PRIVACY POLICY / GDPR FORMS
GDPR FORMS
Obrazac – Suglasnost za korištenje osobnih podataka za potrebe ispisa predračuna i/ili računa
Obrazac – Suglasnost za korištenje osobnih podataka za potrebe sastavljanja ugovora i realizacije prava i obaveza koje iz istih proizlaze
Obrazac – Suglasnost za korištenje osobnih podataka za potrebe provođenja natječaja za prijam u radni odnos
Obrazac – Zahtjev za dopunu i/ili promjenu osobnih podataka
Obrazac – Povlačenje privole za obradu i korištenje osobnih podataka
PRIVACY POLICY OF THE ETHNOGRAPHIC MUSEUM
Pravilnik o prikupljanju, obradi i korištenju te zaštiti osobnih podataka fizičkih osoba
INFORMATION ON THE USE OF PERSONAL DATA
The Ethnographic Museum, Mažuranić Square 14, Zagreb 10 000, OIB: 99544354954, is a public cultural institution that carries out museum activities as its business purpose. In carrying out its activities and as part of the implementation of specific projects and programmes, the Ethnographic Museum collects and processes personal data in compliance with all relevant laws and regulations.
1. Data Controller
The Ethnographic Museum is the data controller and processor of your personal data, as required by the EU General Data Protection Regulation (GDPR), and by data protection laws and regulations. The Ethnographic Museum, as the data controller, determines the purpose and means of processing personal data and is responsible for the storage and use of personal data in paper or electronic form.
2. Data Protection Officer
In accordance with relevant regulations, the Ethnographic Museum has appointed a Data Protection Officer, whom you can contact with any questions regarding the processing of your personal data or the exercise of your rights in relation to data protection. Contact: jbelak@emz.hr
3. . What type of personal data do we collect?
The personal data we collect depends on the type of project/programme/etc. in which the Ethnographic Museum participates as a lead partner or as one of the participants. This primarily refers to data without which it is not possible to enter into the relevant contract with the project/programme participant, to issue a certificate confirming your participation in the project/programme, or to conduct a qualifying competition for employment or professional training, to allow access to and/or use of the Ethnographic Museum’s collections, etc. The basic personal data we collect are: first name, surname, address, contact details, OIB. For the realisation of a particular purpose, the Ethnographic Museum requires, in order to fulfil our obligations arising from the project, programme, legal obligations or legitimate interests, your data on: date of birth, gender, identity card number (for the purpose of establishing the identity of candidates for specific projects/programmes or when testing for admission to a position or for professional training), account number held with a bank, the name of the bank where your account is held, your personal identification number (JMBG), proof of education and qualifications obtained, training, details of employment, length of service and work experience, proof of personal status, social status, etc.
We process your personal data on the basis of legitimate interest in accordance with Article 6(1)(f) of the General Data Protection Regulation, for the purpose of video surveillance to protect persons and property. Video footage may be provided to the competent authorities (police, court) upon request, if necessary for the conduct of proceedings under specific regulations. Footage obtained via the video surveillance system is retained for a maximum of six months, or longer if it has been seized as evidence in a judicial, administrative, arbitration or other proceeding.
We process your personal data on the basis of consent in accordance with Article 6(1)(f) of the General Data Protection Regulation for the purposes of:
- improving the functioning of all features of the websites and providing a better user experience
- timely notification of events organised by the Ethnographic Museum
List of personal data we collect for the purpose of:
CONTRACTS: first name and surname, address, contact details (telephone number, mobile number, email address), OIB, bank account number and the name of the bank where the account is held, II pension pillar contributor: yes/no
EMPLOYMENT APPLICATION : full name, previous surname (if applicable) and proof of surname change, date of birth, address, contact details (telephone number, mobile number, email address), OIB, details of professional work and training, electronic printout of work history (HZMO), proof of qualifications obtained, proof of passing the professional examination
PARTICIPATION IN WORKSHOPS, PROJECTS, PROGRAMS, ETC. ORGANIZED OR CO-ORGANIZED BY THE ETHNOGRAPHIC MUSEUM: name and surname, contact information (telephone number, mobile phone, e-mail address), OIB, professional title, employer and job position
FOR PROCEEDINGS RELATING TO INQUIRIES / REQUESTS / etc.: mandatory: name and surname, address, contact details (telephone number, mobile phone, e-mail address), OIB;
Additionally: depending on the specificity and purpose of the query/request/etc. (see the categories listed in section 3.)
4. How will we collect and use your personal data?
We collect and process personal data for the purpose of entering into or performing your contract with the Ethnographic Museum, i.e. confirming your participation in a project/programme, etc. to enable the implementation of the project or the execution of a programme related to the performance of museum activities, in order to fulfil our legal obligations and/or on the basis of our legitimate interest. We process personal data for the purpose of entering into or performing your contract with the Ethnographic Museum, i.e. for the execution of a project or the implementation of a programme related to the performance of museum activities.
We collect your personal data through applications to tenders (employment, professional training) as part of the tender documentation, through applications for programmes/ projects, by request (most often via e-mail for the purposes of establishing and fulfilling contractual rights and obligations), via forms published for specific programmes and/or projects (e.g. access to the Ethnographic Museum’s archival, library and other collections or databases, participation in workshops, etc.).
If required by applicable law, we will additionally seek your explicit consent for specific reasons.
5. The reasons why we process your personal data:
– for your participation in a project or programme in which the Ethnographic Museum participates, i.e. for the conclusion and performance of a contract whereby you undertake certain obligations as a participant (attendee) of a project or programme carried out as part of the museum’s activities.
– to fulfil our legal obligations arising from the General Data Protection Regulation (GDPR) or other legal obligations.
6. The reasons we process your personal data on the basis of our legitimate interests are:
– to manage your status as a participant in the project and/or programme in which you are participating.
7. The reasons for which we will additionally request your explicit consent are:
– marketing purposes, in order to inform you about projects, programmes, offers, products and services that you want and are interested in. You may withdraw the consent you have given us for this purpose at any time, in which case we will cease this processing.
8. Who will have access to your personal data?
The Ethnographic Museum guarantees that your data are processed only in a manner consistent with the purpose stated above, and on the basis of forms for a specific purpose that have been published (job application competitions, contracts, participation in workshops, programmes, and projects). If it is necessary for the fulfilment of the stated purpose, the Ethnographic Museum, exclusively on the basis of statutory and subordinate acts, will only forward your personal data to third parties if such data are essential for the full implementation of administrative and/or financial procedures (e.g. to bodies of state and local government and self-government – the Tax Administration, relevant Ministries, courts, etc.) for the implementation of a legal transaction and/or project and/or tender and/or application to programmes, i.e. for the purpose for which you have given your consent to the use of your personal data. Your personal data is also disclosed by the Ethnographic Museum, in addition to the above, to business partners who are involved in the realisation of a specific joint project, where necessary. These business partners process the disclosed data exclusively in accordance with the instructions of the Ethnographic Museum. The Ethnographic Museum is obliged to inform you that your data will be forwarded to business partners/project participants.
9. Where will my data be processed?
Your personal data will be processed depending on the project or programme within the European Union by the processors listed under 5., whose responsibility and obligation to protect personal data and maintain its confidentiality is defined by a contractual relationship and in accordance with all technical and organisational measures and legal regulations governing data protection. Your personal data will not be made available to anyone who is not authorised by the Ethnographic Museum.
10. What rights do I have regarding my personal data?
Where provided for by law, you have the right to:
- be informed about the processing of your personal data
- withdraw your consent at any time, if we are processing your personal data with your consent (via the Withdrawal of Consent for Processing and Use of Personal Data form)
- correction or completion of your personal data to ensure it is always accurate (via the Supplementation and/or Change of Personal Data form)
- erasure of your personal data when it is no longer necessary for the purposes stated above
- lodging an objection with the Ethnographic Museum or the competent state authority (via the GDPR Complaint to the Competent State Authority form)
11. Right to object to the supervisory authority
You can also lodge an objection to the processing of your personal data with the supervisory authority, the Personal Data Protection Agency, Martićeva 14, Zagreb, +385(0)1 4609 999, azop@azop.hr (mailto:azop@azop.hr), www.azop.en (http://www.azop.en)
12. How long do we keep personal data?
We will keep your data for as long as is necessary to fulfil the purpose for which we are processing it. The criteria we use to determine the retention period for personal data are the purpose of the collection, the duration of the project/programme, or a specific provision of another law that obliges us to retain certain data for a specified period.
13. Information and lodging a complaint regarding the use of your personal data
If you have any questions or a complaint about the use of your personal data, you can contact us by telephone, email or post as follows:
- e-mail: jbelak@emz.hr
- in writing to the address: Ethnographic Museum, Mažuranić Square 14, 10000 Zagreb
Submitting a complaint – via the form available at www.emz.hr
14. How often do we update this Information on the Use of Personal Data?
We update the Information on the Use of Personal Data regularly, and the most up-to-date version is always available on our website at www.emz.hr. If any significant changes affecting you occur, we will notify you directly.
15. Withdrawal of consent
You have the right to withdraw your consent at any time via the Consent Withdrawal (GDPR) form, given to the Ethnographic Museum for the use of your personal data, if the purpose for which the data was collected has been fulfilled or has not been fulfilled. Please note that withdrawing consent for the use of personal data before the purpose for which it was given has been fulfilled (e.g. before the fulfilment of contractual rights and obligations arising from the signing of a contract between the Ethnographic Museum and the data subject, before the completion of a contracted project, before the completion of the selection procedure for a job vacancy or vocational training, and so on) will result in the Ethnographic Museum being unable to implement the rights, obligations and actions undertaken for the purposes stated above.
Withdrawing consent for the cookies used by the Ethnographic Museum website www.emz.hr (https://www.emz.hr) is possible at any time at the footer of the website.
Withdrawing consent to receive notifications about Museum events is possible at any time at the bottom of every newsletter received.
The Ethnographic Museum expressly states that it will not sell or otherwise use the collected personal data, except as required by law or as stated above, nor will it transfer it to any third party.