Personal Data Protection

The Split City Museum designated a Data Protection Officer in accordance with the General Data Protection Regulation (GDPR) by decision of 24 May 2018.

The Data Protection Officer is tasked with carrying out at least the following responsibilities:

a) Provides guidance and advice to the data controller or processor, as well as to employees engaged in data processing, regarding their obligations under the Regulation, other EU provisions, and applicable Croatian data protection laws (including the Personal Data Protection Act and the Act on the Implementation of the General Data Protection Regulation)
b) monitors compliance with the Regulation, relevant EU provisions, and Croatian data protection legislation, as well as the data protection policies of the controller or processor. This includes allocating responsibilities, raising awareness, training staff involved in processing activities, and carrying out related audits;
c) provides advice, when requested, on data protection impact assessments and monitors their implementation in line with Article 35 of the Regulation and Croatian data protection legislation;
d) works in cooperation with the supervisory authority – the Personal Data Protection Agency;
e) acts as the contact point for the Personal Data Protection Agency on matters relating to data processing, including prior consultation under Article 36 of the Regulation, and provides guidance as necessary on any other related issues. 

When performing their duties, the Data Protection Officer takes into account the risks associated with processing activities, considering the nature, scope, context, and purposes of the processing.

The Data Protection Officer is obliged to maintain confidentiality in carrying out their responsibilities, in accordance with the Regulation and other applicable provisions of the European Union and the Republic of Croatia.