EUP
☰
User Profile
Data protection

Privacy Policy

Ministry of Foreign and European Affairs,
Trg N.Š. Zrinskog 7-8, 10000 Zagreb, Croatia
phone: +385 (0)1 4569 964, fax: +385 (0)1 4551 795
email: ministarstvo@mvep.hr

1. DATA PROTECTION OFFICER – CONTACT INFORMATION

Mr Zlatko Balić, phone: +385 1 4597 429, fax: +385 1 4597 455, email: SzZOP@mvep.hr

2. PURPOSE AND LEGAL BASIS FOR PROCESSING OF PERSONAL DATA

2.1. Your personal data that is required to perform official tasks and exercise official authority of the Ministry of Foreign and European Affairs will be processed according to point (e) of Article 6(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation – hereinafter ‘the General Regulation’). Such tasks and authority are regulated by the General Regulation and the Croatian Act on the Implementation of the General Regulation, and include:

  • responding to questions and queries
  • providing legal advice
  • taking actions to ensure the control of compliance with the General Regulation
  • conducting procedures relating to objections and complaints addressed to us as a supervisory authority.

2.2. Your personal data will be processed in compliance with the legal obligation for the purposes of point (c) of Article 6(1) of the General Regulation to:

  • respond to a request to exercise the right of access to information.

2.3. Your personal data will be processed based on legitimate interests for the purposes of point (c) of Article 6(1) of the General Regulation in relation to:

  • participation in events
  • registration of clients’ visits to the Ministry of Foreign and European Affairs.

2.4. Your personal data will be processed based on your consent for the purposes of point (a) of Article 6(1) of the General Regulation to:

  • improve the functionality of the our website and user experience.

3. USE OF COOKIES

4. YOUR RIGHTS REGARDING PROCESSING OF PERSONAL DATA

To exercise your rights, you can contact us by mail or email using the contacts on the following page: http://www.mvep.hr/en/other/personal-data-protection-commisioner/

Your rights are as set out below.

4.1. Right of Access to Personal Data

You have the right to access your personal data processed by us and request detailed information on the purposes of the processing, the types/categories of personal data including consultation of your own personal data, on the recipients or categories of recipients and the envisaged storage period. Access to personal data may be restricted only in cases regulated by EU legislation or national legislation, when the restriction respects the essence of fundamental rights and freedom of others.

4.2. Right to Rectification of Personal Data

You have the right to request the rectification or completion of your personal data if they are inaccurate, incomplete or not up to date. To do this, please send your request to us, the controller, by mail or email. Please note that in your request it is necessary to specify in what way the data is inaccurate, incomplete or not up to date and in which sense it should be rectified. Also, it is necessary to provide documentation substantiating your assertions.

4.3. Right to Erasure

You have the right to request the erasure of your personal data where one of the following applies:

  • the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; • you have withdrawn the consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
  • you have objected to the processing pursuant to Article 21(1) of the General Regulation and there are no overriding legitimate grounds for the processing;
  • the data have been unlawfully processed;
  • the data have to be erased in compliance with a legal obligation in Union or Member State law to which the controller is subject;
  • the data have been collected in relation to the offer of information society services referred to in Article 8(1) of the General Regulation.

4.3.1. Exceptions Related to the Exercise of the Right to Erasure are Provided for in Article 17(3) of the General Regulation

The aforementioned right to erasure is not applicable to the extent that processing is necessary:

  • for exercising the right of freedom of expression and information;
  • for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) in so far as the right to erasure of personal data is likely to render impossible or seriously impair the achievement of the objectives of that processing;
  • for the establishment, exercise or defence of legal claims. 4.4. Right to Restriction of Processing of Personal Data You have the right to obtain restriction of processing of personal data from the controller if: • you contest the accuracy of the data;
  • the processing is unlawful, and you oppose the erasure of the data;
  • the controller no longer needs the data for the purposes of the processing, but you have requested them for the establishment, exercise or defence of legal claims;
  • you have objected to the processing of the data.

4.5. Right to Object

If we process your data for the purposes of performing tasks of public interest, or in the exercise of our official authority, or when invoking our legitimate interests, you may object to such processing.

5.  GRANTING THE RIGHT TO USE PERSONAL DATA

We may forward your personal data to providers of information and communication solutions and services that act as processors.

We have signed contracts with such processors detailing the handling of personal data, which means that they are not able to process your personal data without our permission or forward them to third parties.

In certain circumstances, we have the legal obligation to forward your personal data, and the processing of such data may also involve their international transfer. Such a legal obligation may arise from national or EU legislation. For example, joint supervisory activities of Member States’ supervisory authorities may sometimes be necessary, or actions might need be taken to collect payments of fines imposed but not paid. Therefore, your data is forwarded to other parties when we are bound by the relevant regulation to the extent necessary to achieve the identified purpose.

Your personal data will not be forwarded to third parties for direct marketing purposes.

6. SECURITY OF PERSONAL DATA

We collect and process personal data in a way that ensures adequate security and confidentiality in their processing and enables the effective application of data protection principles with regard to data minimisation, the scale of processing, the storage period and availability.

We take all appropriate technical and organisational data protection measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure, insight or access.

All employees of the controller are obliged to safeguard personal data by signing a confidentiality statement.

Employees of the Ministry of Foreign and European Affairs are obliged to keep all personal and other confidential data they encounter in the course of their duties as a professional or other appropriate type of secret, in accordance with the law governing data confidentiality. That obligation continues to be in force after the termination of employment.

7. PERSONAL DATA STORAGE PERIOD 

We process your personal data until the purpose of the processing is fulfilled. Upon termination of the purpose for which they were collected, we no longer use your personal data; they remain in our storage system for the period of time laid down by the General Regulation on keeping archival material.

8. CONTACT INFORMATION

If you have any questions regarding the processing of your personal data, you can contact us via the following link: http://www.mvep.hr/en/other/personal-data-protection-commisioner/.

9. PRIVACY POLICY CHANGES

We regularly update our privacy policy to keep it accurate and up to date, and we reserve the right to change its content if we consider it necessary. You will be informed of any changes and updates on our website in due time in accordance with the principle of transparency.