Legal Notice
We recognize the importance of protecting personal data, also because this data allows us to offer you a better experience and information. The GDPR Regulation adopted by the European Union sets high standards for how your data is collected and stored, and it grants you the right to access it, request deletion, and more.
Understanding that this is important, and to comply with the relevant statutory requirements, we have outlined below how we keep your data safe and the rights you have as a data subject. Please read this notice carefully before giving your consent to the collection or processing of your personal data.
What is personal data
Personal data is any data relating to an identified or identifiable natural person, regardless of how it is expressed. This includes data that can be used to identify you, such as your first name, last name, e-mail address, and similar information.
The controller of personal data on zelezniskimuzej.si is Železniški muzej, Parmova ulica 35, 1000 Ljubljana.
Where and how long we store personal data
Personal data you submit digitally is stored on servers rented from our hosting provider and may also be stored by companies whose tools we use. For example, the provider of our e-mailing tool stores data about recipients.
The personal data we collect is kept until we receive notice that you no longer consent to the storage and processing of your data, or until the purpose for which the data is processed has been fulfilled, or as long as required to satisfy statutory obligations.
How we collect, process and use personal data
Personal data is collected, managed, and processed exclusively for statutory purposes or on the basis of your express consent.
The data collected with your consent is primarily intended for communicating with you and improving our services. We undertake not to lend, transfer, or sell your personal data to any third party without notice and without obtaining your express written consent.
Withdrawing your consent to data processing
You may withdraw your consent to the processing of personal data at any time. Consent may be withdrawn with respect to a specific purpose or to all purposes for which it was originally granted.
To withdraw your consent, send a written statement by postal mail to: Železniški muzej, Parmova ulica 35, 1000 Ljubljana, or by e-mail to muzej.sz@slo-zeleznice.si.
By withdrawing your consent to the collection or processing of personal data, all related data will be deleted or excluded from automated processing.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, nor the use of personal data for purposes required by law.
Your rights under personal data protection
Right to erasure (“right to be forgotten”)
You have the right to request correction or completion of inaccurate or incomplete personal data relating to you at any time. You may also request access to the data collected about you or request the immediate deletion of your personal data.
Any correction, completion, or deletion of your personal data will be notified to you without undue delay.
Right to restriction of processing
You may at any time request that we restrict the processing of your personal data in cases of inaccuracy, unlawful processing, cessation of the processing purpose, or when lodging an objection.
Right to data portability
You have the right to receive the personal data we process in relation to you at any time.
You also have the right to have such personal data transferred to another controller at any time.
Right to object
Any use of your personal data for information or promotional purposes requires your express consent. If you have consented to receiving information or promotional content, you may revoke your consent to such use at any time by sending us a written notice.
Right of access
You have the right to request confirmation as to whether personal data relating to you is being processed and to gain access to such data, including information about the purpose of processing, the types of personal data processed, who is using your data, the intended retention period, and the source of your personal data.
Personal data breach
Any personal data breach will be notified to the appropriate authority without undue delay and no later than 72 hours after the breach has been brought to our knowledge.
Important notice about the processing of your personal data
We undertake to process the data we collect exclusively for the above-specified purposes and in compliance with the applicable personal data protection legislation and Regulation (EU) 2016/679 (GDPR).
