Protection of personal data at IBE d.d.
General information on the protection of personal data at IBE d.d.
The Company takes special care of the security of your personal data. All personal data provided is treated confidentially and is used only for the purpose for which it was provided. Your personal data is handled with the utmost care, considering the applicable legislation and the highest standards of treatment. We ensure the security of your personal data by, among other things, appropriate organizational measures, work procedures and advanced technological solutions, as well as by using external experts to protect your personal data as effectively as possible. In doing so, we use an appropriate level of protection and reasonable physical, electronic,and administrative measures to safeguard the data collected against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to personal data that has been transmitted, stored or otherwise processed.
The following information is included in the internal data protection policy in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)and the Personal Data Protection Act (PDPA-2):
- contact information of the company,
- the purposes, grounds, and types of processing of different types of personal data of individuals,
- the retention period for each type of personal data,
- on the rights of individuals regarding the processing of personal data,
- the right to lodge a complaint concerning the processing of personal data.
Personal data collected by the company
If you are only a visitor to the website, we do not store your visit data as we only use essential cookies which are only used during your visit of our website. If you are an individual who is working with the Company on any legal basis, or a representative of a client or service user or other business partner, we also collect other personal data about you that we need to perform the services or exercise other rights and obligations of the Company in which you are involved. The types of personal data are specified in detail in the internal rules on the protection of personal data. The Company carries out video surveillance at the location Hajdrihova ulica 4 in Ljubljana. The recordings record the image, date, and time, but do not contain sound.
Controller of personal data
The controller of the personal data processed is IBE, d.d., svetovanje, projektiranje in inženiring, Hajdrihova ulica 4, 1001 Ljubljana.
Categories of individuals whose personal data are processed
This notice is intended for all individuals who, as natural persons, are involved with the Company on any legal basis, or who are representatives of clients or users of our services or representatives of other business partners. It is also intended for visitors to the Company's premises at Hajdrihova ulica 4 in Ljubljana and for casual passers-by who are in the immediate vicinity of the premises at Hajdrihova ulica 4 in Ljubljana.
Purposes of processing and grounds for processing
Processing, based on a contract:
In the context of the exercise of contractual rights and performance of contractual obligations, the Company processes your personal data for the following purposes: identification of the individual, preparation of a quotation, conclusion of a contract, provision of the services ordered, notification of any changes, additional details and instructions for the use of the services, resolution of any technical problems, objections or complaints, billing of the services, and other purposes necessary for the performance or conclusion of the contractual relationship between the Company and the business partners.
Processing under the law:
We use your personal data, based on legitimate interest for the detection and prevention of misuse of services, further in the context of ensuring the stable and secure operation of our systems and services, as well as for the purposes of implementing measures for the security of people and property and information security, meeting quality of service requirements and detecting technical malfunctions of systems and services.
We also use your personal data for the purposes of any judicial and administrative proceedings, including out-of-court proceedings, based on legitimate interest. In accordance with the General Regulation, in the event of suspected abuse, the Company may, to the extent appropriate and proportionate, process data about individuals for the purpose of identifying and preventing possible fraud or abuse and may also, if appropriate, share such data with other providers of such services, business partners, the police, public prosecutors or other competent authorities.
Processing, based on consent:
The processing of data may also be based on your consent provided to the Company. For example, consent may relate to specific requirements for cooperation with the Company and improvements to the services provided by the Company. The purpose of this is to enable us to adequately provide our services and to meet specific requests from our clients or business partners. You may withdraw or modify your consent at any time, and the Company reserves the right to identify the individual. Changes to your consent may be made, inter alia, by email to pks@ibe.si or by written request to the Company's address.
Withdrawal or modification of consent applies only to data processed, based on your consent. The last consent we received from you is valid. The possibility to withdraw consent does not constitute a right of withdrawal during a business relationship with the Company. In the absence of withdrawal, the data for which your consent is given will be processed during the individual business relationship with the Company.
Restrictions on personal data disclosure
Where necessary, we will commission other companies and individuals to carry out specific work that contributes to our services. In such case, the Company may also transfer personal data to such carefully selected external processors who will enter a contract with the Company for the processing of personal data, or a substantially identical agreement or other binding document ("Processing Contract"). We will only provide or make available to such external processors such data to the extent required by the specific purpose. Such data may not be used by the external processor for any other purpose, subject at a minimum to compliance with all standards of processing of personal data provided for by applicable law. The external processors are contractually bound to respect the confidentiality of your personal data. The Company shall also, upon reasoned request, disclose personal data to the competent state authorities which have a legal basis for doing so. For example, the Company will respond to requests from courts, law enforcement authorities and other public authorities, which may include public authorities of another EU Member State.
Period of retention of personal data
The retention period is determined according to the category of the individual data and is specified in the internal data protection documents. We retain data for no longer than is necessary to achieve the purpose for which it has been collected or further processed or until the expiry of the limitation periods for compliance with the obligation or the statutory retention period. Video surveillance recordings shall be retained for a maximum of one year. After the retention period has expired, the data shall be erased, destroyed, blocked, or anonymized, unless otherwise provided by law for a specific type of data.
Rights of individuals in relation to the processing of personal data
We will ensure that your rights in relation to the processing of your personal data are exercised without undue delay. Requests concerning the exercise of your rights are accepted by email to pks@ibe.si or by post to IBE d.d., Hajdrihova ulica 4, 1001 Ljubljana. Where you make a request by electronic means, we shall, where possible, provide you with the information by electronic means, unless you request otherwise. Where there is reasonable doubt as to the identity of the individual making a request in relation to any of his, or her rights regarding personal data, we may require the provision of additional information necessary to confirm the identity of the individual.
If the individual's requests regarding personal data are manifestly unfounded or excessive, because they are repetitive, the Company may: charge a reasonable fee, taking into account the administrative costs of providing the information or communication or of carrying out the requested action; or refuse to act on the request.
We provide you with the following rights in relation to the processing of your personal data:
- the right of access to data
- the right to rectification
- the right to erasure ('right to be forgotten')
- the right to restrict processing
- the right to data portability
- the right to object
The right to file a complaint
Any complaint regarding the processing of your personal data may be sent to the following e-mail address: pks@ibe.si or by post to IBE d.d., Hajdrihova ulica 4, 1001 Ljubljana.
If we do not decide on your request within the statutory time limit or if we refuse your request, you have the right to lodge a complaint with the Information Commissioner.
You also have the right to file a complaint directly with the Information Commissioner if you believe that the processing of your personal data violates Slovenian or EU data protection law. If you have exercised your right of access to data and, after receiving a decision, you believe that the personal data you have received is not the personal data you requested or that you have not received all the personal data you requested, you may file a reasoned complaint with the Company within 15 days before fileing a complaint with the Information Commissioner. We must decide on your complaint as a new request within five working days.
Others
If you have any questions about privacy or the information we hold about you, please contact us at pks@ibe.si .