Norway Grants and EEA Grants 2014–2021
Working together for a green, competitive and inclusive Europe.

Personal Data Protection

PROTECTION OF PERSONAL DATA COLLECTED VIA THE DEDICATED WEBSITE OF THE EEA AND NORWAY GRANTS IN THE REPUBLIC OF SLOVENIA

Information about the processing of personal data to be provided in compliance with Article 13 of the General Data Protection Regulation or GDPR to individuals (hereinafter data subjects) whose personal data is collected via the website of the EEA and Norway Grants 2014-2021 in the Republic of Slovenia www.norwaygrants.si or www.eeagrants.si (hereinafter dedicated website).

Ministry of Cohesion and Regional Development (hereinafter MCRD) that serves as the National Focal Point and the Programme Operator for the programmes Climate Change Mitigation and Adaptation and Education – Enhancing Human Capital (hereinafter Programme Operator) processes the personal data of the data subjects obtained via the dedicated website in due accordance with the national legislation governing personal data protection (Personal Data Protection Act, ZVOP-1, Official Gazette of the Republic of Slovenia, No 94/07 – official consolidated text and No 177/20) and in compliance with the provisions of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter General Data Protection Regulation or GDPR).

During the implementation of the EEA and Norway Grants in Slovenia, GODC will provide the data subjects with all of the following information in accordance with Article 13 of the General Data Protection Regulation:

1. Basic information about the controller
2. Contact details about the data protection officer
3. Legal basis for the processing of personal data
4. Categories of personal data and purposes of processing for which personal data are collected
5. Consent of the data subject
6. Recipients or categories of recipients of personal data, if any
7. Transfer of personal data
8. Period for which personal data will be stored
9. Rights of the data subjects and additional information
10. Automated decision-making

1. Basic information about the controller

The personal data obtained via the dedicated website for the purpose of implementation of the EEA and Norway Grants in the Republic of Slovenia will be collected by MCRD as the National Focal Point and the Programme Operator; Kotnikova ulica 5, 1000 Ljubljana; telephone number: 00386 1 400 36 82; e-mail address: gp.mkrr@gov.si; website: www.gov.si/en/state-authorities/ministries/ministry-of-cohesion-and-regional-development.

2. Contact details about the data protection officer

MCRD designated a data protection officer in accordance with the provisions of the General Data Protection Regulation. The designated data protection officer is responsible for monitoring compliance of personal data processing by MCRD with the provisions of the General Data Protection Regulation and of the national Personal Data Protection Act. The designated data protection officer at MCDR is mag. Zora Noč who can be contacted at telephone number 00386 1 400 32 11, and by e-mail at dpo.mkrr@gov.si. MCRD also designated a deputy data protection officer, namely Ms Neva Gregorič (telephone number 00386 1 400 33 40, e-mail address dpo.mkrr@gov.si).

Basic information about MCRD, including contact details of MCRD and of the designated data protection officers are available on the dedicated website of MCRD under the tab ‘’About the Office’’.

3. Legal basis for the processing of personal data

Pursuant to point (a) of the first paragraph of Article 6 of the General Data Protection Regulation, personal data will be processed for information and communication purposes in accordance with the legal bases mentioned below.

The implementation of programmes and funds is supported by the EEA and Norway Grants, and additionally by the matching national co-financing from Slovenia in the case of the programmes Education – Enhancing Human Capital and Climate Change Mitigation and Adaptation; in this context, the following legal bases for the processing of personal data will apply (the list is non-exhaustive):

  • Decree on the Implementation of the Norwegian Financial Mechanism and the European Economic Area Financial Mechanism in the Republic of Slovenia in the Period 2014–2021;
  • Regulation on the Implementation of the European Economic Area (EEA) Financial Mechanism 2014–2021;
  • Regulation on the Implementation of the Norwegian Financial Mechanism 2014–2021;
  • Memorandum of Understanding on the Implementation of the EEA Financial Mechanism 2014–2021 of 17 April 2018 and its amendment of 17 June 2019 with annexes;
  • Memorandum of Understanding on the Implementation of the Norwegian Financial Mechanism 2014–2021 of 17 April 2018 and its amendment of 17 June 2019 with annexes;
  • Programme Agreement between the Financial Mechanism Committee, the Norwegian Ministry of Foreign Affairs and the National Focal Point for the financing of the programme Climate Change Mitigation and Adaptation and its amendments;
  • Programme Agreement between the Financial Mechanism Committee, the Norwegian Ministry of Foreign Affairs and the National Focal Point for the financing of the programme Education – Enhancing Human Capital and its amendments;
  • Programme Agreement between the Financial Mechanism Committee, the Norwegian Ministry of Foreign Affairs and the National Focal Point for the financing of the Fund for Bilateral Relations;
  • Programme Agreement between the Financial Mechanism Committee, the Norwegian Ministry of Foreign Affairs and the National Focal Point for the financing of Technical Assistance with its amendments.

4. Categories of personal data and purposes of processing for which personal data are collected

MCRD obtains personal data through the contact forms of the National Focal Point and the contact forms used in the scope of the programmes Education – Enhancing Human Capital and Climate Change Mitigation and Adaptation (hereinafter contact forms) as well as through the online registration forms filled out by individuals wishing to register for various events. Contact forms and registration forms are available on the dedicated website.

MCRD collects and further processes the following personal data entered in the online contact forms: name, surname and e-mail address. MCRD collects and further processes the following personal data entered in the online event registration forms: name, surname, e-mail address and job.

MCRD processes the personal data of individuals in compliance with the Decree on the Implementation of the Norwegian Financial Mechanism and the European Economic Area Financial Mechanism in the Republic of Slovenia in the Period 2014–2021 for the following intended purposes:

  • providing information regarding the existence, objectives, implementation and achievements of the EEA and Norway Grants in Slovenia to individuals who sent a message or request via the online contact form;
  • sending invitation to and informing individuals of the events they registered to attend via the online registration form.

MCRD collects and processes personal data for the abovementioned specific purposes only after it has duly informed the data subjects whose personal data it collects and processes about the conditions of collecting and processing personal data in compliance with this Privacy Statement. This Privacy Statement is available on the dedicated website of MCRD.

5. Consent of the data subject

Individual, i.e. data subject who submits personal data via the online contact form gives consent to the processing of his/her personal data by a clear affirmative act. The consent is freely given, specific, informed and unambiguous and given by way of an electronic tick-box that the individual has to explicitly check online for each contact form.

Individual, i.e. data subject who enters personal data in the online event registration form gives a free, specific, informed and unambiguous consent to the processing of his/her personal data relating to event registration by submitting the event registration form. A clear notice is given at the time of registration submission saying that an individual agrees with the processing of his/her personal data for this specific purpose.

6. Recipients of personal data

Recipients of the personal data will be the National Focal Point and the Programme Operator in accordance with the Decree on the Implementation of the Norwegian Financial Mechanism and the European Economic Area Financial Mechanism in the Republic of Slovenia in the Period 2014–2021:

  • Financial Mechanisms Division at MCRD as the National Focal Point and the Programme Operator for the programmes Education – Enhancing Human Capital and Climate Change Mitigation and Adaptation.

Recipients of the personal data are committed to duly protecting the obtained personal data and to installing appropriate technical and organisational safeguards that ensure the security of the personal data.

7. Transfer of personal data

MCRD will not transfer personal data to a third country (i.e. a country outside the European Union) or an international organisation.

8. Period for which personal data will be stored

The collected personal data will be kept no longer than is necessary for the purposes for which the data were collected and further processed in accordance with the General Data Protection Regulation. Personal data will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are collected or further processed in which case the minimum retention periods set out in the applicable national and EU legislation will apply.

Personal data will be deleted after the expiration of the retention period but may be stored for longer periods insofar as the personal data will be processed only for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes or for the establishment, exercise or defence of legal claims in compliance with the General Data Protection Regulation.

In case of the withdrawal of consent of the data subject before the implementation of the purpose for which the personal data were collected, the received personal data will be permanently deleted. In case of a subsequent withdrawal of the data subject’s consent, the personal data received shall be kept for the duration of the purposes for which the personal data are collected or further processed.

9. Rights of the data subject and additional information

Data subject will have the right to request access to personal data, and will have the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject by means of notifying the data protection officer or the representative of the Programme Operator/National Focal Point thereof. Data subject will also have the right to object to processing of personal data in compliance with the General Data Protection Regulation.

Data subject will have the right to lodge a complaint with the supervisory authority responsible for monitoring the application of data protection rules in the Republic of Slovenia, i.e. Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, telephone number: 00386 1 230 97 30, e-mail address: gp.ip@ip-rs.si, website: https://www.ip-rs.si/.

The data subject will have the right to withdraw his or her consent at any time. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal. Prior to giving consent, the data subject will be informed thereof. It will be as easy to withdraw as to give consent.

Additional information:
– The provision of the data subject’s personal data is based on his/her personal consent.
– The individual is not obliged to provide personal data. If he/she does not provide personal data, the purposes from the third paragraph of point 4 cannot be fulfilled.

10. Automated decision-making

Personal data will not be subject to a decision based solely on automated processing, including profiling.

Skip to content