Home fair
Buy tickets
Buy tickets
Home / Privacy policy

Privacy policy

With these General Business Terms and Conditions for Registration to e-news, the Gospodarsko razstavišče d.o.o. provides users with information on the processing of personal data in accordance with the requirements of the Act governing the protection of personal data, the Law governing electronic communications and in accordance with the requirements of the General Data Protection Regulation.

1. GENERAL

By accepting these general terms and conditions, an individual (user) enters a contract for receiving newsletters, thus complying with the general terms and conditions in question.

With confirmation, the individual will have entered, with the Gospodarsko razstavišče d.o.o. into an agreement on receiving newsletters, which will inform him/her about the novelties in the offer, discounts, extra and special benefits, and current prize-winning games.

Personal data obtained with the registration will be processed for the purpose of:

  • direct marketing,
  • sending e-news and
  • targeted marketing.

2. REGISTRATION TO E-NEWS

In order to send e-news, the Gospodarsko razstavišče d.o.o. for registration to e-news, collects the following mandatory information:

  • e-mail address,
  • name and surname,
  • contact telephone,
  • company name.

The Data Protection Officer of the Gospodarsko razstavišče d.o.o. collects personal data solely through voluntarily forwarded personal information when applying for e-news. By unambiguous authorization or consent upon the entry of an electronic address, the user agrees to the collecting and processing of personal data for the purpose of receiving e-news.

Upon submitting the e-mail address for receiving e-news and providing consent, the user will receive a confirmation message on the given e-mail address. By confirming it and activating the consent, the user will be registered to the Gospodarsko razstavišče d.o.o.’s e-newsletter until the revocation.

The personal information for e-newsletter registration will be stored in a database on a secure server. Access to the data will only be available to an authorized person for the protection of personal data at Gospodarsko razstavišče d.o.o..

3. BASIS FOR PERSONAL DATA PROCESSING

The given permission or consent by the user is the legal basis for the processing of his/her data.

The Gospodarsko razstavišče d.o.o. ensures that data received from users for direct marketing, e-news and targeted marketing will not be sold, lent, disclosed or otherwise transmitted to unauthorized third parties without their consent.

A) CONSENT

In case of obtaining the consent of the user, the Gospodarsko razstavišče d.o.o. will process personal data only for purposes for which the consent was given. By giving consent the user agrees that the Gospodarsko razstavišče d.o.o. processes personal data or categories of personal data that they have about the user and which are listed on the registration.

When processing personal data, the Gospodarsko razstavišče d.o.o. carefully protects it and ensures adequate data protection activities.

I) REVOCATION OF CONSENT

In cases when the processing of personal data is based on consent, the user may at any time revoke this consent. The revocation of the consent does not affect the legality of the data processing on the basis of the consent given prior to its revocation.

Revocation of consents may be made:

  1. In writing to the address: Gospodarsko razstavišče d.o.o. Dunajska cesta 18, 1000 Ljubljana,
  2. Personally by submitting a written requirement at the company’s headquarters,
  3. By submitting a written requirement by e-mail to the address gdpr@gr-sejem.si orgdpr@gr-sejem.si

If the user decides to revoke the consent with the registration form on the website, he/she must re-enter his/her login e-mail address to which a confirmation message will be sent. With the confirmation of the registration e-mail, the cancellation of the consent will be activated.

In the event of revocation of the consent, the Gospodarsko razstavišče d.o.o. will cease processing the data collected on the basis of the consent, or will no longer process it for the purposes for which the consent was given, and delete them.

B) DATA PROCESSING

The Gospodarsko razstavišče d.o.o. collects and processes personal data in accordance with the provisions of the Act regulating the protection of personal data, the Law governing electronic communications, and in accordance with the EU General Data Protection Regulation.

The Gospodarsko razstavišče d.o.o. provides personal information if there is an explicit basis for it in any of the Laws. In other cases, a written statement of the individual to whom the data relates must be provided for the transmission of the data.

The Gospodarsko razstavišče d.o.o. will carefully guard personal data and prevent any possible misuse. Personal data will be used only for the purpose of direct marketing, sending newsletters, and targeted marketing, or for purposes for which the user has given his consent.

The transmission of personal data to third parties or institutions without authorization constitutes a serious infringement.

C) DATA PROCESSING METHOD

The Gospodarsko razstavišče d.o.o. provides an effective way of anonymizing personal information by sending e-news via the web application GDPR manager, which ensures complete anonymization of personal information of e-news recipients and, in accordance with the principle of minimization, allows access to personal data only to authorized persons on the basis of received requests for correction, access, restriction, objection, transfer or deletion of personal data.

The web application GDPR manager ensures complete traceability of authorized application users (access to the application is protected by a user name and a password) as it automatically records the access of authorized users to the application and their in-app activities.

At the time of determining processing means and at the time of the processing itself, the company will implement appropriate technical and organizational measures designed to effectively implement the principles of data protection, such as the principle of the minimum data range, and to include in the processing the necessary safeguards in order to protect the rights of the data subjects.

4. RIGHTS OF INDIVIDUALS

The Gospodarsko razstavišče d.o.o. allows to the individual to whom the personal data relate, to his request and without undue delay the claim of the following rights:

  • the right to request access to personal data from the controller, within the framework of this right, an individual is permitted to become aware of the personal data collected and processed by the company about the purpose of the processing, the type of personal data, the period of keeping personal data, and in the case of the transmitting of personal data, information about whom personal data were transmitted for what purpose, and
  • the right to correction of personal data, within the scope of this right, an individual can achieve that the company without unnecessary delay corrects inaccurate personal data related to it.
  • the right to be erased or forgotten; in this context, an individual has the right to require from the company to delete personal data relating to it,
  • the right to limit the processing of personal data in relation to the data subject, under this right, an individual has the right to require the company to restrict the processing of personal data, in case the individual disputes the accuracy of the data,
  • the right to object to the processing of personal data,
  • the right to data portability,
  • the right to revoke consent for processing,
  • the right to lodge a complaint with the supervisory authority.

The user must properly identify and clearly define his/her request in the application by which he exercises his rights.

Data corrections can be submitted by users to the Gospodarsko razstavišče d.o.o. in writing:

  • to the address: Gospodarsko razstavišče d.o.o., Dunajska cesta 18, 1000 Ljubljana,
  • Personally by submitting a written requirement at the company’s headquarters,
  • By submitting a written requirement by e-mail to the address gdpr@gr-sejem.si

A) ENFORCEMENT OF RIGHTS

The request for the exercise of the above-mentioned rights is addressed by the individual to the authorized person at the Gospodarsko razstavišče d.o.o., who is responsible for the protection of personal data of individuals, i.e. Ms. Andreja Herceg, available at the following e-mail address: andreja.herceg@gr-sejem.si.

An individual may file an application with which he/she exercises the above-mentioned rights electronically to the address mentioned in the previous paragraph, by ordinary post or personally at the Gospodarsko razstavišče d.o.o.’s registered office. The authorized person accepts the received request for consideration without undue delay.

If the authorized person fails to act or fails to comply with the request of the individual, he/she shall be obliged to notify him/her of the reasons for not taking action within one month after receiving the request, and at the same time, he/she must notify him/her of the possibility of lodging a complaint with the Information Commissioner and the possibilities of legal remedies.

The response to the request is sent by the authorized person to the individual by post to the address provided by the individual in the application, or via the electronic address from which the individual provided the request. In case the response to the request is sent by e-mail, the authorized person ensures that the application is in a locked form.

I) RIGHT TO APPEAL

If the user thinks the Gospodarsko razstavišče d.o.o. when processing personal data violates his rights, he may lodge a complaint with the Gospodarsko razstavišče d.o.o.. The user submits the complaint:

  1. By post to the address Gospodarsko razstavišče d.o.o. Dunajska cesta 18, 1000 Ljubljana,
  2. By e-mail to the address gdpr@gr-sejem.si or
  3. Personally at the company’s registered office.

Users can also file a complaint with the Personal Data Protection Supervisor. In the Republic of Slovenia, the Supervisory Authority for the Protection of Personal Data is the Information Commissioner.

B) UNSUBSCRIPTION

At any time, the user can require in writing to e-mail odjava@gr-sejem.si or by clicking the button ODJAVA in e-news to the data controller to permanently or temporarily stop using or otherwise processing his personal data for the purpose of direct marketing, sending e-news and targeted marketing. The request for unsubscription will be granted within the statutory deadline of 15 days from the date of receipt of the request. In the next five-day period, the user will be notified by e-mail about the termination of personal data processing.

5. PERSONAL DATA PROTECTION

The Gospodarsko razstavišče d.o.o. ensures the security of personal data by protecting the software that handles personal data, and unauthorized persons do not have access to personal data. The company provides an effective way of blocking, destroying, erasing or anonymizing personal information.

The security of personal data covers legal, organizational and appropriate logistical-technical procedures and measures that:

  • protect premises, appliances and system software,
  • protect the application software for processing personal data,
  • ensure the security of forwarding and transmitting personal data,
  • prevent unauthorized persons from accessing the devices where personal data are processed and their collections,
  • allow for subsequent determinations when individual personal data were entered into the personal data collection, used or otherwise processed and who entered, used or processed personal data.

Access to personal data is carried out by authorized persons, but only to the extent necessary for the performance of their duties.

Authorized persons of users’ personal data may not communicate to third parties, except in the cases specified by the legal provisions on the basis of which they are collected, or with the consent of the data subject, nor may they themselves use them or allow to be used by third parties.

The obligation to protect personal data with which the employee is acquainted during his work at the Gospodarsko razstavišče d.o.o. also lasts after the termination of the employment relationship with the company.

A) PERSONAL DATA RETENTION

The Gospodarsko razstavišče d.o.o. will keep the personal information of the user until the user submits the revocation of the consent or signs out of receiving e-news.

B) DATA DELETING

After completing the purpose of the processing or after the expiry of the retention period, personal data are deleted, destroyed, blocked, or anonymized if they are not determined by archival material and archives as archival material, or if the law does not specify otherwise for individual types of personal data.

Personal data collected on the basis of the consent of the individual shall likewise be deleted or destroyed on the basis of his/her explicit revocation of the consent.

Personal data contained on paper carriers (documents, files, lists, etc.) are destroyed in a way that prevents the reading of all or a part of the destroyed data by shredding.

Deletion of personal data on computer media is done in a manner, according to the procedure and method, which prevents restoration of all or a part of the deleted data. Deletion of this personal data is carried out by the authorized person, Ms. Andreja Herceg.

6. AUTHORIZED PERSON FOR PERSONAL DATA PROTECTION AND THEIR PROCESSING

Unless otherwise specified in the documents governing the individual contractual relationship, the personal data controller is Gospodarsko razstavišče d.o.o. , Dunajska cesta 18, 1000 Ljubljana.

Only and solely the authorized person of the personal data controller has got secured access to personal data of users, and he/she is obliged to take due care in accordance with the applicable legislation of the Republic of Slovenia and the legislation of the European Union.

Access to personal data to the extent necessary for the performance of tasks is only and solely by the authorized person for the protection of personal data at the Gospodarsko razstavišče d.o.o., Ms. Andreja Herceg, reachable at the e-mail address andreja.herceg@gr-sejem.si.

Any questions related to the protection of personal data can be addressed by users to Ms. Andreja Herceg, or to the e-mail address gdpr@gr-sejem.si.

The e-newsletter sender and the data controller is Gospodarsko razstavišče d.o.o., Dunajska cesta 18, 1000 Ljubljana