Privacy Policy
1. General information
This document describes how and why STEPHANIK, IČO 57590940, an interest association of legal entities with its registered office at Šľachtiteľská ulica 591/2, 919 28 Bučany, processes personal data as the controller (the “controller” or “we”). It also provides all other information required by law, including information about the rights of data subjects and how to exercise them.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “GDPR”) is legislation on the protection of natural persons in relation to the processing of personal data and on the free movement of such data. It protects the fundamental rights and freedoms of natural persons, in particular their right to the protection of personal data.
2. Definitions of selected terms
Means any information relating to an identified or identifiable natural person (the “data subject”). For the purposes of this document, data subjects are the persons whose personal data is processed as part of the individual processing activities set out below.
Means an operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Article 4(2) GDPR).
Under Article 12 et seq. of the GDPR, data subjects must also receive the relevant information about the controller's processing activities and their rights.
As the information about personal data processing in this policy may need to be updated in the future, the controller is entitled to update this policy at any time.
3. Legal bases for processing your personal data
Processing is lawful only if, and to the extent that, at least one of the following conditions is met:
- the data subject has given consent to the processing of their personal data for one or more specific purposes;
- processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject before entering into a contract;
- processing is necessary for compliance with a legal obligation.
4. We primarily collect your personal data directly from you
In particular, we collect it in the following ways:
- through the contact form on the cluster's website;
- when communicating by email or other communication channels;
- when registering for the cluster's newsletter and informational notices;
- when registering for events, conferences, seminars, workshops, or other activities organised by the cluster;
- when completing forms published on the cluster's website;
- during in-person or telephone contact with cluster representatives.
5. Information about personal data processing
Contact form and communication
Purpose of processingHandling questions, requests, and communication with website visitors.
Categories of data subjectsWebsite visitors and persons who contact the cluster.
Categories of personal data- first name and surname;
- email address;
- telephone number, if provided;
- message content.
Article 6(1)(f) GDPR - the controller's legitimate interest in communicating with the public.
Retention periodNo more than 12 months after the request has been handled.
Newsletter and updates about the cluster's activities
Purpose of processingSending professional information, news, event invitations, and other information related to the cluster's activities.
Categories of data subjectsNewsletter subscribers.
Categories of personal data- first name and surname, if provided;
- email address;
- organisation, if provided.
Article 6(1)(a) GDPR - the data subject's consent.
Personal data processorsWe use Mailchimp to manage the subscriber database and send newsletters.
Retention periodUntil consent is withdrawn or the newsletter subscription is cancelled.
Withdrawal of consentYou may withdraw your consent at any time by clicking the “Unsubscribe” link in each newsletter or by sending a request to info@stephanik.com. Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.
Event registration
Purpose of processingOrganising the cluster's conferences, workshops, seminars, and other events.
Categories of data subjectsEvent participants.
Categories of personal data- first name and surname;
- email address;
- organisation;
- job title, if provided.
Article 6(1)(b) GDPR - performance of steps before entering into a contractual relationship or organisation of an event at the participant's request.
Retention periodFor the period necessary to organise the event, and for no longer than 2 years after it takes place.
6. Automated individual decision-making
Personal data will not be used for automated individual decision-making, including profiling.
7. Rights of data subjects
Right to withdraw consent - where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. You may withdraw consent electronically using the email address above, in writing, or in person at the controller's registered office. Withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn. Regardless of this, you have the right to object to the processing of your personal data at any time.
Right of access - you have the right to receive a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in writing unless you request another method. If you requested this information electronically, it will be provided electronically where technically possible.
Right to rectification - we take reasonable measures to ensure that the information we hold is accurate, complete, and up to date. If you believe that the data we hold is inaccurate, incomplete, or out of date, please ask us to correct, update, or complete it.
Right to erasure (right to be forgotten) - you have the right to ask us to erase your personal data, for example where the personal data we collected is no longer necessary for the original purpose of processing. Your right must, however, be assessed in light of all relevant circumstances. For example, we may have legal or regulatory obligations that mean we cannot comply with your request.
Right to restriction of processing - in certain circumstances, you are entitled to ask us to stop using your personal data. This includes cases where you believe that the personal data we hold may be inaccurate or where you believe that we no longer need to use your personal data.
Right to data portability - in certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to another third party of your choice. However, the right to data portability only applies to personal data we obtained from you on the basis of consent or a contract to which you are a party.
Right to object - you have the right to object to processing based on our legitimate interests. If we do not have compelling legitimate grounds for processing and you submit an objection, we will no longer process your personal data.
Right to lodge a complaint
If you wish to complain about the way your personal data is processed, including in connection with the exercise of the rights above, you may contact us electronically at info@stephanik.com or using the contact details stated at the beginning of this document. We will properly investigate all your submissions and complaints. You also have the right to lodge a complaint with the supervisory authority, the Office for Personal Data Protection of the Slovak Republic.
We will respond to your request free of charge within 30 days. If this is not possible, we will inform you and explain the reasons.