Information on the processing and protection of personal data

In case you have contacted KASPIAN through the e-mail, subscribed „Informačník“ -newsletter, played an online game OKO, signed the time-sheet and if you are our donor or visitor of our website, you entrust us some of your personal information. Therefore, in connection with the Personal Data Protection Act – Act no. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts and the Related Regulation of the European Parliament and of the Council of the EU no. 2016 / the679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, which entered into force on 25 May 2018, we would like to inform you about the details of personal data processing and what your rights are in relation to the regulation.

Who we are? – operator:

We are the a civic association KASPIAN, with its registered office at Furdeková 6 / A, 851 03 Bratislava – Petržalka, ID number: 42129681, registered in the register of civic associations of the Ministry of the Interior of the Slovak Republic under number VVS / 1-900 / 90-31484 (hereinafter KASPIAN or civic association) , email: kaspian@kaspian.sk, web-page: www.kaspian.sk

Operator’s representative:
Mgr. Marína Bartoňová, statutory representative, tel. contact +421 903 584 803, email: marina@kaspian.sk

In which cases do we process your personal data?

We process your personal data if:

– You contacted us by email.
– you have subscribed to our Newsletter,
– you played the online game OKO (www.objavkompetencieonline.sk),
– You are a visitor of our website.
– you have signed our bulk reminder or attendance list,
– you supported us financially,
– you took part in an event we organized,
– you have a contract with us.

Personal data subject to processing:
– name, surname, academic degree,
– address of residence, e-mail address, telephone number, photograph and, where appropriate, other information,
– IP address in case of visit to the website of the civic association KASPIAN and other websites related to the activities of the civic association,

– sensitive personal data, respectively personal data of a special category are not processed by default unless the data subject has previously given us consent for the specific purpose of processing the data provided.
Purpose of personal data processing:

The civic association KASPIAN processes the personal data of the persons concerned mainly for the following purposes:

– records of the persons concerned for internal purposes,
– regular or occasional direct communication with the persons concerned by post, telephone or e-mail for the purpose of informing about the activities of the association, sending newsletters, thanking or providing other messages and information, including at the request of the person concerned,
– for external communication, such as an annual report, public presentation or for other purposes, in order to expand the donor base and inform the public about the association’s activities, with the prior consent of the person concerned or his / her legal representative
– managing the civic association’s website and our social media accounts in order to display the content of the site and accounts as effectively as possible, based on testing and data analysis,
– contractual relationship (donation contract, etc.), we use your personal data specified in the contract for the purpose of fulfilling the contract,
– processing of collective comments, petitions or other signing actions and their submission to the relevant state institution
– fulfillment of obligations which are or will be determined by the legal regulations of the Slovak Republic and the European Union – protection of the rights and legal claims of KASPIAN, or the person concerned.

Change or extension of the purpose of personal data processing:

Before changing or possibly expanding the purpose of processing the personal data of the data subject, KASPIAN is obliged to inform the data subject of this fact in advance and to obtain his / her consent.

Legal basis for the processing of personal data:
Personal data is processed by the civic association KASPIAN on the basis of the consent provided to us by the person concerned. For the purposes of registration of data subjects as well as direct communication with them, KASPIAN relies on the existence of a legitimate interest in the processing of ordinary personal data, as it functions as a non-profit organization fulfilling its objectives through public presentation of its activities and exclusively from funds provided by donors and donor organizations. For other purposes, if it is not the fulfillment of legal obligations, resp. protection of the rights and legal claims of KASPIAN and the persons concerned, KASPIAN processes personal data with the consent of the persons concerned. The civic association KASPIAN also processes personal data on the basis of concluding a contract (donation contract, work contract).

Sources of personal data:
The processed personal data are obtained directly from the data subjects, by visiting the data subject on the website related to KASPIAN’s activities, or by other communication with the data subject or by other documents and documents provided by the data subject to KASPIAN. Personal data that is not obtained directly from the data subjects come from information from publicly available sources obtained directly by KASPIAN.

Transfer of personal data:

KASPIAN does not transfer the personal data of the persons concerned outside the territory of the European Union. For mass e-mail communication, KASPIAN uses the Mailchimp service, which stores data on servers in the USA. The USA is approved by the European Commission as a secure country in terms of processing personal data according to the requirements of the EU-US Privacy Shield.

Retention period of personal data:

Consent to the processing of personal data is granted by the data subject for a period of 2 years. Exceptions are cases where the person concerned has granted or extended the consent for a longer period, or where the consent is required for the entire duration of the cooperation or contact with the person concerned. In such a case, the civic association KASPIAN informs the person concerned of the required duration of the consent. An exception is personal data obtained automatically when visiting the websites www.kaspian.sk or www.objavkompetencieonline.sk. By his consent or registration, the data subject consents to the processing of his personal data obtained automatically for a period of 26 months from the last activity on the given websites. During the period of validity of this consent, the personal data of the data subject will be stored in the KASPIAN automated information system. Upon expiration of the consent, the personal data of the data subject will be deleted. The retention period also ends with the withdrawal of consent by the data subject. Personal data is thus processed only for the necessary time, as long as the purpose of their processing lasts.

Withdrawal of consent to the processing of personal data:

The data subject whose personal data have been processed has the right to withdraw his or her consent to the processing of such personal data for a specific purpose or to the processing of personal data in general. Appeals are possible by written notice sent to the address of the registered office of KASPIAN or by email to the email address kaspian@kaspian.sk. From the day when the revocation of the consent is delivered to KASPIAN, the civic association KASPIAN is obliged to complete the process of processing personal data for the purpose for which the original consent was revoked. This does not affect the right of KASPIAN to process personal data for the purpose of fulfilling its legal obligations or for the purposes of protecting the rights and legal claims of the civic association KASPIAN, or the person concerned.

Rights of data subjects in the processing of personal data:
The person concerned has the right at any time, on the basis of a written request sent to the address of the registered office of KASPIAN or to his email address, to request the following:
– information on and access to the scope of the personal data processed,
– correction of incorrect or incomplete personal data in KASPIAN’s records,
– deletion of her personal data from KASPIAN’s records,
– limiting the purposes of the processing of your personal data,
– stopping or suspending the process of processing her personal data,
– the transfer of his personal data to another controller in an appropriate form,
– information on the source from which the personal data were obtained.

The information shall be provided to the data subject upon request, no later than one month after receipt of the request. The KASPIAN civic association will inform the person concerned about the consequences of his / her request and the subsequent steps.

Right to bring an action:

The person concerned has the right, in case of suspicion of unauthorized processing of personal data, to file a motion to initiate proceedings pursuant to Section 100 of Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws.
Entities processing personal data of data subjects:

The personal data of the persons concerned are processed by the civic association KASPIAN, in written and electronic form. KASPIAN may also entrust this activity to other entities with which it will conclude a contract on the processing of personal data, or which it uses as part of public services. The current list of these entities is available on the website www.kaspian.sk.

Disclosure of personal data to other persons (third parties):

Personal data of the data subject may be made available to entities in the territory of the Slovak Republic and within the European Union in accordance with special legal regulations (for example, bodies active in criminal proceedings, courts and the like). To secure certain activities (keeping a database of contacts, sending mass e-mail communication), we use the designated products and services of other companies, which are the intermediary of these services and may come into contact with the personal data concerned. These are professional companies that protect personal data at the highest possible level (Websupport, Google, Darujme.sk, Mailchimp).

Security and protection of personal data:

KASPIAN uses multi-level protection of personal data stored in electronic and written form. Personal data in electronic form is password protected and is accessible to a limited number of KASPIAN employees who have been trained in the treatment and protection of personal data. If you have any questions or need to explain the information, please contact us in writing, by email or by phone according to the above information or on the website of the civic association KASPIAN.