Privacy Statement

In accordance with the Regulation¹ and the Personal Data Protection Act², the Controller Asylum Production s.r.o., Panenská 13, 811 03 Bratislava, Company ID: 35 799 498 (hereinafter referred to as the “Company” or “Operator”), processes your personal data in order to organize the Festival Azyl competition.

With regard to the processing of personal data by the Controller, you are the data subject, i.e. the person to whom the processed personal data pertain if you enter the competition or are a juror or otherwise cooperate with the Company.

As the controller, we have a legal obligation to provide your personal data at inspections, supervision, or at the request of authorized authorities of the state or institutions, if this is implied by special regulations³.

We may share your personal data with third parties acting on our behalf, such as suppliers of certain services to our Company – intermediaries. In such cases, these third parties may use your personal data only for the purposes described and only in accordance with our instructions and on the basis of the concluded mediation agreement.

Your personal data will be stored securely, in accordance with the controller’s and processor’s security policy and only for the period necessary to fulfil the purpose of the processing. Access to your personal data will only be granted to persons authorized by the Controller to process personal data, who shall process them on the basis of the Controller’s instructions, in accordance with the Controller’s security policy.

We do not process your personal data through automated individual decision-making with legal or similarly grave effects and do not provide it to third countries that do not guarantee an adequate level of protection of personal data.

I. STORAGE OF PERSONAL DATA

Your personal data is backed up, in accordance with the Operator’s retention rules. Your personal data will be completely erased from the backup repositories as soon as possible according to the backup rules. Personal data stored in backup repositories is used to prevent security incidents, in particular disruption of data availability due to a security incident. The Company is obliged to perform data backup in accordance with the security requirements of the Regulation and the Personal Data Protection Act.

We only store your personal data for a limited period of time, and its deletion will take place when it is no longer necessary for the purposes of processing as outlined in this statement. The periods of retention of personal data for individual purposes of processing are set out in Part II.

II. PURPOSES OF PROCESSING, RETENTION PERIOD AND PROVISION OF PERSONAL DATA

• Your personal data is processed by the Company for the purpose of organizing and securing the Festival Azyl competition. By partaking in the Competition, you enter into a contractual relationship with the Company in accordance with the Licence Agreement and the Competition Statutes (available upon filling in the application form). Personal data is processed on the basis of Article 6 (1) (b) of the Regulation, i.e. on the basis of a contract. If you are a juror, we process your personal data on the basis of a contract that you have concluded with the Company in accordance with Article 6 (1) (b) of the Regulation.

Your personal data necessary to conclude the contract and to prove its fulfilment will be stored for 5 years from the end of the contract. The Work under the License Agreement and the Competition Statutes is published together with the personal data of the author or other persons who participated in the creation of the Work.

Failure to provide personal data necessary for the conclusion of the contract will result in the inability to include the work in the competition, or that the contract will not be concluded.

Your personal data will be disclosed in accordance with the Competition Statutes and the License Agreement.

• It is in the legitimate interest of the operator to ensure the handling, investigation of reports and complaints in order to preserve the Company’s reputation and contributing to its economic growth. We will keep your personal data for 5 years after the filing of the request to investigate and may be disclosed to the communicating parties within the scope of the investigation.

• It is in the legitimate interest of the Company to promote its business, inform about discounts, new products and activities of the Company, in order to support the Company’s sales and economic growth. In some cases, you may be asked to give your consent, and you will be notified separately. Personal data will be stored for the duration of the legitimate interest or until consent is withdrawn. Based on your consent, your personal data may be disclosed to a third party for marketing purposes. You will be informed separately about the conditions of the provision.

If your personal data is processed on the basis of consent, you can revoke it at any time.

The withdrawal of consent shall not affect the lawfulness of the processing of personal data pending its withdrawal.

• It is in the legitimate interest of the Company to make an audiovisual record of the evaluation of the Festival Azyl competition, the award ceremony, including online streaming, which will be available through a media partner. The audiovisual recording will serve to promote the Festival Azyl competition, the competitors, as well as to preserve cultural value and production. The audiovisual recording has archival value for the Company and will be kept at least the for duration of the Company’s existence. Audiovisual recordings in unedited and unaltered form shall not be made available to third parties.

• We process your personal data in the public interest and on the basis of the legitimate interest of the Company for the purposes of managing the registry pursuant to Act No. 395/2002 Coll. on Archives and Registries and on supplementing certain acts, as amended, and for the purpose of registering incoming and outgoing mail.

Your personal data will be processed for 10 years and provided to the Ministry of the Interior of the Slovak Republic and/or an intermediary.

• In order to fulfil our legal obligations when keeping accounts, we process your personal data on the basis of the following laws: Act No. 431/2002 Coll. on Accounting, Act No. 222/2004 Coll. on Value Added Tax, Act No. 40/1963 Coll. Civil Code, Act No. 152/1994 Coll. on the Social Fund, Act No. 286/1992 Coll. Income Tax, Labour Code. Your personal data will be processed for 10 years. Providing them for this purpose is your legal obligation. Failure to provide personal data will result in our inability to provide you with services and to enter into a contractual relationship. Your personal data will be provided to the applicable tax office and the intermediary.

• In accordance with Article 6 (4) of the Regulation, we may process personal data for a purpose compatible with the original purpose of processing, if it is possible to assume the exercise of legal claims, jurisdiction, extrajudicial recovery of claims, enforcement or defence of the rights of the Controller in accordance with the following laws: Code of Administrative Procedure, Code of Civil Procedure, Code of Enforcement, Article 9 (2) (c) of the Regulation, if the subject of processing is personal data of a special category pursuant to Article 9 (1) of the Regulation or on the basis of a contractual relationship. We will process your personal data for 5 years from the end of the proceedings and/or dispute and it will be provided to the parties, auditor or other authorized entity.

• It is in the legitimate interest of the Controller to process contacts of entities with which it communicates, has business relations, etc., and at the same time, in conjunction with Section 78 (3) of Act No. 18/2018 Coll. on Personal Data Protection, the employer provides or discloses personal data of employees. Personal data is processed for the duration of the contractual relationship and/or for the duration of the aforementioned contacts and will be provided to the participants of communication.

• It is the legal obligation of the Company to ensure the investigation of complaints related to anti-social activities in accordance with Acts No. 307/2014 Coll. on certain measures related to the notification of anti-social activities and on amendments and supplements to certain acts (repealed as of 01.03.2019) and No. 54/2019 Coll., the Act on the protection of notifiers of anti-social activities and on amendments and supplements to certain acts. Personal data will be processed 5 years after the end of the proceedings, and it is not your legal obligation to provide it. Personal data will be provided to the parties involved in the proceeding, the auditor and the Office for Protection of the Notifiers of Anti-Social Activities.

• It is the legal obligation of the Company to duly and timely process the request of the data subject exercising rights under Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data in conjunction with Act No. 18/2018 Coll. on the protection of personal data (the Act applies in specific cases). Personal data will be stored for 5 years from the end of the proceedings, and its disclosure is not a legal obligation of the data subject. Personal data will be provided to the parties involved in the proceedings

• It is in the legitimate interest of the Controller and at the same time its obligation under the Regulation to take appropriate security measures to prevent the unlawful processing of personal data and other information that needs to be protected on the premises of the Controller, to ensure the protection of property, life and health, by means of a network system protection, building protection and asset protection. Personal data will be stored for 1 year. Personal data shall not be provided (except to the authorised state institutions).

III. YOUR RIGHTS

Right of access to personal data

You have the right to access your personal data and the right to obtain confirmation as to whether personal data about you is being processed. If personal data about you is processed, you have the right to information within the scope of this policy and to access your personal data. You have the right to be provided with a copy of the personal data we have about you, as well as information on how we use your personal data. In most cases, your personal data will be provided to you in written form, unless you require a different way of providing it. If you have requested this information by electronic means, it will be provided to you electronically, if technically possible. If you repeatedly request the provision of your personal data to the same extent, the controller may charge you a reasonable fee corresponding to the administrative costs.

Right to rectification

You have the right to the correction of the processed personal data about you should it be incorrect or inaccurate. It is very important for the Company to have the right information about you. Therefore, if you find that the information the Company records about you is incorrect, inaccurate or incomplete, notify the Company and request that your information should be corrected (e.g. change of residence, change of contact, change of surname in the event of marriage, etc.). Subsequently, the Company will correct/supplement the data without undue delay.

Right to erasure

If the Company processes personal data about you in an unlawful manner, e.g. for longer than necessary or for no reason, you have the right to delete them (the so-called “right to be forgotten”).

Restriction of processing

If you request the rectification of your personal data, or object to the deletion of your personal data, if its processing is unlawful, or if the Company no longer needs personal data for its purposes, but you may need it to prove or defend legal claims, or have objected to the processing of your personal data for other reasons, the Company will restrict the processing of your personal data until the matter can be resolved.

Right to object

If you believe that the Company does not have the right to process your personal data, or if you want the automated decision to be reconsidered, you may object to its processing. In such cases, the Company may continue to process it only if it can demonstrate compelling legitimate reasons that outweigh your interests, rights and freedoms. However, your personal data may be processed by the Company whenever necessary to determine, assert or defend legal claims.

Right to data portability

You have the right to obtain and request the Company to transfer the personal data you have provided to us to another third party in a structured, commonly used and machine-readable format. However, the right to obtain and transfer personal data only applies to personal data that we have obtained from you based on your consent or on a contract to which you are a party. The right to portability does not apply to personal data that we process about you under the Labour Code, the Occupational Safety and Health Act or other special regulations.

Right to lodge a complaint

If you wish to file a complaint about the way your personal data is processed, including the exercise of the above rights, please contact us via our contact address indicated in the header of the document or at info@azyl.sk. All your complaints and suggestions will be properly investigated. You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic.