Privacy Policy 

1. Identity and Contact Details of the Controller 

The purposes and means of processing your personal data for managing this website are determined by the controller: Človek v ohrození, n.o., with registered office at Baštová 343/5, 811 03 Bratislava – Staré Mesto, Company ID (IČO): 50 082 001, registered in the Register of Non-Profit Organizations at the District Office of Bratislava, registration number: 502, e-mail: info@clovekvohrozeni.sk.  

2. Purpose and Legal Basis of Personal Data Processing 

We process your personal data only for specific purposes set out below, ensuring that for each processing activity there is an appropriate legal basis, thus making the processing lawful. If the retention period for any category is specified in years and not otherwise indicated, it begins on January 1 of the calendar year following the year in which we began processing your personal data. 

Area	Purpose	Legal Basis	Processing Period
Newsletter subscription form, including as part of other forms on the website	Occasional information about donation opportunities and other activities of the controller via e-mail.	Art. 6(1)(a) GDPR: the data subject has given consent to the processing of personal data.	For the duration of the consent, at most for the duration of the website operation or newsletter issuance.
Donate Now form	Conclusion of a donation contract – provision of a donation.	Art. 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.	For 10 years from the date of donation.
Friends’ Club form	Conclusion of a donation contract – regular provision of donations.	Art. 6(1)(b) GDPR	For 10 years from the date of donation.
Direct marketing (you have the right to object at any time to the processing of your personal data for direct marketing purposes! – see below)	Offering similar goods and services to persons whose personal data was obtained in connection with the sale of goods or services (existing customers).	Art. 6(1)(f) GDPR: processing is necessary for the purposes of legitimate interests pursued by the controller or a third party. Legitimate interest: to increase sales of products in the portfolio and to expand activities through offers of similar products by e-mail.	For the duration of the contractual relationship and an additional 10 years.
Donor contact	Contacting the donor for donor care, occasional information about donation opportunities and other activities of the controller via telephone calls, including call recordings (for service quality control).	Art. 6(1)(b) GDPR	For the duration of the consent, at most 10 years.
Articles	Publishing articles on the website and/or blog related to the controller’s activities, publishing interviews and statements of individuals.	Art. 6(1)(a) GDPR	For the duration of the consent, at most 10 years from publication.
Photos and videos	Publishing photos and videos containing the data subject’s likeness or other personal data for the purpose of presenting articles on the website and/or blog.	Art. 6(1)(a) GDPR	For the duration of the consent, at most 10 years.
Cookies – essential	Cookies enabling the basic functionality of the website (e.g., remembering user settings).	Art. 6(1)(f) GDPR: processing is necessary for the purposes of legitimate interests pursued by the controller or a third party; legitimate interest is proper website operation and ensuring basic functionalities.	As stated in the table below (Section 8 – Cookies).
Cookies – non-essential	Better tailoring of advertisements, improved website functionality, and statistics creation.	Art. 6(1)(a) GDPR	As stated in the table below (Section 8 – Cookies).

3. Recipients or Categories of Recipients 

We protect personal data and do not provide it to third parties, except for those providing marketing, advertising, cloud, or IT services. If personal data is published in line with the purpose of processing, the recipients include all visitors to our website and social media. Personal data may also be disclosed to public authorities if required by law.  

4. Transfer to Third Countries or International Organizations 

Your personal data is not transferred to third countries or international organizations in connection with these purposes.  

5. Retention Period 

We retain your personal data only for as long as necessary for the processing purposes. Retention periods are stated in Section 2 (and for cookies in Section 8). Retention begins on January 1 of the following year after data acquisition. After this period, data is deleted or anonymized in compliance with GDPR. 

6. Rights of the Data Subject 

As a data subject, you have the following GDPR rights: 

• Right of access – to confirm and access your personal data. 

• Right to rectification – to correct or complete inaccurate data without undue delay. 

• Right to erasure (“right to be forgotten”) – under certain conditions (e.g. data no longer needed, consent withdrawn, unlawful processing, etc.). 

• Right to restriction of processing – in cases such as disputed accuracy, unlawful processing, etc. 

• Right to object – against processing based on legitimate interest, including direct marketing (at any time). 

• Right to data portability – receive your data in a structured, commonly used, machine-readable format, and transfer it to another controller if technically feasible. 

• Right to withdraw consent – at any time without affecting prior lawful processing. 

• Right to lodge a complaint – with the Slovak Data Protection Authority (website available via dataprotection.gov.sk).  

7. Requirement to Provide Personal Data 

Providing your personal data is voluntary. However, if it’s required for newsletter delivery or fulfilling a donation agreement, failure to provide it will result in inability to send the newsletter or conclude the agreement. 

8. Cookies 

To improve our services and website functionality, we use cookies—small text files stored on your device. They help with: 

• Proper website functionality (e.g., form completion), 

• Understanding frequently used pages/features to tailor offerings, 

• Delivering more relevant ads and avoiding undesired ones. 

Cookie types by duration: 

• Session cookies – deleted when the browser is closed. 

• Persistent cookies – remain after closing the browser. 

Cookie types by purpose: 

• Essential cookies – necessary for site operation (form memory, fast loading). 

• Non-essential cookies – analytics and marketing (visitor tracking, ad personalization). 

We use both types; consent is required for non-essential cookies. Essential cookies can be disabled in browser settings, but may affect functionality. 

Statistical cookies: 

Type	Duration	Description
_ga	2 years	Google Analytics cookie to distinguish unique users by assigning a random ID. Used for visitor, session, and campaign statistics.
_gat	1 minute	Google Analytics cookie to limit request rate on high-traffic sites.
_gid	1 day	Google Analytics cookie that registers a unique ID to generate statistical data on how a visitor uses the website.

Advertising cookies 

Type	Duration	Description
_fbp	3 months	Facebook cookie used to deliver a series of advertising products, e.g., real-time bids from third-party advertisers.
fr	3 months	Facebook cookie used for delivering advertising products.
r/collect	Session	Google Analytics cookie that sends data about the visitor’s device and behavior, tracking across devices and channels.
tr	Session	Facebook cookie used for delivering advertising products.

9. Google Analytics 

We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies to analyze site usage. Data is usually transferred to a Google server and stored there; in rare cases, a full IP address may be transferred. Google processes data on our behalf to evaluate usage and construct reports. You can disable Google Analytics cookies via browser settings or use the opt-out add-on available from Google. 

10. Facebook 

Our site includes Facebook plugins from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. Recognizable by the Facebook logo. See all Facebook plugins at the developers’ site. When visiting, your browser connects directly to Facebook servers, transmitting your IP and page visit. If logged into Facebook, clicking the plugin may link your visit to your profile. For privacy details, see Facebook’s policy page. Use of these cookies requires your consent (non-essential). If you don’t want Facebook to link visits to your account, log out of Facebook before visiting our site.