Privacy Policy

in connection with the city conference entitled “Start with Children: The Bratislava Summit 2024“ co-organized by the Capital City of the Slovak Republic, Bratislava and the Metropolitan Institute of Bratislava (hereinafter referred to as the “City Conference“)

provided in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons concerning the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as “GDPR”) and in accordance with § 19 of Act no. 18/2018 Coll. on the Protection of Personal Data and Amendments to Certain Acts, as amended (hereinafter referred to as the “Personal Data Protection Act”).

This information regarding the processing and protection of the personal data of data subjects by the joint operators is addressed to and provided to all data subjects whose personal data are processed in connection with the city conference, as follows:

Identification of joint operators:

Capital City of the Slovak Republic, Bratislava (“CCBA”)
Registered office: Primaciálne námestie no. 1, 814 99 Bratislava – Old Town
Business ID: 00 603 481

Metropolitan Institute of Bratislava (“MIB”)
Registered office: Primaciálne námestie no. 1, 814 99 Bratislava – Old Town
Business ID: 52 324 940

Contact details CCBA

Office: Primaciálne námestie no. 1, 811 01 Bratislava
phone: +421 2 59 356 323
e-mail: mojepravo@bratislava.sk

Contact details MIB

Office: Ventúrska 22, 811 01 Bratislava
phone: +421 2 59 356 851
e-mail: info@mib.sk

Data Protection Officer

  • CCBA has a Data Protection Officer in charge, which is Mr. Mgr. et Mgr. Bruno Konečný (e-mail: zodpovednaosoba@bratislava.sk).
  • The MIB does not have an authorized data protection officer, as the scope of processed personal data does not create an obligation to appoint one. If you wish to contact MIB regarding the processing of your personal data, you can do so via the e-mail address info@mib.sk.

Purposes of personal data processing

Personal data are processed following the principle of their minimization for the following purposes:

  • preparation, organization, and implementation of the city conference, including registration and ensuring the participation of passive and active participants in the conference, as well as cooperation with sponsors
  • promotion of the city conference as well as the joint operators – on their websites (https://bratislava.sk/; https://mib.sk/), through a separate website set up for the needs of the conference (https://startwithchildren.com/), in CCBA and MIB publications, as well as in the media
  • asserting possible claims of joint operators via courts, law firms, notaries’ offices, etc.
  • marketing (newsletter distribution via MIB)
  • analytical purpose (collection of cookies by the website https://startwithchildren.com/ based on the OPT-IN principle, i.e. by expressing consent by ticking the checkbox of the given processing purpose in the cookie management panel)
  • operation of the GP webpay payment gateway to enable online payment of the fee for participation in the city conference
  • bookkeeping
  • statistics
  • archiving

Legal basis for the processing of personal data

Personal data are processed based on:

  • the performance of a contract concluded between any of the joint operators and the data subject, or to take pre-contractual measures at the request of the data subject, in accordance with Article 6 (1) (b) of the GDPR, respectively § 13 (1) (b) of the Personal Data Protection Act (in particular registration of passive participants and payment of the participation fee, ensuring the participation of active participants – speakers and discussants)
  • compliance with a legal obligation of the operator in accordance with Article 6 (1) (c) of the GDPR, respectively § 13 (1) (c) of the Personal Data Protection Act (bookkeeping, archiving)
  • the consent of the data subject in accordance with Article 6 (1) (a) of the GDPR, respectively § 13 (1) (a) of the Personal Data Protection Act (publication of a profile photo and brief curriculum vitae of an active participant in the city conference in connection with its promotion, newsletter distribution, collection of personal data through analytical and marketing cookies on the website established for the needs of the conference)
  • the legitimate interest of joint operators and third parties in accordance with Article 6 (1) (f) of the GDPR, respectively § 13 (1) (f) of the Personal Data Protection Act (in particular the need to ensure the proper course of the city conference, registration of participants, proof of participation to third parties to the necessary extent, informing the public about the conference and its course, promotion of the conference through the creation and distribution of video, audio and audio-video recordings); The joint operators consider that by registering for the conference, participants can reasonably expect that production of video, audio and audio-video recordings (i.e. photographs, videos, etc.) and their distribution in various publications, media and materials showcasing the activities of CCBA and MIB are a natural part of such an event.

Personal data categories

  • common personal data, in particular to the extent of academic or scientific title, name, surname, date of birth, residence address, name of organization or employer, job position/function, signature, contact details (especially phone number, e-mail address, correspondence address), e-mail address provided for the purpose newsletter distribution, bank account number, or payment card number, name and surname of its owner (in case of payment of a fee for participation in the conference), and
  • common personal data in the scope of audio, video, or audio-video recordings (photos, videos, etc. shot during the conference), if they are prepared in a manner that establishes the scope of the GDPR or the Personal Data Protection Act – capturing the image of the data subject, which may also reveal information concerning, for example, the physical, psychological, economic, social or cultural identity of the data subject – this additional information will not be further processed by CCBA or the MIB
  • special information about cookies collected through the website https://startwithchildren.com/: the website collects anonymous statistical data for analysis (through the creation of reports on the use of the website) through the following cookies:
    • _ga,
    • _ga_KBWLCBRGNF,
    • _gat,
    • _gid,
    • _fbp,
    • _gcl_au

Data subject categories

  • active participants in the city conference – natural persons who lecture and discuss at the conference or otherwise actively participate in its program
  • passive participants of the city conference – natural persons who register their participation in the conference and pay the relevant fee, as well as those who participate as spectators at the invitation of one of the joint operators
  • visitors to the website set up for the needs of the City Conference (https://startwithchildren.com/)
  • sponsors (partners) of the conference (natural persons or representatives of legal entities)

Identification of beneficiaries or categories of beneficiaries

The personal data of the data subjects will be processed primarily by authorized persons on the part of the joint operators (employees of operators who have been authorized and adequately trained to handle the personal data of the data subjects).

Joint operators may also disclose, to the extent necessary, personal data of data subjects to other natural or legal persons, public authorities, or international organizations, in particular, but not exclusively:

  • contractors involved in the preparation, organization, and/or implementation of the city conference,
  • legal, tax, accounting, and other advisors,
  • public authorities,
  • Rocket Science Group, based in the USA, which provides the services of the Mail Chimp application used to distribute newsletters,
  • Global Payments s.r.o. with its registered office in the Czech Republic (represented in Slovakia through Global Payments s.r.o., organizational unit), which is the provider of the GP webpay payment gateway, through which the payment of the fee for participation in the conference will take place,
  • selected third parties when viewing the content of a website set up for the needs of the conference, in the part where this content is linked to third-party applications or platforms (e.g. Google LLC based in the USA when viewing videos embedded on the site via YouTube).

With such disclosure of personal data, the joint operators shall ensure the highest possible level of protection of personal data.

Joint operators have concluded a contractual relationship with each of their processors within the meaning of Article 26 or 28 of the GDPR, or § 33 or 34 of the Personal Data Protection Act.

Transfer of personal data to third countries or international organizations

Joint operators may transfer personal data of data subjects to other third countries or international organizations. In the event of a possible transfer, the operator always undertakes to ensure a sufficient level of protection of the personal data of data subjects in accordance with the GDPR and the Personal Data Protection Act.

Automated individual decision-making, including profiling

Personal data will not be used for automated individual decision-making, including profiling.

Personal data retention period

The retention period of personal data is determined by the duration of the purpose of their processing, including the purposes immediately following the original purpose of processing (for example, archiving while complying with appropriate safeguards for the protection of the rights of the data subject):

  • Personal data processed with the consent of the data subject: for the duration of the consent, but for a maximum of 6 months from its granting
  • Personal data processed for preparation, organization, and implementation of the city conference: for the period of preparation, organization, and implementation of the city conference
  • Personal data processed for promotion: for the period of promotion of the city conference and/or activities of joint operators, but not longer than 10 years
  • Personal data processed to enforce possible claims of joint operators: for the duration of the limitation or prescription period or until the final termination of the relevant proceedings
  • Personal data processed for the purpose of paying the fee for participation in the conference and bookkeeping: 10 years
  • Personal data processed for statistical purposes: for the period of statistical evaluation of the city conference and its impacts
  • Personal data processed for archiving purposes: 10 years, if for purposes of public interest or scientific or historical research, it is not necessary to store personal data longer (but only if appropriate technical and organizational measures are in place, such as anonymization, encryption, etc.).

The retention period of documents containing personal data of data subjects and registry records is governed by the relevant legal regulations governing the management of registry records, as well as the relevant internal regulations of the joint operators if issued.

Rights of the data subject

The data subject has:

  • the right to confirmation of the personal data processing
  • the right to access one’s personal data
  • the right to amend personal data,
  • the right to supplement any incomplete personal data,
  • the right to the erasure of personal data,
  • the right to restrict the processing of personal data,
  • the right to the portability of personal data,
  • the right to object to the processing of personal data if the processing is carried out for the legitimate interests of joint operators or a third party or direct marketing purposes,
  • the right to withdraw consent to the processing of personal data – consent may be withdrawn, for example, electronically, in writing, or in person at the office of one of the joint operators; withdrawal of consent does not affect the lawfulness of the processing of those personal data that have been processed about the data subject on its basis; warning about cookies: the consent given to the collection of cookies may be revoked by the visitor of the site at any time for any individual purpose by deleting the relevant cookies on their device (in the browser used to view the site) by performing the appropriate operations in the settings of their browser
  • the right to opt out of automated individual decision-making, including profiling.

If the data subject believes that their rights have been violated during the processing of personal data, they have the right to file a complaint with the Office for Personal Data Protection of the Slovak Republic, or a proposal to initiate proceedings under § 100 of the Personal Data Protection Act (contact address of the Office: Hraničná 12, 820 07 Bratislava 27, phone: +421 2 32 313 214, e-mail: statny.dozor@pdp.gov.sk).

Obligation to provide personal data by the data subject

The provision of personal data of the person concerned specified in the registration form (application) for the city conference, or in the contract that is the legal basis for lecturing or participating in the discussion within the city conference, is mandatory in accordance with Article 13 (2) (e) of the GDPR, respectively § 19 (2) (e) of the Personal Data Protection Act.

In case of failure to provide the required mandatory personal data, the joint operators may refuse the data subject as a (passive or active) participant in the city conference.

 

General information about CCBA’s information obligation as an operator can be found in the Privacy Policy.

General information on the information obligation of the MIB as an operator can be found in the document Principles of Personal Data Processing.