GDPR Compliance

General Data Protection Regulation (GDPR)

Slovenia Immigration Hub is committed to protecting your personal data and respecting your privacy rights in accordance with the General Data Protection Regulation (GDPR) and applicable data protection laws.

Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request information about your personal data we process
• Right to Rectification: You can request correction of inaccurate personal data
• Right to Erasure: You can request deletion of your personal data
• Right to Restrict Processing: You can request limiting how we process your data
• Right to Data Portability: You can request transfer of your data to another service
• Right to Object: You can object to certain types of data processing
• Rights in Automated Decision Making: You have rights regarding automated decisions

Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you give us clear consent to process your data
• Contract: When processing is necessary for a contract with you
• Legal Obligation: When we must process data to comply with the law
• Legitimate Interest: When we have a legitimate business interest

Data Protection Measures

We implement appropriate technical and organizational measures to ensure data security:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Limited access to personal data on a need-to-know basis
• Staff training on data protection principles
• Secure backup and recovery procedures

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Client data: Retained for the duration of service provision plus 7 years
• Marketing data: Retained until consent is withdrawn
• Website analytics: Retained for 26 months maximum
• Communication records: Retained for 5 years for legal compliance

International Data Transfers

When we transfer personal data outside the EU/EEA, we ensure appropriate safeguards are in place, including adequacy decisions, standard contractual clauses, or other approved mechanisms.

Data Breach Notification

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, as required by GDPR.

Exercising Your Rights

To exercise any of your GDPR rights or if you have questions about our data processing:

We will respond to your request within one month. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant supervisory authority.