PERSONAL DATA PROTECTION NOTICE
Društvo Videostroj, produkcijske storitve d.o.o., Celovška cesta 73, 1000 Ljubljana, company registration number 5357624000 (hereinafter: Videostroj) respects your privacy and is aware of the importance of the right to protect the personal data of an individual, therefore it aims to handle them carefully and responsibly. With this notice, we would like to inform you that as the controller of your personal data, we act in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals during the processing of personal data and on the free flow of such data, as well as on the repeal of Directive 95/46/EC (General Data Protection Regulation; hereinafter: GDPR), and the current law on the protection of personal data and other regulations governing the processing of personal data. Using established technical and organizational measures, we ensure an adequate level of security and prevent accidental or intentional unauthorized destruction of your personal data, its change or loss, as well as its unauthorized processing.
In the following text, in accordance with the provisions of Articles 13 and 14 of the General Data Protection Regulation (GDPR), we provide the necessary information regarding the protection of personal data, whereby we have tried to make this information concise, easy to understand and presented in clear and simple language.
Personal data controller
The controller of personal data is Videostroj.
All questions, required explanations and potential complaints, from the field of personal data processing and rights, in terms of the regulations that govern personal data protection, can be addressed by
- e-mail address: andrej@videostroj.com, or
- post to: Celovška cesta 73, 1000 Ljubljana.
In case of doubt regarding the sender’s identity and in order to protect personal data, Videostroj may request from the sender additional information necessary to determine the sender’s identity. In case of unfounded and excessively repeated requests, we have the right to charge the sender administrative costs, or to refuse to meet certain requests.
Definitions
Personal data is any information relating to the individual to whom the data relates, e.g., name and surname, address, date of birth, personal identification number, tax number, e-mail address, telephone number, and all other data related to individuals and on the basis of which it is possible to identify the individual, directly or indirectly.
Personal data processing is any action or series of actions performed in relation to personal data such as collection, recording, editing, structuring, retention, adapting or modifying, recalling, inspecting, using, disclosing by mediation, disseminating or otherwise enabling access, adapting or combining, restricting, deleting or destroying. Processing can be manual or automated. We perform processing by automated means when it is necessary to conclude a contractual relationship, when there is the express consent of the individual to whom the personal data refers, and when this is permitted by EU law or the law of the Republic of Slovenia, whereby we always ensure the implementation of adequate measures for the protection of rights and freedoms, as well as the legitimate interests of the individual to whom the personal data refers.
Profiling is any form of automated personal data processing that includes the use of personal data to evaluate some personal aspects related to an individual, and in particular to analyze or predict performance at work, economic position, health, personal taste, interests, reliability, behavior, location or movements of that individual. Profiling is used in terms of the law, in the event of achieving a specific legitimate interest of Videostroj, as well as on the basis of express consent to such processing.
A collection is any structured set of data about a person that is available according to specific criteria, which set may be centralized, decentralized, or classified on a functional or geographic basis.
A controller is a natural person or legal entity, public authority, agency or other body that alone, or together with others, determines the purposes and means of processing.
A processor is a natural person or legal entity, public authority, agency or other body that processes personal data on behalf of a controller.
A user is a natural person or legal entity, public authority, agency or other body to whom personal data has been disclosed, regardless of whether or not it is a third party (public bodies that may receive personal data within the framework of particular research in accordance with EU law or the law of the Republic of Slovenia are not considered users).
A third party is a natural person or legal entity, public authority, agency or other body that is not an individual to whom personal data refers, a controller, processor and persons authorized to process personal data under the direct management of a controller or processor.
Consent is any voluntary, explicit, informed and unequivocal declaration of the will of the individual to whom the personal data refers, where consent to personal data processing relating to this individual is expressed by a declaration or a clear affirmative action.
Obtaining personal data
Videostroj receives personal data directly from the individuals to whom the personal data pertains, indirectly from third parties (on the condition that the individual to whom the personal data pertains is aware of this), from possible controllers or processors under contract, and from state authorities.
In accordance with the purposes specified below in this notice, we collect and process the following personal data, in particular:
- contact information and information about your communication with Videostroj (name and surname, electronic address, telephone number, date, time and content of postal or electronic communication);
- data on users of the Videostroj website (IP address, dates, time and duration of website visits, data on the location or entry point of Internet access, data on visited subpages, data on settings, );
- data on employment candidates (g., first and last name, address, contact data, as well as other data submitted by candidates as part of their job application);
- data on employees and external collaborators under contract (data kept in personnel records in accordance with current legislation);
- data on persons who participate in shows produced by Videostroj, e., whose performance is with the participation of Videostroj, in some other way (data submitted by candidates as part of the application for participating in a show);
- other data that individuals voluntarily provide to Videostroj.
By submitting data, the individual consents to its processing and at the same time confirms the veracity of all personal data.
Purpose and legal basis for personal data processing
Videostroj collects and processes your personal data in accordance with the requirements and provisions of the General Data Protection Regulation (GDPR), the current law governing the protection of personal data, as well as other applicable regulations.
We collect and process your personal data on the basis of a contractual relationship, as well as for the protection of our immediate legitimate interests, interests of third parties, i.e., public interest, as well as to fulfill our legitimate obligations. Videostroj protects your privacy and collects and processes only personal data that is necessary in order to fulfill the purpose for which it was collected. If there is a need for the further processing of your data, for other purposes, we will contact you beforehand and ask for your prior written consent. We collect and process personal data in a legal and transparent manner and take care of its accuracy, completeness, up-to-datedness and security. We process sensitive personal data and other special types of personal data based on the express consent of the individual to whom the personal data pertains, or if there is any other reason from Article 9 of the General Data Protection Regulation (GDPR).
We may also process your personal data based on your consent. In those cases, we process the data within the scope and for the purpose specified in the consent, as well as through the agreed notification channels. Videostroj also processes personal data for the purpose of direct marketing, if there is a legal interest for the processing in accordance with the General Data Protection Regulation.
Any transfer of personal data that is processed or intended for processing upon transfer to a third country, or international organization, will be carried out in accordance with the General Data Protection Regulation (GDPR).
Website visit
Each time you visit our website, a web server log file is automatically saved on the web server. We collect personal data by using cookies, whereby we ask for your consent before enabling more invasive cookies, and we can collect specific other data based on our legitimate interests.
Sending inquiries and other communication
In the event that you send an inquiry regarding our services through the contact form, or to other contact information published on our website, we process your personal data exclusively for the purpose of preparing an answer to your inquiry, i.e., any other questions, for the potential preparation and conclusion of a contract, as well as for the implementation of a concluded contract.
For this purpose, we only collect the personal data that you voluntarily submit to us. All data collected through our website, or otherwise communicated to us, is collected for the purpose of providing services, as well as for the purpose of our internal administration and operations.
We may process the provided contact information based on our legitimate interest and for basic customized communications with you via e-mail, and we may attempt to present you with appropriate services that may be of interest to you based on your past interactions with us. We do not use any (automatic) profiling, but only select an adequate set of recipients for individual communication.
Sending job applications
If you submit an application for a published vacancy, or submit a job application on your own initiative to the contact details provided on the website, we collect and process only the data you provided to us (e.g., cover letter and curriculum vitae, proof of eligibility).
We warrant to process your personal data exclusively for the purpose of carrying out the procedure for selecting candidates for a particular job position, contacting unselected candidates, inviting candidates to interviews, preparing a draft employment contract, as well as defending our claims in the event of a dispute due to the suspicion of discrimination during a conducted election procedures.
If we judge that your application may be interesting for another position, and if we want to keep your job application for a longer period of time, we will inform you beforehand and seek your consent.
Sending applications for participation in shows produced by Videostroj
If Videostroj acts as a joint processor of personal data, in addition to the current legislation, it is required to comply with the provisions of the agreement on the joint management of personal data with which the individuals, to whom the personal data refers to, will be familiarized with.
If you, or a third party with your knowledge, submits an application for participation in a show, we collect and process data that is entered into the database (name and surname, address, postal code, gender, e-mail address, telephone number, date of birth, marital status, whether you have children, education status, occupation, employment status, social media profiles, hobbies, sports, height, weight, tattoo and piercing information, description of you and your family, reason for applying to the show, previous experiences (e.g., with farm work), participation in other reality shows, photo and (if you wish) a video presentation).
Videostroj processes personal data for the purpose of recording a show, monitoring the applications of persons who wish to participate in a show, contacting registered persons for the purpose of selecting suitable candidates for participating in a show, managing the database of registered persons, informing the selected candidates about the circumstances that are important for participation in a show, enforcement and assistance in exercising individual rights, as well as potential settlement of compensation claims.
Personal data processing according to a contract
In addition to Videostroj’s authorized employees, personal data can be accessed and processed by carefully selected potential external service providers, who have a concluded contract with Videostroj on personal data processing, and who are required to comply with applicable legal regulations on personal data processing and the implementation of organizational, technical and logistical-technical procedures and measures that protect personal data. Contracted processors may process confidential data solely on our behalf and within the limits of our authority, as well as for the purposes specified herein. Contracted processors do not store personal data and do not use it for their own purposes.
Videostroj may entrust certain activities during personal data processing for the purpose of fulfilling contractual obligations to processors and controllers outside the territory of the EU and the European Economic Area, while guaranteeing that in those cases the same level of protection of personal data will be afforded as if the processing was carried out only by Videostroj, in compliance with all the requirements of regulations related to the transfer of personal data to a third country.
Within legitimate jurisdictions, your personal data may also be disclosed to the following users or third parties:
- providers of information technology services within the scope of software servicing and maintenance,
- the administrator and the person who maintains the website,
- to Videostroj’s expert advisors, and
- to other users to the extent necessary to fulfill the purpose for processing.
Personal data may also be disclosed when the processing is necessary to fulfill Videostroj’s legal obligations in the area of consumer protection, money laundering prevention and terrorism financing, fulfillment of tax obligations, and the like.
Personal data retention period
Videostroj warrants to process personal data to the extent necessary to achieve the purpose of processing and for as long as it is necessary to achieve a specific goal. At the end of the retention period, we will permanently delete or anonymize your personal data so that your identification is no longer possible.
We retain personal data taking into account the applicable legal regulations regarding data retention, and as long as it is possible to fulfill legal requirements based on the contractual relationship, i.e., until the purpose for which they were collected is fulfilled, and all rights and obligations based on the contract have been fulfilled, namely:
- five years from the termination of the validity of the contract, e., the fulfillment of all obligations, and in any case until the expiration of the statute of limitations based on the contractual relationship;
- in case of a court dispute, ten years after the final conclusion of court proceedings.
We retain personal data that we process based on your consent or a legitimate interest, permanently until you withdraw your consent, i.e., until the request to stop processing, whereby we warrant to check the existence of the purpose of personal data processing at regular time intervals. Before revocation, we will delete the data only if the purpose of the personal data processing has been achieved, or if defined by law.
If there is a different statutory retention period for certain data (e.g., accounting or tax data), the retention period is up to 10 years. Data processing is limited during this period of time.
Rights of individuals
Videostroj consistently ensures the exercise of all your rights that belong to you in connection with the processing of your personal data, in terms of valid legal regulations.
Right to withdraw consent
If the personal data processing is based on consent, you have the right to withdraw your consent at any time, free of charge, by a written statement sent to the e-mail address andrej@videostroj.com. The withdrawal of consent is valid only in the future and does not affect the legitimacy of the data processing that was carried out up to the revocation. Withdrawal of consent for personal data processing does not have any negative consequences or sanctions.
Right of access
You have the right to receive confirmation as to whether personal data is being processed in relation to you, and when this is the case, you may request access to the personal data and information on the purpose of processing, the types of personal data, the recipients, the retention of personal data and other information in accordance with Article 15 of the General Data Protection Regulation (GDPR). Videostroj will provide you with a copy of the personal data being processed free of charge, and for additional copies, it has the right to charge a reasonable fee, taking into account administrative costs. If you submit your request electronically, and unless you request otherwise, we will provide the information to you electronically.
Right to rectification
You have the right to demand that Videostroj correct your inaccurate personal data without undue delay. You also have the right to supplement incomplete personal data while respecting the purpose of processing. For this purpose, you can provide us with a supplementary statement with updated personal data.
Right to erasure (right to be forgotten)
You have the right to have Videostroj delete your personal data without undue delay. Videostroj is required to erase personal data without undue delay, when personal data is no longer needed for the purposes for which it was collected or otherwise processed, if it was processed illegally, as well as in other cases from Article 17 of the General Data Protection Regulation (GDPR). We warn you that you will not be able to exercise the right to erasure if the processing is necessary for the exercise, enforcement or defense of legal claims and the like.
We ask you to keep in mind that the right to rectification and the right to erasure are mutually exclusive, and that they refer to incorrect, incomplete or unreasonably processed data. If you are not convinced that your data is wrong, incomplete or processed unjustifiably, you can request a restriction to its processing, until the issue is finally clarified.
Right to restriction of processing
You have the right to request that Videostroj limit the processing of your data:
- if you dispute the accuracy of data processing, and for the period that allows Videostroj to check the accuracy of personal data,
- if the processing is unlawful, but you object to the erasure of the personal data and instead request a restriction to its use,
- if Videostroj no longer needs the personal data for the purposes of processing, but they need it for the exercise, enforcement or defense of legal claims.
- if you have filed an objection regarding processing, until it has been verified that the legitimate reasons of Videostroj prevail over your request.
Right to data portability
You have the right to receive your personal data, which you have submitted to Videostroj, in a structured, generally applicable and machine-readable form, and the right to submit this data to another personal data controller, if personal data processing is based on consent or a contract and is carried out through automated means.
Right to object
You have the right to object, at any time, to the processing of your personal data, including profiling, as well as for direct marketing purposes. Videostroj will stop processing your personal data, unless necessary legitimate reasons for the processing are submitted that prevail over your interests, rights and freedoms, or for the exercise, enforcement or defense of legal claims. If you object to the processing of your data for direct marketing purposes, we will immediately stop processing your data for those purposes.
Right to appeal
If you believe that our processing of your personal data violates applicable legislation, you have the right to file a complaint directly with the national supervisory authority, i.e., to the Commissioner for Information, Dunajska cesta 22, 1000 Ljubljana, electronic address: gp.ip@ip-rs.si, or to the supervisory authority in the EU (European Data Protection Supervisor). You can contact the Information Commissioner regarding all issues related to personal data processing and the exercise of rights based on regulations governing the protection of personal data.
General
The provision of personal data is necessary for concluding and executing contractual relationships, resolving requests, as well as communicating with you. If you do not provide personal data or do not provide it to the required extent, it may not be possible to establish a contractual relationship or resolve potential requests, which will not constitute a breach of contractual obligations by Videostroj and also, in those cases, we will not to be able to respond to your inquiry regarding your participation in a prize draw, or a show, or to contact you for recruitment purposes.
We ask you to notify us of any changes to your personal and contact information by sending an e-mail to andrej@videostroj.com.
Videostroj reserves the right to change or supplement this notice at any time and in any manner. The valid version can always be found on the website https://videostroj.com/sl/, and Videostroj will inform you beforehand, in an appropriate manner, of any changes that significantly affect the processing of your personal data (e.g., by notification on our website or via e-mail).
This Personal Data Protection Notice enters into force on January 26, 2023.