SK | EN
We care about the protection of your personal data
Safeguarding your personal data is a top priority for the Slovak Association of Insurance Companies (SLASPO). We handle your personal data in full compliance with applicable legal regulations, ensuring its protection to the highest possible standard based on our technical capabilities. We have implemented suitable technical and organizational measures to protect your data, and we process it in accordance with the requirements of the GDPR and Act No. 18/2018 Coll. on personal data protection, as amended.
Part I - Basic information about the operator
1. Operator
Slovenská asociácia poisťovní, interest association of legal entities
Bajkalská 19B
821 01 Bratislava
Slovak Republic
Company ID: 170 54 303
Tel. no.: +421 2 3210 1840
Fax: +421 2 4342 9984
e-mail: slaspo@slaspo.sk
2. Data protection officer
A data protection officer has not been designated within SLASPO. However, you can exercise your rights by using the contact details provided in section 4.
3. Instruction on your rights
a.) Right to access personal data
You have the right to verify whether we are processing personal data related to you. If we are, you are entitled to information about how your personal data is processed, as outlined in Article 15 of the GDPR. Additionally, you have the right to request a copy of the personal data we hold about you.
b.) The right to correct personal data
If you find that the personal data we process about you is incorrect or incomplete, you have the right to request that it be corrected or updated.
c.) The right to withdraw consent
If you have given us consent to process your personal data, you have the right to withdraw that consent at any time. This withdrawal will not affect the legality of any processing carried out based on the consent prior to its withdrawal.
d.) The right to delete personal data
You have the right to request the deletion of your personal data that we process. However, this right will be subject to an individual assessment of your request. It may not be granted if further processing is required for reasons specified in Article 17 of the GDPR, such as fulfilling a legal obligation, addressing the legitimate interests of the operator, archiving for public interest, or for the establishment, exercise, or defense of legal claims.
e.) The right to restrict processing of personal data
You have the right to request a restriction on the processing of your personal data under the conditions specified in Article 18 GDPR. This right can be exercised, for example, if our Association no longer requires your personal data for processing, but you need it to establish, exercise, or defend legal claims.
f.) Right to portability of personal data
If we process your personal data based on your consent or a contract and use automated means for processing, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format. You can request us to transfer this data to another operator you designate, provided there are no legal or other obstacles to doing so.
g.) The right to object and automated individual decision-making
You have the right to object to the processing of your personal data if it is based on our legitimate interests or if it is related to direct marketing activities, including profiling for such purposes. If you believe that we are processing your data in a way that infringes on your privacy or violates legal regulations, you may contact us to seek clarification or request the rectification of the situation.
h.) The right to file a complaint with the supervisory authority
You have the right to file a complaint regarding the processing of your personal data with the supervisory authority:
Úrad na ochranu osobných údajov Slovenskej republiky
(Personal Data Protection Office of the Slovak Republic)
Hraničná 12
820 07 Bratislava
Company ID: 36 064 220
Tel. No.: +421 2 323 13 220
website: https://dataprotection.gov.sk/uoou/
4. Contact information for exercising your rights
You can exercise the individual rights listed in point 3 by phone at +421 2 3210 1840, by sending an e-mail request to the address slaspo@slaspo.sk or by sending a written request to the address of the operator's headquarters Slovenská asociácia poisťovní, Bajkalská 19B, 821 01 Bratislava, Slovak Republic (indicate "GDPR" on the envelope).
We provide all information and responses regarding your rights free of charge and will respond no later than 1 month from receipt of your request. If necessary, this period may be extended by an additional 2 months, depending on the complexity and volume of requests. If your request is manifestly unfounded or excessive, particularly if repeated, we reserve the right to charge a reasonable fee to cover administrative costs. For repeated requests for copies of processed personal data, we may also charge a reasonable fee to cover administrative expenses.
If you reach out to us through any of the provided communication channels, we will use the information you provide (such as your email address, name, surname, and phone number) solely to respond to your inquiries or process your request. Once your questions are answered or your request is processed, your data will be promptly deleted, unless we need to retain it to demonstrate, exercise, or defend legal claims or to comply with legal obligations.
In cases where we have reasonable doubts about your identity, we may request additional information to verify your identity in relation to the exercise of your individual rights.
Part II - Information on processing activities
Processing activity: Alternative dispute resolution
a.) Purpose of personal data processing
The purpose of processing personal data is to manage alternative dispute resolution in accordance with legal requirements concerning consumer disputes from insurance contracts between clients (consumers) and insurance companies that are members of the Association.
b.) Legal basis for personal data processing
The processing of personal data is required by the following legal frameworks:
- Act No. 391/2015 Coll. on alternative resolution of consumer disputes, as amended.
- Directive 2013/11/EU of the European Parliament and of the Council of May 21, 2013, on alternative dispute resolution for consumer disputes.
- Regulation (EU) No. 524/2013 of the European Parliament and of the Council of May 21, 2013, on online dispute resolution for consumer disputes.
c.) Processed personal data and sources from which personal data originate
Categories of processed personal data:
For consumers/clients of member insurance companies, the following personal data is processed:
- first and last name of the consumer,
- residence of the consumer,
- delivery address,
- email address,
- telephone contact,
- other data contained in the attached documentation (e.g. complete insurance contract and all its parts and annexes, including insurance conditions and contractual agreements, photo documentation, final liquidation report, other communication with the insurance company, written power of attorney for representation, etc.).
Source of personal data:
- the personal data is obtained directly from the person concerned.
d.) Period of storage of personal data
Personal data is stored in accordance with the requirements of Act no. 391/2015 Coll. on alternative resolution of consumer disputes, as amended and Act no. 395/2002 Coll. on archives and registries as follows:
- information on alternative dispute resolution - 5 years following the calendar year in which the dispute was resolved with a final result.
e.) Categories of recipients of personal data
Personal data is processed by the following intermediaries:
- Kolovrátok, spol. s r.o., Company ID: 35 747 153 Mierová 172, 821 05 Bratislava
- DATALAN, as, Company ID: 35 810 734 Galvaniho 17/A, 821 04 Bratislava.
In accordance with applicable legislation, personal data may be provided or made available to:
- insurance companies,
- branches of insurance companies from another Member State,
- branches of foreign insurance companies,
- public authorities.
f.) Transfer of personal data to a third country or international organization
Personal data is not transferred to third countries or international organizations.
g.) Existence of automated decision-making, including profiling
No automated decision-making or profiling is carried out with personal data.
