.png)
Privacy notice – visitors of the Croatian Parliament
This privacy notice provides information on collecting and processing of personal data by the Croatian Parliament as the controller and on the protection of data subjects’ rights, and allows for an informed consent for the collection and use personal data. This privacy notice refers exclusively to personal data collected for the purpose of organizing and facilitating visits at the building of the Croatian Parliament and security with the aim of promoting openness of the Croatian Parliament.
Controller’s contact details
Croatian Parliament
Trg svetog Marka 6
10000 Zagreb
Phone: +385 1 6303 781
E-mail: szop@sabor.hr
These details are also the contact details of the data protection officer.
Personal data collected and source of data
The data collected are: name and surname, personal identification number, date of birth, number of identification document and issuing authority, phone number, e-mail address, organisation of the visitor.
For minor visitors, only the name and surname are collected.
The data are collected directly from the data subject, except in the case of group of students whose organized visit is part of the school curriculum and whose data are made available by the school.
Purpose and lawfulness of data processing
The data collected is necessary for the purpose of organizing and facilitating visits at the building of the Croatian Parliament and security.
Lawful basis for data processing:
• processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, within the meaning of Article 6 paragraph 1 item (e) of the Regulation (EU) 2016/679 of the EUROPEAN PARLIAMENT and of the COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: GDPR). The aforementioned tasks and authorities are laid down by the provisions of the GDPR and the GDPR Implementation Act.
The collected personal data shall not be used for automated individual decision-making, including profiling.
Data recipients
Personal data can be provided to persons involved in the organization of the event to the extent that is necessary in accordance with the purpose of data collection. Personal data will be processed by employees of the Croatian Parliament involved in the organization.
In accordance with the Act on the Right of Access to Information (official gazette of the Republic of Croatia Narodne novine, No. 25/13, 85/15), all documents produced in the course of the activities of the Croatian Parliament are publicly accessible and may be delivered to persons who request it in accordance with the said Act.
Storage period
Personal data are processed for a period that is required to fulfil the purpose of data processing, i.e. 15 days after the visit, an no longer than by the end of the school year for school groups. The name and surname and the number of the identification document of persons of legal age, collected for security purposes, shall be permanently kept in the information system with limited access possibility. After the end of the purpose for which they were collected and the aforementioned periods, we erase your personal data, while the data contained in official documents are kept in our storage system in accordance with the storage periods stipulated by the archive storage regulations.
Data subject rights
Your rights are:
• right of access to personal data,
• right to rectification of personal data,
• right to erasure,
• right to object.
You may send a request for the exercise of your rights to the data protection officer, by letter or e-mail at the above-mentioned addresses.
In the case of suspected infringements with regard to privacy or lawfulness of processing you have the right to file a complaint with the supervisory authority:
Croatian Personal Data Protection Agency
Selska cesta 136
10000 Zagreb
www.azop.hr