Privacy policy / Protection of personal data

Information obligation of the Supreme Administrative Court of the Slovak Republic and the Chancellery of the Supreme Administrative Court of the Slovak Republic on the processing and protection of personal data

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (herein after referred to as „Regulation“).

Who processes your personal data?

For the purposes of exercising jurisdiction in accordance with Section 8(a) of Act No. 757/2004 Coll. on courts and amending and supplementing certain Acts, as amended (hereinafter referred to as the „Courts Act“), the Controller is

The Supreme Administrative Court of the Slovak Republic
Trenčianska 56/A
821 09 Bratislava
e-mail address: podatelna@nssud.sk
website: www.nssud.sk
(hereinafter referred to as „the Supreme Administrative Court“)

For the purposes of ensuring the fulfilment of tasks concerning the professional, organisational, personal, economic, administrative and technical support of the Supreme Administrative Court’s activities pursuant to Section 24(f) of the Courts Act, the controller shall be

The Chancellery of the Supreme Administrative Court of the Slovak Republic 
Trenčianska 56/A
821 09 Bratislava
IČO: 53 857 097
e-mail address: kancelaria@nssud.sk
website: www.nssud.sk
(hereinafter referred to as „the Chancellery“)

(collectively referred to hereafter as „the Controllers“ or individually as „the Controller“)

The Supreme Administrative Court and the Chancellery are each an individual Controller in relation to the individual purposes and methods of processing of personal data which they are entrusted with.

How can you contact the Data Protection Officer?

The Controllers have a designated Data Protection Officer whom the data subject may contact regarding any questions concerning the processing of his or her personal data and the exercise of his or her rights under the Regulation.

The Data Protection Officer may be contacted by the data subject as follows:

  • via e-mail: gdpr@nssud.sk
  • in writing at:
    Data Protection Officer
    The Chancellery of the Supreme Administrative Court of the Slovak Republic
    Trenčianska 56/A
    821 09 Bratislava

For what purposes and on what legal basis do the Controllers process your personal data?

The Supreme Administrative Court processes personal data, which are primarily the contents of the court file, in the exercise of its jurisdiction, as well as in the course of other court activities, e.g. in the handling of complaints and motions. When processing personal data, it relies in particular on special legal acts and the public interest. The Chancellery processes personal data to ensure the fulfilment of its tasks related to the professional, organisational, personnel, economic, administrative and technical support of the activities of the Supreme Administrative Court, mainly on the basis of special legal acts (e.g. keeping an employee’s personal file), public interest (e.g. informing about the Court’s activities on the web) and a contract concluded with the data subject (e.g. concluding a civil servant relationship). In exceptional cases, it relies on the legitimate interest or consent of the data subject. The legitimate interest of the Chancellery pursues in particular the objective of protecting the property, life and health of the data subjects (e.g. monitoring of the premises of the Controllers, evidence of visits), whereby the data subject has the right to object to such processing.

If the Controllers process personal data on the basis of special legal acts or the provision of personal data is a contractual obligation, the failure to provide personal data or the provision of incorrect or incomplete personal data by the data subject could result in the impossibility of performing the Controllers’ tasks and obligations arising therefrom. In the case of processing of personal data on the basis of a special legal act, the provision of data is a legal obligation of the data subject.

For more information on the specific purposes and legal basis, please refer to the Records of processing activities.

What personal data do the Controllers process?

The Controllers shall always process the personal data of the persons concerned (i.e. the persons to whom the personal data concerning them relate) to the extent necessary to achieve a specific purpose. Due to the extensive tasks of both Controllers, they may process a variety of data, both so-called ordinary data (e.g. name, surname, address, telephone number, education, marital status), data belonging to a special category of personal data (e.g. data relating to health) as well as data relating to criminal convictions and offences (e.g. criminal record extract).

The Controllers shall also obtain personal data from sources other than directly from data subjects, such as family members, relatives, publicly available evidence or registers, depending on the processing activity.

The scope of personal data processed within the scope of the individual processing activities of the Controllers can be found in the List of Processing Activities of the Controllers.

For what period of time will the Controllers process the personal data for specific purposes?

Personal data shall be stored for the period of the individual processing purposes listed in the List of Processing Activities of the Controllers. In most cases of processing activities (e.g. record of visits, employee’s personal file), after the completion of the original purpose of processing for which the personal data were obtained, they are archived for the storage period specified in the Chancellery’s registry plan and in accordance with Act No. 395/2002 Coll. on archives and registers and the amendment of certain acts, as amended. After this period, personal data shall be destroyed in accordance with the register regulations in accordance with the aforementioned Act.

Is disclosure of your personal data to other recipients by the Controllers envisaged?

Your personal data may be disclosed to other recipients, in particular courts included in the court system of the Slovak Republic, the Ministry of Justice of the Slovak Republic, IT service providers, lawyers, auditors, the Slovak National Archive and other persons who provide services to the Controllers and with whom they have concluded a contract for the processing of personal data within the meaning of Article 28(3) of the Regulation. The individual categories of recipients of personal data in connection with a specific processing activity of the Controllers are set out in the List of Processing Activities of the Controllers.

Do the Controllers carry out the automated decision-making, including profiling?

Controllers do not carry out processing of personal data based on automated individual decision-making, nor do they carry out profiling.

Do the Controllers intend to transfer the personal data to the third countries?

The Chancellery does not transfer personal data to a third country or an international organisation for most of the purposes of processing personal data. It does so only in cases where a special legal act requires this for a specific purpose. The Supreme Administrative Court may, in the exercise of its jurisdiction, transfer personal data to the third countries or to an international organisation in accordance with special legal acts.

What are the data subject’s rights in relation to the processing of personal data?

Pursuant to Article 7(3) and Articles 15 to 22 of the Regulation and Section 100 of Act No.18/2018 Coll. on the Protection of Personal Data and on Amendments and Additions to Certain Acts, as amended (hereinafter referred to as the “Personal Data Protection Act”), the data subject has the following rights:

  1. Right of access by the data subject according to article 15 of the Regulation
    • The data subject shall have the right to request confirmation as to whether personal data relating to them are being processed. Where the Controller processes the personal data of the data subject, the Controller shall give them access to those personal data and provide the information referred to in Article 15(1) of the Regulation or a copy of those data, depending on the content of the request.
    • In certain circumstances (e.g. a request related to access to a CCTV recording), the Controller is entitled to request more detailed information from the data subject that would help the Controller to process the data subject’s request (e.g. in the case of a CCTV recording – the date and time of the recording of the image, the area in which the image was supposed to have been recorded).
    • For more information on this right, including a template for exercising this right, click here: the Rights of Data Subjects | Personal Data Protection Office of the Slovak Republic (gov.sk)
  2. Right to rectification according to article 16 of the Regulation
  3. Right to erasure (‘right to be forgotten’) according to article 17 of the Regulation
  4. Right to restriction of processing according to article 18 of the Regulation
    • The data subject shall have the right to request from the Controller restriction of processing of personal data for necessary period of time depending on concrete circumstance, in following cases:
      • The data subject contested the accuracy of the personal data with the Controller [the data subject has exercised the right to rectification above],
      • The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
      • The Controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims,
      • The data subject has objected to processing of personal data and the personal data relating to them are processed on a legal basis which is in the public interest or legitimate interest.
    • For more information on this right, including a template for exercising this right, click here: the Rights of Data Subjects | Personal Data Protection Office of the Slovak Republic (gov.sk)
  5. Right to data portability according to article 20 of the Regulation
    • The data subject is only entitled to exercise this right in the case of processing based on consent or contract/agreement and where the processing is carried out by automated means. In the context of this right, they may obtain the personal data relating to them in a structured, commonly used, and machine-readable format and has the right to transfer that personal data to another controller, if technically feasible. In this context, the Controller shall assess the possibility of portability on a case-by-case basis, considering the subject matter of the data subject’s request.
    • The right to data portability shall not adversely affect the rights and freedoms of others.
    • For more information on this right, including a template for exercising this right, click here: the Rights of Data Subjects | Personal Data Protection Office of the Slovak Republic (gov.sk)
  6. Right to object according to article 21 of the Regulation
    • Where the Controller processes personal data relating to the data subject on the basis of a legitimate interest within the meaning of Article 6(1)(f) of the Regulation or a public interest within the meaning of Article 6(1)(e) of the Regulation, the data subject shall have the right to object to such processing.
    • The Controller shall assess each such request individually and, if it is established that the interests, rights, and freedoms of the data subject outweigh the interests of the Controller in that particular case, the Controller shall terminate the processing of such data of the data subject.
    • For more information on this right, including a template for exercising this right, click here: the Rights of Data Subjects | Personal Data Protection Office of the Slovak Republic (gov.sk)
  7. The right to withdraw the consent to the processing of personal data according to article 7(3) of the Regulation
    • This right may the data subject exercise in the event when the Controllers process personal data on the basis of their consent.
    • Consent given by the data subject in relation to the processing of personal data concerning them may be withdrawn at any time in the manner in which the consent was given.
    • For more information on this right, including a template for exercising this right, click here: the Rights of Data Subjects | Personal Data Protection Office of the Slovak Republic (gov.sk)
  8. The right to initiate a personal data protection proceeding according to Section 100 of the Personal Data Protection Act
    • If the data subject believes that the processing of personal data concerning them is in breach of the Regulation, they may file a complaint with the Personal Data Protection Office of the Slovak Republic, Building Park One, Námestie 1. mája 18, tel. +421 /2/ 3231 3214, e-mail: dozor@pdp.gov.sk.
    • For more information on the filing of a complaint to initiate proceedings, including a template, click here: Personal Data Protection Proceedings | Office for Personal Data Protection of the Slovak Republic (gov.sk)
    • In the event that personal data are processed by courts in the exercise of their jurisdiction, the Ministry of Justice of the Slovak Republic shall supervise the processing operations according to Section 81(7) of the Personal Data Protection Act.

The request addressed to the Data Protection Officer

Apart from filing a motion, you may exercise your rights at any time by means of a request addressed to the Data Protection Officer of the Controllers in the following manners:

  • via e-mail to the following e-mail address: gdpr@nssud.sk,
  • into the electronic mailbox of the Chancellery of the Supreme Administrative Court of the Slovak Republic, signed with a guaranteed electronic signature, submitted via the central portal of public administration (slovensko.sk),
  • in person on working days and during office hours to the registry of the Supreme Administrative Court, or to the Chancellery at its seat,
  • by post to: Data Protection Officer
    the Chancellery of the Supreme Administrative Court of the Slovak Republic
    Trenčianska 56/A
    821 09 Bratislava

A request to exercise the rights of the data subject shall be processed free of charge, except as provided below. If the request of the data subject is manifestly ill-founded or inadequate, in particular because of its repetitive nature, the Controllers shall be entitled to charge the data subject a reasonable fee, taking into account the administrative costs of providing the information or of communicating or carrying out the requested action, or to refuse to act on the request.

This information obligation will be updated from time to time as necessary.

Documents:

Information obligation for data subjects – photographs (PDF, 229 KB)