Privacy Policy

Privacy Policy

Personal Data Protection Policy

The purpose of this Personal Data Protection Policy is to inform individuals, service users, associates, employees, and other persons (hereinafter: the “Individual”) interacting with CRMT d.o.o. (hereinafter: the “Organisation”) about the purposes, legal bases, security measures, and rights of individuals regarding the processing of personal data carried out by our company.

We value your privacy and are committed to protecting your data with the highest level of care. We process personal data in accordance with European legislation (Regulation (EU) 2016/679 – the General Data Protection Regulation or “GDPR”), applicable Slovenian data protection laws, and other relevant legal frameworks.

(as set out in the EU’s General Data Protection Regulation (GDPR) and applicable legislation governing the protection of personal data):

The Data Controller of your personal data is:

In accordance with Article 37 of the GDPR, we have not appointed a formal Data Protection Officer. If you have any questions regarding the processing of your data, please contact us at [email protected].

Consent to the protection and processing of personal data

Personal data, its collection and use coincide with the general terms and conditions of our business, so please read these rules and conditions carefully.

The purpose of this Personal Data Protection Policy is to inform individuals, conference participants, service users, lecturers, and other partners (hereinafter: the “individual”) who interact with CRMT d.o.o. (hereinafter: the “organisation”) about the purposes, legal bases, security measures, and rights of individuals regarding the processing of personal data carried out by our company in relation to the Adriatic Controlling Conference.

We value your privacy; therefore, we always protect your data with the utmost care and in accordance with the highest security standards.

We process personal data in accordance with European legislation (Regulation (EU) 2016/679 – the General Data Protection Regulation, or “GDPR”), applicable Slovenian legislation, and other legislation that provides the legal basis for processing personal data.

The company processes your data based on the following legal grounds:

  • Compliance with a legal obligation applicable to the Controller.

  • Performance of a contract to which the individual is a party or to take steps at the individual’s request prior to entering into a contract.

  • Legitimate interests pursued by the Controller or a third party.

  • Consent provided by the individual for one or more specific purposes.

  • Protection of vital interests of the individual or another person.

1 Legal Obligations

The company processes personal data to comply with statutory requirements, primarily for tax and accounting purposes. This includes issuing invoices for registration fees and maintaining financial records in accordance with the Value Added Tax Act and the Accounting Act. The data processed includes first and last name, address, and tax identification number.

2 Execution of a Contract

When you register for a conference or training session, your registration constitutes a contractual relationship. We process your data (name, email, company, job title) to:

  • Complete your registration and provide access to the event.

  • Communicate essential event information (venue changes, agenda, materials).

  • Issue certificates of attendance. Informing users about related professional events and services is part of our lawful business activity. You may opt-out of such communications at any time via the “unsubscribe” link or by emailing [email protected].

3 Legitimate Interest

We may process data based on our legitimate interests for direct marketing, including the offer of relevant services, events, or career opportunities within the field of controlling. We may use name, address, and email for these purposes. You have the right to object to such processing at any time.

4 Processing Based on Consent

Where no other legal basis exists, we will ask for your explicit consent for:

  • Photography and Videography: Recording the event for documentation and public reporting (e.g., publishing highlights on our website or social media).

  • Newsletter: Sending specific educational content or promotional materials.

  • Consent can be withdrawn at any time, which will not affect the lawfulness of processing before the withdrawal.

We retain data only as long as necessary:

  • Legal/Accounting Data: Records related to issued invoices are kept for 10 years as required by tax legislation.

  • Contractual Data: For the duration of the contract and 6 years after its termination (to cover the statute of limitations for claims).

  • Consent/Legitimate Interest Data: Until you withdraw your consent or request erasure. Upon request, data is deleted within 15 days.

The company may entrust a contractual processor with the individual processing of personal data under a contract for processing. Contractual processors may process the entrusted data exclusively on behalf of the controller, within the limits of their authorisation as set out in a written contract or other legal act, and in accordance with the purposes defined in this privacy policy.

Contractual processors with whom the company cooperates include primarily:

  • Accounting services and other providers of legal and business consultancy;

  • Maintainers of information systems;

  • Email service providers and providers of software, cloud services;

  • Providers of social networks and online advertising (Google, Facebook, LinkedIn, etc.).

To improve oversight and control over contractual processors and the regularity of contractual relationships, the company also maintains a list of contractual processors, including all specific processors with whom the company cooperates.

The company will under no circumstances provide an individual’s personal data to unauthorised third parties. Contractual processors may process personal data only in accordance with the company’s instructions and may not use it for any other purpose.

The company, as the controller, and its employees do not export personal data to third countries (outside the member states of the European Economic Area – EU members plus Iceland, Norway, and Liechtenstein) and to international organizations, except to the USA, whereby relationships with contractual processors from the USA are regulated on the basis of standard contractual clauses (standard contracts adopted by the European Commission) and/or binding corporate rules (adopted by the company and confirmed by supervisory authorities in the EU).

Any changes to our Privacy Policy will be posted on this website. By using the website, the individual confirms that he/she accepts and agrees to the entire content of this Privacy Policy.

We implement strict technical and organizational measures (firewalls, antivirus, encryption) to protect your data from unauthorized access, loss, or destruction.

By attending the conference, you acknowledge and agree that the event may be photographed and/or recorded. You also consent to the use of such photos and recordings for promotional purposes related to the Adriatic Controlling Conference across various communication channels.

Under the GDPR, you have the following rights:

  • Access and Information: To know what data we hold about you.

  • Rectification: To correct inaccurate data.

  • Erasure: To request the “right to be forgotten.”

  • Restriction and Objection: To limit or object to processing (especially for marketing).

  • Portability: To receive your data in an electronic format.

  • Withdrawal: To cancel your consent at any time.

To exercise these rights, email [email protected]. If you believe your rights are being violated, you may contact the Information Commissioner of the Republic of Slovenia.

Any changes will be published on https://www.kontroling-konferenca.si. By using our services, you agree to the current version of this policy.

Policy updated and adopted on: January 25th, 2026

Cookies

Our website uses cookies, which enable the users the display and usage of our websites, adapted to their preferences. Cookie is a small text file that is stored on your computer by a web server. The main purpose of the cookie is to save your settings and other data, so that you do not need to enter them on your next visit of our website. The use of cookies is a standard procedure for most websites. The default settings of your browsers enable the use of cookies. If you do not agree with their usage, you can change the browser settings and disable the use of cookies. That can, however, limit the ability of your communication with our website. Even if you accept cookies, you can delete them later with your browser tools. We use the cookies exclusively to improve the user’s experience.

Our website also collects the data about your usage of our website and our web services. With our tool for the analysis of the website we can, for example, gather information about which website you came from, which browser and key words you used to find us, which pages you visited on our website and which browser add-ons, as well as width and height your browser uses. Besides that, we gather the standard information, which browser sends to each visited website, for example IP address, browser type and language, access time and website addresses. All these data are collected for the statistical purposes of our website only.

  1. Strictly necessary cookies

Such cookies enable the usage of components strictly necessary for the proper functioning of the web page. Without those cookies services, which you would like to use on this web site, would not function properly (for example: log in, safety …).

  1. Performance cookies

Those cookies collect the data about the users’ behavior on the web page. Their function is to improve the performance components of the web page (for example: which web pages are most frequently visited …). Those cookies do not gather information which could be used for the identification of the user.

  1. Functionality cookies

Those cookies enable the web page to remember some of your settings and options (user name, language, region …) and provide advanced, personalized functions. Such cookies can enable tracking of your actions on the web page.

  1. Advertising or targeted cookies

Those cookies are most frequently used by advertising or social networks (third parties) to show you more targeted advertisements, to limit the repetition of the advertisements or to measure the efficiency of the advertising campaigns. Such cookies can enable the tracking of your actions on the web page.

When using the same device and browser the cookies are exceedingly useful. For example, they can remember your settings, they help us follow how you use our web pages and they adapt the displayed content to your personal interest and needs. The cookies used on our websites do not collect information, which would help us identify you personally. In the table below, you can find main cookies, used on our websites, with an explanation of their purpose.

The Company’s website uses cookies. A cookie is a small text file that is stored on a user’s device and enables the website to recognize the device and retain certain information about the user’s preferences or past actions. Websites store cookies on users’ devices through which they access the internet for the purpose of identifying individual devices and the settings used when accessing the website. Cookies allow the website to determine whether a user has previously visited the website. In more advanced applications, cookies may also be used to appropriately customize individual settings.

The storage of cookies is fully controlled by the web browser used by the user. Users may restrict or disable the use of cookies at any time by adjusting their browser settings.

Cookies are essential for ensuring the provision of user-friendly online services. They are used to store information about the status of individual web pages, to assist in the collection of statistical data regarding users and website traffic, and for similar purposes. Cookies also enable the Company to assess the effectiveness and performance of the website design.

A list of cookies used and further information about them is available at the following link:

Users may delete cookies that have been stored on their devices at any time. Instructions for deleting cookies are available on the websites of the respective web browser providers.

This depends on the type of cookie. Session cookies disappear when you close your browser. Persistent cookies expire after several months or even years.

By using this website, you agree that the website can store cookies on your computer or mobile device.

The procedure for managing and deleting the cookies differs according to the browser you use. If you would like to know how to do that with a certain browser, you can use the help function in your browser or visit http://www.aboutcookies.org. There you can find step-by-step explanations on how to manage or delete the cookies in most browsers.

The Privacy Policy was adopted by the responsible person of the company on January 25th, 2026.

Tickets are limited. Make sure to secure yours early.

Secure your place at the next Adriatic Controlling Conference

Register Now