Privacy Policy Section


Privacy policy and personal data protection

The Institute of Macroeconomic Analysis and Development of the Republic of Slovenia (hereinafter: IMAD) respects your privacy. In the course of publishing information and professional materials (publications, etc.), as well as carrying out related activities (such as organising professional events and similar activities), IMAD processes and protects personal data in accordance with the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-2; Official Gazette of the Republic of Slovenia, Nos. 163/22, 40/25 – ZInfV-1 and 10/26 – ZP-1L).

This Privacy Policy explains the categories of personal data that IMAD collects through its website, the legal bases and purposes for processing such data, and the measures taken to ensure their security.

This Privacy Policy applies to the IMAD website: www.umar.gov.si

Last updated: March 2026

Information on the data controller
Data controller: Institute of Macroeconomic Analysis and Development of the Republic of Slovenia (IMAD)
Address: Gregorčičeva 27, 1000 Ljubljana, Slovenia 
Email: gp.umar(at)gov.si
Telephone: +386 1 478 1012
Website: https://www.umar.gov.si
Registration number: 5026407000 

Information on the Data Protection Officer (DPO)
DPO: Vesna Ložar
Email: dpo.umar(at)gov.si

You may contact the DPO with any questions regarding the processing of your personal data or the exercise of your rights under personal data protection regulations.

Purposes and legal bases for the processing of personal data
We process your personal data only on the following legal bases:

  • when you provide your personal data to us by subscribing to e-notifications via the Be informed section;
  • when the processing of personal data is required by law (e.g. archiving of materials).

Security of personal data
To ensure the security of your personal data, we implement strict technical and organisational measures, including:

  • the use of up-to-date solutions to protect personal data against unauthorised access, loss or misuse;
  • restricting access to personal data to authorised persons who require such access to perform their duties and are subject to strict confidentiality obligations; and
  • continuously monitoring and updating security measures in line with technological developments and evolving security standards.

Recipients of personal data
We do not disclose your personal data to third parties or transfer them to third countries (i.e. countries outside the EU/EEA), except where necessary for the provision of our services.

  • For the distribution of our newsletters and notifications, we use the SqualoMail platform, operated by the Slovenian company Squalo, d.o.o. We have concluded an appropriate data processing agreement with the processor to ensure the secure storage of data and their processing exclusively for the purpose of distributing our content and notifying users of updates (section [Be informed]).
  • Access to personal data may also be granted to our contracted service providers responsible for maintaining our website and information systems. These providers are contractually required to comply with the highest standards of personal data protection and confidentiality.

Data retention period
We retain your personal data only for as long as necessary to fulfil the purposes for which they were collected:

  • until you unsubscribe or withdraw your consent; and
  • for the retention periods laid down by regulations governing documentary and archival material of public authorities.

Rights of the data subject
With regard to the processing of your personal data, you have the following rights under applicable data protection legislation:

  • the right of access to your personal data and information regarding their processing;
  • the right to rectification of inaccurate or incomplete personal data;
  • the right to erasure of personal data (“right to be forgotten”), where the applicable legal conditions are met;
  • the right to restriction of processing, where the applicable legal conditions are met;
  • the right to object to processing where personal data are processed for the performance of a task carried out in the public interest or on the basis of legitimate interests; and
  • the right to withdraw consent in cases where personal data are processed on the basis of your consent.

To exercise any of the above rights, you may contact us at the email address of the controller or the Data Protection Officer (DPO).

Right to lodge a complaint with a supervisory authority
If you consider that the processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia, Dunajska cesta 22, 1000 Ljubljana, email: gp.ip@ip-rs.si.

Use of cookies
Our website uses cookies to enhance your user experience and collect website traffic statistics. For more information, please see our Cookies Policy.