LOVE BANK terms of personal data processing

1. Dear visitors of our webpage, the following terms of personal data processing (hereinafter “terms”) are related to your personal data and privacy. We kindly ask you to pay attention to them.

BASIC INFORMATION

2. The terms include principles and rules of personal data processing of non-profit organisation (named Marína a Sládkovič n.o., seated in Radničné sq.109, Banská Štiavnica, ZIP 96901, Company ID: 529 993- hereinafter “Operator”) service users. The services are provided via web page http://bankalasky.sk (hereinafter “Services”).

3. When processing personal data of service users of non-profit organisation Marína a Sládkovič n.o. follows the European Parliament and the Council (EU) regulation No 2016/679 from 27th April 2016 on protection of natural persons with regards to the processing data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation- hereinafter “Directive”), the Act No. 18/2018 Coll.Code on personal data protection and its amendments (hereinafter “Act”) and other related generally binding legislation.

4. Pursuant to corresponding provisions of Directive and Act personal data is defined as any data related to an identified natural person or an identifiable natural person who can be identified directly or indirectly, mostly on the grounds of generally usable identifier, another identifier like a name, surname, ID number, localisation data or online identifier, or on the grounds of one or several features or signs forming its physical identity, physiological identity, genetical identity, psychical identity, mental identity, economic identity, cultural identity or social identity.

5. A respective person in Directive and Act e.g. a natural person whose personal data is being processed is every non-profit organisation Marína a Sládkovič n.o. service user including you.

6. Operator in Directive and Act is a non-profit organisation named Marína a Sládkovič n.o. which defined its purpose and means of personal data protection on its own behalf.

7. The Terms of personal data protection come into force as of 25th May 2018 and they are considered to be execution of information duty of Operator in regard to respective persons in terms of Directive and Article 19 of Act.

What are the legal grounds and the purpose of personal data protection?

8. By active approval of the Terms and consequent submitting of registration, an order, personal data or in another way marked request for supply or access to a particular service:
a) you voluntarily grant Operator your agreement to process your personal data for the purpose stated in the Terms pursuant to Directive and Act.
b) You confirm your filled in personal data are correct and actual
c) You confirm if you are under 16, your legal custodian (e.g. a parent) provided or approved an agreement to process your personal data.

9. The purpose of personal data protection is the use and duration of Operator’s particular service you ask for or you ask an access to it or conclusion and completion of a contract forming legal grounds for the use and duration of the requested service. The Operator’s services include primarily:
(a) sending newsletters;
(b) administration of web page http://bankalasky.sk;
(c) registration and administration of Boxes in Love Bank.

10. Providing and processing your personal data is inevitable for the use and duration of a particular service of Operator which you ask for or you ask an access to it as well as for conclusion and execution of a contract forming legal grounds for the use of requested service.

11. The purpose related to the use of services is registration of your personal data and sending short emails on news or other important and useful information related to our service the Operator can send to the email address provided by you and registered by you.

12. The use issuing from providing services is an analyse and survey related to their use which enable Operator to improve and optimise its services and web location.

13. Processing your personal data can be inevitable to execute duties of Operator issuing from Directive, Act and other generally binding provisions (for example Act No 431/2002 Coll.Code on accountancy and its amendments) as well as for direct marketing.

14. Processing your personal data can be inevitable also for justified interests of Operator:
a) protection against criminal activities, informing and proving criminal acts and cooperation with bodies acting against criminal acts and the courts in revealing criminal acts and their culprits,
b) Protection against misuse of services of Operator or the third party pursuant to Directive and Act.
c) for justified interest of Operator or the third party pursuant to Directive and Act.
d) Extrajudicial and judicial exercise, manifestation and execution of legal rights of Operator

15. Operator is entitled to process your personal data for another purpose different from the purpose defined in the Terms only in the case you provided your own agreement for it or the personal data protection can be merged with the purpose the data was originally achieved. Personal data protection for archivation and statistics in law is considered to be procession conformable with its original aim. In case of procession for particular purpose Operator has implemented relevant and efficient technical and organisational provisions which minimise particular data as well as pseudonymization on grounds of which the processed personal data cannot be connected to a particular person without the use of additional information saved separately.

What is the extent of processed personal data?

16. Operator processes your personal data only in the extent inevitable to achieve the purpose of its procession as follows:
a) the service of sending periodical newsletter and messages and administration of Boxes in Love bank.
– email address, telephone number
– Personal data as follows: name, surname, date of birth, permanent address
– Data on accepting, opening and visiting web pages by clicking on relevant links in a newsletter,
– IP address
– Data from cookies files
b) providing administration services of web page https:/bankalasky.sk
– IP address
– Data from cookies files

17. Operator uses cookies files in web page https:/bankalasky.sk

How long is your personal data stored?

18. Processed personal data is saved in necessary extent and form which enables your identification till the moment it is necessary to fulfil the purpose the data is processed (for example till it is necessary to complete duties issuing from generally binding provision of Operator). Consequently, and forthwith Operator shall arrange liquidation (deletion or anonymization) of your personal data in terms of Directive and Act.

19. Your personal data are kept safe because its procession is carried out by automate engines via information system of Operator and via corresponding technical and organisational measures securing safety of personal data including protection against unauthorised data procession, illegal data procession, loss of personal data, deletion of personal data or damaging personal data. In regard to the above-mentioned Operator is entitled to authorise the third party with corresponding personal, technical, organisational and field knowledge to process personal data on the grounds of written contract on behalf of Operator.

20. Operator is entitled to provide your personal data of inevitable extent to the following recipient:
a) persons who on behalf of Operator execute and claim legal rights extrajudicial or judicial in order to execute and claim legal interests of Operator,
b) courts, court executors, bodies acting in criminal procedure or other state bodies in order to implement and claim legal rights of Operator or executing duties of Operator pursuant to generally binding legislation,
c) Persons who administer Operator’s services, his web location and information structure for Operator and exclusively for the mentioned purpose,
d) Persons who arrange security and protection of his services, web location and information structure for Operator and who test and monitor the security exclusively for the mentioned purpose,
e) Persons who provide analytical and statistics services for Operator in order to improve quality and optimise his services and web location
f) Persons who provide marketing services for Operator in order to make marketing communication of Operator efficient and relevant (to avoid any doubts we note the mentioned category of persons shall not be allowed to use your personal data for their own marketing or marketing activities of any other person apart from Operator)

What are your rights regarding to personal data protection?

21. This is to inform you on the rights and legally significant facts related to personal data protection issuing from corresponding provisions of Directive and Act:
a) you have the right to get an access to your personal data from Operator (for more details see Article 15 of Directive and Article 21 of Act)
b) You have the right to ask for correction of your personal data by Operator (for more details see Article 16 of Directive and Article 21 of Act)
c) You have the right to ask from Operator to delete your personal data e.g. to be forgotten (see Article 17 of Directive and Article 23 of Act)
d) You have the right to ask from Operator to limit personal data procession (see Article 18 of Directive and Article 24 of Act)
e) You have the right for transmission of personal data to another operator (see Article 20 of Directive and Article 26 of Act)
f) You have the right to object personal data procession by Operator (see Article 21 of Directive and Article 27 of Act)
g) You have the right to initiate a case on personal data protection addressed to the Institution on Personal Data Protection of the Slovak Republic (see Article 99 and 109 of Act)
h) You have the right to waive your approval to personal data procession any time.

22. We particularly notify the right to object personal data procession in terms of which you shall be entitled to:
a) object personal data protection when completing the task carried in public interest, in public authority or on the grounds of justified interest of Operator or the third party including profiling based on the legislation,
b) Object personal data protection for direct marketing on the grounds of justified interest of Operator including profiling in the extent of direct marketing.

23. We particularly notify you have the right to waive your consent to personal data procession. Waiving your consent has no effect on lawfulness of personal data procession based on the consent granted before its waiving. If you have waived your consent to personal data protection and there is no other legal grounds for procession personal data, Operator arranges liquidation (deletion or anonymization) of your personal data in terms of Directive and Act without delay.

How to apply your rights related to personal data procession?

24. You are entitled to exercise your rights or ask questions regarding personal data protection in written request sent directly to Operator to Radničné sq.109/18, 96901 Banská Štiavnica

25. By granting your consent to personal data procession pursuant to Terms you take due not your request shall be considered unreasoning or inadequate due to its repeating character, Operator has the right to dismiss it on the grounds of your request content.

26. Hereby you take into account Operator has to reliably verify your identity before dealing with your request pursuant to sec.26 of Terms to prevent misuse of your rights. Due to it Operator is entitled to ask for providing additional information or documents to verify the identity of a corresponding person (your identity), if he has justified doubts on the identity of applicant. If Operator is not able to verify identity of a corresponding person (your identity) by the above-mentioned method, he shall inform an applicant in a suitable way, if it is possible, he shall dismiss the request.

27. If Operator does not meet your request, you have the right to apply to the Institution of Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, The Slovak Republic, his supervising body. You can contact the Institution also directly.