Statement on the Processing of Personal Data
The Centre for Folk Art Production, with its registered office at Obchodná 64, 816 11 Bratislava, Company ID: 00164429 (hereinafter referred to as “ÚĽUV”), processes your personal data solely on the basis of lawful conditions, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection.
ÚĽUV acts as the data controller and may be contacted regarding the exercise of your personal data protection rights at:
- Email: zodpovednaosoba@uluv.sk
- Postal address: Centre for Folk Art Production, GDPR RESPONSIBLE PERSON, Obchodná 64, 816 11 Bratislava, Slovakia
We will respond without undue delay, no later than one (1) month. This period may be extended by an additional two (2) months where legally permitted.
ÚĽUV is a professional organization established by Act No. 4/58 Coll. on Folk Art Production and Artistic Crafts. It operates nationwide and serves as a national documentation and information center for folk art production, as well as an open repository of folk art production.
When ÚĽUV processes personal data, you are the data subject, i.e., the individual to whom the personal data relates.
For the purposes listed below, data subjects include natural persons participating in activities organized by ÚĽUV, such as performances, presentations, events, and festivals; individuals for whom ÚĽUV provides educational services; individuals invited to events and festivals via personalized invitations; and visitors to such events.
Your personal data may also be processed in connection with ÚĽUV’s obligations as an employer, for example if you are a family member or close person of a ÚĽUV employee, but always only to the necessary extent and for purposes required by law.
In carrying out its tasks and obligations, ÚĽUV obtains personal data directly from you or from third parties (e.g., your employer). Where personal data has not been obtained directly from you, exceptions to the obligation to provide information pursuant to Article 14(5) of the GDPR or Section 20(5) of the Act may apply.
As a controller, ÚĽUV is legally obliged to provide your personal data to supervisory authorities or other authorized public authorities upon request, where required by applicable law.
Your personal data will be stored securely, in accordance with the controller’s and processor’s security policies, and only for as long as necessary to fulfill the purpose of processing. Access to your personal data will be granted exclusively to persons authorized by ÚĽUV who process such data based on the controller’s instructions and in compliance with its security policy.
Your personal data will be processed for the period required by generally binding legal regulations or internal regulations of the controller. After the purpose of processing has been fulfilled, your personal data will be deleted. Personal data are also stored in backup systems to prevent security incidents, particularly data availability breaches. ÚĽUV ensures data backup in accordance with GDPR and Act No. 18/2018 Coll. on Personal Data Protection.
Article I
Why We Process Your Personal Data (Purposes of Processing)
In accordance with GDPR and Act No. 18/2018 Coll., ÚĽUV, as controller, processes your personal data within the scope and under the conditions laid down by specific legal regulations, pursuant to Article 6 of the GDPR, for the purpose of carrying out its activities, namely:
1.1 Conducting research and documentation of folk art production, the results of which are processed and stored in archives, collections, and electronic databases.
1.2 Identifying talented folk artists and creating conditions for their further development, particularly through professional consultancy in the development of new products.
1.3 Providing information, consultation, and training services to schools, associations, organizations, and individuals; organizing hobby courses in traditional crafts and folk production; organizing thematic excursions, professional seminars, and creative symposia; and facilitating study stays.
1.4 Promoting traditional crafts and folk art production through publishing, exhibitions, sales activities, product presentations, product sales, and the provision of information online.
1.5 Providing library services.
Article II
Legal Basis
ÚĽUV processes personal data for the above purposes on different legal grounds depending on the nature of the activity.
For purposes listed in points 1.1–1.4, the legal basis is Article 6(1)(e) GDPR (performance of a task carried out in the public interest).
For the purpose listed in point 1.5 (library services), the legal basis is Article 6(1)(b) GDPR (performance of a contract to which the data subject is a party or taking steps at the request of the data subject prior to entering into a contract). Failure to provide personal data for this purpose makes it impossible to provide library and information services.
In carrying out its tasks, ÚĽUV takes photographs at events, training sessions, and activities it organizes. These may subsequently be published for the purpose of presenting activities and culture in the media, promotional materials, social networks, and on the ÚĽUV website. Publication is based on Article 6(1)(e) GDPR (task carried out in the public interest), as publishing photographs serves to promote folk culture.
Your personal data are also processed for archiving and records management purposes pursuant to specific legislation, in particular Act No. 395/2002 Coll. on Archives and Records Management, as amended, in conjunction with ÚĽUV’s Records Management Plan.
ÚĽUV processes personal data to comply with legal obligations related to accounting and the preparation of accounting documents. The legal basis includes Act No. 431/2002 Coll. on Accounting and Act No. 222/2004 Coll. on Value Added Tax, as amended.
Your personal data may be processed by a processor. ÚĽUV declares that it carefully selects processors based on their professional qualifications and compliance with GDPR and Act No. 18/2018 Coll.
Article III
Your Rights under the GDPR and the Personal Data Protection Act
Right of Access
You have the right to receive a copy of the personal data we hold about you and information about how we use it. In most cases, your personal data will be provided in written form unless you request another method. If requested electronically, the information will be provided electronically where technically feasible.
Right to Rectification
We take reasonable steps to ensure that your personal data are accurate, complete, and up to date. If you believe the data we hold are inaccurate, incomplete, or outdated, please ask us to correct, update, or supplement them.
Right to Erasure
You have the right to request deletion of your personal data, for example if they are no longer necessary for the original purpose. However, this right must be assessed in light of all relevant circumstances, including possible legal or regulatory obligations preventing deletion.
Right to Restriction of Processing
In certain circumstances, you may request that we stop using your personal data, for example if you believe the data are inaccurate or no longer necessary.
Right to Data Portability
Under certain circumstances, you may request that personal data you have provided to us be transferred to another third party of your choice. This right applies only to data processed on the basis of consent or contract.
Right to Object
You have the right to object to processing based on our legitimate interests. If we do not have compelling legitimate grounds for processing and you object, we will no longer process your personal data.
Rights Related to Automated Decision-Making
You have the right not to be subject to automated decision-making, including profiling, that produces legal or similarly significant effects. You may verify whether such processing takes place in the relevant section according to the purpose of processing.
Right to Lodge a Complaint
If you wish to lodge a complaint regarding the processing of your personal data, including the exercise of your rights, you may contact our Responsible Person. We will properly investigate all complaints.
If you are not satisfied with our response or believe that your personal data are processed unfairly or unlawfully, you may lodge a complaint with the supervisory authority:
Office for Personal Data Protection of the Slovak Republic
https://dataprotection.gov.sk/
Hraničná 12, 820 07 Bratislava 27
Email: statny.dozor@pdp.gov.sk
If you have any questions regarding the processing of your personal data, you may contact us through our Responsible Person.