Privacy policy

1. Basic Provisions

By filling out the contact form on the website campusgalvaniho.eu (hereinafter referred to as the “Website”), or after giving consent to sending offers, the user’s personal data may or are being processed in extent specified in these Privacy Policy.
The controller of personal data is pursuant to Article 4 (7) of the Regulation of the European Parliament and of the Council No. 2016/679 on the protection of natural persons about the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR Regulation”) – hereinafter referred to as the “Controller”:
Business name: GALVÁNIHO 2, s.r.o.
Registered seat: Galvaniho 17/C, 821 04 Bratislava
ID: 35 853 620
Registered in Commercial Register of District Court Bratislava I, section Sro, insert No. 28385/B
Contact information:
email: Alexandra Kubizniaková, Campus Manager
phone: +421 2 434 214 87
The contact form on the Website serves to provide more specified information in connection with the Campus Galvaniho project (hereinafter referred to as the “Contact Form”). Through the Contact Form located on the Website, the user can directly contact the Controller to provide additional information regarding the Campus Galvaniho project, administrative centers that fall under the mentioned project (GBC 1, GBC 2, GBC 4 and GBC 5) and information about possibilities and conditions of leases of individual buildings.
Personal data mean any information relating to an identified or identifiable natural person; an identifiable natural person is natural person who can be identified, directly or indirectly, particularly by reference to an identifier such as a name, identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.
For purpose of proper processing of the request sent via the Contact Form the user is obliged to provide the Controller with its personal data in scope of: first name, last name and e-mail address.
The Controller hereby declares that for purposes other than those specified in these Privacy Policy, it shall always obtain the user’s personal data separately on adequate legal basis, and at the same time, ensure that these personal data shall be processed and used exclusively in a manner corresponding to the purpose for which were collected and shall not combine them with personal data that was obtained for another purpose.
The Controller declares that it shall process personal data in accordance with good morals and shall act in such way that does not contradict the GDPR Regulation or other generally binding legal regulations, nor will it circumvent them.

2. Sources and Categories of Processed Personal Data

The Controller processes personal data provided by the user or personal data obtained by the Controller based on or in connection with:
1. fulfilling the request pursuant to the Contact Form;
2. sending of the offers within the Campus Galvaniho project.

3. Legal Basis and Purpose of Personal Data Processing

The user’s personal data are processed primarily for the purpose of fulfilling the request pursuant to the Contact Form.
The legal basis for processing personal data is:

the user’s consent to the processing of personal data necessary for filling and proper sending of the Contact Form according to Article 6 (1) letter a) of the GDPR Regulation;
the user’s consent to processing for the purposes of providing direct marketing (especially for sending business announcements, business offers and newsletters) according to Article 6 (1) letter a) of the GDPR Regulation.

The purpose of personal data processing is:

fulfillment of the user’s request by the Controller; when filling out the Contact Form, personal data are required, which are necessary for sending the Contact Form (name, surname, email), without providing personal data it is not possible to respond to the relevant request in the context of the Contact Form;
sending the offers.

There is no automated individual decision-making on the Controller’s site in accordance with Article 22 of the GDPR Regulation.
The Controller declares that in accordance with Article 5 (1) letter a) and b) of the GDPR Regulation, it shall acquire the user’s personal data exclusively for the purposes specified in these Privacy Policy.

4. Personal Data Storage Period

The Controller stores personal data:

for the purpose of processing the user’s request in the Contact Form, or until consent is revoked at the user’s request, but 12 months at longest;
for the period until the personal data processing consent for marketing purposes is revoked, but no longer than 12 months, if the personal data are provided based on the consent.

After expiration of the personal data storage period or after revocation of the personal data processing consent, the Controller liquidates (deletes) of the personal data.

5. Recipients of Personal Data (Subcontractors of the Controller)

Recipients of personal data are persons:

owners of administrative centers near the Controller’s building;
persons personally or financially connected to the Controller;
providing services for operation of the Website and other services in connection with the project and operation of the Website, including possible maintenance and servicing of software and hardware equipment;
ensuring the implementation of the Campus Galvaniho project and marketing services.

The Controller declares that personal data shall not be transferred to a third country outside EU or to an international organization (except if the provided personal data is stored in a storage facility whose servers are in a third country by the storage provider).

6. User Rights

Under the conditions specified in the GDPR Regulation, the data subject (user) has the following rights:
1. Right to access personal data -the data subject has right to provide a copy of the personal data held by the Controller, as well as information about how the Controller uses the personal data. In most cases, personal data will be provided in written document form or electronically, unless the data subject requests another way of providing them. If the data subject requests the provision of this information electronically, it will be provided electronically, if it is technically possible;
2. Right to correction – the Controller takes reasonable measures to ensure the accuracy, completeness, and timeliness of the information it has about the data subject. If the data subject believes that the data held by the Controller are inaccurate, incomplete or out of date, it has the right to request to correct, updated or supplemented this information;
3. Right to erasure (to be forgotten) – the data subject has the right to request the deletion of personal data, for example, if the personal data are no longer necessary to fulfill the original purpose of processing. However, this right must be assessed considering all relevant circumstances. For example, the Controller may have certain legal and statutory obligations, which means that it will not be able to comply with the request;
4. Right to restriction of processing – under certain circumstances, the data subject is entitled to request that the Controller stop using personal data. These are, for example, cases when the data subject believes that the personal data may be inaccurate or when you think that the personal data no longer need to be used. However, this right must be assessed considering all the relevant circumstances;
5. Right to data portability – under certain circumstances, the data subject has the right to request to transfer the personal data that has been provided to another third party of the data subject’s choice, if this is not prevented by other technical or legal obstacles;
6. Right to object to processing – the data subject has the right to object to data processing based on our legitimate interests. In case the Controller does not have a compelling legitimate reason for processing and the authorized person files objection, it will not further process the personal data, however this right must be assessed considering all relevant circumstances;
7. Right to withdraw consent with the processing of personal data in writing or electronically to the address or email address of the Controller specified in Article 1 (it is only possible to withdraw consent that was granted based on Article 6 (1), letter a) of the GDPR Regulation); withdrawal of consent does not affect the lawfulness of processing based on consent granted before its withdrawal.
If the data subject believes that we are processing his/her personal data illegally, he/she may file a complaint with a supervisory authority, Personal Data Protection Office of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; e-mail: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk. In case of submission of the motion in electronic form, it is necessary that it fulfils the requirements according to § 19 (1) of Act No. 71/1967 Coll. on Administrative Procedure (Administrative Code).

7. Terms of Security of Personal Data

The Controller declares that it has taken all appropriate technical and organizational measures to secure personal data.
The Controller declares that only persons authorized by it have access to the personal data.

8. Cookies

The Controller uses “cookies”, just like other websites, for the purpose of collecting information.
“Cookie” is a small piece of information that is installed on user’s computer and identifies the browser during the user’s work on the relevant website.
Cookies do not include any personal data and it is not possible to identify the user through them.
“Cookies“, which we use, we divide into these basic categories (provided the Website can not use all of them and particular categories might be available later):
1. necessary (essential) cookies – necessary for functioning of the Website;
2. analytical cookies – serve to collect, analyze and report the user’s interaction with the Website;
3. functional cookies – serve to remember information that will change the way the Website behaves or looks;
4. marketing cookies – serve for displaying of advertisements that are the most relevant for the user.
Essential cookies. They serve for the proper operation of the Website and ensure functionality of the Website; the cookies concerned are aimed exclusively at enabling or facilitating communication by electronic means of communication and are strictly necessary for the provision of the service. The Controller does not need the user’s consent to use essential cookies.
Analytical cookies. They serve to collect, analyze, and report the user’s interaction with the Website; when the user browses the Website, selected cookies will be installed and made available to help the Controller analyze the user’s user experience, i.e. allow the Controller to anonymously recognize and count the number of users and obtain information about how the Website is used. These cookies serve the Controller mainly to improve the Website. Analytical cookies are used by the Controller only based on the consent of the user.
Functional cookies. They allow the Website to remember information that will change the way the Website behaves or looks, such as preferred language or region you are currently in. Functional cookies are used by the Controller only based on the consent of the user.
Marketing cookies. Marketing cookies enable to display targeted advertising on the Website based on the user’s activity on the Website. These cookies do not identify a specific person, but the settings and preferences of an anonymous user of a specific computer. Marketing cookies are also used to evaluate effectiveness of a specific ad and track number of users interested in it. Marketing cookies are used by the operator only based on the user’s consent.
The user has the possibility to manage its “cookies” by configuring its browser and to grant or refuse consent to such processing. The Website can set cookies for a specific user only if its browser settings allow it.
If the user sets his/her browser to reject cookies, he/she can limit access to certain functions, pages or areas of the Website, for which the Controller bears no responsibility.
Storage period. The consent of the user to the processing of cookies is stored for six months or until the user deletes the cookie files in the browser.

9. Information on Personal Data and Cookies Processing

In case, if according to the relevant regulations, consent, notification, and provision of information about the processing of personal data of the data subject (user) is required, the Controller publishes the notification in this article of the principles as well as through separate document in the following wording:

Business name: GALVÁNIHO 2, s.r.o.
Registered seat: Galvaniho 17/C, 821 04 Bratislava
ID: 35 853 620
Registered in Commercial Register of District Court Bratislava I, section Sro, insert No. 28385/B
Contact person: Alexandra Kubizniaková, Campus Manager

By checking the box “I agree with processing of personal data and I am familiar with processing of my personal data in accordance with Article 13 of GDPR” on website www.galvanihocampus.eu (the “Website“), you express your explicit consent to processing of personal data according to Article 6 (1) lett. a) Regulation of the European Parliament and of the Council No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”), as well as in accordance with § 109 (8) of Act No. 452/2021 Coll. in connection with the use of user’ cookies on the Website (together as the “Regulations”), and you confirm that you have familiarized with all information and your rights listed below.

In accordance with Article 13 of GDPR and the Regulations, the controller hereby provides the following information to you as a data subject from whom the controller obtains personal data:

purpose of the processing:

processing of request of the data subject through the contact form;
presentation of current offers and news (newsletter), if the data subject has expressed its consent to them;
ensuring of functioning of the Website by necessary essential (technical or basic) cookies, as well as analytical, functional and advertising cookies, if the data subject has expressed its consent to them;

legal basis: Article 6 (1) lett. a) of GDPR (expression of processing consent); consent to the use of analytical, functional or advertising cookies in accordance with § 109 (8) of Act No. 452/2021 Coll.;
scope of processed personal data: name and surname, email address, phone number;
cookies do not include direct provision of any personal data and it is not possible to identify the data subject through them; further information about the cookies processed shall be found in the Privacy Policy;
other recipients of personal data: owners of administrative centres in the surrounding of the controller’s building, persons personally or financially connected to the controller, subcontractors of the controller to the extent necessary to ensure the controller´s operations and implementation of the Campus Galvaniho project (e.g. information system administrator, server storage provider, facility manager of individual buildings);
personal data shall not be transferred to a third country outside the EU or to an international organization (except if the provided personal data is stored in storage whose servers are located in third country by the storage provider);
provision of personal data is necessary if the data subject is interested to submit the contact form, in case of provision of personal data for newsletter subscription, the data subject´s consent is voluntary, in case the consent with subscription of newsletter is not given, the controller’s offers will not be sent to the data subject; consent to the type of cookies processed is voluntary in case of analytical, functional and marketing cookies, the use of technical cookies is necessary for proper functioning of the Website and does not require consent of the data subject;
storage period: consent is granted for 12 months; if the data subject has given consent to the processing of marketing, functional and analytical cookies, the consent is given for 6 months or until the cookie files are deleted in the browser of the data subject;
automated decision-making and profiling in accordance with GDPR regulation does not occur during processing;
rights of the data subject are further specified in the Privacy Policy on the Website.

If the data subject believes that we are processing his/her personal data illegally, he/she may file a complaint with a supervisory authority, Personal Data Protection Office of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; e-mail: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk. In case of submission of the motion in electronic form, it is necessary that it fulfils the requirements according to § 19 (1) of Act No. 71/1967 Coll. on Administrative Procedure (Administrative Code).

10. Final Provisions

By submitting the Contact Form on the Website or by confirming of the consent to sending offers, the user confirms that he/she is familiar with the Privacy Policy and that he/she fully accepts them.
The wording of the Privacy Policy may be changed or supplemented by the Controller at any time. This provision does not affect the rights and obligations arising during the effective period of the previous version of the Privacy Policy.

Bratislava