Ministry of Foreign and European Affairs,
Trg N.Š. Zrinskog 7-8, 10000 Zagreb, Croatia
phone: +385 (0)1 4569 964, fax: +385 (0)1 4551 795
1. DATA PROTECTION OFFICER – CONTACT INFORMATION
Mr Zlatko Balić, phone: +385 1 4597 429, fax: +385 1 4597 455, email: SzZOP@mvep.hr
2. PURPOSE AND LEGAL BASIS FOR PROCESSING OF PERSONAL DATA
2.1. Your personal data that is required to perform official tasks and exercise official authority of the Ministry of Foreign and European Affairs will be processed according to point (e) of Article 6(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation – hereinafter ‘the General Regulation’). Such tasks and authority are regulated by the General Regulation and the Croatian Act on the Implementation of the General Regulation, and include:
2.2. Your personal data will be processed in compliance with the legal obligation for the purposes of point (c) of Article 6(1) of the General Regulation to:
2.3. Your personal data will be processed based on legitimate interests for the purposes of point (c) of Article 6(1) of the General Regulation in relation to:
2.4. Your personal data will be processed based on your consent for the purposes of point (a) of Article 6(1) of the General Regulation to:
4. YOUR RIGHTS REGARDING PROCESSING OF PERSONAL DATA
To exercise your rights, you can contact us by mail or email using the contacts on the following page: http://www.mvep.hr/en/other/personal-data-protection-officer/
Your rights are as set out below.
4.1. Right of Access to Personal Data
You have the right to access your personal data processed by us and request detailed information on the purposes of the processing, the types/categories of personal data including consultation of your own personal data, on the recipients or categories of recipients and the envisaged storage period. Access to personal data may be restricted only in cases regulated by EU legislation or national legislation, when the restriction respects the essence of fundamental rights and freedom of others.
4.2. Right to Rectification of Personal Data
You have the right to request the rectification or completion of your personal data if they are inaccurate, incomplete or not up to date. To do this, please send your request to us, the controller, by mail or email. Please note that in your request it is necessary to specify in what way the data is inaccurate, incomplete or not up to date and in which sense it should be rectified. Also, it is necessary to provide documentation substantiating your assertions.
4.3. Right to Erasure
You have the right to request the erasure of your personal data where one of the following applies:
4.3.1. Exceptions Related to the Exercise of the Right to Erasure are Provided for in Article 17(3) of the General Regulation
The aforementioned right to erasure is not applicable to the extent that processing is necessary:
4.5. Right to Object
If we process your data for the purposes of performing tasks of public interest, or in the exercise of our official authority, or when invoking our legitimate interests, you may object to such processing.
5. GRANTING THE RIGHT TO USE PERSONAL DATA
We may forward your personal data to providers of information and communication solutions and services that act as processors.
We have signed contracts with such processors detailing the handling of personal data, which means that they are not able to process your personal data without our permission or forward them to third parties.
In certain circumstances, we have the legal obligation to forward your personal data, and the processing of such data may also involve their international transfer. Such a legal obligation may arise from national or EU legislation. For example, joint supervisory activities of Member States’ supervisory authorities may sometimes be necessary, or actions might need be taken to collect payments of fines imposed but not paid. Therefore, your data is forwarded to other parties when we are bound by the relevant regulation to the extent necessary to achieve the identified purpose.
Your personal data will not be forwarded to third parties for direct marketing purposes.
6. SECURITY OF PERSONAL DATA
We collect and process personal data in a way that ensures adequate security and confidentiality in their processing and enables the effective application of data protection principles with regard to data minimisation, the scale of processing, the storage period and availability.
We take all appropriate technical and organisational data protection measures to prevent accidental or unlawful destruction, loss, alteration, unauthorized use, disclosure, insight or access.
All employees of the controller are obliged to safeguard personal data by signing a confidentiality statement.
Employees of the Ministry of Foreign and European Affairs are obliged to keep all personal and other confidential data they encounter in the course of their duties as a professional or other appropriate type of secret, in accordance with the law governing data confidentiality. That obligation continues to be in force after the termination of employment.
7. PERSONAL DATA STORAGE PERIOD
We process your personal data until the purpose of the processing is fulfilled. Upon termination of the purpose for which they were collected, we no longer use your personal data; they remain in our storage system for the period of time laid down by the General Regulation on keeping archival material.
8. CONTACT INFORMATION
If you have any questions regarding the processing of your personal data, you can contact us via the following link: http://www.mvep.hr/hr/other/service-personal-data/.