State Nature Conservancy of the Slovak Republic
Tajovského 28B
974 01 Banská Bystrica, Slovakia
Company Identification Number (IČO): 17058520
Contact details: ochranaosobnychudajov@sopsr.sk, +421 48 472 20 55
As the data controller, the State Nature Conservancy of the Slovak Republic publishes this Privacy Policy to ensure fairness and transparency toward data subjects.
PERSONAL DATA PROTECTION POLICY
In accordance with Article 13 and the relevant recitals of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”), and Act No. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”).
The purposes of processing personal data are the reasons for which the personal data of data subjects (employees, applicants, clients, complainants, and others) are processed in our information systems on specifically defined legal bases. These purposes are specific, explicitly stated, and legitimate. When processing the personal data of data subjects, we comply with the principle of lawfulness under Articles 6 and 9 of the Regulation (individual purposes and legal bases are specified in the Annex to this Personal Data Protection Policy).
Data subjects whose personal data are processed in our information systems for specifically defined purposes may exercise the following rights in writing or electronically:
- Right of access to personal data – This is the right to obtain confirmation as to whether your personal data are being processed and the right to access such data, including information about the purposes and duration of processing, the categories of personal data concerned, the recipients of the data, the procedures involved in any automated processing, and, where applicable, the consequences of such processing. As the data controller, we have the right to take all reasonable measures to verify the identity of a data subject requesting access to personal data, particularly in connection with online services and identifiers (Article 15 and Recitals 63 and 64 of the Regulation).
- Right to rectification – The right to have inaccurate personal data corrected and incomplete personal data completed (Article 16 and Recital 65 of the Regulation).
- Right to erasure (right to be forgotten) – The right to have personal data erased when they are no longer necessary for the purposes for which they were collected and processed; when consent on which the processing is based is withdrawn; when personal data have been processed unlawfully; or when personal data were collected in connection with the provision of information society services to children, provided that the conditions specified in Article 17 and Recitals 65 and 66 of the Regulation are met.
- Right to restriction of processing – This right may be exercised if you, as a data subject, contest the accuracy of your personal data or if other conditions specified in Article 18 and Recital 67 of the Regulation are met. Restriction may involve temporarily transferring selected personal data to another processing system, preventing users from accessing selected personal data, or temporarily suspending their processing.
- Right to data portability – This is the right to have personal data that you have provided to our information systems on the basis of consent or the performance of a contract transferred to another data controller in a structured, commonly used, and machine-readable format, where technically feasible and subject to the conditions of Article 20 and Recital 68 of the Regulation, provided that the processing is carried out by automated means. Exercising this right does not affect Article 17 of the Regulation. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the data controller.
- Right to lodge a complaint – Without prejudice to any other administrative or judicial remedy, you, as a data subject, have the right under Article 77 of the Regulation to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic if you believe that the processing of your personal data violates the Regulation or the Personal Data Protection Act.
As a data subject, you also have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where such processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as the data controller.
You also have the right to object where processing is necessary for the purposes of legitimate interests pursued by us as the data controller or by a third party (except for processing carried out by public authorities in the performance of their duties), unless such interests are overridden by your interests or fundamental rights and freedoms as a data subject that require the protection of personal data, particularly where the data subject is a child.
The State Nature Conservancy of the Slovak Republic, Tajovského 28B, 974 01 Banská Bystrica, as the data controller, has implemented all appropriate personnel, organizational, and technical measures to ensure the highest possible level of protection of your personal data and to minimize the risk of their misuse, unauthorized disclosure, or similar incidents.
In accordance with our obligations under Article 34 of the Regulation, we inform you, as data subjects, that if a personal data breach occurs that is likely to result in a high risk to the rights and freedoms of natural persons, we will notify you of the breach without undue delay.
IMPORTANT NOTICE: In accordance with the principle of data minimization, all personal data requested from you are limited to what is necessary to meet legal or contractual requirements for the purposes of processing. Failure to provide mandatory personal data necessary for entering into a contract may result in the contractual relationship not being established.
If your personal data are processed on the basis of consent pursuant to Article 6(1)(a) of the Regulation and the Personal Data Protection Act, you, as a data subject, also have the right to withdraw your consent to the processing of personal data at any time, including before the expiration of the period for which the consent was granted.
You may withdraw your consent in any of the following ways:
- By sending an email request to ochranaosobnychudajov@sopsr.sk.
- By telephone at +421 48 472 20 55.
- By sending a written request to the registered address of the data controller, marking the envelope “GDPR – Withdrawal of Consent.”
Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
If you have any questions concerning the protection of your personal data, including the exercise of your rights under the Regulation and the Personal Data Protection Act, please contact us using the contact details provided above or contact our external Data Protection Officer:
CUBS plus, s.r.o.
Mudroňova 29
040 01 Košice, Slovakia
Email: oou@cubsplus.sk
The data controller has implemented personnel, organizational, and technical measures to eliminate risks associated with the processing of personal data of data subjects. It has prepared comprehensive documentation in accordance with the GDPR and Act No. 18/2018 Coll. on Personal Data Protection and has taken all necessary measures to ensure that personal data are processed lawfully and securely within the framework of the measures adopted by the data controller.
Annex to the Personal Data Protection Policy of the State Nature Conservancy of the Slovak Republic [pdf, ext] [PDF, 663 KB]
Last updated: June 2026.