2. PRIVACY POLICY

If you are a user of library services, as defined in the Rules of Operation of the Central Library of Celje and the Librarianship Act (Official Gazette of the Republic of Slovenia, No. 87/01, 96/02 – ZUJIK and 92/15), we collect various types of your data, but we attach great importance to the protection of your privacy and private data, which is why we collect and process your data to the minimum extent necessary and only for the purpose for which there is an explicit legal basis. We process your data for our own purposes as their controller. We may, on the basis of a data processing agreement, forward the data to our contractual processors, who process it in accordance with our instructions, over which we perform periodic supervision.

We only collect personal data directly from you – through completed forms or when communicating with you.

We do not perform profiling or automated decision-making based on the collected personal data, and we do not transfer the data to third countries.

Legal basis, type of data and purpose of collection and processing
As part of our library activities, we process personal data for various purposes and to varying extents, namely:

1. without your consent, to perform a task in the public interest, which is carried out as a library activity necessary for the performance of a public service in the field of education, which is assigned to us as the administrator under the law of the Republic of Slovenia, on the basis of:

• Librarianship Act (Official Gazette of the Republic of Slovenia, No. 87/01, 96/02 – ZUJIK and 92/15),
• Rules of Operation of the Central Library of Celje, adopted on 17 December 2024

2. based on the explicit consent of users of library services, to process personal data for one or more specific purposes.

Data transmission

We carefully protect your personal data and do not share it with third parties, except in accordance with applicable law. If personal data is shared with external processors for the purpose of carrying out our activities, we ensure that we have concluded appropriate data processing agreements with them and that the processors also comply with applicable data protection standards.

Retention time

We only store your data for as long as we are required to do so by law or as long as it is necessary to achieve the purpose for which the data was collected and used. If we have collected the data on the basis of consent, we store it until its revocation, unless the purpose for which it was collected has already been fulfilled. After the purpose of processing has been fulfilled, we delete or destroy the data, except when it concerns data that is stored permanently by law or is part of archival material.

1. Membership – library registration

A member who is an individual - a natural person, or a person who has been granted custody of a child under the age of fifteen (15), is obliged to provide the administrator, pursuant to Article 15 of the Librarianship Act:

• first and last name,
• date and place of birth,
• address of permanent or temporary residence,
• member category,
• information for notification (contact telephone number or email address).

In order to ensure the accuracy of the data upon registration, the controller has the right to inspect a valid personal document with a photo (identity card, passport, driving license) and a certificate of temporary residence in the Republic of Slovenia, if the person is a foreign citizen with temporary residence in the Republic of Slovenia.

The purpose of collecting the above data is to register an individual in the library so that they can use services that the library provides only to members, namely to ensure traceability of borrowed library materials, restore damaged library materials, fulfill contractual obligations related to the use of certain types of library materials, fulfill obligations related to copyright and related rights, etc. The data is also necessary to ensure statistical monitoring and transmission to state authorities and other authorized users.

With the explicit consent of the member, the controller may collect:

• data on educational level.

The purpose of collecting the above data is the need to plan the acquisition of library materials and organize services for target groups.

A member who is a legal entity shall provide the library with data that is accessible from public records and, based on the Business Rules, also:

• name and surname of the person authorized to borrow the material,
• contact telephone number of the authorized person,
• contact email address of the authorized person.

An authorized person is an individual - a natural person who is the contact person and acts in the name and on behalf of a legal entity that is a member of the library.
The purpose of collecting the above data is to communicate with the person authorized to borrow materials within the framework of library services.

2. Membership fee

The controller may, based on the Business Rules, inspect:

• unemployment certificate from the Employment Service of the Republic of Slovenia, which must not be older than one month,
• certificate of receipt of financial social assistance from the Social Work Center with a recommendation from the Social Work Center,
• a valid membership card of the Celje Librarians' Association,
• decision on the degree of disability,
• European Disability Card,
• a valid certificate of education at the secondary, undergraduate or postgraduate level for the current school or academic year or a student ID card with a valid sticker for the current school or academic year.

The purpose of reviewing the above official documents is to acknowledge the application of a lower membership fee or exemption from paying membership fees upon proof of appropriate status.

3. Informing library members

The library collects and processes:

• information for notification (contact telephone number or email address), which the member provides to the library upon registration.

The purpose of collecting the above data is to inform the member about the received or prepared material that the member reserved via the Internet in the My Library program or with the mCOBISS mobile device application (notification to email address, SMS notification) and to inform the member about outstanding claims.
Within "My Library", a member can also independently subscribe to other electronic notifications that help them in maintaining their own records. A member can request changes to their settings when visiting the library. For minors and persons assigned guardianship, the addressing of these notifications is determined by parents or guardians.

The library also collects and processes:

• address of permanent or temporary residence, which the member provides to the library upon membership.

The purpose of collecting the aforementioned information is to inform or remind the member of undelivered materials by sending reminders by mail. For minors and persons assigned guardianship, reminders are addressed to parents or guardians.

4. Using computers in the library

The controller may, based on the Business Rules, inspect:

• card number and membership password, if the person is a library member;
• a valid personal identification document with a picture (ID card, passport, driver's license), if the person is not a library member.

The purpose is to ensure the right to use computer equipment owned by the library and to enable access to the Internet via the library network.

5. Video surveillance system in the library premises

The controller may, based on the Business Rules and the Personal Data Protection Rules, collect the following after a previously published notice of the implementation of video surveillance, which the individual must see no later than the moment when video surveillance begins:

• snapshot (image),
• recording date,
• recording time.

Only authorized library employees can access personal data, and in the event of incidents, we may forward recordings to external parties who demonstrate an appropriate legal basis for this.

The purpose of collecting the above data is to ensure the safety of people and library property, to ensure control over entry and exit to or from the premises, and to monitor the nature of work that may pose a threat to employees.

Notice on the implementation of video surveillance

6. Photographing and recording events in the library

For the purpose of informing the public about the work of the library, events organized by the library itself or co-organized by the library may be partially or fully recorded or photographed. The personal data thus obtained may be processed (including their publication) when they concern events organized by the library within the scope of its tasks, responsibilities or activities, unless the individual has prohibited such processing.

7. Visit the library website

Our website uses cookies. The basis for this notice is the Electronic Communications Act (Official Gazette of the Republic of Slovenia, No. 109/12, 110/13, 40/14 – ZIN-B, 54/14 – dec. US, 81/15 and 40/17), which sets out rules regarding the use of cookies and similar technologies for storing information or accessing information stored on the user's computer or mobile device.

A cookie is a small text file that is important for the functioning of websites and is transferred to the user's computer when visiting the website, with prior consent. It usually contains:

• the name of the server from which the cookie was sent;
• the lifespan of the cookie;
• value – usually a randomly generated unique number.

A cookie usually contains a sequence of letters and numbers that is downloaded to the user's computer when they visit a particular website. With each subsequent visit, the website will obtain information about the downloaded cookie and recognize the user. In addition to the function of improving the user experience, their purpose is different. Cookies can also be used to analyze behavior or recognize users. Therefore, we distinguish between different types of cookies.

The Central Library of Celje, as the operator of the website https://www.knjiznica-celje.si, for its own purposes, before a cookie is loaded onto the user's equipment, informs the user about this:

• that the sole administrator of the website and its content is the Central Library of Celje, Mestni trg 1a, 3000 Celje, represented by the responsible person Polonca Bajc Napret;
• that the controller uses the following cookies: