1 Data Controller
Slovak National Gallery with its registered office at Riečna 1 815 13 Bratislava Identification Number 00164712 (hereinafter referred to as the "controller").
1.1 Consent of the data subject to the processing of personal data
In the event that you indicate your consent to the provision and processing of the listed personal data you confirm that you have been provided with information regarding the processing of personal data by the controller within the meaning and scope of Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation hereinafter referred to as the "GDPR Regulation") and in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts and that you have been instructed on the rights and obligations of the data subject and agree to the processing of your personal data: first name surname email address postal and billing address telephone contact (hereinafter referred to as "personal data") by the controller.
1.2 Purpose of processing personal data
We process personal data for the purpose of
marketing activities (sending direct mails, newsletters, exhibition programs, information about events for the public such as openings, performances, programs organized by the Slovak National Gallery (hereinafter also referred to as "event"))
orders and purchases on www.sng.sk
orders of reproductions on www.webumenia.sk
reservations of places in the study room, library, and at events
publication of photographs and video recordings taken at events
sending an email from the "Search by shape" Application
The consent applies to all processing activities carried out with personal data for the same purpose. The data subject grants consent to the processing of personal data for a period of five years from the granting of consent. After the expiration of the above mentioned period the controller shall immediately perform the liquidation (deletion) of the provided personal data from the controller's information systems. This does not apply if the data subject has exercised their right to erasure within the meaning of Art. 17 of the GDPR regulation.
Consent may be withdrawn in writing at any time at the address of the controller or by sending an email to the email address gdpr@sng.sk. You can cancel the sending of marketing communication about news and current program offers in each email by clicking on the link "unsubscribe from the mailing list". Under the conditions set out in the GDPR regulation the data subject has the right to request from the controller access to personal data relating to the data subject and the right to their rectification or erasure or restriction of processing or the right to object to processing as well as the right to data portability. The rights of the data subject are further regulated in Articles 15 to 23 of the GDPR regulation and on the controller's website www.sng.sk.
The controller has a designated person responsible for the protection of personal data whom the data subject may contact in connection with all questions regarding the processing of their personal data and the exercise of their rights under the GDPR regulation contact details for the controller's responsible person email zodpovednaosobagdpr@sng.sk or in writing to the address of the controller marked "GDPR responsible person".
2 What data we collect
In providing our services we obtain data about you specified in points 2.1 to 2.4.
2.1 Purchase data
During a purchase we require from you data necessary for its fulfillment. Therefore the mandatory data are only those without which we cannot send the purchase to you and fulfill your order such as your name email address delivery address phone number and the subject of the order itself. In our shop you do not enter any information that would directly relate to working with money. All currently offered forms of electronic banking (paying for goods via the internet) are carried out directly on the pages of the bank which provides us only with information about the success or failure of the payment and your name or account number (so that we can identify the payment and return it if necessary). We do not store data with the "create account upon purchase" function. We do not have login accounts for purchasing goods via the internet.
2.2 Data for sending exhibition programs newsletters and news
In the event that you decide to subscribe to sent marketing information about our activities we also collect data related to it. The only mandatory data are your name and email address which we use to be able to communicate with you. If you grant us consent for this we also keep your email address for the purpose of sending information about titles that interested you special offers and weekly news.
2.3 Data obtained during the use of our services
When you use our services we also obtain data about how you use them. These are information concerning your interactions with our services and pages www.sng.sk www.webumenia.sk and rezervacie.sng.sk. We also obtain data about the devices and computers you use to access our services including IP addresses browser settings information about operating systems or information about your mobile device the information from which website you access us the pages you visit and information from cookies and similar tools.
2.4 "Search by shape" Application
We obtain your email address for a one time sending of an email from the "Search by shape" Application which is accessible in the exhibition spaces. An image that you created on the touch screen will be sent to the email address you provided.
3 How we use the data
We use the data you have provided to us for the following purposes
3.1 Provision of our services
We use the data we obtain from you when creating a purchase order to fulfill it. We also need this data for our accounting and billing processing as well as for the delivery of the shipment.
3.2 Communication with you
We use your contact details for the purpose of marketing activities (sending direct mails, newsletters, exhibition programs, information about events for the public, information regarding openings, performances, competitions, and programs organized by the Slovak National Gallery). We use your contact details obtained during a purchase to send our announcements related to the processing of orders and the provision of services or when we want to respond to your contact when you ask us what is happening with your order you want to report e.g. a new delivery address or you ask us for another change of your data in your order or user account. We also process your contact details as well as data about your purchases in the event that you claim a defect in the delivered goods. We use contact details to reserve a place in the study room, library, and at events for the public.
3.3 Taking photographs and video recordings at events
Events organized by the controller are public. Your personal data in the scope of photographs and video recordings concerning the person of the participant or their expressions of a personal nature in connection with your participation in the controller's event are processed for the purpose of their acquisition (production) and use specifically in the form of their transfer to event partners for the reason of documenting the holding of the event and in the form of their publication on the controller's website on social networks in press releases and at co-organizers and for the purpose of promoting the organizers art and culture. Photographs and video recordings are also processed in case of conducting an audit within which it is necessary to prove that the event took place as a prerequisite for fulfilling the legal condition for the application of the controller's claims accounting documents or other legal claims according to special legal regulations based on the legitimate interests of the controller consisting in proving the fulfillment of legal obligations.
Please take note that by your movement in a clearly marked space captured by a marked photographer/cameraman you express consent to this processing of personal data. In case of disagreement you have the option to avoid the captured space or to effectively object at any time to the production of an image/audio-visual recording of your person. In this case your likeness will be anonymized.
4 Security and protection of rights
We also use your data to ensure the security of the services provided to respond to claims that have been applied against us in proceedings before state and other authorities that monitor our activities and to enforce claims that have arisen for us.
4.1 Cookies
Cookies are pieces of data that are stored in your browser or mobile device while browsing websites. Individual cookies have a different "shelf life" - a different storage period in your device. Some cookies are deleted from your device after you close the browser window (session cookie) others remain stored in your device even after you finish browsing our websites (permanent cookie).
4.2 Why we use cookies
Cookies allow us to remember your actions and preferences e.g. over a certain period of time so that you do not have to repeatedly enter them every time you return to the website or move from one website to another. Cookies also help us understand what interests you on our website whether it is clear enough for you and whether you can find what you are looking for on it. We therefore use cookies also with the aim of improving the user experience. Cookies can also record other information such as the number of visitors to our websites and also which subpages of our web you visit most often. We use analytical cookies which serve to obtain data on the traffic of our website information on searches performed on our site and also to determine how you move around our site so that we can make it as easy as possible for you to use. Since we have taken measures with these cookies to prevent their misuse (anonymization on the part of our suppliers) and at the same time measures are implemented so that you can easily control and limit the use of these cookies we do not ask you for consent to use them.
4.3 How you can restrict the use of cookies
There is a possibility to manage or restrict how we and our partners use cookies and similar technologies. This is for example through the settings of the internet browser although most browsers have a basic setting by which they accept cookies their settings allow you to delete or reject cookies. However we must warn you that in this case some provided services may not function correctly.
5 Legal bases
We must inform you about the legal bases for the processing of your personal data which are
Performance of a contract – in the case of ordering goods or an event.
Consent – especially in connection with sending commercial communication about news and current offers or in other forms of marketing. Every granted consent is voluntary and you can withdraw it at any time which however does not affect the lawfulness of the processing before its withdrawal. You can withdraw the sending of commercial communication about news and current offers in every email by clicking on the link "unsubscribe from the mailing list". We will also remove you from the list of subscribers if you write to us at the email address gdpr@sng.sk.
Fulfillment of our legal obligations – in the storage of data about you and your order in our accounting or in making data available to state and other authorities that perform supervision over our activities or that resolve disputes or the execution of decisions.
Fulfillment of the purpose determined by Act No. 206/2009 Coll. on Museums and Galleries and on the Protection of Objects of Cultural Value which regulates
a) the status and tasks of museums and galleries their establishment and dissolution the conditions for the performance of basic professional activities in a museum and gallery during the acquisition protection and presentation of objects of cultural value as parts of cultural heritage
b) the protection of objects of cultural value which are registered according to this Act and are not protected and registered according to special legal regulations for the area of cultural heritage protection.
6 To whom we make data available
We do not publish make available or provide your personal data to any other entities with the exception of the situations described below
6.1 If you request it from us
We publish or make personal data available if you request it from us. We perform the disclosure of data to third parties in the case of the delivery service that you chose when ordering from the SNG e-shop. Currently we cooperate with the following companies
Slovenská pošta, a. s. – Partizánska cesta 9 975 99 Banská Bystrica Identification Number 36631124 registered in the Commercial Register of the District Court Banská Bystrica Section Sa Entry No. 803/S www.posta.sk
Direct Parcel Distribution SK, s. r. o. – Technická 7 821 04 Bratislava Identification Number 35 834 498
6.2 In cases of external processing
Some of our suppliers have your personal data at their disposal and process it for us based on our instructions and in accordance with this document. They comply with all necessary security, technical, and organizational measures to provide the required protection for your personal data. These partners currently include
Google Ireland Limited (Google analytics) – Gordon House, Barrow Street, Dublin 4, Ireland. More...
MailChimp / The Rocket Science Group LLC (sending newsletters) – 675 Ponce de Leon Ave NE, Atlanta, GA 30308 USA. More...
Comsultia, s.r.o. (website www.sng.sk) – Digital Park II, Einsteinova 25, 851 01 Bratislava
SendGrid (sending emails) – Denver, CO, 1801 California Street, Suite 500, Denver, CO 80202
Perfect System, s.r.o. – Radlická 3301/68, 150 00 Prague 5, ID: 26480981, Registered at the MS in Prague, section C, entry 84989
© 2024 Bloomreach, Inc. – 700 E. El Camino Real, Suite 130, Mountain View, CA 94041
Dataconcept, s.r.o. – Apollo business center II. Prievozská 4/D, block E, 821 09 Bratislava
6.3 For legal reasons and prevention of damage
We may also store or disclose your data to other persons to comply with obligations arising from legal regulations, from requirements of state and other authorities, to exercise our claims, or to defend ourselves in proceedings where others exercise them against us. Categories of third parties to whom we disclose personal data for these reasons include for example courts, state and other relevant authorities performing supervision over our activities, those responsible for resolving disputes or implementing decisions, or our accounting advisors and auditors.
6.4 Transfer to third countries
We do not actively transfer your personal data to third countries outside the EU. However, some partners with whom we cooperate in processing personal data perform such transfers, specifically to the USA. The persons to whom they make this data available in the USA comply with the conditions of the US-EU Privacy Shield, thereby providing an adequate level of protection for your personal data.
6.5 How long we store the data
Since you do not have an account created with us, we store your personal data related to a fulfilled order indefinitely. In the event that we use your personal data for the purpose of delivering commercial communication to your email address or in other cases where you have granted us consent, we store this data until you withdraw the respective consent. In cases of using your data based on a purpose determined by a law described in Chapter 5 Legal bases, we will store your data until the reason for its processing passes.
6.6 Right of access to data
You have the right to obtain confirmation from us as to whether personal data concerning you is being processed and, if we process your personal data, we will provide you with information about what data we process about you and for what purpose, to whom your personal data has been provided, and how long we will store your personal data.
6.7 Right to rectification
If you believe that our institution processes incorrect personal data about you, you can exercise the right to directly ask us for its rectification at the address gdpr@sng.sk. We care about processing correct personal data about you, therefore certainly use this right whenever you for example move or there is a change in any of your personal data that is important for your relationship with us.
6.8 Right to erasure (right to be forgotten)
You have the right to the erasure of personal data that we process about you if the following conditions are met and legal exceptions do not apply
the data is no longer necessary for the purposes for which it was obtained
you withdraw consent for the processing of your personal data and there is no other legal basis for their processing
based on your specific situation you object to the processing of your personal data processed based on a legitimate interest when legitimate reasons for processing do not prevail, or you object to processing for the purpose of direct marketing
the personal data was processed unlawfully
6.9 Right to object
You have the right to object to the processing of data that is based on our legitimate interests. In the event that we do not have a compelling legitimate reason for processing and you submit an objection, we will no longer process your personal data.
6.10 Filing complaints
If you wish to file a complaint about the way your personal data is processed, including the exercise of the above rights, you can contact our responsible person. We will properly investigate all your suggestions and complaints. If you are not satisfied with our response or believe that we process your personal data unfairly or unlawfully, you can file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; email: statny.dozor@pdp.gov.sk.
6.11 Non-provision of consent
The provision of consent is voluntary and its non-provision does not result in the impossibility of participation in events. However, if you do not grant us this consent, you will not receive information and invitations from us to our further events and seminars, work meetings and other occurrences, newsletters, alerts, surveys, or other forms of direct marketing communication concerning our events and news.
7 Who we are and where you can contact us
The controller during the processing of your personal data is the Slovak National Gallery with its registered office at Riečna 1, 815 13 Bratislava, Identification Number 00164712. In the event that you have any questions regarding this document or the use of your personal data, or you wish to exercise your rights described in this document, you can contact us by email at gdpr@sng.sk or in writing at the address of our institution.
