GDPR

PERSONAL DATA PROTECTION POLICY

It is important to the International Centre for Underwater Archaeology in Zadar (hereinafter: ICUA Zadar) to protect the security and privacy of your personal data, therefore we operate in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and applicable data protection acts.

We hope that the policy described below will help you understand what data ICUA Zadar can collect, how ICUA Zadar use and store this data, and with whom we may share it.

Personal data

ICUA Zadar will not collect any personal data about you (e.g. your name, address, telephone number or e-mail address),except in cases where you voluntarily decide to provide it to us (e.g. in surveys, when asking questions, requests, etc. ),that is, you give your consent or unless otherwise prescribed by the applicable acts and regulations for the protection of your personal data.

Children's personal data

When providing information society services directly to a child, the processing of personal data of a child is lawful if the child is at least 16 years old. Where the child is below the age of 16 years, such processing shall be lawful only if and to the extent that consent is given or authorised by the holder of parental responsibility over the child. The International Centre for Underwater Archaeology in Zadar makes reasonable efforts to verify whether a consent in such cases has been given or approved by the holder of parental responsibility over the child, taking into account available technology.

Lawfulness, fairness and transparency

Your personal data is processed exclusively on a lawful basis, on the basis of a legal obligation, your consent, or other legitimate grounds. Data relating to you will be collected, used, made available, or otherwise processed in a transparent manner, and the deadlines and purposes of data processing, data on the controller’s identity, as well as information on how you can access your data, file a complaint of request data updating, are all made publicly available.

Purpose limitation

Your personal data will be collected for specified, explicit, and legitimate purposes and will not be further processed in a manner that is incompatible with those purposes. Data collected for one purpose will not be used for any other purpose or in a manner that is incompatible with the initial purpose. You will be asked to give specific consent if the purpose of data processing is not carried out on a lawful or contractual basis.

Data minimization

The personal data we collect is adequate, relevant, and limited for the purpose of processing. The data controller will not collect personal data that is not needed for the purpose of processing.

Data accuracy and integrity

It is essential that the personal data we collect and store is accurate and up-to-date and we will therefore take every reasonable measure to ensure that inaccurate personal data is deleted or corrected without delay while taking into account the purposes for which it is processed.

Storage limitation

The time limits for storing your personal data are determined by positive legal regulations or your consent for collecting and processing personal dana.

Integrity and confidentiality

ICUA uses technical and organizational security measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to personal dana.

Questions and comments

ICUA Zadar shall accept all reasonable requests related to rectify, complete or erase your personal data. Should you have any questions or comments on data protecton policy, please contact us.

ICUA Zadar appointed an officer for the protection of personal data based on the General Regulation for the Protection of Personal Data (GDPR) by its Decision of 20^th May 2018.

Contact information of the personal data protection officer are:

e-mail: info@icua.hr

in writing: International Centre for Underwater Archaeology in Zadar

Božidar Petranovića 1

23000 Zadar

File No: 034-01-9-012-MP-19

Zadar, 22^nd January 2020

Pursuant to the Article 37 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and on repealing Directive 95/46/EC (General Data Protection Regulation) and the Article 14 of the Statute of the International Centre for Underwater Archaeology in Zadar, the Director of the International Centre for Underwater Archaeology in Zadar Mladen Pešić, Ph.D. brings the following

DECISION ON CHANGING THE DECISION ON THE APPOINTMENT OF PERSONAL DATA PROTECTION OFFICER

I. In the Decision on the appointment of personal data protection officer (File No: 840-01-9-148-LB-18) of 20 May 2018, point IV is amended. in such a way that it now reads:

''Contact information of the personal data protection officer are:

E-mail: info@icua.hr, phone: 023/250-486.''

II. This Decision enters into force on the day of its adoption, and will be published on the official website of the International Centre for Underwater Archaeology in Zadar. The Personal Data Protection Agency will be notified of the amendment of the Decision on the appointment of a personal data protection officer immediately after the adoption of this Decision.

Director

Mladen Pešić, Ph.D.

File No: 849-01-9-148-LB-18

Zadar, 20^th May 2018

DECISION ON THE APPOINTMENT OF PERSONAL DATA PROTECTION OFFICER

I. With this Decision, the employee Ivana Pejaković is appointed as the personal data protection officer of the International Centre for Underwater Archaeology in Zadar.

II. The personal data protection officer has following tasks:

to inform and advise the controller or the processor as well as their employees who carry out processing of their obligations pursuant to the Regulation (EU) 2016/679 and to other Union or Member State data protection provisions;
to monitor compliance with the Regulation (EU) 2016/679 and with other Union or Member State data protection provisions and with the policies of the controller or processor in relation to the protection of personal data, including the assignment of responsibilities, awareness-raising and training of staff involved in processing operations, and the related audits;
to provide advice where requested as regards the data protection impact assessment and monitor its performance pursuant to Article 35 of Regulation (EU) 2016/679;
to cooperate with the supervisory authority;
to act as the contact point for the supervisory authority on issues relating to processing, including the prior consultation referred to in Article 36 of Regulation (EU) 2016/679 and to consult, where appropriate, with regard to any other matter.

III. The data protection officer shall in the performance of his or her tasks have due regard to the risk associated with processing operations, taking into account the nature, scope, context and purposes of processing.

Personal data protection officer is obliged to keep as confidential all the information and data that he/she learns in the process of performing his/her duties, and this obligation continues after the duty of the personal data protection officer terminates.

IV. Contact information of the personal data protection officer are:

e-mail: ipejakovic@icua.hr, telephone: 023/250-486

V. This Decision enters into force on the day of its adoption, and will be published on the official website of the International Centre for Underwater Archaeology in Zadar. The appointment of the personal data protection officer will be reported to the Personal Data Protection Agency immediately upon adoption of this Decision.

Director

Assist. Prof. Luka Bekić, Ph.D.