Declaration on the processing of personal data
The Centre for Folk Art Production with its registered office at Obchodná 64, Reg. ID: 00164429 (hereinafter referred to as “ÚĽUV”) processes your personal data only on the basis of legal conditions, in accordance with the Regulation and the Personal Data Protection Act. ÚĽUV has the status of a data controller, whom you can contact in order to exercise your rights in the area of personal data protection at:
- phone number: +421 908 917 454
- e-mail address: zodpovednaosoba@uluv.sk
- by letter to the address of The Centre for Folk Art Production, GDPR RESPONSIBLE PERSON, Obchodná 64, 816 11 Bratislava
We will reply to you without undue delay within one (1) month at the latest, or this period may be extended by a further two (2) months if the statutory conditions for extending this period are met.
The controller has designated a data protection officer whom the data subject may contact in relation to any questions concerning the processing of his or her personal data and the exercise of his or her rights under the GDPR; contact details of the data protection officer, e-mail: zodpovednaosoba@uluv.sk or in writing to the controller’s address marked “GDPR RESPONSIBLE PERSON”.
ÚĽUV is a professional organisation established by Act No. 4/58 Coll. on Folk Art Production and Handicrafts. It has a nationwide remit, within which it fulfils the function of a national documentation and information centre for folk art production and an open depository of folk art production.
In the processing of personal data by ÚĽUV, you are the data subject, i.e. the person about whom the personal data concerning him or her are processed.
For the purposes set out below, the data subjects are natural persons who participate in one of the activities organised by ÚĽUV, such as performances, presentations, festivals, natural persons for whom ÚĽUV provides education, natural persons invited on the basis of a personalised invitation to organised events and festivals. The persons concerned may also be visitors to the events.
We may also process your personal data in the performance of ÚĽUV’s duties as an employer if, for example, you are a family member of an employee of ÚĽUV or a person close to them, but only to the extent necessary and for the purposes required by law.
In the performance of ÚĽUV’s tasks and obligations, we obtain your personal data directly from you or we obtain it in the performance of our duties or tasks from third parties (for example, your employer). The processing of your personal data that we have obtained in the performance of the tasks and obligations of the ÚĽUV from third parties (we have not obtained it directly from you) may be subject to exemptions pursuant to Article 14(5) of the Regulation and Article 20(5) of the Act, respectively, for the purpose of fulfilling the obligation to inform data subjects in a transparent manner.
ÚĽUV as the controller has a legal obligation to provide your personal data in the course of inspections, supervisory activities or at the request of authorised public authorities or institutions, if this results from specific regulations.
Your personal data will be stored securely, in accordance with the security policy of the controller and the processor and only for as long as necessary to fulfil the purpose of the processing. Access to your personal data will only be granted to persons authorised by the controller (ÚĽUV) to process your personal data, who process it on the basis of the controller’s instructions, in accordance with the controller’s security policy.
Your personal data are processed for the period required by generally binding legal regulations or internal acts of the controller. Your personal data will be erased after the end of the processing purposes (these purposes are defined in the following paragraph). Personal data is also stored on backup storage sites, which serves to prevent security incidents, in particular the disruption of data availability due to a security incident. The ÚĽUV is obliged to ensure that data is backed up in accordance with the security requirements of the Regulation and the Data Protection Act.
Article I.
Why we process your personal data (processing purposes)
In accordance with the Regulation and the Personal Data Protection Act, ÚĽUV, as the controller, processes your personal data to the extent and under the conditions laid down in specific regulations, based on the legal conditions referred to in Article 6 of the Regulation for the purposes of ensuring its activities, namely for the purpose of:
1.1 Implementation of research and documentation of folk art production, the results of which are processed and collected in archives, collections and electronic databases.
1.2 Searching for talented folk creators and creating the conditions for their further development, in particular by providing expert advice on the development of new products.
1.3 The provision of information, consulting and training services to schools, interest associations, organisations and individuals, the organisation of interest courses of traditional crafts and folk production, the organisation of thematic excursions, professional seminars and creative symposia, mediation of study stays.
1.4 Promotion of traditional crafts and folk art production through its own editorial, exhibition and sales activities, through presentations of products, sales of products and making information available on the Internet.
1.5 Library services.
Article II.
Legal basis
ÚĽUV processes personal data for the aforementioned purposes, and the legal basis for their processing varies depending on the nature of the activity.
The legal basis for the processing of personal data (the purposes referred to in points 1.1, 1.2, 1.3, 1.4.) is Article 6(1)(e) of the Regulation (performance of a task carried out in the public interest).
The legal basis for the processing of personal data for the purpose referred to in point 1.5 is Article 6(1)(b) of the Regulation (performance of a contract to which the data subject is a party or to take pre-contractual measures at the request of the data subject). In the event of failure to provide personal data for this purpose, it will not be possible to implement the subject of the contract (the provision of library and information services).
As part of ÚĽUV’s tasks, photographs are taken of events, trainings and actions organised by ÚĽUV. These can then be published for the purpose of presenting the activities and culture in the media, presentation materials, social networks, on the ÚĽUV website, etc. We disclose your personal data on the basis of Article 6(1)(e) of the Regulation (performance of tasks carried out in the public interest), as the publication of photographs constitutes a means of promoting folk culture.
We process your personal data for archiving and pre-archival care purposes on the basis of special regulations, in particular Act No. 395/2002 Coll. on archives and registers and on the amendment of certain acts, as amended, in conjunction with the ÚĽUV’s Registration Plan.
In order to comply with the legal obligation, ÚĽUV processes your personal data for the purpose of bookkeeping and the preparation of accounting documents. The legal basis for the processing of your personal data for this purpose is in particular Act No. 431/2002 Coll. on Accounting, as amended, and Act No. 222/2004 Coll. on Value Added Tax, as amended.
We may process your personal data through an intermediary. ÚĽUV declares that when selecting a processor, it takes care of its professional qualities and compliance of the processing of personal data with the Regulation and the Personal Data Protection Act.
Article III.
Your rights under the Regulation and the Data Protection Act
Right of access
You have the right to be provided with a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written paper form unless you request a different method of disclosure. If you have requested this information by electronic means, it will be provided to you electronically where technically possible.
Right to repair
We take reasonable steps to ensure that the information we hold about you is accurate, complete and up to date. If you believe that the information we hold is inaccurate, incomplete or out of date, please do not hesitate to ask us to correct, update or complete the information.
Right to erasure
You have the right to ask us to erase your personal data, for example, if the personal data we have collected about you is no longer necessary for the fulfilment of the original purpose of the processing. However, your right must be considered in the light of all the relevant circumstances. For example, we may have certain legal and regulatory obligations which mean that we may not be able to comply with your request.
Right to restriction of processing
In certain circumstances, you are entitled to ask us to stop using your personal data. These include, for example, where you believe that the personal data we hold about you may be inaccurate or where you believe that we no longer need to use your personal data.
Right to data portability
In certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to another third party of your choice. However, the right of portability only applies to personal data that we have obtained from you on the basis of consent or on the basis of a contract to which you are a party.
Right to object
You have the right to object to processing based on our legitimate interests. If we do not have a compelling legitimate ground for processing and you object, we will no longer process your personal data.
Rights related to automated decision-making
You have the right to refuse automated decision-making, including profiling, which results in a legal or similar significant consequence for you. You can check whether your personal data is processed through these processing operations in the relevant section, according to the purpose of the processing.
Right to lodge a complaint
If you wish to make a complaint about the way in which your personal data is processed, including the exercise of the rights set out above, you can contact our Responsible Person. We will properly investigate all your suggestions and complaints.
If you are not satisfied with our response or believe that we are processing your personal data unfairly or unlawfully, you may lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic., https://dataprotection.gov.sk/, Hraničná 12, 820 07 Bratislava 27; phone number: +421 /2/ 3231 3214; e-mail address: statny.dozor@pdp.gov.sk
If you have any questions regarding the processing of your personal data, you can contact us through our Data Protection Officer.