General Data Protection Regulation (GDPR)

Controller´s identification data

Sociálna poisťovňa
Ul. 29. augusta 8 a 10, 813 63 Bratislava
IČO: 30807484

The Social Insurance Agency (hereinafter referred to as the “SIA”) is a statutory institution established to provide social insurance pursuant to Act No. 461/2003 Coll. on Social Insurance, as amended (SK). The SIA provides social insurance, which includes sickness insurance, pension insurance – old-age and invalidity, accident insurance, guarantee insurance and unemployment insurance. The Social Insurance Agency also carries out activities within the framework of old-age pension savings – in particular, collects contributions, transfers them to pension management companies and registers old-age pension savings contracts pursuant to Act No. 43/2004 Coll. on Old-Age pension Saving (SK).

Responsible person

For the purpose of supervising the processing of personal data, the Social Insurance Agency has appointed a responsible person who can be contacted by e-mail at zodpovedna.osoba@socpoist.sk or by post at the address Zodpovedná osoba, Sociálna poisťovňa, ústredie, Ul. 29. augusta 8 a 10, 813 63 Bratislava, with the envelope marked " NEOTVÁRAŤ“/DO NOT OPEN.

Data Subject

The data subject is understood to be a natural person to whom the processing of personal data relates. In relation to the Social Insurance Agency, this is any natural person about whom information is kept in the SIA information system, these are mainly insurees, benefit recipients, insurance premium payers - self-employed persons, old  age pesion savers, legal representatives, authorized persons, SIA employees and the like.

Processing of Personal Data

SIA processes personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”) and Act No. 18/2018 Coll. on The Protection of Personal Data and on amending and supplementing certain acts (hereinafter referred to as the “Act”) for the purpose of performing social insurance and performing activities within the framework of old-age pension saving.

SIA as the controller processes the personal data of the data subjects pursuant to Art. 6 para. 1 (c) of the Regulation to the extent provided for in special legal regulations based on Act No. 461/2003 Coll. on Social Insurance, as amended, and Act No. 43/2004 Coll. on Old-age Pension Saving. The data subject is obliged to provide the personal data processed under the above-mentioned laws for the purpose of performing social insurance.

SIA may provide, transfer or publish personal data obtained and processed under the above-mentioned laws to third parties, e.g. other public authorities or entities designated by special regulations.

SIA, when performing social insurance, fulfills the function of the competent institution, the institution of the place of residence, the institution of the place of stay, the liaison body and is the contact institution for communication between the competent institutions and beneficiaries of benefits and between the institutions of the Member States of the European Union, the institutions of the States that are a contracting party to the Agreement on the European Economic Area and the institution of the Swiss Confederation.

SIA processes personal data also in accordance with Regulation (EC) No 883/2004 of the European Parliament and of the Council of 29 April 2004 on the coordination of social security systems and Regulation (EC) No 987/2009 of the European Parliament and of the Council of 16 September 2009 laying down the procedure for implementing Regulation (EC) No 883/2004 on the coordination of social security systems. The purpose of processing personal data is to ensure social insurance for data subjects who have moved or are moving in the EU Member States. Based on an international agreement concluded for the implementation of the aforementioned EU legislation, SIA also acts as a liaison point for all relevant authorities in the Slovak Republic that are obliged to exchange the prescribed data within the EU Member States.

Other legal bases under which SIA as the controller processes personal data:

A) pursuant to Art. 6(1)(a) GDPR and Art. 13(1)(a) of the Act for the purpose of

• maintaining records of job applicants,
• assessing client satisfaction with the services provided,

B) pursuant to Art. 6(1)(b) GDPR and Art. 13(1)(b) of the Act for the purpose of conducting a selection procedure for filling a job position,

C) pursuant to Art. 6(1)(f) GDPR and Art. 13(1)(f) of the Act for the purpose of contacting the client in connection with the performance of social insurance,

D) pursuant to Art. 6(1)(f) GDPR and Art. 13(1)(f) of the Act on Ensuring the Safety of Employees, Clients and To Protect Their Property, for the purpose of:

• keeping records of visits when entering protected areas. Records are kept in visitor books in electronic or paper form,
• recording and storing video recordings. SIA records and stores records of the movement of persons through a surveillance camera system that stores only clear video recordings without the possibility of adding additional information, editing or changing stored video recordings from individual cameras.

If the data subject withdraws their consent to the processing of personal data under A) or objects to the processing under C) or D), SIA shall immediately terminate their processing.

Categories of Personal Data Processed

SIA may process various categories of personal data in the performance of its activities, depending on the purpose of processing personal data. Such categories of personal data include in particular:

• identification data (in particular name, surname, maiden name, birth number, ID card number or passport number, gender, permanent address, if temporary residence, also temporary residence address, contact address, nationality);
• other data (e.g. contact details such as telephone, fax, e-mail, mobile phone, bank account number) related to social insurance within the scope of documentation maintained by SIA pursuant to a special legal regulation;
• videos and audio recordings (e.g. camera recordings of the controller);
• data related to health (e.g. medical reports, health assessments);
• other relevant data (e.g. data on litigation, inheritance proceedings, execution proceedings, bankruptcies, data related to the fulfillment of the legal obligations of the data subject).

Provision of Personal Data to Recipients

Personal data processed by SIA may be provided to recipients who have the status of independent controllers and to whom SIA is obliged or authorized to provide them based on a special regulation, an international treaty by which the Slovak Republic is bound or based on your consent.

SIA may, pursuant to Article 28 of the Regulation, process personal data through an intermediary, namely on the basis of a contract or other legal act that binds the intermediary to the controller and that establishes the subject matter and period of processing, the nature and purpose of processing, the list or scope of personal data, the categories of data subjects and the obligations and rights of the controller. In accordance with the above, SIA, as a controller, uses the following categories of intermediaries for processing personal data:

• an intermediary providing support for information and communication technologies, systems or data transfer,
• an intermediary providing delivery of benefits (money),
• an intermediary providing physical and object security.

At the request of the data subject, SIA transfers personal data to third countries on the basis of bilateral social insurance agreements concluded between the Slovak Republic and the relevant third country.

Retention of Personal Data

SIA respects the principle of minimizing the retention period of personal data. At the same time, SIA's activities are subject to special regulations that stipulate the retention period of certain data.

SIA stores personal data processed for the purposes of ensuring social insurance pursuant to Act No. 461/2003 Coll. and Act No. 43/2004 Coll. for a period of 20 years from the date of termination of social insurance, or the death of a natural person, or from the date of declaration of a natural person as dead, whichever occurs first, unless a special regulation provides for a longer period in a specific case.

SIA stores, discards and destroys personal data in accordance with generally binding legal regulations, in particular Act No. 395/2002 Coll. on Archives and Registries, as amended, and the approved Registry Plan of SIA. The method of physical destruction of personal data is carried out by SIA in accordance with its own internal regulation.

Rights of Data Subjects

Right of Access to Personal Data

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning them are being processed and shall have the right to access such personal data.

Right to rectification of personal data

The data subject shall have the right to have inaccurate personal data concerning them rectified without undue delay by the controller. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, even if via a supplementary statement.

Right to erasure of personal data

The data subject shall have the right to have personal data concerning them erased without undue delay. SIA shall be obliged to erase personal data if they are no longer necessary for the purposes for which they were collected or otherwise processed in accordance with the conditions laid down by law. If the data subject who has granted SIA consent to the processing of data requests their deletion, SIA will do so without delay, but no later than 30 days from the date of receipt of the withdrawal of consent under precisely defined conditions. SIA is not entitled to delete the personal data of the data subject that are processed on the basis of special legal regulations.

Right to restriction of processing of personal data

The data subject has the right to obtain from SIA restriction of processing of personal data, provided that the data subject contests the accuracy of the personal data within a period allowing the controller to verify the accuracy of the personal data, or the processing is unlawful, or SIA as the controller no longer needs the personal data of the data subject for the purposes of the processing for which it obtained them.

Right to object to processing of personal data

The data subject shall have the right to object at any time, on grounds relating to their particular situation, to processing of personal data concerning them which is carried out on the basis of Art. 6 1(e) or (f) of the Regulation. They shall have the right to object to processing of their personal data for direct marketing purposes, including profiling.

Right to data portability

The data subject has the right to obtain the personal data concerning them which they have provided to the controller and has the right to transmit these personal data to another controller, if technically feasible.

Right to withdraw consent to the processing of personal data at any time

If the processing of personal data is based on the consent of the data subject, the data subject has the right to withdraw that consent at any time in the same way as they gave it.

The data subject is entitled to file a complaint in connection with the processing of personal data with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, address: Budova Park One, Námestie 1. mája 18, 811 06 Bratislava.

The data subject may exercise the above rights with the responsible person by e-mail to the address zodpovedna.osoba@socpoist.sk, by post to the address Zodpovedná osoba, Sociálna poisťovňa, ústredie, Ul. 29. augusta 8 a 10, 813 63 Bratislava, with the envelope marked “ NEOTVÁRAŤ“ /DO NOT OPEN. The responsible person may also be notified of a personal data leak or other serious facts regarding the processing of personal data by the Social Insurance Agency.

Terms of Use of the Web Portal

This web portal is managed by the Social Insurance Agency (hereinafter referred to as the “SIA and/or controller”). SIA is a statutory institution established to provide social insurance pursuant to Act No. 461/2003 Coll. on Social Insurance, as amended.

SIA provides social insurance, which includes sickness insurance, pension insurance – old-age and invalidity, accident insurance, guarantee insurance and unemployment insurance. SIA also performs activities within the framework of old-age pension saving – in particular, collects contributions, transfers them to pension management companies and registers old-age pension saving contracts pursuant to Act No. 43/2004 Coll. on Old-age Pension Saving and on Amendments to Certain Acts.

SIA is the holder of the domain name www.socpoist.sk and is also the owner of the rights associated with and related to this web portal. All content published on our website (such as texts, logos, trademarks, photographs, images, audio or audiovisual recordings) is protected by copyright and is our property or we use it under a license to which we have reserved rights. We allow the downloading of materials only for personal, non-commercial purposes and in accordance with these terms of use.

Access to our web portal is free of charge. You bear all costs that you incur in connection with access to our website. The content of our websites may not be available continuously, in particular due to necessary maintenance of our information system or unforeseen technical failures.

We are not liable for any damage (direct or indirect), loss, costs and expenses of any kind that you may incur in connection with access to and/or use of our website and/or the publication of outdated, false or incorrect data that constitute the content of our website, whether created by us or caused by technical equipment, human error or software application connected to our website. We do not guarantee the compatibility of our website with your computer system or software. We also do not guarantee that the website is not infected with malicious code or that the server that makes it available is free of malicious code or other harmful components.

It is expressly prohibited to link our website to another website or extract any part of it without our consent; to use our website for illegal purposes or to distribute malicious code; to change and/or modify its content.

We use hypertext links (so-called links) to third-party websites. By clicking on the links, you will be redirected to these websites (e.g. social networking websites or the websites of our partners). We have no influence on the style and content of linked third-party websites, and we distance ourselves from any content on all such websites and from adopting such content as our own. These terms of use do not apply to third-party websites. If you are interested in learning more about the terms of use of third-party websites, please visit the relevant third-party website.

SIA reserves the right to change these terms of use by way of updates. These updates are binding on visitors to this website.

These terms of use are governed by Slovak laws and regulations.

Terms of Use of Social Networks

The Social Insurance Agency (hereinafter referred to as the "SIA and/or controller") uses social networks through established fan pages. These official fan pages serve exclusively for informative purposes and allow the Social Insurance Agency to communicate with the public.

SIA is a statutory institution established to provide social insurance pursuant to Act No. 461/2003 Coll. on Social Insurance, as amended. SIA provides social insurance, which includes sickness insurance, pension insurance – old-age and invalidity, accident insurance, guarantee insurance and unemployment insurance. SIA also carries out activities within the framework of old-age pension saving – in particular, collects contributions, transfers them to pension management companies and registers old-age pension saving contracts pursuant to Act No. 43/2004 Coll. on Old-age Pension Saving and on amendments and supplements to certain acts.

The controller  reserves the right to delete such comments and other content such as videos, images, etc. if they violate applicable legislation (hate comments, sarcastic comments, racist or otherwise violating fundamental human rights and freedoms), namely content and the right to share your posts if you communicate via social networks.

Posts are stored on our "timeline" page indefinitely or until you delete them as a commenter or we as the controller delete them. All published content on our profile (e.g. texts, logos, photos, videos) is protected by copyright. We only publish photos and videos with your consent.

We may use hyperlinks (so-called links) to third-party websites on our profile. By clicking on the links, you will be redirected to these websites (e.g. social media websites or the websites of our partners). We have no influence on the style and content of linked third-party websites, and we distance ourselves from any content on all such websites and from adopting such content as our own. These terms of use do not apply to third-party websites. If you are interested in learning more about the terms of use of third-party websites, please visit the relevant third-party website.

Access to our website is free of charge. You bear all costs that you incur in connection with access to our fanpage. The content of our sites may not be available continuously, in particular due to a technical error at our discretion, if we decide to make the content of the site or any part thereof inaccessible.

We are not liable for damage (direct or indirect), loss, costs and expenses of any kind that you may incur in connection with access to and/or use of our site and/or the publication of outdated, false or incorrect data that make up the content of our site, and which were created by us or caused by technical equipment, human error. We do not guarantee the compatibility of our site with your computer system or software. We also do not guarantee that this site is not infected with malicious code, or that the server that makes it available is free of malicious code or other harmful components.

SIA reserves the right to change these terms of use, in the form of updates. These updates are binding on visitors to this site.

These terms of use are governed by Slovak laws and legal regulations.

SIA is the holder of the domain name www.socpoist.sk and is also the owner of the rights associated with and related to this web portal. All content published on our website (such as texts, logos, trademarks, photographs, images, audio or audiovisual recordings) is protected by copyright and is our property or we use it under a license to which we have reserved rights. We allow the downloading of materials only for personal, non-commercial purposes and in accordance with these terms of use.