Source: https://www.mzv.sk/web/en/ministry/privacy_protection_policy
Timestamp: 2019-04-25 18:57:34+00:00

Document:
The protection of personal data in the Slovak Republic is governed by Act no. 122/2013 Coll. on the Protection of Personal Data as amended by Act no. 84/2014 Coll. (hereinafter referred to as "Act on Protection of Personal Data"). Supervision of protection of personal data is carried out by the Office of Personal Data Protection of Slovakia (hereinafter referred to as "Office"), a government body with nationwide coverage.
Personal data – data relating to an identified or identifiable natural person, while such person is one, who can be identified directly or indirectly, in particular by a general identifier, or by one or more features or attributes, which constitute its physical, physiological, psychological, mental, economic, cultural or social identity.
Operator – anyone who, alone or jointly with other, defines the purpose of processing the personal data, defines the conditions of their processing and processes the personal data in its own name.
Responsible person – person authorized by the operator to exercise supervision over compliance with the statutory requirements in processing of personal data.
Person concerned – every natural person, whose personal data are processed.
Authorized person – every natural person who comes into contact with personal data within its employment relationship, civil service, service relationship, member relationship, under a mandate, election or appointment, or in the exercise of public office, and who processes personal data to the extent and in the manner specified in the instruction.
Recipient – everyone who is provided with the personal data or with access to them, while the recipient may also be a third party.
Consent of the person concerned – any freely given explicit and articulate declaration of will, by which the person on the basis of provided information consents to the processing of their personal data. Proof of consent particularly includes data on who gave the consent, to whom it is given, for what purpose, list or extent of personal data and the period of the validity of the consent. A written consent is invalid, without the handwritten signature of the person who gave the consent.
Purpose of the processing of personal data – previously clearly defined or determined intent of the processing of personal data, which binds to a particular activity.
Information system – system, in which any organized set of personal data accessible according to the specified criteria, is systematically processed or to be processed for the pre-defined or pre-determined intent.
Processing of personal data – performing of operation or set of operations with personal data (manipulation), especially their obtaining, recording, remaking or changing, searching, using, blocking, their cross-border transferring, providing, accessing, publishing, liquidation, etc.
The basic objective of the Ministry of Foreign and European Affairs of the Slovak Republic (hereinafter referred to as “MFEA SR”) in the field of protection of personal data, is the implementation of provisions under the Act on Protection of Personal Data, consequent legislation as well as international treaties, by which the Slovak Republic is bound. In these are, among others, reflected the principles of the common policy of EU countries.
The MFEA SR, as a central government body in the field of foreign policy and the relations of the Slovak Republic to the other states and international organizations, is the operator of information systems under the Act on Protection of Personal Data. In those are, among other things, processed the personal data of the citizens of the Slovak Republic, as well as citizens of other states, who, for whatever reason, turned to the MFEA SR and its representative bodies abroad. Documents, containing personal data of the persons concerned, are by standard procedures delivered to the relevant public authorities for further processing according to individual types of agendas (e.g. registers – Act no. 420/2006 Coll. on registers and on amendments to certain Acts, travel documents – Act no. 647/2007 Coll. on travel documents and on amendments to certain Acts, stay of foreigners in Slovakia – Act no. 404/2011 Coll. on stay of foreigners, etc.).
Personal data are processed by authorized persons. Each authorized person was demonstrably informed about its rights and obligations before any processing operation of personal data. The guidance is provided by the MFEA SR through the responsible person. The MFEA SR keeps a proven record of the guidance.
h) blocking of respective personal data due to the withdrawal of agreement before the expiry of its validity period, if the operator processes the personal data on the basis of the consent of the person concerned.
The right of the person concerned may be restricted only if such restriction results from special law, or when its application would violate the protection of the person concerned, or would violate rights and freedoms of others.
The person concerned has upon written request or personally, if the matter is urgent, the right to object at any time by the operator against the processing of personal data in cases pursuant to § 10 section 3 letter a), e), f) or g) of the Act on Protection of Personal Data by stating the legitimate reasons or by submitting evidence of infringement of rights and legitimate interests, which are or may be damaged in particular case by such processing of the personal data; unless precluded by legal grounds and when it is established that the objection of the person concerned is legitimate, the operator is obliged to block and dispose of the personal data, which processing was objected by the person concerned, without undue delay and as soon as circumstances permit.
The person concerned has upon written request or personally, if the matter is urgent, also the right to object at any time by the operator and not to obey decision, which would have legal effects or significant impact, if such decision is made solely on the basis of automatic processing of respective personal data. The person concerned has the right to request the operator to review the decision made by a method other than the automatic processing, while the operator is obliged to comply with the request of the person concerned in such a way that the decisive role in reviewing the decision will have an authorized person; the operator shall inform the person concerned about the method of reviewing and its result, within the period according to § 29 section 3 of the Act on Protection of Personal Data. The person concerned does not have this right only when established by a special law that governs the measures to ensure the legitimate interests of the person concerned or if within the pre-contractual relations, or during the existence of contractual relations the operator issued a decision to satisfy the request of the person concerned, or if the operator took other appropriate measures under the contract to ensure the legitimate interests of the person concerned.
c) by an intermediary under letter a) or letter b), he/she is obliged to submit this request or minutes to the operator without undue delay.
If the person concerned suspects that its personal data are processed without authorization, he/she can submit a proposal to initiate the proceeding on protection of personal data to the Office of Personal Data Protection.
If the person concerned does not have legal capacity in full, its rights may be exercised by a legal representative (under Civil Code).
If the person concerned is deceased, its rights arising under the Act on Protection of Personal Data may be exercised by a close person (under Civil Code).
c) the operator is obliged to process the request of the person concerned in writing under § 29 sections 1 and 2 within 30 days from the receipt of the request.
In case of restriction of rights of the person concerned under § 28 section 2 of the Act on Protection of Personal Data, the operator will immediately and in writing notify the person concerned and the Office of Personal Data Protection.
″I am aware of following facts and consent to them: provision of the data that are required in this form, photographing and potential taking of fingerprints are mandatory in assessment of the visa application, and all personal data concerning me, which are listed in the visa application, as well as my fingerprints and photographs, will be provided to the competent authorities of the Member States and processed by those authorities for the purposes of a decision on my visa application.
These data, along with data concerning the decision on my application, or decision declaring the granted visa as invalid, its revoking or prolongation, will be entered into the Visa Information System (VIS), where they will be stored for a maximum period of five years. During this period, they will be accessible to the visa authorities and the authorities carrying out checks of visa at external borders within the Member States, to immigration and asylum authorities in the Member States in order to verify, whether the conditions for the legal entry into the territory of the Member States and stay thereon were met, as well as for identification of persons, who do not meet these conditions or no longer fulfil them, for the assessment of the asylum application and to determine who is fit for such assessment. Under certain conditions, these data will be accessible to designated authorities of the Member States and the Europol for the purposes of prevention of terrorist offenses and other serious criminal offenses, their detection and investigation. The authorities of the Member State responsible for the data processing are: The Ministry of Foreign and European Affairs of the Slovak Republic, Hlboká cesta 2, 811 04, Bratislava, and the Ministry of Interior of the Slovak Republic, the Office of Border and Foreign Police Presidium of the Police Force, Ružinovská 1/B , 812 72 Bratislava 1.
I am aware, that in all the Member States I have the right to be informed of the data concerning my person, which are recorded in VIS, as well as to be informed of the Member State that entered these data, and I have the right to request the correction of inaccurate data concerning my person and deletion of unlawfully processed data concerning my person. At my express request, the Office assessing my application will inform me how I can exercise my right to control my personal data, and how I can achieve their correction or deletion, including the related remedies in accordance with the national law of the State concerned. Complaints concerning the protection of personal data will be handled by national supervisory authority of this Member State: The Office of Personal Data Protection of Slovak Republic, Hraničná 12, 820 07, Bratislava.
In accordance with the § 23 of the Act on Protection of the Personal Data, a person responsible for the supervision of the protection of personal data was appointed by the MFEA SR. This person, among other tasks, ensures the processing of requests of the persons concerned, related to the exercise of their rights under § 28 to 30 of the Act on Protection of the Personal Data. The operator is obliged under the § 29 section 3 of the Act on Protection of Personal Data, to process the request of the person concerned in writing within 30 days from receipt of the request. In the case that the person concerned is not satisfied with the course and manner of the processing, he/she has the right to contact the Office of Personal Data Protection.

References: § 10
 § 29
 § 29
 § 28
 § 23
 § 28
 § 29