HOW DO WE PROCESS YOUR PERSONAL DATA?

1. Who are we?

The controller of your personal data is a non-profit organization providing public benefit services: TRAKT, with its registered office at Inovecká 4, 911 01 Trenčín, Slovak Republic (hereinafter referred to as the “Controller” or “we”).

When processing your personal data, we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”) and relevant provisions of Act No. 18/2018 Coll. on Personal Data Protection (“PDPA”).

2. How can you contact us?

You can exercise your rights via email or post through the contact person:

  • Email: laf@trakt.sk

  • Postal address: TRAKT, Inovecká 4, 911 01 Trenčín, Slovak Republic

  • Phone: +421 907 149 942

3. Why do we process personal data and on what legal basis?

We process personal data for the following purposes:

  • Ensuring the performance of our employees’ duties, provision of services, and cooperation with contractual partners (including sharing or publishing contact details) – Article 6(1)(f) GDPR

  • Publishing profile photographs on our website – Article 6(1)(a) GDPR

  • Accounting and tax purposes – Article 6(1)(c) GDPR

  • Fulfilment of pre-contractual and contractual obligations – Article 6(1)(b) GDPR

  • Maintaining records of volunteers – Article 6(1)(f) GDPR

  • Occupational health and safety obligations (e.g. accident records) – Article 6(1)(c), Article 9(2)(f) GDPR

  • Keeping records of cooperation applicants – Article 6(1)(a) GDPR

  • Creating photo and audiovisual records of events for promotional purposes – Article 6(1)(f) GDPR

  • Marketing activities (printed materials, competitions) – Article 6(1)(f) GDPR

  • Public acknowledgements – Article 6(1)(f) GDPR

  • Documenting events and activities

  • Handling requests under the Freedom of Information Act – Article 6(1)(c) GDPR

  • Handling data subject requests under GDPR – Article 6(1)(c), Article 9, Article 10 GDPR

  • Records management (archiving) – Article 6(1)(c) GDPR

4. What legitimate interests do we pursue?

Our legitimate interests include:

  • Ensuring continuity of our activities

  • Protecting our legal claims

  • Proper fulfilment of contractual relationships

  • Informing the public about events and activities

  • Documenting projects and funded activities

  • Maintaining volunteer records

  • Public recognition of contributors

  • Promotion and presentation of our activities

5. What categories of personal data do we process?

Depending on the purpose, we process:

Standard personal data, such as:

  • Identification and contact details

  • Photos and video recordings

  • CV data

  • Financial and family-related information

Special categories of data, such as:

  • Health-related data (only when necessary for legal obligations or claims)

Criminal records data (e.g. extracts from criminal records for employment purposes)

6. Where do we obtain personal data from?

We primarily collect personal data directly from you (e.g. via forms, applications, event registrations).

We may also obtain data from:

  • Contractual partners

  • Employees (e.g. family data)

  • Public sources

  • Public authorities

7. Are you required to provide personal data?

Providing personal data is typically a contractual requirement necessary to enter into a contract or participate in activities.

Failure to provide data may result in:

  • Inability to conclude a contract

  • Inability to participate in events

  • In employment cases, inability to establish a working relationship

8. Who do we share your personal data with?

We share personal data only when necessary, mainly with:

  • Employees

  • Service providers (e.g. occupational safety, health services)

  • Contractual partners (if needed for cooperation)

  • Public authorities (when required by law)

We do not provide personal data for marketing purposes to third parties.

9. Do we transfer data to third countries?

No, we do not transfer your personal data outside the EU.

10. Cookies

We use cookies on our website. More information can be found in our Cookies Policy.

11. How long do we keep personal data?

We retain personal data only as long as necessary for the purposes of processing and in accordance with legal retention periods under archival laws.

Retention periods are defined in internal documents such as the Records Management Plan.

12. Do we use automated decision-making?

No, we do not carry out automated decision-making or profiling.

13. What are your rights?

You have the following rights under GDPR:

  • Right of access – to obtain confirmation and access to your data

  • Right to rectification – to correct inaccurate data

  • Right to erasure (“right to be forgotten”)

  • Right to restriction of processing

  • Right to data portability

  • Right to object (especially to processing based on legitimate interest or direct marketing)

  • Right to withdraw consent at any time

  • Right to lodge a complaint You have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

14. Additional information

More detailed information is available in the Record of Processing Activities.

15. Changes to this information

We reserve the right to update this information at any time. Significant changes will be communicated via our website or by email.