‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
‘Sensitive personal data’ means personal data, revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership; data concerning health or sex life and sexual orientation; genetic data or biometric data.
‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
‘Data subject’ means the natural person whose personal data is processed by a controller or processor.
‘Data controller’ means the natural or legal person, public authority, agency or other bodies which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
‘Data processor’ means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
‘Maker’ means an employee or founder of a local Impact Hub or a person that stands in a contractual relationship with a local Impact Hub that is comparable to an employee.
‘Member’ means a member of a local Impact Hub.
II. Who we are
Impact Hub Ljubljana, zavod za podjetništvo in razvoj, registration number 8590800000, is registered at Slovenska cesta 56, 1000 Ljubljana.
III. Which personal data we process
Depending on your use of our website, we process different information.
1) As far as actively provided by you or your employer, we may process contact data (“contact data“). Contact data may include your name, mailing address, phone number, email address and other information that enables us to contact you.
Purpose: We may process your contact data to enable the implementation of and participation in services, programs and events and to fulfil contractual obligations towards you (partnerships & programmes); to contact you (communication); to contact you via email-newsletters to inform you about our services, programs and events (marketing).
The legal bases for the processing are:
- Partnerships & Programs: The performance of a contract OR legitimate interest OR consent.
- Communication: Consent Or performance of a contract.
- Marketing: Legitimate interest, namely where requirements of the GDPR and the E-privacy directive are met OR consent;
2) As far as actively provided by you or your employer, we may process data that relates to your work (“work-related data“). Work-related data may include your company, company details and place of work.
Purpose: We process your work-related data to enable participation in programs and events and to fulfil contractual obligations towards you (partnerships & programs).
The legal bases for the processing are the performance of a contract.
3) We may process data that relates to your use of the websites (“usage data“). Usage data may include information about the website from which you have come (referrer), information about which sub-pages were visited, or how often, information about the duration a sub-page was viewed and other information that shows the activities on our websites. Usage data is provided by Google Analytics.
Purpose: We process your contact data to optimize our websites.
The legal bases for the processing is a legitimate interest.
IV. Third parties that collect personal data on our websites
V. How we use your personal data
VI. Access to your data
We use the following third-party processors:
1) Website hosting:
VII. Data Security
The security of all your Personal Information is important to us. To the best of our ability, we are taking appropriate technical or organizational measures to protect your Personal Information against unauthorized access or unlawful processing and accidental loss, destruction or damage. While we strive to protect your Personal Information, we cannot ensure or warrant the security of any information that you directly or indirectly transmit to us, and you do so at your own risk.
VIII. Your rights
We grant to you all the rights relating to your personal data that the European General Data Protection Regulation provides for data subjects. These rights include:
1) The right to access your data
You have the right to request access to the personal data that we have collected about you and to request specific information and insights on how we treat, share, store and otherwise process this personal data. To exercise this right please file an access request via email. Within 30 days following this request, we will provide you with a copy (on paper if you do not choose otherwise) of all the personal data that we possess about you and will explain to you the details of the treatment of your personal data.
2) The right to rectification
In the case personal data that we store about you is incorrect, inaccurate, or outdated you have the right to demand that we correct these errors. To exercise this right it is sufficient to just point the errors out in an email to the address given below.
3) The right to erasure (the right to be forgotten)/withdrawal of consent
At all times you are absolutely free to withdraw any consent given by stating so in an email. As a consequence of such a withdrawal of consent, within the following 30 days, we will do everything within our reasonable possibilities to make sure that we stop processing and storing personal data about you and will request those partners of us which have access to your personal data to do the same.
4) The right to object to processing
On top of the right to erasure, we grant you the right to object to the processing of your personal data. You exercise this right by stating so in an email. As soon as you raise objections we will be required to demonstrate that we have compelling grounds for continuing the processing, or that the processing is necessary in connection with our legal rights. If we cannot demonstrate this, we will cease the processing activity in question immediately.
5) The right to restrict processing
In cases in which we, or the partners that have access to your personal data, legally cannot delete the relevant personal data (for example in the case that the data are required for the purposes of exercising or defending legal claims) or where you do not wish to have the data deleted, we may continue to store the data, but you are entitled to limit the purposes for which the data can be processed, via stating so in an email.
X. Governing law
XI. Feedback and how to contact us
If you wish to exercise your rights, have any questions regarding this policy, or would like to contact us or learn more about how we use your personal data, you can reach us via email at [email protected] or by mail at Impact Hub Ljubljana, Slovenska cesta 56, 1000 Ljubljana, Slovenia.