Privacy policy

Personal data protection conditions

 

The protection of our donors' personal data is very important to us. For this reason, we continuously analyze all personal data processing procedures and ensure their compliance with the GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR"), which is binding on all Member States of the European Union, as well as Act No. 18/2018 Coll. on the protection of personal data and on amendments to certain acts (hereinafter referred to as the "Act").

We hereby inform you about the manner and conditions of processing your personal data, as well as your rights in this regard.

 

1. WHAT ARE OUR CONTACT DETAILS?

The purposes and means of processing your personal data under these terms and conditions are determined by the controller – a non-profit organization providing services of general interest:

Človek v ohrození, n.o., with its registered office at Baštová 343/5, 811 03 Bratislava – Staré Mesto, ID No.: 50 082 001, registered in the Register of Non-Profit Organizations of the Bratislava District Office, registration number: OVVS-24106/502/2017-NO

If you have a question that is not answered in these terms and conditions on personal data protection, or if you would like more detailed information on any of these points, or if you wish to exercise any of your rights to personal data protection, please do not hesitate to contact us:

 

A. For postal communication, please use the following contact details:

Človek v ohrození, n.o. (People in Need)

with its registered office at Baštová 343/5

811 03 Bratislava - Staré mesto

 

B. For electronic communication, please use the following contact details:

e-mail contact: office@clovekvohrozeni.sk or darcek@clovekvohrozeni.sk

 

C. For telephone communication, please use the following contact details:

telephone contact: +421 948 654 005

 

2. WHO IS RESPONSIBLE FOR FULFILLING THE OBLIGATIONS?

Given that this obligation does not arise from legal regulations, we have not designated any person responsible for personal data protection, and we fulfill all obligations and commitments in this area ourselves with the utmost professional care, which you can rely on.

 

3. WHAT IS THE SCOPE, PURPOSE, AND LEGAL BASIS FOR PROCESSING PERSONAL DATA?

We hereby inform you that, as the controller, we process only and exclusively your following personal data for the following purposes and on the following legal bases:

 

Purpose of processing	Legal basis for processing	Category of personal data
1.    Accounting: Bookkeeping, including cash register, assets and liabilities, etc.	Article 6(1)(c) GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject	Common personal data, in particular name, surname, address, delivery address, payment details, telephone number, e-mail address, ID number, VAT number, VAT ID number, donation details
2.    Compliance with legal obligations and protection of rights: Monitoring compliance with legal regulations, handling legal matters, providing legal advice, asserting and enforcing claims	Article 6(1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection   personal data, in particular where the data subject is a child (the legitimate interest of the controller is the legal protection of its claims or legal defense against claims by third parties, as well as   the interest in fulfilling rights and obligations in accordance with the law)   Article 6(1)(c) GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject	Common personal data, in particular name, surname, address, delivery address, payment details, donation details, other data processed in the litigation agenda
3.    Mail records: Keeping records of received and sent mail - fulfilling obligations under Act No. 395/2002 Coll.	Article 6(1)(c) GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject	Common personal data, in particular name, surname, address, delivery address, signature, job title, other data specified in the mail
4.    Fundraising communication and donor care: Providing information about the operator and its charitable activities and operations, the use of donations, offering donations/other options and forms of support, providing information about collections and support options for people in need and who require assistance, via email, telephone, SMS, or mail to persons whose personal data the operator has obtained in connection with a previous donation, maintaining contact with donors and building relationships with them, communication and donor care.	Article 6(1)(f) GDPR: legitimate interest of the controller	Common personal data, in particular name, surname, email address, telephone number, donation details, address, delivery address; in the case of a donor who is a legal entity, the controller processes the contact details of the donor's contact person, in particular their name, surname, email address, telephone number, and job title.

 

5.     Donation agreement via the symbolic charity e-shop www.skutocnydarcek.sk: processing of orders for Real Gifts, conclusion of donation agreements, registration of donors and maintenance of personal donor cards, recording of the donor and the donation, proper fulfillment of the donation agreement, exercise of the rights and obligations of the operator in connection with the donation agreement, informing the donor about the use of the donation and the recipients of the aid, care for the donor in accordance with the donation agreement	If the data subject is a contracting party - performance of a contract pursuant to   Article 6(1)(b) of the GDPR:   performance of a contract (pre-contractual relations)       If the data subject is not a party to the contract - legitimate interest pursuant to Article 6(1)(f) of the GDPR (in the case of a donor who is a legal entity)	Common personal data, in particular name, surname, e-mail, telephone number, address, delivery address, payment details, login details, donation details, contract performance details, and other details related to the donation contract; in the case of a donor who is a legal entity, the controller processes the details of the donor's contact person, in particular their first name, last name, e-mail, telephone number, and job title
6.    Contact form: Enabling communication with visitors to the website www.skutocnydarcek.sk using a contact form	Article 6(1)(f) GDPR: legitimate interest of the controller	Common personal data, in particular name, surname, email address, personal data specified in the form text
7.    Disclosure obligation: Mandatory disclosure of contracts, invoices, and orders pursuant to Act No. 211/2000 Coll. and the obligation to prepare and publish a statement pursuant to Act No. 213/1997 Coll.	Article 6(1)(c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject	Data in the donation agreement - except for those whose publication is excluded by Act No. 211/2000 Coll.; donor data in the statement - as specified in Act No. 213/1997 Coll.
8.    Registry management	Article 6(1)(c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject	Common personal data, in particular name, surname, address, delivery address, payment details, telephone number, email address, company ID number, tax ID number, VAT ID number, donation details, and other data
9.    www.skutocnydarcek.sk operation: Cookies – essential cookies	Article 6(1)(f) of the GDPR: legitimate interest of the controller	Cookies enabling basic website functionality; Remembering user settings
10.  www.skutocnydarcek.sk operation:  Cookies – other (non-essential cookies	Article 6(1)(a) of the GDPR: the data subject has given consent to the processing of personal data	Cookies to better tailor advertisements to the interests of data subjects, ensure better website functionality, and generate statistics

 

 

4. Who do we share your personal data with?

We protect the personal data of our donors and do not disclose or provide it to third parties or entities, with the exception of persons who provide accounting services to our non-profit organization, IT infrastructure, or contractual partners. We select our partners based on, among other things, guarantees of their reliability and professional care in processing our donors' personal data, and these entities are bound by confidentiality and the obligation to take appropriate technical and organizational measures to ensure that the processing of personal data complies with the requirements of the GDPR and the Act. If such an obligation arises from the law or a decision of a public authority, your personal data may also be provided to public authorities or other entities. If such an obligation arises from the law, your personal data may be disclosed in the manner and to the extent specified by law.

 

5. Do we transfer your personal data outside the European Union?

The controller would like to inform you that your data is not transferred outside the European Union to third countries or international organizations.

 

6. How long do we keep your personal data?

We only keep your personal data for as long as it's needed for the purposes for which it's processed. We keep the personal data we process for the period specified in the filing plan.

After the retention period for personal data has expired, we ensure that it is deleted or anonymized in full compliance with the GDPR.

 

7. What are your rights towards us in the area of personal data protection?

As a data subject, you have several rights under the GDPR, which we would like to draw your attention to, namely:

 

 7.1  Right of access to personal data

You have the right to request confirmation from us as to whether we are processing personal data concerning you and, if so, you have the right to access that personal data and to obtain basic information about the processing of your personal data. For this purpose, you can contact us at any time using the contact details provided in the section "What are our contact details?".

 

7.2  Right to rectification and/or completion of personal data

You have the right to request that we correct incorrect personal data concerning you without undue delay, as well as the right to supplement incomplete personal data. For this purpose, you can contact us at any time using the contact details provided in the section "What are our contact details?".

 

7.3  Right to erasure of personal data

You only have the right to request the immediate erasure of your personal data if:

• personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• you withdraw your consent on which the processing is based, and there is no other legal basis for the processing;
• you object to the processing and there are no overriding legitimate grounds for the processing;
• the personal data has been processed unlawfully;
• the personal data must be erased to comply with a legal obligation under European Union law or the law of a Member State to which we are subject;
• the personal data has been collected in relation to the offer of information society services referred to in Article 8 of the GDPR.

For this purpose, you can contact us at any time using the contact details provided in the section "What are our contact details?", and we will then assess whether there are any exceptions in your case where it is not necessary to delete your data even if one of the above conditions is met (e.g., it is necessary for the enforcement of legal claims).

 

7.4  Right to restrict the processing of personal data

You have the right to restrict the processing of your data (i.e., we will only store your data but not process it in any other way) if:

• you have contested the accuracy of the personal data;
• the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
• we no longer need your personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims;
• you object to the processing.

To do so, you can contact us at any time using the contact details provided in the section "What are our contact details?", and we will then assess whether there are any exceptions in your case where your personal data may be processed in a manner other than storage.

 

7.5  Right to object to the processing of personal data

You have the right to object to the processing of your personal data if the legal basis for the processing of your personal data is: a) necessary for the performance of a task carried out in the public interest or in the exercise of official authority, or b) necessary for the purposes of the legitimate interests pursued by our non-profit organization or a third party. We may only process your personal data if we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms or grounds for the establishment, exercise, or defense of legal claims.

If your data is or will be processed for direct marketing purposes, i.e., for fundraising communication and donor care, you have the right to object at any time to the processing of personal data to the extent that it relates to such direct marketing. Personal data may no longer be processed for such purposes.

To do so, you can contact us at any time using the contact details provided in the section "What are our contact details?".

 

 7.6  Right to data portability

If the processing of your personal data is carried out by automated means, based on your consent or for the purpose of performing a contract, you have the right to obtain the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transfer this data to another person (controller). For this purpose, you can contact us at any time using the contact details provided in the section "What are our contact details?".

 

7.7  Right to withdraw consent to the processing of personal data at any time

Last but not least, you have the right to withdraw your consent to the processing of personal data concerning you at any time. Withdrawal of consent does not affect the lawfulness of personal data processing based on consent before its withdrawal. For this purpose, you can contact us at any time using the contact details provided in the section "What are our contact details?".

 

7.8  Right to lodge a complaint with a supervisory authority

We would also like to inform you that if you believe that your rights have been violated in the processing of your personal data or that the GDPR has been violated, you can file a motion to initiate proceedings on the protection of personal data with the Office for Personal Data Protection of the Slovak Republic. A template for such a request is available on the website of the Office for Personal Data Protection of the Slovak Republic at www.dataprotection.gov.sk.

 

8. Are you obliged to provide us with your personal data?

The provision of your personal data is voluntary, but some of your personal data is required for registration on the charity e-shop www.skutocnydarcek.sk, conclude a donation agreement and properly fulfill it, and therefore, if you do not provide it, it will not be possible to exercise the rights and obligations arising from it. The provision of certain data is also a legal requirement for the fulfillment of the obligations of the operator as a non-profit organization.

 

9. Do we obtain your personal data from sources other than you?

No, all personal data we process comes expressly from you.

 

10. What basic technical and organizational measures have we taken to protect your data?

In order to provide the highest level of protection for your personal data, we have implemented the following safeguards in our personal data processing procedures and have taken the following technical and organizational measures in particular:

We have developed internal documentation regarding the processing and protection of personal data, which is fully compliant with the GDPR and the Act.

• We have instructed all persons who have access to your personal data on our behalf, and these persons process your personal data on the basis of our instructions, which are in accordance with the GDPR.
• We regularly retrain persons who process your personal data on our behalf.
• We regularly monitor legal regulations in the area of personal data protection.
• We select our partners, among other things, with regard to guarantees of their reliability and professional care in processing the personal data of our donors, and these entities are bound by confidentiality and the obligation to take appropriate technical and organizational measures to ensure that the processing of personal data meets the requirements of the GDPR.
• Your personal data is processed on personal computers and laptops located in lockable rooms, with access by third parties to these rooms being restricted and monitored by a camera system.
• Access to the operating system of individual personal computers and laptops is restricted and conditional on entering a special unique password. When leaving the workplace, each person ensures that they log out of the operating system of the relevant personal computer and laptop and, upon leaving, also turns it off and locks the entrance door to the premises.
• and others.

 

11. We use automated decision-making, including profiling

We do not make any decisions based solely on automated processing, including profiling, that would have legal effects concerning you or similarly significantly affect you.

 

12. What other related information is there?

These privacy terms may change from time to time, but we will not limit your rights guaranteed by these terms without your express consent. All changes to the privacy terms will be published on this page. Users will be informed in advance of any significant changes to the privacy policy (including notification by email in particularly serious cases).

 

These terms and conditions are effective from 20.11.2025.