The Privacy and Data Protection Policy of the Medca’s Association defines the legal, organizational and security activities of the Medca’s Association, which is a Slovenian nonprofit association of Slovenian nurses and other health professionals in the field of cannabis education, with its registered office at Cesta talcev 10, 1230 Domžale, Slovenia (registered office no. 27048540000, tax no. 65032942). The Privacy and Data Protection Policy is valid from March 1st 2025. 

Article 1: General terms and conditions   

The Medca’s Association (hereinafter: the Association) is committed to confidentiality, data security and transparency. In the following articles, we provide information on the processing procedures and the protection of personal data in accordance with the General Data Protection regulation and the Act on the Protection of Personal Data (ZVOP-2). 

Article 2: Controller of personal data 

The controller of personal data is the Association. The data is collected via the website and e-mail. The Association is committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation and applicable Slovenian legislation.  

Article 3: Types of data and purpose of processing 

For the purpose of its operation, the Association processes personal data of members and subscribers of the Handbook. This data includes name, surname, address, e-mail address, telephone number and transaction account number. They are kept for the purposes of demonstrating the Associations performance and activities before an official of the Republic of Slovenia, for the purpose of informing members of the Association’s activities and enrolling new members for informing subscribers, for orders received and processed, and for the purposes of traffic analysis for the association website. We take care of your data consensually and responsibly, preventing unauthorized access or use, processing, disclosure modification or deletion. 

Article 4: Legal basis for data processing 

For members of the Association, the processing of data is based on the basis of declaration of affiliation, which constitutes a contractually binding relationship between the members and/or buyers and the Association.  

For buyers of the Handbook, the processing of data is based on the need to carry out an order, where the submission of an order form constitutes a contractually binding relationship between the buyer and the Association. 

Article 5: Data retention period 

We keep members’ data for the duration of the membership and for five years after termination due to legal obligations. We keep data on orders for five years after the order has been placed due to accounting and tax regulations.  

Article 6: Data protection 

The association implements appropriate technical and organizational measures to protect personal data, including: 

• secure storage of personal data on an SSL secured website, 

• restricting access to the data, 

• regular updating security systems and keeping up to date with the current legislation on the protection of personal data and 

• encrypting sensitive data. 

Article 7: Your rights 

Your rights include the right to access, modify, delete, restrict the processing of data, data portability and the right to object. We will respond to your request within 30 days. You also have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia.  

Article 8: Communication to third parties 

We do not carry out profiling or automated order taking. We do not pass on your data to third parties, except to: 
 
– contract processors who perform services for us (delivery service providers), 
– public authorities pursuant to legal obligations. 
 
Article 10: Changes to the Privacy and Data Protection Policy 

We reserve the right to amend this policy. We will inform you of any changes on our website, under the link “Policies”. 

Article 11: Cookies 

Cookies are small text files that are stored on your device, when you visit our website and help us provide a better user experience.  

Necessary cookies are crucial for the functionality of the website. Analytical cookies are necessary to understand how the website is being used. Functional cookies are necessary to store website settings. Necessary cookies are stored for the duration of the session, analytical cookies are stored for two years, functional cookies are stored for one year. You can enable or disable them at any time in your browser settings. 

Article 11: Contact details 

For any questions regarding the Privacy Policy, please contact us in writing by e-mail at info@drustvo-medca.si or by phone at 041-305-439.