{"id":21464,"date":"2021-02-21T21:43:49","date_gmt":"2021-02-21T21:43:49","guid":{"rendered":"https:\/\/mao.si\/?page_id=21464"},"modified":"2021-03-29T10:24:37","modified_gmt":"2021-03-29T10:24:37","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/mao.si\/en\/privacy-policy\/","title":{"rendered":"General Terms and Conditions of Personal Data Protection\u00a0"},"content":{"rendered":"
\n\n\n\n\t\n\t
\n\t
\n\n\n\n\t\n\t
\n\t\t<\/div>\n\t\n\n\t
\n\t\t

 <\/p>\n

With these General Terms and Conditions, Museum of Architecture and Design, Rusjanov trg 7, 1000 Ljubljana, company number: 5052106000, e-mail: <\/span>info@mao.si<\/span><\/a>, phone no. +386 1 548 42 70 (hereinafter referred to as MAO), as processor and controller of personal data, provides users with information on the processing of personal data in accordance with the provisions of the applicable Slovenian Personal Data Protection Act (hereinafter ZVOP-1) and Electronic Communications Act (hereinafter ZEkom-1), and in accordance with the provisions of EU General Data Protection Regulation (hereinafter GDPR).\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

\u00a01.<\/strong> <\/span>GENERAL<\/b><\/p>\n

\u00a0<\/span><\/p>\n

These General Terms and Condition govern the collection, processing and transfer of personal data, and measures to protect personal data and rights of users to personal data protection.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Personal data obtained through a sign-up form by means of which the user also confirms the acceptance of these General Terms and Conditions will be processed by MAO for the purpose of:\u00a0\u00a0<\/span><\/p>\n

\u2013 <\/span>distributing e-news,\u00a0<\/span><\/p>\n

\u2013 <\/span>selling tickets,\u00a0<\/span><\/p>\n

\u2013 <\/span>selling products in online store,\u00a0<\/span><\/p>\n

\u2013 <\/span>viewing museum collections.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

2. PERSONAL DATA COLLECTED<\/strong><\/p>\n

\u00a0<\/span><\/p>\n

2.1. E-NEWS<\/b><\/p>\n

\u00a0<\/span><\/p>\n

For the purpose of sending e-news, MAO collects the following obligatory user data through e-news sing-up forms:\u00a0<\/span><\/p>\n

\u2013 e-mail address,<\/span>
\n<\/span>\u2013 name and surname,<\/span>
\n<\/span>\u2013 telephone number,<\/span>
\n<\/span>\u2013 occupation.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Personal data collected by the data collector MAO are obtained exclusively by way of voluntarily given information upon signing up to e-news. By giving an unequivocal consent or permission when entering his\/her electronic address, the user agrees to the collecting and processing of personal data for the purpose of receiving e-news. After entering the electronic address for receiving e-news, and giving consent, the user will receive a confirmation message to that same address. By confirming this message and activating the consent, the user will remain subscribed to MAO e-news until cancellation. Personal data for the subscription to e-news will be stored in a data base located on a secure server. Access to this data will be granted only to MAO Data Protection Officer.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

2.2. VIEWING OF MUSEUM COLLECTIONS\u00a0<\/b><\/p>\n

\u00a0<\/span><\/p>\n

MAO collects the following data on visitors who want to view museum collections:\u00a0<\/span><\/p>\n

\u2013 <\/span>name and surname,<\/span><\/p>\n

\u2013 <\/span>permanent\/temporary address,<\/span><\/p>\n

\u2013 <\/span>e-mail address,<\/span><\/p>\n

\u2013 <\/span>telephone number.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

2.3. ONLINE STORE OR TICKET SALES \u00a0<\/b><\/p>\n

\u00a0<\/span><\/p>\n

2.3.1. REGISTRATION AT MAO WEBSITE\u00a0<\/b>\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Upon registering at MAO web site, you have the right to access specific services offered to you by MAO (online selling).\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

For the purpose of creating a personal account, MAO collects and processes the following personal data:\u00a0<\/span><\/p>\n

\u2013 <\/span>name and surname,<\/span><\/p>\n

\u2013 <\/span>state \/ region,<\/span><\/p>\n

\u2013 <\/span>street name and number,<\/span><\/p>\n

\u2013 <\/span>postal code,<\/span><\/p>\n

\u2013 <\/span>town\/city,<\/span><\/p>\n

\u2013 <\/span>telephone number,<\/span><\/p>\n

\u2013 <\/span>e-mail address,<\/span><\/p>\n

\u2013 <\/span>company name (option),<\/span><\/p>\n

\u2013 <\/span>apartment no., floor, etc. (option).<\/span><\/p>\n

\u00a0<\/span><\/p>\n

All information shall be treated confidentially and shall be used solely for the purpose of creating a user account. By registering your profile, you have also given us consent to the processing of your personal data and have accepted these General Terms and Conditions.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Access to the provided personal data will be given only to persons duly authorized by MAO, who will use personal data only for the purpose for which the data has been given.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

The user may at any time request rectification of inaccurate personal data, request the erasure of personal data or restrict the processing of personal data relating to him\/her.<\/span>\u00a0<\/b><\/p>\n

\u00a0<\/span><\/p>\n

MAO will store your data until you delete your account or until you request the deletion of individual data (you must send a written request to <\/span>trgovina@mao.si<\/span><\/a>), on the basis of which the individual user is removed from the user interface.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

The permission or consent you have given constitutes the legal basis for the processing of your personal data.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Your personal data will be stored on computer equipment located in MAO premises. Access to data will be provided only for duly authorized persons who will receive only the data they need for the execution of a process or activity. The data is stored securely using appropriate software and hardware safeguards.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

MAO hereby informs you that you can withdraw your consent to the collection and processing of your personal data at any time. You can also request the rectification of your personal data, their deletion or restriction of processing of collected personal data.\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

2.3.2. DELIVERY SERVICE\u00a0<\/b><\/p>\n

\u00a0<\/span><\/p>\n

We do not use your telephone number for the purpose of telemarketing. We will only contact you by phone if there is a problem with your order or if you have request additional information about the delivery of your products.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

MAO will provide the delivery service only with the information relating to the delivery, namely name and surname, address, telephone number, apartment floor number. MAO does not transfer or sell personal data nor gives access to buyers’ personal data to unauthorized persons including other partner companies, except companies through which we process our payments (Stripe).\u00a0\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

The delivery service will receive your personal data only for the purpose of delivering the ordered goods; the delivery service will destroy the data as soon as the condition for which it has received personal data has been fulfilled, i.e., the goods have been delivered. MAO will keep a register of personal data transfers. By signing the consent form or by registering a profile on the website, the consumer or buyer gives his\/her consent to the transfer of personal data.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

Your personal data can be used in case of a police investigation as we report all cases of payment fraud to the police. We will grant access to your account and other personal data if we consider this necessary to comply with applicable laws and to prevent theft and fraud, such as credit card transactions. Any access we may grant in this regard is based on applicable legislation (Criminal Procedure Act, Prevention of Money Laundering and Terrorist Financing Act, Criminal Code, and others).\u00a0 \u00a0 \u00a0 <\/span>\u00a0<\/span><\/p>\n

The processing of your personal data is necessary to complete your order. Your personal data will be stored on our website servers until your profile has been erased. Alternatively, you can request the erasure of your data via e-mail, in which case we recommend that you contact us at <\/span>trgovina@mao.si<\/span><\/a>.\u00a0\u00a0\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

2.3.3. CREDIT CARD PAYMENT<\/b><\/p>\n

\u00a0<\/span><\/p>\n

In order to process payments, any data provided while buying with a credit card will be transferred to the third-party provider, Stripe online payments platform. In such cases, the following data will be transferred to Stripe:\u00a0<\/span><\/p>\n

\u2013 <\/span>card number,<\/span>\u00a0<\/span><\/p>\n

\u2013 <\/span>card expiry date,<\/span><\/p>\n

\u2013 <\/span>security code.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

You can read more about the terms and conditions of the platform <\/span>here<\/span><\/a> [https:\/\/stripe.com\/en-si\/privacy]. MAO does not store users’ credit card data.\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

3.<\/strong> <\/span>COOKIES<\/b><\/p>\n

 <\/p>\n

Because we want to offer our users a friendly website with all the relevant information we use technology that enables us to collect, process and classify the data relating to the use of our website. This data is collected using cookies. In order to process this data, we need your consent; if you do not give us your consent while browsing the website, we will not collect and process your data. \u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

A cookie is a small piece of information stored on your computer. This enables the website to remember and recognize you on your next visit. Cookies enable MAO to statistically monitor how you and other visitors use our website.\u00a0\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

We use cookies of several partners. These help us analyse how visitors use the website and which content they view. In the list below, you can see which cookies we use, their duration and description:\u00a0\u00a0\u00a0<\/span><\/p>\n

 <\/p>\n

 <\/p>\n\n\n\n\n\n\n\n\n\n\n
Provider<\/b><\/td>\nCookie<\/b><\/td>\nDuration<\/b><\/td>\nDescription<\/b><\/td>\n<\/tr>\n
Website<\/span><\/td>\nCookies with woocommerce_ prefix<\/span><\/td>\n30 days<\/span><\/td>\nThese are cookies necessary for the operation of the store. They are used to update the shopping cart and to monitor the number of selected items.\u00a0<\/span><\/td>\n<\/tr>\n
Website<\/span><\/td>\nCookies with yith_ prefix<\/span><\/td>\n30 days<\/span><\/td>\nCookies used to create a wish list<\/span><\/td>\n<\/tr>\n
Website<\/span><\/td>\nCookies with wp-wpml prefix<\/span><\/td>\n30 days<\/span><\/td>\nThese cookies are used to save preferred language settings to ensure a better user experience.\u00a0<\/span><\/td>\n<\/tr>\n
Stripe<\/span><\/td>\n__stripe_mid<\/span><\/td>\n1 year<\/span><\/td>\nThese cookies are used to save credit card as preferred payment method.\u00a0<\/span><\/td>\n<\/tr>\n
Google Analytics<\/span><\/td>\n__ga<\/span><\/td>\n2 years<\/span><\/td>\nThese cookies are used to follow online statistics and user activity on the website (first visit, page viewed, browsing time, entry and exit point). More about individual cookies and their function, and the purpose for which collected data is used is available here.\u00a0<\/span><\/td>\n<\/tr>\n
__gid<\/span><\/td>\n24 hours<\/span><\/td>\n<\/tr>\n
__gat<\/span><\/td>\n1 minute<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

You can delete cookies at any time (instructions for more popular browsers: Google Chrome:\u00a0<\/span>https:\/\/support.google.com\/chrome\/answer\/95647<\/span><\/a>\u00a0, Mozzila Firefox:\u00a0<\/span>https:\/\/support.mozilla.org\/sl\/kb\/izbrisite-piskotke-podatke-strani<\/span><\/a>, Microsoft Edge: https:\/\/support.microsoft.com\/sl-si\/microsoft-edge\/brisanje-pi%C5%A1kotkov-v-brskalniku-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09) , however if you set your browser not to accept cookies, you may not be able to use some parts of our website. A part of data collected by MAO may become public but only in anonymous from, e.g., as an information about the number of visitors to the website. Information about customers is an important part of our operations and we do not sell it or exchange it with others. If at any time we need to share your information with a third person, you will have the option to decline this. We will not transfer your personal data to third persons without your explicit consent.\u00a0\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

We hereby also inform you that apart from the rights in the paragraph above you have the explicit right to object to the processing of personal data for the purpose of automated data processing or for the purpose of direct marketing.\u00a0\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

\u00a04.<\/strong> <\/span>BASIS FOR THEPROCESSING OF PERSONAL DATA\u00a0<\/b><\/p>\n

\u00a0<\/span><\/p>\n

The permission or consent given by the user constitutes the fundamental legal basis for the processing of his\/her data.\u00a0<\/span><\/p>\n


\n<\/span>MAO hereby ensures that the information obtained from users for the purpose of sending e-news shall not be sold, lent, disclosed, or otherwise forwarded to third persons without users’ permission.<\/span>\u00a0\u00a0\u00a0<\/span><\/p>\n

\u00a0<\/span><\/p>\n

4.1. CONSENT<\/b><\/p>\n

\u00a0<\/span><\/p>\n

In the case of obtaining consent from the user, MAO shall process personal data only for the purpose for which the consent has been given. By giving consent, the user agrees for MAO to process personal data or categories of personal data it has on the user and was given upon subscribing.\u00a0<\/span><\/p>\n

When processing personal data, MAO takes care to protect such data and performs relevant data protection activities.<\/span><\/p>\n

\u00a0<\/span><\/p>\n

4.1.1. WITHDRAWAL OF CONSENT\u00a0<\/b><\/p>\n

    \n
  1. If personal data processing is based on consent, the user has the right to withdraw this consent at any time. The withdrawal shall have no effect on the lawfulness of data processing based on the consent before it has been withdrawn.\u00a0<\/span><\/li>\n
  2. The consent can be withdrawn:\u00a0<\/span><\/li>\n<\/ol>\n
      \n
    1. by writing to MAO at Muzej za arhitekturo in oblikovanje, Rusjanov trg 7, 1000 Ljubljana,\u00a0\u00a0<\/span><\/li>\n
    2. in person by submitting a written request at the registered office of the museum,\u00a0<\/span><\/li>\n
    3. by submitting a written request by e-mail to <\/span>info@mao.si<\/span><\/a>.\u00a0 <\/span>\u00a0<\/span><\/li>\n<\/ol>\n
        \n
      1. If the user decides to withdraw the consent by using the sing-up form on the website, then the electronic address used for giving consent must be entered again in order to receive the confirmation message. After confirming the electronic address, the consent withdrawal will be activated.\u00a0<\/span><\/li>\n<\/ol>\n

        In the case of consent withdrawal, MAO will stop processing personal data collected on the basis of consent and for the purpose for which the consent has been given and shall delete such data.<\/span><\/p>\n


        \n<\/span>4.2. DATA PROCESSING\u00a0<\/b><\/p>\n


        \n<\/span>MAO collects and processes personal data in accordance with the provisions of ZVOP-1, ZEkom-1, and GDPR.\u00a0\u00a0<\/span><\/p>\n


        \n<\/span>MAO shall disclose personal data if there is explicit basis in any of the laws. In other cases, a written consent by the data subject is necessary.<\/span>\u00a0<\/span><\/p>\n

        MAO shall protect personal data and prevent any misuse. Personal data shall be used only for the purpose of sending e-news, executing online purchases, viewing of museum collections and for other purposes for which the user has given consent.\u00a0<\/span><\/p>\n

        Transferring personal data to third parties or institutions without user’s consent represents is not permitted.\u00a0<\/span><\/p>\n

        \u00a0<\/span><\/p>\n


        \n<\/span>4.3. DATA PROCESSING METHOD<\/b><\/p>\n


        \n<\/span>MAO has an effective method of anonymising personal data by sending e-news through a web application that provides for a complete anonymisation of personal data of e-news recipients, and, in accordance with the minimization principle, enables access to personal data only for authorized persons on the basis of request for correction, access to, limitation, objection, transfer or deletion of personal data.<\/span>\u00a0\u00a0\u00a0<\/span><\/p>\n

        The web application provides for a complete traceability of authorized application users (access to application is user-name and password protected) as it automatically records access of authorized users and their activities in the application.<\/span><\/p>\n

        MAO shall, both\u00a0at\u00a0the\u00a0time of the\u00a0determination\u00a0of the\u00a0means\u00a0for processing and at the time of the\u00a0processing itself, implement appropriate\u00a0technical and organisational measures which are designed to implement effective data protection principles, such as data minimisation, and integrate the necessary safeguards into the processing, in order to protect the rights of data subjects.\u00a0<\/span><\/p>\n

        \u00a05.<\/strong> <\/span>RIGHTS OF USERS<\/b><\/p>\n


        \n<\/span>MAO shall, upon request by the data subject and without undue delay, enable the exercise of following rights:\u00a0<\/span><\/p>\n