The Central Government Portal (“ÚPVS”), available at www.slovensko.sk, provides centralised and unified access to public administration information and electronic services for the purpose of electronic official communication with any public authority, pursuant to Act No. 305/2013 Opens in a new windowColl. on the electronic form of the exercise of the powers of public authorities and on amendments to certain acts (the “e-Government Act”).
The Central Government Portal is administered by the Office of the Deputy Prime Minister of the Slovak Republic for Investments and Informatization. The operator of the Central Government Portal is the National Agency for Network and Electronic Services (the “Operator”).
The processing of personal data obtained through the Central Government Portal is governed by the provisions of Regulation (EU) 2016/679 Opens in a new windowof the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”Opens in a new window), and Act No. 18/2018Opens in a new window Coll. on Personal Data Protection and on amendments to certain acts (the “Personal Data Protection Act”).
Visiting our Portal
We record and store your computer’s IP address in order to transmit the content of our portal to your computer, in accordance with Article 6(1)(e) of the GDPR. We also process this data to identify and report any misuse. The legal basis for this processing is Article 6(1)(e) of the GDPR. In this context, our legitimate interest in processing personal data is to ensure the proper functioning of our portal and the provision of services through our portal.
Where we process your data as described above for the purpose of ensuring the functionality of our portal, such processing is also based on Act No. 305/2013 Coll. on the electronic form of the exercise of the powers of public authorities and on amendments to certain acts (the “e-Government Act”).
Other Purposes
We also process personal data that you voluntarily provide, for example, when subscribing to a newsletter. The legal basis for this processing is Article 6(1)(e) of the GDPR. The data processed in this context includes customer data to the extent necessary for the purposes specified in this Privacy Statement.
Where we process your data as described above for the purpose of subscribing to a newsletter, you are required to provide such data. We cannot process your request without this information.
If you have consented to the processing of your personal data in accordance with Article 6(1)(a) of the GDPR, you may withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent prior to its withdrawal.
The IAM module of the ÚPVS will enable authentication through the eIDAS Node for foreign natural persons holding a German identity card or a residence permit for a foreign national residing in Germany. This means that a foreign national holding such a document will be able to log in to the ÚPVS and also to all portals that use single sign-on (WebSSO) through the ÚPVS and technically accept this type of authentication means.
Identities from other countries will be gradually added to the ÚPVS IAM in accordance with the notification procedure under Regulation (EU) No. 910/2014Opens in a new window of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC (hereinafter referred to as the “eIDAS Regulation”).
Mandatory personal data:
Alternatively, one or more of the following data items may be provided (at the discretion of each country):
By logging in to the IAM module of the ÚPVS, you express your consent to the processing of your personal data. All personal data will be processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), and in accordance with Act No. 18/2018 Coll. on Personal Data Protection and on amendments to certain acts, as amended and in force.
The legal basis for the processing of personal data is Regulation (EU) No. 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC, together with all related implementing acts of the European Commission.omisie.
We will not sell your data to third parties or otherwise provide it for commercial purposes.
We are entitled to disclose your personal data to law enforcement authorities and, where applicable, to injured third parties without your explicit consent if this is necessary to investigate the unlawful use of our services or to enforce legal claims. However, such a transfer will take place only where there is specific evidence of unlawful conduct or misuse. Your data may also be transferred where this contributes to the enforcement of the terms of use or other agreements. At the same time, we are legally obliged to provide information to certain public authorities upon request.
The transfer of such data is based on our legitimate interest in preventing misuse, enabling the prosecution of criminal offences and ensuring the enforcement of our rights, provided that our interests do not override your interests and rights relating to the protection of your personal data, in accordance with Article 6(1)(f) of the GDPR.
No transfers of data to third countries are currently planned. Should such a transfer become necessary, we will implement the measures required to comply with the applicable legal requirements. In particular, you will be informed in good time of the relevant recipients or categories of recipients of personal data, in accordance with legal requirements.
The Operator collects and processes identification data and other personal data only to the extent and for the specific purposes defined in the e-Government Act.
The purposes of collecting and processing personal data through the Central Government Portal are:
The Operator of the Central Government Portal shall ensure that appropriate measures are taken to protect identification data and other personal data, as well as information about the user, in accordance with generally binding legal regulations. Except in cases provided for by such regulations or agreed with the user, the Operator shall not disclose such data to third parties without the user's consent.
The Operator does not provide personal data for direct marketing purposes.
When providing information and personal data from the Central Government Portal, the Operator always acts in accordance with the e-Government Act and the Personal Data Protection Act.
If incorrect, incomplete or outdated personal data is provided or made accessible, or if personal data is provided or made accessible unlawfully, the Operator is obliged to inform, without undue delay, the recipients to whom such personal data was provided or made accessible.
In accordance with the provisions of Section 29 of the Personal Data Protection Act, the Operator is responsible for the security of personal data. For this purpose, appropriate technical, organisational and personnel measures have been adopted, taking into account the manner in which personal data is processed. These measures help protect your personal data against unauthorised access, use and disclosure.
We verify the effectiveness of our data protection measures and continuously improve them in line with technological developments. The personal data you enter is encrypted during transmission using a secure encryption process.
The Operator of the Central Government Portal is responsible for ensuring the protection of personal and identification data contained in electronic submissions only until the moment such submissions are delivered.
The period during which information is collected and processed, to the extent specified in the Operator's General Terms and Conditions, corresponds to the period during which the user's electronic mailbox exists. Where the Operator of the Central Government Portal exercises its rights, the period of collection and processing of information may continue even after the user's identity has ceased to exist. The Operator is not authorised to destroy the user's personal data until the expiry of the periods prescribed by specific legal regulations.
Data from the Central Government Portal is regularly backed up by the Operator to ensure that the system can be properly restored.
Right of Access
Upon request, you have the right to obtain information from us about the personal data concerning you that we have processed, within the scope defined in Article 15 of the GDPR. You may submit your request by post or by email to the addresses provided below.
Right to Rectification
You have the right to request that we correct, without undue delay, any inaccurate personal data concerning you (Article 16 of the GDPR). To exercise this right, please contact us using the contact details provided below.
Right to Erasure
If you have valid legal grounds as set out in Article 17 of the GDPR, you have the right to obtain the immediate erasure of personal data concerning you (the “right to be forgotten”).
Such legal grounds include cases where:
To exercise this right, please contact us using the contact details provided below.
Right to Restriction of Processing
If the criteria set out in Article 18 of the GDPR are met, you have the right to obtain restriction of processing, as provided for in that Article.
In particular, restriction of processing may be requested where the processing is unlawful and the data subject opposes the erasure of personal data and requests the restriction of its use instead, or where the data subject has objected to processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether our legitimate interests override those of the data subject.
To exercise this right, please contact us using the contact details provided below.
Right to Data Portability
You have the right to data portability, as defined in Article 20 of the GDPR. This means that you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, and the right to transmit that data to another controller.
This right applies where the processing is based on consent or a contract and is carried out by automated means.
To exercise this right, please contact us using the contact details provided below.
Right to Object
Pursuant to Article 21 of the GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you where such processing is based on Article 6(1)(e) or (f) of the GDPR.
We shall cease processing your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment, exercise or defence of legal claims.
To exercise this right, please contact us using the contact details provided below.
If you believe that the processing of personal data concerning you that we have carried out is unlawful or inadmissible, you have the right to lodge a complaint with the competent supervisory authority.
You may contact the authority at the following address:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Slovak Republic
Company ID No. (IČO): 36064220
www.dataprotection.gov.skOpens in a new window
Telephone consultations on personal data protection: Tuesdays and Thursdays from 8:00 a.m. to 12:00 p.m.
+421/2/3231 3220
You can contact us at:
National Agency for Network and Electronic Services
Tower 115
Pribinova 25
811 09 Bratislava
Slovak Republic
Central Contact Centre
You can also contact us by telephone at: +421 2 35 803 083 or by using the contact form.Opens in a new window
Any questions concerning the processing of your personal data, requests for information or the exercise of data subjects' rights should be addressed directly to our Data Protection Officers (DPOs), who are available to assist you:
Data Protection Officer (hereinafter referred to as the “DPO”) (the Operator's designated data protection officer within the meaning of the GDPROpens in a new window):
JUDr. Filip Švantner ( +421 232780771)
Národná agentúra pre sieťové a elektronické služby
TOWER 115
Pribinova 25
811 09 BRATISLAVA
