GENERAL PROVISIONS

This Privacy Policy governs the collection, retention, and processing of personal data collected by the project “International Two-Day Professional Conference SCS” when you subscribe to receive content such as e-newsletters, invitations to events, publications, and other products of the Slovenian Association for Cleanroom Technology (hereinafter: SCS | PTZ). SCS | PTZ respects your privacy and undertakes to protect the personal data obtained in accordance with the applicable Personal Data Protection Act (ZVOP-1) and internal rules on personal data protection, and to use such data exclusively for the purposes set out under the purposes of processing. SCS | PTZ collects personal data in accordance with ZVOP-1 and other applicable law, either on the basis of law and/or on the basis of the individual’s consent. Prior to giving consent to the processing of personal data, the individual is informed in writing or in another appropriate manner of the purposes of processing. Personal data are collected where you order a specific service from us, or where a transaction is carried out via this website at your request, such as membership in SCS | PTZ, registration for training, a seminar, consultation, conference or meeting, subscription to SCS | PTZ electronic newsletters, and where information about SCS | PTZ activities is provided. Personal data are retained in paper and/or electronic form. Once the need to retain the data has ceased, the purpose of collection has been fulfilled, or upon unsubscribe and/or a request for erasure, the data are permanently and irreversibly deleted.

DATA CONTROLLER

The controller of personal data of users of the website www.clean-room.si is: Name: Slovensko združenje za tehnologijo čistih prostorov SCS | PTZ Address: Dimičeva street 13, 1000 Ljubljana, Slovenija Email: conference@clean-room.si Telephone number: +386 (0)1 5898 312 Principal activity: 94.999 Dejavnost drugje nerazvrščenih članskih organizacij

LEGISLATION

This Privacy Policy is based on Slovenian and European legislation. It has been prepared in accordance with the Personal Data Protection Act (ZVOP-1, Official Gazette of the Republic of Slovenia, No. 94/2007 and amendments), Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), the Electronic Communications Act (ZEKom-1, Official Gazette of the Republic of Slovenia, No. 109/12 and amendments), and other applicable Slovenian and European legislation governing specific areas.

LEGAL PRINCIPLES

In accordance with applicable law, SCS | PTZ observes the principles relating to the processing of users’ personal data. We process personal data lawfully, fairly, and in a transparent manner. We collect personal data for specified, explicit, and legitimate purposes. We do not disclose personal data to third parties except where there is a lawful basis and where necessary for the purposes stated herein. We process personal data only to the extent necessary for the purposes for which they are processed (data minimisation). We retain personal data only for as long as necessary for the purposes for which they are processed (storage limitation). We ensure appropriate security of all collected personal data, including protection against unauthorised or unlawful processing. This Privacy Policy is intended for visitors and users of the website www.clean-room.si.

TYPES OF PERSONAL DATA

• Types of personal data we collect about users:
• first name and last name
• permanent or temporary residence address, post office name and city
• email address
• telephone number
• IP address
• cookie ID
• participation in trainings, seminars, consultations, examinations and other SCS | PTZ events (time, date and type)
• name of the payer of membership fees, seminars, workshops, consultations and trainings
• image and audio recordings from SCS | PTZ events
• other personal data voluntarily provided by the natural person to SCS | PTZ.

PURPOSES OF COLLECTING PERSONAL DATA

SCS | PTZ are professional, non-profit and non-governmental organisations that connect professional members and other stakeholders in the economic sector. Consequently, the purposes of collecting, processing, retaining and using data of legal persons and personal data of natural persons are as follows: we use such data for the performance of services under a membership agreement and/or other legal basis (e.g. registration for an event), for communications (e.g. sending news, reminders and event announcements, invoices, and the provision of services), and for direct marketing (sending informational materials and offers), where permitted by law. Events organised by SCS | PTZ or in which SCS | PTZ participates may be recorded (video and/or audio) and/or photographed. Participants are informed thereof and provide prior consent by registering for an event. Event recordings and photographs may be published for marketing purposes or for the purpose of informing the public about the content of events. Each individual has the right to submit a written request to SCS | PTZ to remove an image in which their likeness is recognisable. Upon written request, SCS | PTZ will remove such recording or photograph from its server without undue delay; however, SCS | PTZ cannot be held liable for photographs or recordings made and published by third parties. SCS | PTZ handles visual documentation diligently and in accordance with applicable law. The controller collects and processes personal data for the purposes set out below. Explicit consent is NOT required:

• where processing is necessary for the performance of a contract to which the data subject is party,
• for sending information related to the ordering of a product or service arising from contractual obligations,
• for responding to user enquiries where the legal basis is the completion of a contact form on the website,
• for user registration on the website for the purpose of using the controller’s services.

Explicit consent IS required:

• for sending an e-newsletter (mailing) containing marketing content,
• where user data are collected for the purposes of targeted advertising/remarketing (Google Analytics, Facebook Pixel…).

We use the above data for the purpose of informing you about the status of your service purchase and/or confirmation. We also use your email address to inform you about news and tips (marketing mailings and newsletters). You may unsubscribe from “marketing mailings” and “newsletters” at any time by clicking the relevant link in the mailing, or by notifying us so that we do so on your behalf. Personal data you provide when subscribing to e-newsletters, registering for events, and other SCS | PTZ products are processed on the basis of your clear and unambiguous consent pursuant to Article 6(1)(a) GDPR. For the purpose of improving the quality of our products and services and for statistical purposes, in connection with the electronic messages we send you, we also process data relating to the display of received messages (opens) and clicks on links contained in received messages. You provide your consent by clicking “Become a member” on the website www.clean-room.si and then “You can register at this link.” You may withdraw your consent at any time by clicking the link “Update your settings or UNSUBSCRIBE” located in the footer of each message you receive from SCS | PTZ, or by sending an email to: conference@clean-room.si. In the event of withdrawal, we will no longer use your personal data to send you information about SCS | PTZ content (e-newsletters, events/trainings of SCS | PTZ, SCS | PTZ services). Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Contact forms/e-newsletters

The website www.clean-room.si generally uses one form for registration and/or membership. Additionally, it may use one form for conference registration and one for enquiries. The personal data collected via these forms are:

• first name and last name
• email address

We collect these personal data for the purpose of sending news and promotions related to the association’s activities. Activation of both categories requires the user’s agreement to the terms of this data protection policy.

Data retention

SCS | PTZ retains your personal data for as long as necessary for the purpose of processing to which you have consented. If you no longer wish to receive content from SCS | PTZ and unsubscribe, or if you withdraw your consent for the processing of personal data for this purpose, we will erase and/or block your data in the SCS | PTZ system and will no longer use your data for this purpose. The retention period for personal data may differ depending on applicable sector-specific legislation (e.g. tax and accounting legislation). Where mandatory retention periods apply under such sector-specific legislation, SCS | PTZ will erase personal data after the expiry of the legally prescribed mandatory retention period.

DATA PROCESSORS AND RESPONSIBLE PERSON

Users of the data include the website administrator and authorised persons of SCS | PTZ. Access to personal data is permitted only to authorised employees of SCS | PTZ and contractual processors (such as developers and maintainers of IT applications, websites and information services, developers and implementers of software solutions, representatives for the conclusion and performance of contracts, including debt collection and any related legal proceedings), to the extent and for the purpose strictly necessary to ensure the smooth performance of work processes, the provision of SCS | PTZ services, and the fulfilment of rights and obligations arising from contractual relationships. Certain organisations and/or companies to which we may disclose your personal data as our processors may be established outside the European Union, in countries that may not provide the same level of personal data protection as within the European Union and/or Slovenia. Where personal data are transferred to third countries (outside the EU and EEA), we will ensure appropriate safeguards and the effective exercise of the fundamental rights and freedoms of individuals in accordance with applicable national and EU legislation and this Privacy Policy, by using the mechanisms envisaged by law, such as binding corporate rules, standard contractual clauses, etc. A processor is a party that processes personal data on behalf of the controller. A processor may process only those personal data and for those purposes for which it has received instructions from the controller of the website. All our processors process data only in accordance with applicable law. The processors of users’ personal data who process personal data on behalf of the controller are:

1. Google Analytics

When you accept cookies on our website, data about your clicks begin to be recorded and transmitted to the Google Analytics system. We use Google Analytics to monitor the browsing behaviour of visitors to the website www.SCS | PTZ.si. The collected data are anonymised for us, and we cannot infer the identity of the user from them. Data that may be obtained from Google Analytics include:

• which topics and areas of our website you viewed,
• how long you stayed on a specific page,
• the duration of your visit to our website.

The Google Analytics algorithm is proprietary and may be changed at Google’s discretion.

2. Google AdWords Service

We use Google AdWords, a web analytics and advertising service provided by Google Inc. Google AdWords uses cookies in order to re-engage visitors via online advertising remarketing campaigns in Google’s advertising network. Third-party vendors, including Google, use cookies based on visits to this website in order to serve remarketing ads. As a user, you may disable Google’s use of cookies by visiting Google’s Ads Preferences page at http://www.google.com/ads/preferences.

3. WEBSITE MANAGEMENT

The management, maintenance and updating of the website vseslovenska.si for the project International Two-Day Professional Conference SCS is carried out by a subcontractor/company SCC d.o.o. It maintains and updates the website www.clean-room.si on our behalf. For this purpose, its maintainers/programmers and our administrator have access to registered members’ data. Personal data to which they may have access include:

• username (pseudonym),
• first name and last name,
• company,
• address,
• telephone number,
• email address.

The subcontractor undertakes not to use the personal data of our members for any purpose other than what is necessary to remedy errors on our website and to ensure its uninterrupted operation. You may access your personal data personally (if you have access to your account). Your personal data may also be accessed by SCS | PTZ or our data processor SCC d.o.o. (only in the event of issues and for the purpose of resolving them). For questions about the confidentiality of your data, the manner of collection and use of data, or requests for additional information, the person responsible for data management will respond:

Name: Slovensko združenje za tehnologije čistih prostorov SCS Address: Dimičeva street 13, 1000 Ljubljana, Slovenia Email: info@SCS | PTZ.si Telephone number: +386 (0)1 5898 312

PERSONAL DATA

Processing of personal data: The controller processes personal data of website users and association members at legal entities with which it cooperates. Contractual basis for processing: When ordering a service, a contractual legal basis for processing personal data is established between the controller and the user. This means that processing is necessary for the performance of a contract to which the user (as the data subject) is party or for taking steps at the request of such user prior to entering into a contract. Where required, the controller provides the user with information about the processing of their personal data via notices on its website.

COOKIES

Cookie notice: The controller (the person who determines the purposes and means of processing within its registered activity) provides information about the use of cookies in a prominent place on the website when the user visits the website. The controller informs the user about the type, purpose and duration of each cookie. Cookies (hereinafter: “cookies”) are small files that a server sends to a user’s browser during a visit to a website, which are then stored on the user’s device (computer, tablet, smartphone) used to access the website. The website uses several different cookies for different purposes. The website uses cookies necessary for basic functionalities of the website. The website uses cookies that obtain information about how the website is used. These are cookies that, primarily through the internet protocol address, enable the analysis of the frequency and content of browsing the website; such analyses are anonymised and do not enable the tracking of an individually identified user. The website uses cookies that enable anonymous tracking of information, on the basis of which we can better tailor our advertising to your needs (Cookie name, cookie description, cookie duration).

• DSID, GPS, IDE, NID, PREF, VISITOR_INFO1_LIVE, YSC; Cookies used by YouTube for displaying videos; up to 1 year
• _gat Google Analytics cookie 1 day
• DSID, DV, IDE, NID Google cookies for tracking visits up to 1 year
• 1P_JAR Google cookie for statistics tracking 1 month

By continuing to use the website, you consent to the placement of these cookies.

Mandatory cookies

These cookies are necessary for the basic operation of the website. They remember you so that you can browse the web pages without interruption. This category includes cookies used to enable the website to remember your entries in web forms, etc. They are mandatory because, among other things, they ensure security and thereby prevent misuse of systems.

Functional cookies

These analytical cookies enable us to improve the functionality of the website through anonymous tracking. They also help us more easily identify products that may be of interest to you. In some cases, the benefit of these cookies is improved speed in processing your requests, detecting and storing your settings, and helping you connect to social networks. If you do not select these cookies, this may result in less well-tailored recommendations and slower website performance. Connections to social networks such as Facebook, Twitter, Google+, etc. may also be impaired.

Advertising cookies

These cookies collect information that we use to tailor advertising to your tastes, preferences and wishes. The collected data are anonymised and do not include any personal data you may have shared with us. If you do not select these cookies, the advertisements you are exposed to may be less relevant to you.

USER RIGHTS

Your rights in relation to personal data. Access to personal data: If you have ordered a service through our website, you may request access to your personal data held in our databases. Please send your request to conference@clean-room.si. We will respond no later than within 30 days. The personal data you may expect in the response include:

• first name and last name,
• address,
• telephone number,
• email address,
• purpose(s) of processing,
• recipients/processors to whom the data have been disclosed,
• the period for which personal data are stored,
• information on the user’s rights: the right to erasure, rectification, restriction of processing or to object to such processing.

The user may request from the controller:

• access to personal data,
• rectification of personal data,
• erasure of personal data,
• restriction of processing of personal data,
• objection to the processing of personal data,
• data portability,
• the right to lodge a complaint.

Personal data in connection with emails (e-newsletters): Each email we send contains a link to a page where you can unsubscribe from receiving our emails (e-newsletters). If you cannot find the link, please notify us at conference@clean-room.si and we will assist you with unsubscribing and/or delete your email address from the email distribution database.

FINAL PROVISIONS

General provisions

SCS | PTZ shall not be liable for any errors resulting from the provision of incorrect data. In the event of changes, necessary updates or incorrect personal data, SCS | PTZ members may review and, where necessary, amend and/or supplement their data submitted upon membership registration via the members’ pages. All other users may do so by sending a message to conference@clean-room.si. When an individual’s membership in SCS | PTZ ends or the individual withdraws from membership, their data are permanently erased unless another legal basis exists for retaining their personal data. As the SCS | PTZ website contains certain links to other websites that are not affiliated with SCS | PTZ, SCS | PTZ assumes no responsibility for data protection on those websites.

Binding nature of the legal terms

These privacy terms apply to all visitors to the website who provide their personal data for management and further processing. These terms are binding on the controller, processors and users in the disclosure, management and processing of the user’s personal data. They form an integral part of any processing of personal data in accordance with the predefined purposes, lawful bases for processing, the user’s consent, and the types of personal data subject to further processing. These privacy terms apply without exception to all users and/or visitors of the website www.clean-room.si. By using the controller’s website, it is deemed that the user has been informed of these privacy terms in advance. These privacy terms are available on the controller’s website and in all forms and actions where the user submits personal data for processing. We will notify you of any substantive changes to this Privacy Policy by email to the address you have provided, only where such changes materially affect the processing of personal data. All users who did not provide an email address at registration or provided incorrect details will be able to view the valid statement on this website. If the user continues to use the SCS | PTZ website(s), user account, or SCS | PTZ services after changes to the Privacy Policy, it shall be deemed that the user agrees to the changes.