BFE policy of collecting, processing and storing personal data

Business Foundation for Education (BFE) conducts its activity in accordance with the Law for Protection of Personal Data and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and in the free movement of such data.
Purpose for collecting, processing and storing your personal data
Business Foundation for Education collects and processes your personal data in connection with the implementation of projects and initiatives, based on article 6, para. 1, Regulation (EU) 2016/679, in particular based on the following: explicit consent from you, as a participant in the implementation of the projects and initiatives, carried out by Business Foundation for Education.
Goals and principles of collecting, processing and storing your personal data
Business Foundation for Education collects and processes the personal data which you provide to us when enrolling to participate in our activities, including also the following purposes:
– registration of a participant in an event/training organized by BFE;
– presentation of your practice or sharing of experience as part of BFE projects;
– certification and recertification as a career consultant (as part of Global Career Development Facilitator Program), administered by BFE;
– accounting purposes;
– statistical purposes;
– information security protection.
Business Foundation for Education observes the following principles in processing your personal data:
– lawfulness, conscientiousness and transparency;
– restriction of the purposes of processing;
– relevance to processing goals and minimization of data collection;
– accuracy and precision of data;
– restriction of storage in order to achieve goals;
– integrity and confidentiality of processing, and ensuring an adequate level of security of personal data.
Business Foundation for Education does not collect or process personal data related to the following: revealing racial or ethnic origin; revealing political, religious or philosophical beliefs, or membership in trade unions; genetic and biometric data; data regarding sexual life or sexual orientation.
Business Foundation for Education stores your personal data for a period of no more than 10 years. After the expiration of this period, BFE takes the necessary measures to erase and destroy all your personal data, without any further delay.
The data you provide to BFE is being processed by persons who are personal data administrators, only for the purposes of carrying out the activities of Business Foundation for Education.
You have the right to request from Business Foundation for Education and to receive confirmation regarding whether any personal data related to you is being processed. You have the right to receive access to your data, as well as receive information regarding the collection, processing and storing of your personal data.
Right to information
The data subject has the right to request:
– information on whether data related to them is being processed, information regarding the purposes of this processing, the categories of data and the receivers or categories of receivers to whom the data is being disclosed;
– message in an eligible form, containing information about the personal data that is being processed, as well as any available information about their source.
Right to rectification:
In case we are processing incomplete or wrong data, the data subject has the right, at any moment, to request from BFE:
– to erase, correct or block the personal data provided by the subject, the processing of which does not comply with the requirements of the law;
– to inform the third parties to whom the personal data has been disclosed, for any erasure, correction or blocking, except in cases when this is impossible or requires excessive efforts.
The requests for access to information or for rectification need to be submitted online. BFE will answer the request within 30 days of its submission. If an objectively longer period is required – in order to collect all requested data, this period may be extended to 90 days. In this case BFE will inform the subject about this in a timely manner. With a motivated response, BFE provides or denies access and/or the information requested by the requester.
Right to object:
At any moment, the data subject shall have the right to object to processing of their personal data, provided there is legitimate grounds for this. When the claim has legitimate grounds, the personal data of the respective individual can no longer be processed.
Right to restriction of processing:
The data subject might request the restriction of processing of personal data if:
– the accuracy of the personal data is contested by the data subject – for a period enabling the controller to verify the accuracy of the personal data or
– the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
– BFE no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
– the data subject has filed a complaint regarding the processing of data and is waiting for the results of the verification to see whether the grounds of the administrator are legitimate.
Right to data portability:
The data subject might request BFE to provide their personal data in an organized, structured and commonly used electronic format if:
– BFE processes the data according to the declaration of consent that may be withdrawn or according to a contractual obligation;
– the processing is carried out by automated means.
Right to complain:
If the data subject determines that Business Foundation for Education violates the applicable data protection legislation, they might contact the organization to clarify the matter. The data subject has the right to file a complaint to the legal entity responsible for the protection of personal data, i.e. the Commission for Personal Data Protection. After 25 May 2018 such complaint can also be filed to a regulatory body, within the EU.