Data protection notice concerning personal data collected for the purpose of facilitating business activities of media representatives

This Notice informs you about the collection and processing of your personal data, which the Croatian Parliament as data controller is going to undertake, about your rights enabling you to take an informed decision on how your personal data is handled. This notice applies only to personal data collected for the purpose of facilitating the business activities of media representatives during the events (conferences and meetings) organized by the Croatian Parliament.

Data controller and contact details

Hrvatski sabor
Ilica 256B
10 000 Zagreb
Tel: +385 1 6303 781
Email: szop@sabor.hr
The Croatian Parliament Data Protection Officer can be reached at the above postal and email address and telephone number.

Personal data to be processed and the source of data

Data to be collected are: first name and last name, e-mail address, mobile phone number, gender, country of birth, citizenship, date of birth, data on the media outlet he/she represents, identification document data (type, number, expiry date, name of the institution that issued the document), copy of an identification document, photo. 

Data is obtained via the completed accreditation forms sent at the e-mail address on the server of the Croatian Parliament.

Legal basis and purpose for processing personal data

Information about attendees is needed for the purpose of making meeting arrangements, such as preparing photo ID cards, drafting meeting materials, recording the meetings and preparing publications. 

Legal basis for processing:
•    the processing is required for the performance of a task of public interest or for exercising the official authority of the controller within the meaning of Article 6 (1) item (e) of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the General Regulation). The aforementioned tasks and authorities are stipulated by the provisions of the General Regulation and the General Regulation Implementation Act.

Personal data in the filing system will not be used for automated decision-making or profiling.

Recipients or categories of recipients of personal data

Personal data will only be disclosed to those involved in the arrangements of the meetings to the extent necessary for the arrangements and execution of the meetings in accordance with the stated purpose. Personal data will be processed by the Parliamentary Staff involved in the organisation of meetings, and officials of other government bodies who require such data in order to perform a task of public interest (Ministry of Foreign and European Affairs, Ministry of the Interior).

According to the Act on the Right of Access to Information (Official Gazette “Narodne novine” 25/13, 85/15), data may be disclosed to those requesting it in accordance with the Act, while the data and documents are public unless expressly classified as confidential by law. 

Transfer of data to third countries

Data will not be transferred outside the European Union (EU) or the European Economic Area (EEA).

Retention of personal data

Personal data will be retained until it is no longer needed for the purpose of meeting arrangements. However, the participants’ information in the meeting documents will be retained permanently.

Data subject’s rights
Data subjects can exercise their rights as follows:
•    right to access the personal data,
•    right to rectify and right to restrict processing,
•    right to erasure,
•    right to data portability,
•    right to obtain a copy of personal data.

Data subjects are free to exercise their rights in written or via email using the above-mentioned contact details.

According to the General Data Protection Regulation, the data controller must respond to a request concerning the enforcement of the rights of a data subject within one month of receiving the request.

Should you feel that the processing of your personal data violates the applicable data protection regulation, you have the right to lodge a complaint with the national supervisory authority.

Contact details:

Croatian Personal Data Protection Agency 
Selska cesta 136
10000 Zagreb
www.azop.hr