Links for students

Contacts

Social media

Accessibility

Privacy Policy

Personal data protection

GEA College – PRIVACY POLICY 

Privacy and Cookie Protection

This policy applies to everyone who uses or visits the website  www.gea-college.si, including its subpages.

  1. Purpose of the Privacy Policy

The purpose of the Privacy Policy is to inform students, training participants, lecturers, companies, business partners, and visitors to the GEA College websites about the purpose and legal basis for the processing of personal data by GEA College d.d., Dunajska cesta 156, 1000 Ljubljana, Slovenia, email: info@gea-college.si.

The Privacy Policy outlines how GEA College collects, processes, and protects personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), the Personal Data Protection Act (Official Gazette of the Republic of Slovenia, No. 163/22 – ZVOP-2), and the internal acts of GEA College.

 

  1. Joint Controller of Personal Data

The joint controller of personal data is GEA College d.d., Dunajska cesta 156, 1000 Ljubljana, Slovenia. GEA College d.d. acts as the joint controller for the following companies and institutions:

  • GEA College – Faculty of Entrepreneurship, Dunajska cesta 156, 1000 Ljubljana.
  • GEA College CVŠ, Higher Vocational Education Company – Centre for Higher Vocational Schools, d.o.o., Dunajska cesta 156, 1000 Ljubljana
  • GEA College Incubator d.o.o.
  • Foundation for the Development of Entrepreneurial Education UPI, Dunajska cesta 156, 1000 Ljubljana

 

  1. Data Protection Officer

GEA College has appointed a Data Protection Officer (DPO), who can be contacted via email at dpo@gea-college.si or by regular mail at GEA College d.d., Dunajska cesta 156, 1000 Ljubljana, Slovenia, with the note “for the DPO.”

The Data Protection Officer at GEA College is Nataša Urbanija.

 

  1. Purposes of Personal Data Processing and Legal Bases

GEA College collects and processes your personal data based on legal grounds related to statutory and contractual relationships, the individual’s consent, and the legitimate interest of the controller.

  • Processing Based on Legal Legal Basis

GEA College processes the personal data of students based on a legal basis, namely:

    • The Higher Education Act (ZViS), Article 81.e (applies to GEA College – Faculty of Entrepreneurship), and

    • The Higher Vocational Education Act (ZVSI-A), Article 56 (applies to GEA College CVŠ – Centre of Higher Vocational Schools). .

  • Processing Based on Contractual Relationships

In cases where the provision of personal data is a contractual obligation necessary for the conclusion and performance of a contract with the controller, the individual is required to provide such personal data. If the individual does not provide the data, it is not possible to conclude a contract with GEA College, nor can GEA College deliver services or supply products under the contract, as it lacks the necessary information to execute the agreement.

Based on the contractual legal basis, personal data is also processed to the necessary extent for the purpose of contract conclusion during the negotiation phase, upon receipt of an offer or inquiry from the individual.

  • Processing Based on Legitimate Interest

GEA College may also process data on the basis of legitimate interest pursued by GEA College, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data. In cases where legitimate interest is used as the legal basis, the controller always conducts an assessment in accordance with the General Data Protection Regulation (GDPR).

Based on legitimate interest, GEA College processes personal data for purposes related to activities that are essential for carrying out the study process and completing the studies.

  • Processing Based on Data Subject’s Consent

GEA College processes personal data based on consent for the following purposes:

  • Sending e-newsletters related to entrepreneurship, business content, and other relevant topics.
  • Providing information about educational events (seminars, workshops, trainings, webinars, free events) and study programs offered by GEA College, as well as other educational programs where GEA College participates as a partner.
  • Using data to improve our services and deliver content that is relevant to individuals, including the creation and presentation of personalized offers, direct notifications, and direct marketing.

Based on consent, the following personal data is processed:

  • First name

  • Last name

  • Email address

  • Telephone number

  • Processing Based on Website Visits via Cookies

GEA College collects personal data during visits to its websites through the use of cookies, in order to provide enhanced functionality, a better user experience, improved security, and the smooth operation of the website. For more information on the use of cookies, please refer to our website HERE.   

  1. Retention of Personal Data

GEA College will process personal data to the extent necessary to achieve the purposes of the processing and for as long as required to fulfil the intended purpose. If the data is obtained based on consent, it will be processed until the consent is withdrawn, or in accordance with statutory and contractual retention periods.

  1. Contractual Processing of Personal Data

In addition to GEA College, personal data is also processed on its behalf and for its account by data processors, such as companies providing technical support for personal data processing. These include accounting services, developers and maintainers of software applications, websites and IT services, developers and implementers of software solutions, external marketing agencies and event organizers, law firms, and other legal service providers, etc.

GEA College has concluded data protection agreements with all processors to ensure the implementation of appropriate measures for safeguarding personal data and the fundamental freedoms of individuals, in accordance with applicable legislation.

  1. Data Subject Rights Regarding Data Processing

Based on your consent, you may exercise the following rights at any time:

    • the right to access your personal data;

    • the right to rectification or completion of personal data;

    • the right to erasure of personal data;

    • the right to restriction of processing (in certain cases);

    • the right to data portability – in cases based on a contract or personal consent, and where processing is carried out by automated means..

You can submit a request to exercise any of these rights in writing by mail to GEA College d.d., Dunajska cesta 156, 1000 Ljubljana, Slovenia, with the note “for the DPO”, or by email dpo@gea-college.si.

Right to lodge a complaint: If you believe that your rights are not being properly upheld, we encourage you to contact us first. If this does not resolve the issue, you may file a complaint with the Information Commissioner of the Republic of Slovenia.

  1. Publication of Changes

Any changes to our personal data protection policy will be published on this website. By using the website, the individual acknowledges and agrees to the full content of this privacy policy.

Last updated: 18 February 2025