Personal data protection policy

General terms and conditions

On May 25, 2018, the General Data Protection Regulation (GDPR) came into force in all EU member states.

At RRA Koroška doo (hereinafter: RRA Koroška doo), we are aware of the importance of personal data and the privacy of our customers. Because we want to maintain the trust and reputation of a safe and reliable partner in adult education, we will process your personal data in accordance with the General Data Protection Regulation (GDPR).

The controller of personal data is RRA Koroška doo, with its registered office at Meža 10, 2370 Dravograd.

RRA Koroška is committed to protecting your privacy and developing technology that gives you a safe and secure online experience.

By using the website www.koroska.si, you agree to the data usage practices described in this statement.

If you have any questions, you can contact us by phone (0590 85 182) or email (info@rra-koroska.si).

Personal data

We obtain your personal data when you provide it to us, for example through your use of the website and its features, when you contact us via a special website form, directly by email, telephone, in writing or via social media, when you participate in an educational program, or in any other way in which you provide us with personal data.

We only collect your personal data when it is absolutely necessary. We only process personal data that you consent to, for example when subscribing to e-newsletters, registering for education or training, when there is a legal basis for collecting personal data, when processing is necessary for the performance of contractual obligations, or when processing is necessary for the legitimate interests pursued by the controller.

The types of information we collect about you may include information such as:

• your first and last name;
• your residential address;
• your email address that you provided to us;
• your phone number;
• company name.

We may also obtain your personal information from certain publicly available sources, including public online databases, business directories, media publications, social media, websites and other publicly available sources.

Users of personal data

We cooperate with the following processors:

• Revolver doo, Glavni trg 30, 2380 Slovenj Gradec,
• Stroka product doo, Koroška cesta 61a, 2360 Radje ob Dravi,
• Boštjan Gorenšek sp, Leše 58, 2391 Prevalje,
• AV Studio doo, Koroška cesta 55, 3320 Velenje,
• Infosys doo Partizanska ulica 20A, 2390 Ravne na Koroškem, for accounting and human resources services;
• ALPPeca doo, for maintenance of computer equipment.
• With other public sector institutions (such as the Social Insurance Institution, Employment Service, etc.), to whom we are obliged by law to provide certain data.

Purpose of processing personal data

We may use your personal information for one or more of the following purposes, as defined below.

1. Communication related to the purpose of notification.
2. Communication regarding updates and news on our website, providing our services and responding to inquiries we receive from you, internal market research, informing customers about news regarding products or services offered by RRA Koroška. This will be necessary either for the reason of informing you from time to time about changes to our website, to perform the contract we have concluded with you, to prepare an offer, or for our legitimate interest in fulfilling and confirming your requests, to provide you with our services and to answer questions we receive from you.
3. Sharing personal data with third parties (hereinafter: our sub-processors) who are associated with us in connection with our provision of services, such as our business partners, email providers, web hosting providers and providers of various information and communication technology services. This will be necessary either for the performance of the contract we have concluded with you (or for the preparation of an offer), for our legitimate interest in the efficient management and administration of our business, for compliance with legal obligations to which we are subject, or for our own direct marketing purposes. When we share your personal data, we will do so strictly on a need-to-know basis, subject to appropriate confidentiality restrictions, on an anonymised basis, to the extent possible, and only to the extent strictly necessary for any of these purposes.
4. To enforce our legal rights and comply with laws, regulations and other legal requirements. This is necessary for our legitimate interests in protecting our business and enforcing our contractual and other legal rights, to ensure physical, network and information security and integrity. This is necessary for our legitimate interests in ensuring a secure and uncompromised IT system and networks, including backup and archiving, preventing malware, viruses, bugs or other harmful code, to prevent unauthorised access to our systems and any form of attack or damage to our IT systems and networks. We may need to use and process your personal data to comply with legal obligations to which we are subject.
5. Identifying potential criminal offences or threats to public safety to the competent authority. This is necessary for our legitimate interest in promoting the success of our business, preventing crime, for compliance with legal obligations, in the general public interest or for the legitimate interests of government authorities and competent authorities in preventing crime.
6. In connection with any legal or potential legal dispute or proceeding. This is necessary for our legitimate interests of promoting and ensuring the success of our business, resolving disputes and making such disclosures as are required by law, or as we believe are reasonably practicable, in accordance with the law.
7. Collecting data to monitor website traffic statistics.

Retention of personal data and processing period

We do not process personal data for longer than is necessary to achieve the purposes for which the personal data was collected.

We store personal data that we process on the basis of the law for the period prescribed by law or an internal company act.

We retain personal data processed for the performance of a contract for the period necessary to perform the contract and for 5 years after its termination, except in cases where a dispute arises in connection with the contract. In such a case, we retain the data for one year after the finality of a court, arbitration decision or settlement.

We retain personal data that we process based on your personal consent or legitimate interest until you withdraw your consent or request to stop processing.

AMOUNT

We store personal data collections in the Republic of Slovenia and do not export them to other countries.

Protection of personal data

We have taken appropriate technical and organizational measures to secure your personal data and protect it against unauthorized or unlawful use or processing and against accidental loss or destruction or damage to your personal data, including:

1. the principle of data minimisation and processing on an anonymised basis whenever possible;
2. training our employees on the importance of confidentiality and maintaining the privacy and security of your data;
3. a commitment to taking appropriate disciplinary action to enforce employee privacy responsibilities;
4. limiting access to personal data to individuals who need this data for their tasks;
5. continuous and comprehensive updating and testing of our security technology;
6. careful and responsible selection of our sub-processors;
7. using secure servers to store your personal data;
8. appointing a person authorized to protect personal data.

We would like to point out that the transmission of information (including personal data) over the Internet is not always completely secure. If you provide us with any information over the Internet (by email, through our website or in any other way), you do so entirely at your own risk. We cannot be held liable for any costs, expenses, loss of profits, damage to reputation, liability or any other form of loss or damage suffered by you as a result of your transmission of information over the Internet.

Individual rights

We would like to draw your attention to the following rights regarding your personal data, which you can exercise by sending an email to info@rra-koroska.si and:

• request access to your personal data and information regarding our use and processing of your personal data;
• request correction or deletion of your personal data;
• you request that we restrict the use of your personal data;
• you exercise the right to personal data portability;
• you object to the processing of your personal data for certain purposes;
• you request the withdrawal of consent to our use of your personal data where the processing is based on your consent.

If you withdraw your consent, this will not affect the lawfulness of our use and processing of your personal data based on your consent before the date you withdraw your consent.

You also have the right to file a complaint with the supervisory authority - the Information Commissioner of the Republic of Slovenia.

For further information about your rights in relation to your personal data, including certain limitations that apply to some of these rights, please see Articles 12 to 23 of the General Data Protection Regulation (GDPR).

You can also exercise your right to object to the use or processing of your personal data for the purposes for which our company collects it by sending an email to info@rra-koroska.si requesting that we stop sending you messages.

Any time you object to being contacted by us using a communication method other than the messages you have received from us, you must provide us with your name and sufficient information to allow us to identify you in connection with the messages you have received.

Data Protection Officer

The authorized person for personal data protection is Andrej Erjavec, our company's lawyer. His email address: andrej.erjavec@rra-koroska.si.

Final provisions

These general terms and conditions enter into force on the date of publication on the website.

RRA Koroška doo reserves the right to change or amend these general terms and conditions. We will inform you of this. The changed general terms and conditions will enter into force on the day of publication on the website.

The provisions of these general terms and conditions shall be interpreted in accordance with the law in force in the Republic of Slovenia.