These Rules on Protection of Privacy and Cookie Use apply to anyone who is in accordance with the General Terms and Conditions of Business and Use of the Website www.ljubljana.si considered a user and the website in its entirety, including its subpages.

A user is any legal entity or natural person using or visiting the website www.ljubljana.si (hereinafter: user).

By using the website the user agrees with these Rules on Protection of Privacy and Cookie Use.

I. Protection of personal data

The City of Ljubljana respects your privacy and undertakes to use your personal data exclusively for the stated purposes. Your personal data shall be carefully protected in accordance with the legislation governing the protection of personal data (Regulation (EU) 2016/679, the Personal Data Protection Act in force, Rules on Protection of Privacy and Cookie Use and internal rules of the City of Ljubljana).

1. Controller of personal data

The controller of personal data processed in accordance with these Rules is the City of Ljubljana, Mestni trg 1, 1000 Ljubljana.

2. Personal data protection officer

The personal data protection officer in the City of Ljubljana is available at the e-mail address dpo@ljubljana.si.

3. Personal data processor

The contract processor of personal data collected within the scope of the website use is the company Innovatif d.o.o., Poljanski nasip 6, 1000 Ljubljana. The controller and processor of personal data have defined and regulated their mutual relations and obligations, including personal data protection, with a written contract.

4. Transmission of personal data to third parties or third countries

The City of Ljubljana does not transmit personal data collected on the website to third parties or third countries.

An exception is the dissemination of the e-newsletter of the City of Ljubljana using the MailChimp online platform where personal data for sending the newsletter is stored, namely: name, surname and e-mail address. The MailChimp online platform guarantees in its Terms of Use and Privacy Policy to respect the rules of the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and confirms to have received the certificate of conformity with the EU-U.S. Privacy Shield Framework.

5. Types of personal data and purposes of their processing

The City of Ljubljana collects and processes personal data on the basis of the legislation or consent (agreement) of individuals.

Processing based on the legislation

The City of Ljubljana preforms its tasks and activities on the basis of the legislation of the Republic of Slovenia, and therefore, in line with the legal basis, collects and processes personal data of individuals necessary for the fulfilment of legal obligations imposed on it as a controller of personal data. In accordance with the provisions of the act governing data protection and the General Data Protection Regulation the City of Ljubljana keeps processing records where the legal basis for personal data collection and processing is specifically determined.

Processing based on consent (agreement) of an individual

Based on prior voluntary, explicit, informed and unequivocal statement of will or consent (agreement) of individuals, and their simultaneous notification that they can revoke their consent at any time, the City of Ljubljana collects and processes personal data, namely:

• for the purpose of sending the e-newsletter on current activities in Ljubljana via e-mail once a week: name, surname and e-mail address;
• for sending in opinions or questions (citizens can send in their opinions or questions using the contact form https://www.ljubljana.si/en/contacts/) –individuals have to give their name, surname and e‑mail address for the City of Ljubljana to be able to respond;
• for entering citizens’ initiatives (citizens can send in their initiatives via the website https://pobude.ljubljana.si/ or by using a mobile application): name and surname, e‑mail address, phone number, street and house number or the location marked by clicking on a map.

6. Personal data collection

To ensure personal data protection the City of Ljubljana implements all necessary legal, organisational and appropriate logistical and technical procedures and measures, either on its own on the basis of the legislation, regulations and internal rules or via its contract partners. For the purpose of the latter the City of Ljubljana binds the providers or operators to necessary and consistent compliance with the legal basis, the General Data Protection Regulation and internal rules of the City of Ljubljana.

7. Personal data retention period

Personal data of individuals, obtained on the basis of consent, can be processed and stored until the fulfilment of the purpose for collecting and processing data or until the revocation of the consent given by an individual. Individuals can change or revoke their consent at any time.

Personal data, collected on the basis of regulations, are stored in accordance with the legislation regulating their collection. After the expiry of the legal retention period the data is erased.

8. Rights of an individual

In accordance with the personal data protection regulations individuals have the right to revoke their consent at any time, request a review, correction, processing limitation or deletion of personal data, namely, by notifying us in writing thereof via mail at the address Mestna občina Ljubljana, Mestni trg 1, 1000 Ljubljana, or via e-mail to dpo@ljubljana.si. The aforementioned address can also be used by individuals to submit an objection with regard to the processing of their personal data.

Individuals can also submit a complaint with regard to the processing of their personal data directly to the competent supervisory authority, that is, to the Information Commissioner of the Republic of Slovenia.

9. Procedure in case of violation

In case of violation of the personal data protection the City of Ljubljana shall immediately take all appropriate measures for the protection of rights and interests of the individual in accordance with the applicable legislation and the General Data Protection Regulation.

II. Cookie policy

Cookies are small text files websites use to make the user experience more efficient.

In accordance with the legislation cookies can be stored on your device when they are necessary for the website to function. For all other types of cookies your consent is needed.

This website uses various types of cookies. Some are used on request by other websites which appear on our website.

The following cookies are used to ensure the operation of all functions of the website:

• Strictly necessary cookies make a website usable as they enable basic functions, such as website navigation and access to safe areas of the website. A website cannot function properly without these cookies.
• Performance cookies are cookies needed to monitor visits to the website for the purpose of improving the user experience.
• Advertising cookies anonymously collect data on visits to websites. Their purpose is to display adds which are appropriate and interesting for an individual user.

Accurate descriptions of specific cookies and the time of their installation are given in the following tables:

Strictly necessary cookies

Strictly necessary cookies make the website usable as they enable basic functions such as website navigation and access to safe areas of the website. Websites do not function properly without them.

Performance cookies

Performance cookies help website owners understand how visitors use their website by anonymously collecting and reporting information.

Advertising cookies

Advertising cookies are used to track users across websites. Their purpose is to display adds which are appropriate and interesting for an individual user.

III. Validity

These Rules on Protection of Privacy and Cookie Use of the City of Ljubljana shall be supplemented as needed, of which you shall be appropriately notified.

These Rules are published at the website www.ljubljana.si and shall apply from 25 May 2018.