At the Student Health Center of the University of Ljubljana, we are committed to protecting your personal data, ensuring that it is used responsibly to provide appropriate services and information to our visitors. This policy explains how your data is collected, stored, processed, and your rights regarding your personal data, in accordance with EU GDPR (Regulation (EU) 2016/679). Please read this carefully before giving consent for the collection or processing of your personal data.
What are personal data?
Personal data are any information relating to an identified or identifiable individual. This includes, for example, your name, surname, or email address.
The data controller for personal data collected on www.zdstudenti.si is: Student Health Center of the University of Ljubljana, Aškerčeva cesta 4, 1000 Ljubljana
Storage and duration of personal data
Digitally submitted personal data are stored on servers provided by hosting providers, and may also be stored by service providers whose tools we use (e.g., email communication providers). We retain your data until you withdraw your consent or until the data are no longer needed to fulfill the purpose for which they were collected, or to comply with legal obligations.
Collection, processing, and use of personal data
We collect and process personal data only for legally permitted purposes or based on your explicit consent. Data collected with consent are primarily used for communication with you and service improvement. Personal data will not be sold or shared with third parties without your prior written consent.
Withdrawal of consent
You may withdraw your consent for processing personal data at any time, either for a specific purpose or for all purposes.
To withdraw consent, send a written request to: Zdravstveni dom za študente Univerze v Ljubljani, Aškerčeva cesta 4, 1000 Ljubljana or an email to: tajnistvo@zdstudenti.si.
After withdrawal, relevant personal data will be deleted or excluded from automatic processing. Withdrawal does not affect the lawfulness of data processing prior to the withdrawal.
Your rights regarding personal data
Right to correction or erasure
Request correction, completion, or deletion of your personal data at any time.
Right to restrict processing
Request limitation of processing if data are inaccurate, processed unlawfully, or the purpose no longer applies.
Right to data portability
Request that your personal data be transferred to you or another data controller.
Right to object
Withdraw consent for receiving informational or promotional content at any time.
Right of access
Obtain confirmation whether your data are being processed, along with information on the purpose, type of data, recipients, storage period, and source.
Data breach notification
In the event of a personal data breach, we will notify the competent supervisory authority without undue delay, and no later than 72 hours after becoming aware of the breach.
Data processing principles
All collected personal data are processed strictly for the purposes listed above, in compliance with Slovenian Personal Data Protection Act (EU) 2016/679 and GDPR.
Data controller: Student Health Center of the University of Ljubljana, Aškerčeva cesta 4, 1000 Ljubljana.
Data Protection Officer (DPO)
In accordance with Article 37 of Regulation (EU) 2016/679 of the European Parliament, we have appointed the company as the Data Protection Officer:
INFOSECURITY, ocenjevanje na področju varovanja, Miha Ozimek, s.p.
Ulica Pohorskega bataljona 189, 1000 Ljubljana
Email: miha@infosecurity.si