Rules on Protection of Privacy and Cookie Use

These Rules on Protection of Privacy and Cookie Use apply to anyone who is in accordance with the General Terms and Conditions of Business and Use of the Website www.ljubljana.si considered a user and the website in its entirety, including its subpages.

A user is any legal entity or natural person using or visiting the website www.ljubljana.si (hereinafter: user).

By using the website the user agrees with these Rules on Protection of Privacy and Cookie Use.

I. Protection of personal data

The City of Ljubljana respects your privacy and undertakes to use your personal data exclusively for the stated purposes. Your personal data shall be carefully protected in accordance with the legislation governing the protection of personal data (Regulation (EU) 2016/679, the Personal Data Protection Act in force, Rules on Protection of Privacy and Cookie Use and internal rules of the City of Ljubljana).

1. Controller of personal data

The controller of personal data processed in accordance with these Rules is the City of Ljubljana, Mestni trg 1, 1000 Ljubljana.

2. Personal data protection officer

The personal data protection officer in the City of Ljubljana is available at the e-mail address dpo@ljubljana.si.

3. Personal data processor

The contract processor of personal data collected within the scope of the website use is the company Innovatif d.o.o., Poljanski nasip 6, 1000 Ljubljana. The controller and processor of personal data have defined and regulated their mutual relations and obligations, including personal data protection, with a written contract.

4. Transmission of personal data to third parties or third countries

The City of Ljubljana does not transmit personal data collected on the website to third parties or third countries.

An exception is the dissemination of the e-newsletter of the City of Ljubljana using the MailChimp online platform where personal data for sending the newsletter is stored, namely: name, surname and e-mail address. The MailChimp online platform guarantees in its Terms of Use and Privacy Policy to respect the rules of the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679) and confirms to have received the certificate of conformity with the EU-U.S. Privacy Shield Framework.

5. Types of personal data and purposes of their processing

The City of Ljubljana collects and processes personal data on the basis of the legislation or consent (agreement) of individuals.

Processing based on the legislation

The City of Ljubljana preforms its tasks and activities on the basis of the legislation of the Republic of Slovenia, and therefore, in line with the legal basis, collects and processes personal data of individuals necessary for the fulfilment of legal obligations imposed on it as a controller of personal data. In accordance with the provisions of the act governing data protection and the General Data Protection Regulation the City of Ljubljana keeps processing records where the legal basis for personal data collection and processing is specifically determined.

Processing based on consent (agreement) of an individual

Based on prior voluntary, explicit, informed and unequivocal statement of will or consent (agreement) of individuals, and their simultaneous notification that they can revoke their consent at any time, the City of Ljubljana collects and processes personal data, namely:

  • for the purpose of sending the e-newsletter on current activities in Ljubljana via e-mail once a week: name, surname and e-mail address;
  • for sending in opinions or questions (citizens can send in their opinions or questions using the contact form https://www.ljubljana.si/en/contacts/) –individuals have to give their name, surname and e‑mail address for the City of Ljubljana to be able to respond;
  • for entering citizens’ initiatives (citizens can send in their initiatives via the website https://pobude.ljubljana.si/ or by using a mobile application): name and surname, e‑mail address, phone number, street and house number or the location marked by clicking on a map.

6. Personal data collection

To ensure personal data protection the City of Ljubljana implements all necessary legal, organisational and appropriate logistical and technical procedures and measures, either on its own on the basis of the legislation, regulations and internal rules or via its contract partners. For the purpose of the latter the City of Ljubljana binds the providers or operators to necessary and consistent compliance with the legal basis, the General Data Protection Regulation and internal rules of the City of Ljubljana.

7. Personal data retention period

Personal data of individuals, obtained on the basis of consent, can be processed and stored until the fulfilment of the purpose for collecting and processing data or until the revocation of the consent given by an individual. Individuals can change or revoke their consent at any time.

Personal data, collected on the basis of regulations, are stored in accordance with the legislation regulating their collection. After the expiry of the legal retention period the data is erased.

8. Rights of an individual

In accordance with the personal data protection regulations individuals have the right to revoke their consent at any time, request a review, correction, processing limitation or deletion of personal data, namely, by notifying us in writing thereof via mail at the address Mestna občina Ljubljana, Mestni trg 1, 1000 Ljubljana, or via e-mail to dpo@ljubljana.si. The aforementioned address can also be used by individuals to submit an objection with regard to the processing of their personal data.

Individuals can also submit a complaint with regard to the processing of their personal data directly to the competent supervisory authority, that is, to the Information Commissioner of the Republic of Slovenia.

9. Procedure in case of violation

In case of violation of the personal data protection the City of Ljubljana shall immediately take all appropriate measures for the protection of rights and interests of the individual in accordance with the applicable legislation and the General Data Protection Regulation.

II. Cookie policy

Cookies are small text files websites use to make the user experience more efficient.

In accordance with the legislation cookies can be stored on your device when they are necessary for the website to function. For all other types of cookies your consent is needed.

This website uses various types of cookies. Some are used on request by other websites which appear on our website.

The following cookies are used to ensure the operation of all functions of the website:

  • Strictly necessary cookies make a website usable as they enable basic functions, such as website navigation and access to safe areas of the website. A website cannot function properly without these cookies.
  • Performance cookies are cookies needed to monitor visits to the website for the purpose of improving the user experience.
  • Advertising cookies anonymously collect data on visits to websites. Their purpose is to display adds which are appropriate and interesting for an individual user.

Accurate descriptions of specific cookies and the time of their installation are given in the following tables:

Strictly necessary cookies

Strictly necessary cookies make the website usable as they enable basic functions such as website navigation and access to safe areas of the website. Websites do not function properly without them.

Cookie name

Service

Validity

Description

PHPSESSID

Ljubljana.si

session

Stores session values on accompanying websites.

Performance cookies

Performance cookies help website owners understand how visitors use their website by anonymously collecting and reporting information.

Cookie name

Service

Validity

Description

_ga

Google Analytics

2 years

Registers a unique identification (ID) used for generating statistical data on how a visitor uses a website.

_gat

Google Analytics

session

Used by the Google Analytics application to throttle request rate.

_gid

Google Analytics

session

Registers a unique identification (ID) used for generating statistical data on how a visitor uses a website.

_pk_ref.13.97ca

video.arnes.si

6 months

Anonymous visitor tag for Piwik analytics.

_pk_id*

video.arnes.si

2 years

Anonymous visitor tag for Piwik analytics.

_pk_ses*

video.arnes.si

30 minutes

Anonymous visitor tag for Piwik analytics.

Advertising cookies

Advertising cookies are used to track users across websites. Their purpose is to display adds which are appropriate and interesting for an individual user.

Cookie name

Service

Validity

Description

id

.doubleclick.net

1 year

User tag for the DoubleClick marketing network.

APISID

Google

1 year

Cookie for various Google search engine services.

SSID

Google

1 year

Cookie for various Google search engine services.

PREF

Google

1 year

Google search engine preferences.

SID

Google

1 year

Cookie for various Google search engine services.

SAPISID

Google

1 year

Cookie for various Google search engine services.

HSID

Google

1 year

Cookie for various Google search engine services.

SID

YouTube

1 year

YouTube content.

HSID

YouTube

1 year

YouTube content.

demographics

YouTube

1 year

YouTube content.

VISITOR_INFO1_LIVE

YouTube

month

YouTube content.

PREF

YouTube

5 years

YouTube player preferences.

APISID

YouTube

1 year

YouTube content.

GPS

YouTube

30 minutes

YouTube content.

SSID

YouTube

1 year

YouTube content.

LOGIN_INFO

YouTube

1 year

YouTube content.

YSC

YouTube

session

YouTube content.

SAPISID

YouTube

1 year

YouTube content.

III. Validity

These Rules on Protection of Privacy and Cookie Use of the City of Ljubljana shall be supplemented as needed, of which you shall be appropriately notified.

These Rules are published at the website www.ljubljana.si and shall apply from 25 May 2018.