1) About Privacy Policy
The purpose of the Privacy Policy of the Geological Survey of Slovenia (hereinafter: "Privacy Policy") is to familiarize the recipients of the services of the Geological Survey of Slovenia and other persons (hereinafter also referred to as: "natural persons") with the purposes and basis of the processing of personal data by the public institute Geological Survey of Slovenia, Dimičeva ulica 14, 1000 Ljubljana (hereinafter: "GeoZS") and the rights of natural persons in this field.
GeoZS offers special care of the security of your personal data. All transmitted personal data are handled confidentially and are used only for the purpose for which they were transmitted. We handle your personal data with the utmost care, adhering to applicable legislation and the highest standards of their handling. We ensure the security of your personal data, with, inter alia, appropriate organisational measures, work procedures, advanced technological solutions, and external experts with the aim of providing the most efficient protection of your personal data. In doing so, we employ an appropriate level of protection and reasonable physical, electronic and administrative measures to safeguard the collected data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data, or unauthorized access to personal data that have been transmitted, stored, or otherwise processed.
At the same time, this Privacy Policy further explains the consent you have provided for the processing of your personal data
The Privacy Policy includes the following information in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: "General Data Protection Regulation“:
– contact details of GeoZS,
– purposes, legal bases, and types of processing of different types of personal data of natural persons,
– retention periods for individual types of personal data,
– rights of natural persons regarding the processing of personal data,
– right to lodge a complaint regarding the processing of personal data,
– validity of the Privacy Policy.
2) Personal Data collected by GeoZS.
If you are just a visitor to the website, we collect data about you solely through the use of cookies. If you are a recipient of services or a subscriber to services offered by GeoZS, we also collect other personal data about you that we need to provide the services you have ordered or are using. These are personal data that we have obtained from you and collect based on your consent for processing or based on the law.
GeoZS maintains records of the processing activities of personal data it processes, which show which individual personal data about you we process, as well as other information required by applicable law. Every natural person has the right to be informed about the processing of their personal data by GeoZS.
3) Personal Data Controller
The Personal Data Controller for the data processed in accordance with this Privacy Policy is the Geological Survey of Slovenia, Dimičeva ulica 14, 1000 Ljubljana.
4) Categories of Natural Persons Whose Personal Data are Processed
This Privacy Policy is intended for all those who have ordered and/or use our services, or have submitted an inquiry, as well as those who visit our website.
5) Purposes of Processing and Legal Bases for Data Processing
5.1 Processing Based on Contract
As part of the exercise of contractual rights and fulfilment of contractual obligations, GeoZS processes your personal data for the following purposes: identification of the natural persons, preparation of offers, conclusion of contracts, provision of ordered services, informing about any changes, additional details, and instructions for the use of services, resolving any technical issues, objections, or complaints, billing for services, and for other purposes required for the implementation or conclusion of a contractual relationship between GeoZS and natural persons.
When billing for services, based on tax regulations, we also obtain and process your address for the correct issuance of invoices.
5.2 Processing Based on Law
Based on the law, we use your personal data for the detection and prevention of fraudulent use and abuse of services, we also use them within the scope of ensuring the stable and secure operation of our system and services, and for the purpose of implementing information security measures, fulfilling requirements related to service quality, and detecting technical faults in systems and services.
Based on the law, we also use your personal data for the purposes of possible executions, judicial and extrajudicial collections.
In accordance with the General Data Protection Regulation, GeoZS may, in cases of suspected fraud or abuse, process data about natural persons to the necessary and proportionate extent, for the purpose of identifying and preventing potential fraud or abuse, and, if appropriate, these data may also be transmitted to other providers of such services, business partners, police, public prosecutors, or other competent authorities. For the purpose of preventing future abuses or fraud, data regarding the history of identified abuses or frauds associated with natural persons, which may include data about the subscription relationship and, for example, the IP address, may be retained for additional 5 (five) years after the termination of the business relationship.
5.3 Processing Based on Consent for the Processing of Personal Data
Data processing may also be based on your consent, which you have given to GeoZS.
For example, consent may relate to receiving information about offers, benefits, and service improvements provided by GeoZS. The purpose of such communication is to tailor the services as closely as possible to your needs and preferences, thereby increasing their utility value for you. Notifications are conducted through the channels you have selected in your consent. You can revoke notification at any time, in the manner defined in the Privacy Policy.
You may withdraw or modify your consent at any time, either in the same manner as given or by another method defined in the Privacy Policy, with GeoZS reserving the right to identify the customer. One possible way to arrange changes to your consent is also through an email sent to the address: info@geo-zs.si or by a written request sent to the address of the GeoZS headquarters.
Your most recent consent that we have received is valid. The withdrawal or modification of consent applies only to data processed based on your consent. Any withdrawal of consent does not affect the lawfulness of the processing of your personal data prior to the withdrawal. The possibility to withdraw consent does not constitute grounds for termination of the natural person's business relationship with GeoZS.
The data for which your consent is given are processed until revoked. Upon receipt of the withdrawal under the conditions, in the manner, and within the time frame outlined in point 8, personal data will be deleted.
6) Limitations on the Transmission of Personal Data
If necessary, we may authorize other companies and natural persons to perform certain tasks that contribute to our services. In such cases, GeoZS may also transmit personal data to carefully selected external processors, who will enter into a data processing agreement or a substantively equivalent agreement or other binding document with GeoZS (hereinafter: "Data Processing Agreement"). We will transmit or make such data available to external processors only to the extent required by a specific purpose. The external processor may not use this data for any other purpose, while meeting at least all the standards of personal data processing required by applicable legislation. External processors are contractually obligated by GeoZS to respect the confidentiality of your personal data.
Based on reasoned requests, GeoZS also transmits personal data to competent state authorities who show legal basis. For example, GeoZS will respond to requests from courts, law enforcement agencies, and other state authorities, which may also include state authorities of other EU Member States.
7) Retention Period of Personal Data
The data retention period is determined based on the category of individual data. We retain data only as long as is necessary to achieve the purpose for which they were collected or further processed, or until the statute of limitations for enforcement obligations or the legally prescribed retention period have expired.
Accounting data and related contact information about natural persons may be retained for the purpose of fulfilling contractual obligations until full payment for the service is received, or until the statute of limitations for each claim has expired, which may range from 1 (one) to 20 (twenty) years according to the law. Received invoices are retained for an additional 10 (ten) years after the end of the year to which the invoice relates, in accordance with the law governing value-added tax. Issued invoices are retained for an additional 20 (twenty) years after the end of the year to which the invoice relates, in accordance with the Rules on Accounting of the Geological Survey of Slovenia.
Other data obtained based on your consent are retained for the duration of the business relationship and an additional 2 (two) years after its termination, unless the law prescribes a longer retention period. If a natural person who has given consent for the processing of personal data has not entered into a business relationship with us, their consent is valid for 2 (two) years from its submission or until its withdrawal.
After the retention period expires, data is erased, destroyed, blocked, or anonymized, unless the law prescribes otherwise for a particular type of data.
8) Rights of Individuals Regarding the Processing of Personal Data
We ensure the realization of your rights under the General Data Protection Regulation regarding the processing of your personal data without undue delay. We will decide on your request within 30 days of receiving it. In cases of complexity and a large number of requests, we may extend this period by additional 60 days. If we extend the period, we will inform you of each such extension within 30 days of receiving the request, along with the reasons for the delay.
Requests regarding the realization of your rights are accepted via email at: info@geo-zs.si or by mail sent to Geological Survey of Slovenia, Dimičeva ulica 14, 1000 Ljubljana.
When you submit a request electronically, we provide information to you electronically, if possible, unless you request otherwise.
When there is a legitimate doubt regarding the identity of the natural person who submitted the request in relation to one of their rights, we may request the provision of additional information necessary to confirm the identity of the natural person to whom the personal data relates.
We provide you with the following rights regarding the processing of your personal data:
(i) The right to access data
(ii) The right to rectification
(iii) The right to erasure ("right to be forgotten")
(iv) The right to restriction of processing
(v) The right to data portability
(vi) The right to object
(i) The Right to Access Data
You always have the right to be informed whether personal data about you are being processed. If we are processing personal data in relation to you, you have the right to obtain the following information about:
– the purpose of the processing;
– the types of personal data being processed;
– the recipients or categories of recipients to whom the personal data have been or will be disclosed;
– the envisaged retention period for personal data or, if not possible, the criteria used to determine that period;
– the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or the existence of the right to object to such processing;
– the right to lodge a complaint with a supervisory authority;
– the source of transmission of your personal data if they were not transmitted by you.
(ii) The Right to Rectification
You have the right to have inaccurate personal data concerning you corrected without undue delay and taking into account the purposes of the processing, the right to have incomplete personal data completed, including by providing a supplementary statement.
(iii) The right to Erasure ('Right to be Forgotten')
You have the right to obtain the erasure of your personal data without undue delay if:
– the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
– you withdraw your consent on which the processing is based, and there is no other legal ground for the processing;
– you object to the processing of the data and there is no other legal ground for their processing;
– the personal data have been unlawfully processed;
– the personal data must be erased to comply with the regulations in force on the territory of the Republic of Slovenia.
(iv) The right to Restriction of Processing
You have the right to obtain the restriction of processing of your personal data if:
– you contest the accuracy of the data, for a period enabling us to verify the accuracy of your personal data;
– the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
– we no longer need your personal data for the purposes of the processing, but you require them for the establishment, exercise, or defence of legal claims;
– you have filed a complaint regarding the processing which is based on GeoZS's legitimate interests, pending the verification of whether our legitimate grounds override your reasons.
When the processing of your personal data has been restricted in accordance with the preceding paragraph, such personal data, except for their storage, shall only be processed with your consent or for the establishment, exercise, or defence of legal claims or for the protection of the rights of another natural or legal person.
Before lifting the restriction on processing your personal data, we are obliged to inform you about it.
(v) The right to Data Portability
You have the right to receive your personal data that you have transmitted to us in a structured, commonly used, and machine-readable format and the right to transmit those data to another controller without hindrance from GeoZS when the processing is based on your consent and is carried out by automated means. Upon your request and where technically feasible, personal data can be transferred directly to another controller.
(vi) The Right to Object
If we process your personal data for marketing purposes based on the law, you have the right to object to such processing at any time.
We will cease processing your personal data, unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defence of legal claims.
9) The Right to Lodge a Complaint Regarding the Processing of Personal Data
You can send any complaint regarding the processing of your personal data to the email address :info@geo-zs.si or by mail to Geological Survey of Slovenia, Dimičeva ulica 14, 1000 Ljubljana.
In case we do not decide on your request within the legally prescribed period (1 month from the receipt of the request) or if we reject your request, you have the option to lodge a complaint with the supervisory authority, the Information Commissioner, at Dunajska cesta 22, 1000 Ljubljana, email: within 15 days of receiving the response." gp.ip@ip-rs.si.
You also have the right to lodge a complaint directly with the supervisory authority, the Information Commissioner, at Dunajska cesta 22, 1000 Ljubljana, email: gp.ip@ip-rs.si., if you think that the processing of your personal data violates the regulations on personal data protection applicable on the territory of the Republic of Slovenia.
If you have exercised your right to access personal data processed by us and, upon receiving the decision, you believe that the personal data you received are not the personal data you requested, or that you have not received all the requested personal data, you can submit a reasoned complaint to GeoZS within 15 days before filing a complaint with the Information Commissioner. We will decide on your complaint as a new request.
10) Final Provisions
To everything not regulated by this Privacy Policy, applicable legislation shall apply.
GeoZS reserves the right to change this Privacy Policy. We will inform you about any changes by publishing them on the official GeoZS website 15 days before they come into effect.
11) Validity of the Privacy Policy
This Privacy Policy is published on the official GeoZS website and comes into effect on 15.12.2023.
Geological Survey of Slovenia
Dr. Miloš Bavec
Director