Štátna ochrana prírody SR (State Nature Conservancy), Tajovského ulica 28B, 974 01 Banská Bystrica

as the controller of the information system, publishes, for the purpose of fairness and transparency towards data subjects, the following privacy statement entitled

PERSONAL DATA PROTECTION POLICY

pursuant to Article 13 and the relevant recitals of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) and to Act of the National Council of the SR No. 18/2018 Coll. on the Protection of Personal Data and on the changes and amendments to certain acts (hereinafter referred to as the “Personal Data Protection Act”)

The purpose of the processing of personal data are the reasons for which the personal data of data subjects (employees, keepers, offenders, finders, etc.) are processed in our information systems on a precisely defined legal basis. The purposes are specifically identified, explicitly stated and legitimate, and we comply with the principle of lawfulness under Articles 6 and 9 of the Regulation when processing the personal data of data subjects (the individual purposes and legal bases are set out in the Annex to this Personal Data Protection Policy).

Data subjects whose personal data are processed in our information systems for explicitly specified purposes may exercise the following rights in writing or electronically:

  1. The right of access to personal data – this is the right to obtain confirmation of whether your personal data is being processed, as well as the right to obtain access to this data, within the scope of the purposes and duration of the processing, the category of personal data concerned, the range of recipients, the procedure for any automated processing, and, where applicable, the consequences of such processing. As a controller, we have the right to use all reasonable measures to verify the identity of the data subject who requests access to the data, in particular in relation to online services and identifiers (Article 15, recitals 63 and 64 of the Regulation).
  2. The right to rectification of incorrect and completion of incomplete personal data (Article 16, recital 65 of the Regulation).
  3. The right to erasure – the “forgetting” of personal data that are no longer necessary for the purposes for which they were collected and processed; upon withdrawal of the consent on the basis of which the processing is carried out; in the event of unlawful processing; where the personal data were collected in connection with an offer of information society (in the case of children), subject to the conditions set out in Article 17, recitals 65 and 66.
  4. The right to restriction of processing may be exercised if you, as the data subject, challenge the accuracy of the personal data and other particulars within the meaning of Article 18, recital 67 of the Regulation, in the form of a temporary transfer of the personal data selected to another processing system, the prevention of user access to the personal data selected, or the temporary elimination of the processing.
  5. The right to data portability is the right to transfer the personal data provided by you to our information systems on the basis of consent or the performance of a contract to another controller in a structured, commonly used and machine-readable format, insofar as this is technically possible, also under the conditions of Article 20, recital 68 of the Regulation in the event that the processing is carried out by automated means. The exercise of this right is without prejudice to Article 17 of the Regulation. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as controller.
  6. Without prejudice to any other administrative or judicial remedies, you have the right, as a data subject, to lodge a complaint under Article 77 of the Regulation with the Office for Personal Data Protection of the Slovak Republic if you consider the processing of personal data concerning you is in breach of the Regulation or the Data Protection Act.

 

As a data subject, you also have the right to object at any time on grounds relating to a particular situation to the processing of your personal data, also if the processing is necessary for the purposes of the legitimate interests pursued by us as a controller or a third party (except processing carried out by public authorities in the performance of their tasks), except where such interests are overridden by your interests or fundamental rights and freedoms as a data subject which require the protection of personal data (in particular if the data subject is a child).

Štátna ochrana prírody SR (State Nature Conservancy of the SR), Tajovského ulica 28B, 974 01 Banská Bystrica, acting as the operator of the information system, has taken all appropriate personal, organisational and technical measures in order to protect your personal data to the maximum extent possible in order to reduce the risk of their misuse, leakage and the like. Pursuant to our obligation under Article 34 of the Regulation, we hereby notify you as data subjects that if a situation arises in which we, as the controller, breach the protection of your personal data in a manner likely to result in a high risk to the rights and freedoms of natural persons, we will notify you of this fact without undue delay.

NOTICE: In order to comply with the principle of minimisation, any personal data provided by you is a necessary legal or contractual requirement for the fulfilment of the purpose of its processing. Failure to provide the mandatory data necessary for the conclusion of a contract may result in the contractual relationship not being concluded.

If your personal data are processed on the basis of consent pursuant to Article 6(1)(a) of the Regulation and the Personal Data Protection Act, as the data subject, you have the right to withdraw your consent to the processing of personal data at any time, even before the expiry of the period for which such consent was given, in the following ways:

  1. by sending an email request to ochranaosobnychudajov@sopsr.sk,
  2. over the phone: 048/472 20 27, or
  3. by sending a written request to the address of the controller’s registered office with the text “GDPR – withdrawal of consent” written on the envelope.

Withdrawal of consent does not affect the lawfulness of processing of data based on the consent prior to its withdrawal.

If you have any questions regarding the protection of your personal data, including the exercise of your rights under the Regulation and the Data Protection Act, please contact us or our data protection officer (if appointed):

Contact: CUBS plus, s.r.o., Mudroňova 29, 040 01 Košice, Contact address: oou@cubsplus.sk

Príloha k zásadám ochrany osobných údajov v SNC SR [pdf]

Príloha k Zásadám ochrany osobných údajov – odvolanie súhlasu [pdf]