Information on the processing and protection of personal data

The WOLF Forest Protection Movement, a civic association, Company Registration Number: 31303862, with its registered office at Tulčík 310, 082 13 (hereinafter referred to as ‘LZ VLK’), as the controller of information systems for the processing of personal data, hereby provides you with the following information to explain how we process and protect your personal data.

LZ VLK processes your personal data in accordance with the relevant legislation (in particular the Personal Data Protection Act and the European Parliament’s General Data Protection Regulation, known as the GDPR) and this information.

If you have any comments or questions regarding the processing of personal data, please contact us at the following email address: alfa@wolf.sk or at the postal address: LZ VLK, Tulčík 310, 082 13.

When we process your personal data

We process your personal data:

if you have entered into a contract with us (for example, a donation agreement, a purchase agreement, etc.),
if you have provided us with financial support,
if you have signed our petition or another signature campaign,
if you have taken part in an event organised by us,
if you have contacted us by telephone, email, post or via a form on our website, or have communicated with us by other means.

What personal data do we process?

The scope of the data processed is as follows:

title, first name, surname, postal address, telephone number, email address,
in the case of a contractual relationship, the scope is specified in the contract.

For what purpose do we process your personal data?

in the case of a contractual relationship, the purpose of processing is to fulfil the contract,
when communicating with our existing supporters or those interested in our work, the purpose is to provide information about our activities,
when processing petitions or other signature campaigns, the purpose is to submit them to the relevant state organization.

What is the legal basis that allows us to process your personal data?

Performance of a contract - the legal basis is the conclusion of a contract, and on this basis we process the personal data arising from it;
Compliance with legal obligations – your data is processed in accordance with obligations relating to accounting, tax and other legal regulations,
Consent – we process personal data on the basis of the consent you have given us; you may withdraw your consent at any time in accordance with your rights as a data subject,
Legitimate interest – we are also entitled to process your personal data for the purposes of our legitimate interests. Our legitimate interest is to inform our donors and supporters about our activities, as they have expressed an interest in them through a donation or other form of support. Another legitimate interest is for analytical purposes and to ensure the security of our website and other communication channels.

Retention period for personal data

We retain personal data only for as long as is strictly necessary for the purposes set out above and for as long as the purpose of their processing remains valid. The retention period for personal data processed to fulfil legal obligations is governed by the relevant legislation. Where personal data is processed on the basis of your consent, it is retained for the period for which consent was given (usually 5 years). After this period has elapsed, we retain your data (in particular your consent and any withdrawal of consent) to the extent necessary to defend our rights should the need arise. As regards personal data processed on the basis of LZ VLK’s legitimate interest, such personal data is processed for the duration of that legitimate interest, after which it will be erased.

Security and Protection of Personal Data

As the security of your personal data is a priority for us, we have implemented appropriate technical and organisational measures to ensure its secure processing. Access to personal data by LZ VLK staff is restricted to only the data necessary for their work. Staff are bound by a duty of confidentiality and are properly trained.
To carry out certain activities, such as organising campaigns, mailings, bookkeeping and similar tasks, we use the services of trusted third parties, known as data processors. In such cases, we require these companies to maintain a comparable level of personal data protection.
Your personal data may also be disclosed pursuant to a decision by the courts or other state authorities, or in accordance with an obligation imposed by the relevant legislation. We do not trade in your personal data nor do we provide it to third parties whose activities are unrelated to the performance of our own activities.

Source of data

We collect data directly from data subjects as part of our business activities and process it using both automated and manual methods.

Your rights

In relation to the protection of your personal data, and therefore the personal data of data subjects, you have the following rights:

Right to withdraw consent – you have the right to withdraw the consent you have given us to process your personal data by sending an email to alfa@wolf.sk or by post to LZ VLK, Tulčík 310, 082 13. Withdrawing your consent does not affect the lawfulness of any processing we carried out prior to this.
Right of access to personal data - you have the right to ask us for information about what personal data we process about you, and we will send it to you within 30 days.
Right to rectification – you have the right to change, supplement or rectify your data that we process.
Right to data portability – upon request, we will provide you or another organisation with your personal data in a structured, commonly used and machine-readable format.
Right to object – in the event of a breach of our obligations relating to the collection or processing of personal data, you have the right to ask us for an explanation of such action, to refrain from such action, to eliminate the situation thus created, to apologize at our own expense or to provide other satisfaction, or to have personal data blocked or destroyed. Based on the above rights, we are obliged to inform you without delay about the blocking, correction, completion, destruction and provide you with the necessary cooperation and explanations
Right to erasure – you have the right to request the erasure of your personal data if one of the following grounds applies:
- tpersonal data are no longer necessary for the purposes for which they were collected or otherwise processed
- you withdraw your consent on the basis of which the data were processed, and there is no other reason for their processing
- you object to the processing and there are no overriding legitimate reasons for their processing
- personal data are processed unlawfully
Right to lodge a complaint with the supervisory authority – which is the Office for Personal Data Protection, www.dataprotection.gov.sk, Office for Personal Data Protection of the Slovak Republic, Hraničná 4826/12, 820 07 Bratislava 27

This Information on the Processing and Protection of Personal Data is valid from 25 May 2018