Information duty of the operator

According to Art. 13 and Art. 14 of REGULATION from the European Parliament and the Council 2016/679 from 27th April 2016 about the protection of individuals with regard to the processing of personal data and on the free movement of such data, which annuls the Directive 95/46/ES (General Data Protection Regulation) hereinafter “GDPR Regulation” and § 19 et seq. of Act no. 18/2018 Coll. on the protection of personal data, hereinafter referred to as the “Personal Data Protection Act”.

Identification and contact details of the operator:
Commercial name: Ministry of Foreign and European Affairs of the Slovak Republic (hereinafter the “Ministry”)
Registered office: Hlboká cesta 2, 833 36 Bratislava, Slovak Republic
IČO 00699021
Contact details: 00421/2/5978 1111, 00421/906 072 222, info@mzv.sk
Contact details of the accountable person: 00421/2/5978 2025, ochranaudajov@mzv.sk

The Ministry processes the personal data of affected persons while taking into account the obligations stemming from valid legislation and its specific tasks, while an affected person is every individual to whom the personal data is related.

What personal data does the Ministry process?

The scope of the personal data processed results from the relevant legislation or is determined by the purpose of their processing. The Ministry only processes personal data whose processing is necessary to fulfill the purpose of the processing as such.

What are the legal reasons for processing personal data?

The Ministry processes personal data on a legal basis, which is:

• consent of the data subject,
• fulfillment of contractual obligations,
• legal obligation of the operator,
• performance of a task carried out in the public interest or in the exercise of public authority entrusted to the operator.

If the processing of personal data is a legal requirement, i.e. if the personal data is processed according to special regulations, the failure to provide such personal data may result in the inability to carry out the legal tasks and duties of the Ministry.

What is the retention period of personal data?

Personal data is stored for the time necessary to achieve the purpose set by the legal requirements, the duration of the consent or until its withdrawal, or for the time necessary to fulfill the contractual conditions.

If the processed personal data is not part of the registry record, personal data will be deleted immediately after fulfilling the purpose of the processing. If the processed personal data is part of the registry record, the liquidation shall proceed in accordance with a special internal regulation of the Ministry (the Registry Code).

To whom can personal information be provided?

Personal data processed by the Ministry may be provided to recipients who have the status of independent operators and to whom the Ministry is obliged or authorized to provide such data pursuant to a special regulation, an international treaty binding on the Slovak Republic or the consent of the data subject/individual.

What are the requirements for transferring personal data to a third country (outside the EU)?

The transfer of personal data between the Ministry (or other body of the SR) and the embassy of the Slovak Republic abroad is not considered as a cross-border transfer to a third country. Likewise, a transfer within the institutions and bodies of the Member States of the European Union is not considered as a transfer to a third country. Such transfer is not restricted or prohibited. Subject to certain conditions, the Ministry may transfer personal data to another international organization. The case of transfer of personal data outside the EU is allowed upon the fulfillment of the requirements of the General Data Protection Regulation.

What are the rights of affected persons?

• The right to obtain confirmation from the Ministry whether personal data is processed in the information systems of the Ministry. In the event that the Ministry processes the personal data of the data subject, the subject has the right to obtain access to such data and other data pursuant to Art. 15 of the General Data Protection Regulation.
• The right to request correction of data if it is incorrect and the right to make an addition or edit personal data if it is incomplete.
• The right to delete data (destruction of data) of the data subject, including the right to forget data, if the purpose of the processing has ended or the data subject has withdrawn consent, or if the data subject has objected to processing or in the case of unlawful processing under Art. 17 of the General Data Protection Regulation.
• The right to restrict processing under Art. 18 of the General Data Protection Regulation.
• The right to transfer data in a structured, commonly used and machine-readable format to another operator, if technically possible and if personal data is processed with the consent of the data subject or under contract or processed by automated means.
• The right to object to the processing of personal data pursuant to Art. 21 of the General Data Protection Regulation.
• The right not to be subject to a decision based solely on automated processing, while the Ministry does not process personal data of affected persons with the aim of automatic profiling of the affected person in accordance with Art. 22 of the General Data Protection Regulation.
• If the personal data of the subject are processed based on his or her consent, the subject has the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal.
• Right to file a complaint to the Supervisory Authority, which is the Office for Personal Data Protection of the Slovak Republic or to apply a judicial remedy.

How can the affected subject exercise their rights?

The person concerned may exercise his rights by making an application, namely:

• Electronically via email to ochranaudajov@mzv.sk,
• By means of a written letter sent by registered mail to the Ministry.

The Ministry may ask the person concerned to provide additional information necessary to verify his identity.

Applications shall be handled free of charge, unless the applications are demonstrably unfounded or excessive, in particular because of their recurrent nature, in which case the Ministry may charge a reasonable fee or refuse to act upon the application.

The Ministry shall inform the person concerned of the manner of processing the application without delay, but no later than within one month from the date of receipt of the application. In justified cases, this period may be extended by two months, even repeatedly. The person concerned shall be informed of an extension of the time limit together with the reasons for the missed time limit. The Ministry shall respond to the request by a written letter or electronic form, usually by the same means as the request was received.

Contact details of the national supervisory authority:

Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, Slovak Republic, contact: 00421/2/3231 3214, e-mail: statny.dozor@pdp.gov.sk.