At our organization, we are committed to processing your personal data correctly and their protection is our highest priority. Therefore, we would like to give you more information as to why we collect personal data, how we use it, your rights in relation to it, and any additional information that you might be interested in.
We would like to assure you that we follow strict rules which set out which employee or department has access to your personal data, and which specific data can be processed.
No third parties will have access to your personal data unless you wish to forward your personal data to another provider, unless we have your consent or unless the law requires or permits us to do so, or where it is in your best interest to do so.
Please, read the information below about how we process your personal data. We composed this document for you in a way that is practical and easy to navigate through.
- Who is the personal data controller?
The controller of personal data is always the legal entity, to whom were the personal data given and that determines the purposes and means of the processing of persona data.
The controller of persona data is organization Association for Culture, Education and Communication, with registered office at Hurbanovo námestie 5, 811 03 Bratislava, company registration number: 31 797 580, entered in the Register of Civil Associations under the Ministry of Interior of the Slovak Republic under No: VVS/1-900/90-15506-4 (“ACEC”).
You can enforce your rights in writing via mail or email. Your rights can be enforced at the address below:
Contact: Association for Culture, Education and Communication (ACEC)
Address: Hurbanovo námestie 5, 811 03 Bratislava
- What is data protection and what terms are associated with data processing?
Firstly, we would like to familiarize you with basic data protection terms that are used frequently in this document to help you understand this document better.
Personal data – any information relating to an identified or identifiable natural person, such as name, surname, date of birth, personal (birth) number, telephone number, email address, IP address etc.
Data subject – natural person to which the personal data relates to.
Processing person data – any operation or set of operations which is performed on personal data by the data controller or processor.
Controller – a natural or legal person which determines the purposes and means of the processing of personal data, controller can delegate data processing to the processor.
Processor – a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Data protection officer – a natural or legal person engaged by the controller or the processor for processing activities to be carried out on their behalf in relation to personal data.
Purpose – the reason why personal data is being processed.
Special categories of personal data – sensitive personal data of specific character such as data concerning health or biometric data which allow or confirm the unique identification of that natural person.
Legitimate interest – an interest of the controller or other party, which provides a basis for processing, provided the interests of the data subject are not overriding, such as where the data subject is a client of the controller.
Profiling – any form of automated processing of personal data used in order to evaluate certain specific aspects relating to a natural person, such as online behavior and online shopping.
Cookies – little data files used to store information in peoples’ web browsers, necessary for certain functions of websites such as logging in, also frequently used to evaluate online behavior of web users, cookies can be disabled in most web browsers
Recipient – a natural or legal person, public authority, agency or another body, to which the personal data are disclosed
Service – any service that we offer, i.e. our products and services offered online and their support
- What personal data do we process?
We only process those personal data that help us to provide you with our services, activities, projects and events, to comply with legal obligations and also to protect our legitimate interests.
We collect personal data from our partners, sponsors, donors, nominees and nominators including new potential partners and co-workers who are interested in working with us or those who gave their consent to contact them about our activities and project offerings.
We mainly process these categories of personal data:
Basic identifying information
We need basic identifying information for the purpose of the contract you are entering into with us. This includes the trade name, title, name and surname of the statutory organ or the relevant contact person, his/her position and employer, registered office and company registration number.
Contact details include email address and telephone number.
nformation about our co-operation
This information include the form of co-operation, tasks assigned and the help provided.
Information about our interaction with you
We record information about our interaction with you in writing, so we can offer you adequate information.
Information about transactions only.
- What is the purpose for collecting personal data?
We process personal data:
- without the need for your consent,
- with your consent.
Processing personal data without the need for your consent:
Processing of personal data by virtue of a contract
We process your personal data for the purposes of entering into a contract between you, as our supplier and potential co-worker, and us, as the purchaser, when conducting the particular projects. In this case, we process personal data only to the extent which is necessary for entering and performing the relevant contract. This will mainly include performing the subject of the contract, contract administration and recording of the participants.
For this purpose, providing your personal data is optional, but it is necessary for entering the contract and its subsequent administration. Without this information, we would be unable to enter into a contract with you and then fulfill our contractual legal obligations and rights.
Processing of personal data by virtue of legitimate interests
Legitimate interests of ACEC organization are:
- to inform you of any updates relating to your contract,
- exercise or defense of legal claims.
Processing of personal data for statistical purposes
After the contract expiration and after the time period for which we keep personal data had passed, personal data will be further used for statistical purposes in an anonymous form.
Processing personal data with your content:
Processing for marketing purposes
Your personal data will be processed for marketing purposes, if we have your consent to do so.
Marketing includes mainly these activities:
- news, activities, events, projects of ACEC can be send to you electronically via email based on your consent,
- information emails including articles, news and information about activities of ACEC.
Giving your consent for marketing purposes is completely voluntary, however, it is necessary in order to receive individual news from our organization ACEC. Without this consent, we are unable to send you information via email.
You can revoke your consent at any time, partially or fully, in writing via post or email on our contact addresses below:
Contact: Association for Culture, Education and Communication (ACEC)
Address: Hurbanovo námestie 5, 811 03 Bratislava
- What period do we keep your personal data for?
Your personal data will be kept for the duration of your contract. After the contract relationship is expired and all obligations from the contract or relating to the contract are fulfilled, we store your personal data for a necessary time period, namely for 10 years, as this is the necessary time period required by the law.
The data storage period is regulated by Act No. 431/2002 Coll., Accountancy Act and Act No.40/1964 Coll. Civil Code, as amended.
If you have entered into a contract with ACEC and you have given us your consent to process your personal data for marketing purposes, this consent will last for the duration of your contractual relationship with ACEC and for a period of 5 years after the contractual relationship has ended, or until you revoke your consent.
If you have not entered into a contract with ACEC but have given us your consent to process your personal data for marketing purposes, this consent will last for a period of 5 years from the time the consent was given or until you revoke your consent. If you enter into a contract with ACEC or enter into another contract, the above period and rules for processing personal data will be counted from the last entered contract.
- Where do we collect personal data from?
Personal data are collected:
- directly from you by entering into the contract and during performance of the contract,
- directly from you by giving your consent for receiving information emails,
- from other parties, to which you have given your consent.
- How can you revoke my consent for processing my personal data for marketing purposes?
Consent with personal data processing for marketing purposes is based on a voluntary basis. This means that you can revoke it at any time. Do you wish not to receive our information emails anymore? We are sorry to hear this, however, we fully respect your decision.
What should a revocation of consent include?
- State who is applying for the revocation. Please state your name, surname and email.
- State expressly that you do not wish for us to longer process your personal data for marketing purposes. You can revoke a consent generally (it will refer to all of marketing purposes), alternatively, you can state which purposes does the revocation refer to.
- Address the revocation directly to ACEC organization.
How can a revocation of consent be sent?
Revocation of consent can be sent via mail or email.
Your email will be automatically deleted from our database.
- Do we use automated processing of your personal data?
We would like to inform you, that our organization does not use so-called profiling, which amounts to automated processing of personal data.
- What are your rights in relation to processing of your personal data?
At our organization, we are committed to processing your personal data correctly and their protection is our highest priority. You can enforce these rights in relation to processing of personal data:
Information about processing of your personal data
The content of the information is mainly the identity and contact details of the controller, the purpose of data processing, categories of personal data concerned, recipient or categories of recipients of personal data, information about personal data transmit to third countries, data storage period, authorized controllers, the right to submit a complaint to the Office for Personal Data Protection, the source of the personal data and information as to the existence of automated decision-making and profiling.
Right of access to personal data
You have the right to obtain confirmation as to whether or not personal data are being processed, and, where that is the case, access the personal information about the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients, the envisaged period for which the personal data will be stored, information about your rights, information about your right to submit a complaint to the Office for Personal Data Protection, information as to the source of the personal data, the existence of automated decision-making including profiling, information and appropriate safeguards where the personal data are transferred to a third country or an international organization. You have a right to obtain a copy of the processed personal data.
Right to rectification
Are we processing your personal data that are out of date or inaccurate? Have you, for example, changed your email? Please inform us of any changes and we will rectify the personal data.
Right to erasure (right to be forgotten)
In certain cases, you have the right to obtain the erasure of personal data concerning you without undue delay. However, every request will be subject to individual evaluation to assess whether all the requirements are met.
Right to restriction of processing
If you wish that we only process your personal data for the essential legal requirements or restrict your personal data.
Right to data portability
If you wish us to provide another controller or another company with your personal data, the personal data will be received in a structured, commonly used format, without hindrance from the controller to which the personal data have been provided or any legal or other hindrance.
Right to object automated individual decision-making
If you have found or have reasonable grounds to believe that your personal data is being processed contrary to your private and individual life or against legal requirements, refer to us to request an explanation, or to correct the unsatisfactory situation.
Complaints can also be raised directly against automated decision-making.
Right to submit a complaint or initiative to the Office for Personal Data Protection
You can refer to a supervisory body at any time with a complaint or an initiative in relation to personal data namely the Office for Personal Data Protection with its seat on Hraničná 12, 820 07 Bratislava 27, the Slovak Republic, registration number: 36 064 220, telephone number: +421/2/3231 3220, website https://dataprotection.gov.sk/uoou/
- Where can you enforce your rights and is the enforcement subject to any charges?
Individual rights can be enforced at ACEC, namely via email at @acec.sk or in writing at our correspondence address Hurbanovo námestie 5, 811 03 Bratislava.
All statements and comments to the enforcement of your rights are free of charge. However, if the request was undue or excessive, especially if the request is repeated, we reserve the right to charge a reasonable fee reflecting the administrative costs in relation to providing requested information. In cases of repetitive requests for copies of processed personal data, we reserve the right to charge a reasonable fee for administrative costs.
When can you expect an answer from ACEC?
A statement and potential comments about measures taken will be provided as soon as possible, at latest within one month. The period can be extended for two months in regards to the complexity and number of requests. We will inform you of any extension of the period, including the reason for the extension.
- Who has access to your personal data?
Personal data can be accessed by the controller, his employees, the processor and also data protection officers, mainly IT service and accountancy service providers.
For instance, this could be external companies managing our systems, or other services essential for running of the company and processing of personal data. We have a valid contract in place with our contractors in relation to personal data processing and they are also bound to follow strict rules in relation to data protection, including maintaining confidentiality and the highest standard of legal protection required by the legislation of Slovak Republic.
Certain tasks in relation to contract administration or other related services have been delegated to our external contractors, with whom we have entered into valid contract on data protection. When choosing our contractors, we carefully consider if they comply with all the relevant legislation on data protection and processing your data correctly.
Contractors for these purposes shall mean: IT service providers, accounting and data protection officers.
- Summary of selected legislation governing issues relating to data protection
- The Charter of Fundamental Rights of European Union
- Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing directive 95/46/ES (general data protection regulation, GDPR)
- The Constitution of the Slovak Republic (published under No. 460/1992 Coll.)
- Act No. 18/2018 Coll. on Protection of Personal Data and Amendments of some Acts, as amended
- How to contact us
If you have any questions or comments, do not hesitate to contact us at any time, via email at firstname.lastname@example.org or in writing on our correspondence address Hurbanovo námestie 5, 811 03 Bratislava.
This document will be regularly updated. In effect from 24.05.2018.