Privacy Policy

Need further help?

If you need assistance with our Information or have any questions about this document, please contact us electronically at oz@volna-asociacia.org.

If you are not satisfied with the way we collect, share, or use your personal data, we would appreciate you letting us know. You can contact us at the address above. If you are not satisfied with our response, you have the right to lodge a complaint with the Office for Personal Data Protection, located at Budova Park one, Námestie 1. mája 18, 811 06 Bratislava, tel.: +421-2-3231-3220, email: statny.dozor@pdp.gov.sk.

Your rights

1. You have the right to withdraw your consent to the processing of personal data at any time where processing is based on consent. If you decide to do so, you may send your withdrawal by post to Kapicova 1193/4, 851 01 Bratislava, or by email to oz@volna-asociacia.org. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

2. You have the right to request access to your personal data processed by the Controller and to obtain confirmation of whether the Controller is processing personal data concerning you, in accordance with Article 15 of the GDPR Regulation. If you decide to exercise this right, you may contact the Controller by post or email at the contact details given at the beginning of this document.

3. You have the right to request erasure of your personal data where the conditions under Article 17(1) of the GDPR are met, in particular where:

   • the personal data are no longer necessary for the purpose for which they were collected,
   • consent to the processing of personal data has been withdrawn where processing is based on consent,
   • the personal data have been unlawfully processed.

   If you decide to exercise this right, you may contact the Controller by post or email at the contact details given at the beginning of this document.

4. You have the right to request rectification of inaccurate personal data and the right to request completion of incomplete personal data, in accordance with Article 16 of the GDPR. If you decide to exercise this right, you may contact the Controller by post or email at the contact details given at the beginning of this document.

5. You have the right to request restriction of processing of your personal data, in accordance with Article 18 of the GDPR, in particular where:

   • you contest the accuracy of the personal data, for the period necessary for the Controller to verify accuracy,
   • the processing is unlawful but you do not wish the data to be erased.

6. You have the right to request portability of your personal data that you have provided to the Controller and that is processed by automated means, in accordance with Article 20 of the GDPR.

7. You have the right to object to processing of your personal data carried out for the purposes of the Controller's legitimate interests, on grounds relating to your particular situation, and for the purpose of direct marketing, in accordance with Article 21 of the GDPR. Where you object to processing for direct marketing purposes, the personal data must no longer be processed for such purposes. Where personal data are processed for scientific or historical research purposes or statistical purposes under Article 89(1) of the GDPR, you have the right to object on grounds relating to your particular situation, except where processing is necessary for the performance of a task carried out for reasons of public interest.

8. You have the right to lodge a proposal to initiate proceedings on the protection of personal data under the Personal Data Protection Act. If you believe that your right to personal data protection has been violated, you may lodge a proposal to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava. The purpose of such proceedings is to determine whether the rights of natural persons in the processing of their personal data have been violated and, where deficiencies are found, to impose corrective measures or a fine. A proposal to initiate proceedings must contain:

   • the name, surname, correspondence address, and signature of the applicant,
   • identification of the party against whom the proposal is directed, including their name, surname, permanent address, or the name, registered office, and identification number, if assigned,
   • the subject matter of the proposal, identifying the rights alleged to have been violated in the processing of personal data,
   • evidence in support of the claims made in the proposal,
   • a copy of a document or other evidence demonstrating the exercise of a right under the Personal Data Protection Act or a specific regulation, if the data subject has exercised such a right, or an explanation of exceptional circumstances for not having done so.

What personal data we process

The categories of personal data we process include your:

• name and surname;
• contact details including email address.

How we collect personal data

What we know about you is provided by you directly upon first contact through an online form on our social media channels or in communication with us. You share your personal data by completing an online form or a registration form when participating in events we organise.

How we use your personal data

We use your personal data to:

• send regular updates about activities (not only ours, but also those of other organisations we choose to support),
• contact you about getting involved in the organisation's activities,
• contact you about possible financial support,
• contact you to gather information,
• invite you to public events, protests, or demonstrations,
• maintain records of our activities for the purposes of reporting to supporters and financial partners.

Where you have given consent, your personal data may be used for the purpose specified in that consent and only in accordance with it.

Legal basis for processing personal data

The legal basis for our processing of personal data depends on the purpose for which we process your data. In most cases, the legal basis is the consent you have given us through an online form on our website or by registering for an event we organise. We process the personal data of association members on the basis of a legitimate interest in maintaining a membership register as required by law.

Who we share your personal data with

We may use and share your personal data with other entities that provide services on our behalf:

Brevo – newsletter processing

How we protect your personal data

The security and confidentiality of your personal data is extremely important to us. We have implemented technical, administrative, and physical safeguards that:

• protect your personal data against unauthorised access and misuse;
• secure our IT systems and protect the information they contain;
• ensure we are able to restore your data in the event of damage or loss.

Where appropriate, we use encryption or other security measures we deem adequate to protect your data. We also regularly review our security practices. Despite our efforts, however, no security measure is perfect or impenetrable.

How long we retain your data

Our internal policies on the retention of personal data comply with all applicable data protection and privacy regulations. They set a period of three years during which we may retain various types of data and are reviewed regularly. Data that we no longer need under the time limits set out in our policies will be disposed of in a secure and reliable manner.

How you will know if we have updated this information

We may update this Information at any time. If we make any material changes to the way we collect, use, or share your personal data, we will notify you of those changes promptly on the websites referred to in this Information.