DATA PROTECTION

Who processes your personal data?

The protection of personal data is ensured by the operator Slovak Alliance for Innovative Economy, with registered office at Grösslingová 2479/6-8, 81109 Bratislava – Staré Mesto, ID No.: 42 412 943, registered in the register of non-governmental organizations maintained by the Ministry of the Interior of the Slovak Republic, reg. no. VVS/1-900/90-44676 (hereinafter referred to as “the operator”) in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter also referred to as the “Regulation” or “GDPR”) and Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Additions to Certain Acts (hereinafter also referred to as the “Act”). We care about the protection of your personal data, so we hereby inform you about how we process your personal data.

As the basic legal framework for setting up the protection of personal data with us, the valid and effective text of the EP and Council Regulation No. 2016/679 as well as the text of Act No. 18/2018 Coll. on the protection of personal data will be used. In addition to these regulations, modifications of ISO 27001, ISO 27000, ISO 31000 and possibly other standards will be taken into account for this purpose.

The contact details of the controller are:

Slovenská aliancia pre inovatívnu ekonomiku
Grösslingová 2479/6-8
81109 Bratislava – mestská časť Staré Mesto
Slovensko

Email: gdpr@sapie.sk

What data do we collect

When providing our services, we collect personal data from you as data subjects to the extent necessary for the purpose of entering into a contractual relationship and the performance of the rights and obligations arising therefrom. We collect your data for a limited period of time, which is limited in accordance with the relevant legislation.

The controller processes personal data that you have provided to it or personal data that the controller has obtained on the basis of the fulfilment of your order.

The controller processes your identification and contact data and data necessary for the performance of the contract.

The lawful reason for processing personal data is

the performance of the contract between you and the controller pursuant to Article 6(1)(b) GDPR,
the processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures at the request of the data subject.

Rights of the persons concerned

Regardless of the legal basis for the processing of personal data, the data subject has the right of access to personal data, the right to rectification, erasure, restriction of processing and the right to lodge a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, or the right to file a petition to initiate proceedings for the protection of personal data.

Right of access to personal data

This right means that you are entitled to request confirmation from the controller as to whether personal data concerning you is being processed. Therefore, if we are processing such personal data about you, you have the right to obtain access to and information about your personal data:

why we process your personal data (purpose of processing personal data)
what data we process about you (category of personal data)
to whom your personal data may or will be disclosed (identification of the recipients or the recipients’ group)
how long we will keep your personal data (retention period)
that you have the right to request us to rectify, erase or restrict the processing of your personal data or to object to the processing of your personal data
that you have the right to bring a data protection action under the Act; or
the right to lodge a complaint with the supervisory authority under the Regulation, which is the Office for Personal Data Protection of the Slovak Republic
where your personal data comes from (source information), unless you have provided us with the personal data directly
whether we use automated individual decision-making, including profiling pursuant to Section 28(1) and (4) of the Act; in particular, the procedure used, as well as the significance and foreseeable consequences of such processing of personal data for you
adequate safeguards regarding the transfer, if we transfer your personal data to a third country or an international organisation

This right of access also means that you can obtain the personal data we process about you. We will provide you with a copy of the personal data we process about you. However, if you make repeated requests for your personal data, we may charge you a reasonable administrative fee in connection with your request for a copy of your personal data.

Right to rectification of personal data

As part of our terms of service, we inform you to provide us with the correct data. However, if we nevertheless happen to process incorrect data about you, the right to rectification of personal data means that you are entitled to request that we rectify the incorrect personal data relating to you. You also have the right to have your incomplete personal data completed, taking into account the purpose of the processing of the personal data.

Right to erasure of personal data (right to be forgotten)

You have the right to have us delete personal data relating to you where at least one of the following grounds is met:

Your personal data is no longer necessary for the purpose for which we collected or otherwise processed it
you have withdrawn your consent to the processing of your personal data on the basis of which we process your personal data and there is no other legal basis for further processing
you object to the processing of personal data which is carried out on the legal basis of public interest or legitimate interest and there are no overriding legitimate grounds for the processing
Your personal data has been unlawfully processed
Your personal data must be erased because it is necessary to comply with an obligation under Slovak law or European Union law
Your personal data was collected in connection with the offer of information society services pursuant to Section 15(1) of the Act.

However, your right to erasure of your personal data may not be complied with in a particular case, taking into account the specific circumstances, if the processing of your personal data is necessary for:

to exercise our right to freedom of expression or the right to information
to fulfil a legal obligation
to assert our legal claim
for archiving, historical research or statistical purposes, unless it is likely that the right to erasure would prevent or seriously impede us from achieving the purposes of such processing

Right to restriction of processing of personal data

You have the right to have us restrict the processing of personal data concerning you where at least one of the following grounds is met:

during the period allowing us to verify the accuracy of your personal data, you challenge the accuracy of your personal data
the processing of personal data is unlawful, you object to the erasure of personal data and request restriction of the processing of personal data instead of erasure
we no longer need your personal data for any of the processing purposes, or you need it to establish, exercise or pursue your legal claims
you object to the processing of your personal data, pending verification that our legitimate interests outweigh your legitimate interests.

Right to portability of personal data

If our right to process your personal data is based on your consent or the performance of our obligations under a contract we have entered into with you, you have the right to request the transfer of the data relating to you that you have provided to us to another data controller.

Right of withdrawal of consent

If we process your personal data on the legal basis of the data subject’s consent, you have the right to withdraw this consent at any time, even before the expiry of the period for which the consent was given. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.

Right to object

If you have grounds relating to your particular situation, you have the right to object to the processing of your personal data where the legal basis for such processing is our legitimate interest. However, if our legitimate interest in processing outweighs your personal interest, we may continue to process your data despite your objection to processing. We are also entitled to continue to process your data if this is necessary for the establishment, exercise or defence of our legal claims.

Retention period of personal data

The controller stores personal data

for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller, and to assert claims arising from these contractual relationships (for a period of 10 years from the termination of the contractual relationship).
for as long as consent to the processing of personal data for marketing purposes is withdrawn, up to a maximum of 3 years if the personal data is processed on the basis of consent.

After the expiry of the retention period, the controller shall delete the personal data.

How to exercise your rights

You can exercise your above rights by emailing us at: gdpr@sapie.sk

Please include your first name, last name, email address, or permanent address in your application. If you do not provide us with the above information, we will not be able to grant your application. We require this information from you in order to verify your identity and to prevent you from providing your personal data to an unauthorised person.

If you do not have full legal capacity as a data subject, your rights under the Regulation and the Act may be exercised by your legal representative. The rights of a data subject who is not alive may be exercised by a close person within the meaning of the Regulation and the Act. Where your requests as a data subject are manifestly unfounded or unreasonable, in particular because of their repetitive nature, we may charge a reasonable fee taking into account the administrative costs of providing the information or refuse to act on the request.

Disclosure of personal data to third parties

Your personal data may in certain cases be accessed by other persons with whom we work. We use third parties to provide specific processing operations that we cannot provide ourselves. These third parties include, for example:

Civitta Slovakia, a. s., (contract associate), Bottova 2A, Bratislava – mestská časť Staré Mesto 811 09 IČO: 36 740 454
Kempelenov inštitút inteligentných technológií, (contract associate), Mlynské nivy 18890/5, 82109 Bratislava – mestská časť Ružinov, IČO: 53290046
Slovenská akadémia vied, (contract associate), Štefánikova 49 81438 Bratislava – mestská časť Staré Mesto, IČO: 00037869
QikBuild, s. r. o. (contract associate), Bottova 2A, Bratislava – mestská časť Staré Mesto 811 09, IČO: 55 100 015
Webgate s. r. o., (contract associate), Šustová 3219/22, Ivanka pri Dunaji 900 28, IČO: 50 592 114
MailChimp / The Rocket Science Group LLC (newsletter tool), 675 Ponce de Leon Ave NE, Atlanta, GA 30308 USA

It is possible that the list of such third parties may be expanded or narrowed in the future.

In the event that we, as the controller, transfer the collected personal data about natural persons to another person in the capacity of a processor, we are obliged to draw up a separate agreement between us and each such other person in the capacity of a processor or to incorporate the relevant provisions under the Act into the framework agreement or to draw up an addendum to this agreement.

Erasure of personal data

The controller shall ensure the deletion of the personal data provided from the information system after withdrawal of the user’s consent to the processing of personal data or after the expiry of the retention period.

Responsible person

The operator does not have a designated responsible person.

Disclosure and transfer to third countries

Your personal data is not disclosed or transferred to third countries.

Profiling and automated decision-making

Your personal data is not subject to automated decision-making or profiling.

Security

Achieving the highest possible protection of our clients’ personal data is a high priority for us and, in addition to our existing business objectives, this area will be given increased attention. The technical and organisational measures that will be used will be carefully selected with regard to the scope of the processing of personal data and our technical and personnel capabilities, but always in such a way that these means are as effective as possible and that the applicable and effective legislation in the Slovak Republic and the EU is complied with.

Cookies

Cookies are small text files containing the name of the page visited, its validity and a predefined value. They are stored in your browser folder. When you revisit the website that created the file, they can be resent by your browser. The cookies we use do not harm your computer or other devices used to browse the Internet.

What cookies do we use?

Basic – allows you to use basic functions such as logging in as a registered user or pre-filling forms. If you disable these cookies, we cannot guarantee the full functionality of our site.
Operational and functional – essential – used to provide services or remember settings to ensure maximum comfort during your visit, and subsequently to improve its functionality and appearance. These cookies do not collect information about you that could be used in marketing or remember where you have been on the internet. If you disable these cookies, we cannot guarantee the full functionality of our site.
Advertising – they are used to optimize the displayed advertisement with respect to the visitor’s habits and the effectiveness of the advertiser’s marketing communication. Thanks to them, you will not, for example, unnecessarily often see advertising from an area in which you are not interested. We use the following third-party solutions for these cookies:
- CookieLawInfoConsent – GDPR cookie consent • Cookie Law Info
- Bubble Group, Inc. – Cookies set by Bubble – Bubble Docs

Third party cookies – created and used by service providers. These services are integrated into our site because we find them useful and fully secure. As we have taken measures to prevent misuse of these cookies (anonymisation on the part of our suppliers) we do not ask for your consent to use them. We use the following third party solutions for these cookies:

Google Analytics.

How can I disable cookies?

If you do not wish to receive cookies from our site, you have the option to set your browser to notify you when you receive a cookie so that you can choose whether or not to accept it. However, please note that if you disable “cookies” in your browser, you may not be able to take full advantage of some of our pages.

How to apply for a complaint?

As a data subject, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava, tel. no. 02/323 132 14, email: statny.dozor@pdp.gov.sk, if you suspect that your personal data is being processed in violation of the applicable legislation.

These rules shall enter into force and effect on 24 May 2023.

Join us

Register for Hopero

Sign up to Hopero and tell us about your current situation by filling in a short questionnaire. We will prepare a tailor-made Hopero service offer for you.

Podujatia