebook, Instagram etc.).
it is forbidden that the organization gives the personal data too unauthorized third parties. Contractual processors are allowed to process personal data in the framework given by the organization. It is forbidden that the personal data to be used in any other manner.
The organization as the processor does not transfer the personal that of its employees to third countries (outside the European Economic Area - EU member states, Iceland and Liechtenstein). And into international organization USA excluded. The relations with contractual processor from USA are organized according to the standardized contract clause (standard contracts adopted by the European Commission). Or by binding corporate rules (that are adapted and confirmed by the supervising authorities in the EU).
The organization has a list of all contractual processors. In it are all the processors with which it has a contract. This is done so the organization can have a better organized review and control over the individual contracts.
7) Cookies
The website of the institutions works with the help of cookies. A cookie is a file which save the settings of the website. The website saves cookies in the users device that connects to the interent. The task of the cookie is to recognize the individual devices. And settings that are used when connecting to a website. The cookies allow for the website to recognize the user. If the user already connected to the website. In advanced applications cookies help appropriately set the settings. The saving of cookies is under complete control of the browser. The user can save, restrict or completely block the cookies.
Cookies play a crucial role in providing user friendly internet services. They are used for saving data about individual website. Statistic of who and how many user visit the website is collected by cookies. They also help in figure out the effectiveness of our website design.
The website of the organization uses the following cookies.
| Name of the cookie Duration of time |
Function | |
| wp-settings-[UID] / WordPress | 1 year | The cookie is necessary for the working of the web framework. |
| The cookie is important for the working of the web framework. | ||
| _pk_id.[UID] / Matomo | 2 years | The cookie helps us to better understand the habits of the users. With the help of web analytics. |
| _pk_ses.[UID] / Matomo | 2 years | The cookie helps us to better understand the habits of the users. With the help of web analytics. |
| _icl_current_language / WordPress | 24 hours | The cookie is important for correct switching between the languages. |
| _icl_current_language / WordPress | 24 hours | The cookie is important for correct switching between the languages. |
| animations | 12 hours | Cookie for the accessibility settings (stops the animation) |
| contrast | 12 hours | Cookie for the accessibility settings (makes the contrast possible) |
| incfont | 12 hours | Cookie for the accessibility settings (increase text size) |
| decfont | 12 hours | Cookie for the accessibility settings (decrease font size) |
| keyboard | 12 hours | Cookie for the accessibility settings (makes the keyboard accessibility possible) |
| marktitles | 12 hours | Cookie for the accessibility settings (highlights the titles) |
| underline | 12 hours | Cookie for the accessibility settings (highlights connection and keys) |
| readable | 12 hours | Cookie for the accessibility settings (it makes the font readable) |
The cookies that are saved in the browser can be deleted (the instructions are on the websites of the individual browser).
8) Video Surveillance
In the organization KKC Lendava there is video monitoring. It helps us to keep track of the people entering and existing the premises of the building (cameras are set up by the entrances of the building). (under the 77. article ZVOP-2). Video monitoring is also used for protection of individuals (users, employees and visitors) and the building (on the basis of public interest, point (e) 1. paragraph 6. article of General Accordance, in reference to 76. and other articles ZVOP-2). Inside some of the buildings there is video-monitoring. The reason for it being. It is necessary for the safety of the people, assets or business secrets. Video monitoring gives us the ability to detect, treat and solve incidents. Those being criminal offenses, claims of damages and other claims. The recordings are saved for the maximum of 12 months. The video monitoring is not implemented in the manner which could have an influence on the recorded material. Furthermore, video-monitoring dose not allow unusual further processing of recorded material. Such as given to third countries or sound intervention in the case of live broadcast. All of the information regarding the video monitoring you can get over the phone or email of the organization. The individual rights are stated in privacy policy. For further information you can contact the authorized person for privacy policy.
9) Data protection and the accuarcy of data
The organization looks after the information and infrastructure security (building and applicative system sofware). Our informational systems are protected by anti-virus programs and firewall. We implemented appropriate organizational and technical measures to guarantee the safekeeping of personal data. The personal data is protected from random or illegal destruction of it. Losing, changing, unauthorized revelation and access and other illegal forms of access to personal data. In the case that personal data is transmitted, it is done encrypted and with a password.
The individual is responsible for the sef-keeping of their personal information. And that the personal data is correct and legitimate. The organization will strive that the personal data will be correct and up to date. If needed it can turn to the individual for the conformation of the personal data.
10) The rights of the individual in processing of data
In accordance to the General Accordance the individual has the following rights to the privacy policy.
- They can request the information if we keep their personal data. What kind of data we have and for on what basis we use them.
- They can request the access of their personal data. Which makes it possible that they get a copy of their personal data from the organization. So they can verify if the organization uses them according to the law.
- They can request a correction of personal data, like the correction of incorrect personal data.
- They can request the deletion of their personal data. When there is no reason for the an ongoing processing of data. Or their rights to objection of further processing are asserted.
- They can object to further processing of their data. If the organization invokes personal business interest (even in the case of legal interest of third party). When there is a reason connected to the individual special circumstance. The individual has the right to object anytime if the organization uses the data for direct marketing.
- They can request a restriction of processing of their personal data. This means the suspension of data processing. This means in the individual wants to check the accuracy of data or the reasons for further processing of personal data.
- They can request a transfer of their personal data. In a structured digital manner or other controller. In the case that this is possible to do.
- They can cancel their consent that was give for processing of personal data. Be it collection, processing or transfer for specific reasons of their personal data. After the notification of the individual to withdraw his consent for processing of the personal data. The organization will cease the processing of personal data. For which the consent of processing of the personal data was given. The exception to this is when the organization has a legal basis for it.
If the individual wants to invoke any of their rights. They can send request over the email or post to the address of the organization. The request regarding the rights of the individual will be processed as soon as possible by the organization. But it will take no longer than a month after receiving the request. It has to be noted that the date of procession of the request will extend depending on the complexity and number of request (but no longer than two months). If this happens the individual will be notified. The access to the personal data and the invoking of rights are done free of charge for the individual. However, the organization will reasonably charge the individual if the request for personal data is unfounded out of proportions. Especially if the request is repeated. In such case the organization can refuse the request. In such case that the individual invokes their rights the organization can request additional information. This is done to conform the identity of the individual . It is a safety measure to not give personal data to unauthorized people.
By invoking of rights form this address. If the individual has the opinion that his rights are violated. They can turn for protection and help to the supervisory authority. This is the authorized person on the website: https://www.ip-rs.si/.
If the individual any kind of question regarding the processing of personal data. They can turn to our organization over e-mail or post addressed to our organization.
11) The Posting of Changes
Each change of our privacy policy will be posted on the websites of our organization www.kkl.si, www.kl-kl.si and www1.kkl.si. With the use of our website the individual confirms that he accepts with the complete privacy policy.
The privacy policy was accepted by the designated person of the organization on the day 16th May 2023.
In Lendava 16th May 2023
Library – Cultural Center Lendava
Lendvai Könyvtár és Kulturális Központ
Judit Zágorec-Csuka, direktorica