Privacy policy - sk.cloud

1. Service Controller

The controller of the sk.cloud web application is the Ministry of the Interior of the Slovak Republic, with its registered office at Pribinova 2, 812 72 Bratislava – Staré Mesto district, Company ID No. (IČO): 00151866 ("hereinafter also referred to as the Controller").

2. Contact Details

The contact details of the Controller's Data Protection Officer are as follows:

Control Department, Office of the Inspection Service Pribinova 2 812 72 Bratislava gdpr@minv.sk.

3. Purposes of Personal Data Processing

We process your personal data for the following purposes:

• Registration and management of a user account in the private zone (requires manual approval by an administrator – only from selected email domains),
• Password change and user authentication,
• Providing access to documents, files, and methodologies intended for government cloud users,
• Processing requests submitted via the contact form,
• Ensuring the basic functionality of the website (through cookies).

4. Personal Data Processed

The following personal data is processed by the Controller:

• Identification data (email address),
• Login credentials (password – securely hashed),
• Application usage data (logs),
• Content of requests sent via the contact form.
• Providing personal data is a necessary condition for the performance of contractual obligations as well as for providing a response through the "Contact form" functionality. If such data is not provided, it will not be possible to ensure the performance of contractual obligations or to provide a response through the "Contact form" functionality.

4.1 Content of requests sent via the contact form.

Apart from the email address, which is a mandatory field when filling in the contact form, no other personal data is required by the Controller. On this basis, the Controller will not process any personal data other than the email address.

5. Legal Basis for Processing

Performance of a contract (access to and use of the private zone) Performance of a task carried out in the public interest (operation of the government cloud) Compliance with legal obligations (e.g., incident reporting)

6. Rights of Data Subjects

• the right of access to your personal data pursuant to Section 21 of Act No. 18/2018 Coll. on Personal Data Protection, as amended,
• the right to rectification of inaccurate personal data or to completion of incomplete personal data pursuant to Section 22 of Act No. 18/2018 Coll. on Personal Data Protection, as amended,
• the right to erasure of personal data on the grounds set out in Section 23 of Act No. 18/2018 Coll. on Personal Data Protection, as amended,
• the right to restriction of the processing of personal data on the grounds set out in Section 24 of Act No. 18/2018 Coll. on Personal Data Protection, as amended, the right to object to the processing of personal data pursuant to Section 27 of Act No. 18/2018 Coll. on Personal Data Protection, as amended,
• the right to file a petition to initiate proceedings before the Office for Personal Data Protection of the Slovak Republic pursuant to Section 100 of Act No. 18/2018 Coll. on Personal Data Protection, as amended,
• the right to data portability pursuant to Section 26 of Act No. 18/2018 Coll. on Personal Data Protection, as amended,

7. Cookies

We use cookies on the website that are necessary to ensure the basic functions of the application: Authentication cookies – store the user's "session" for login

Third-party cookies: On the login screen, during registration, in the contact form, and when resetting a password, we use the Google reCAPTCHA v2 service, which may process data in accordance with the company's own policies. Google's contact details are as follows: Europe: Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland, United States: Google Sunnyvale – 237 MPD. 237 Moffett Park Dr, Sunnyvale, CA 94089. By providing personal data, the data subject expresses their consent to the privacy rules as established by Google.

8. Data Sharing

We do not share your personal data with third parties, with the exception of the necessary processing within the Google reCAPTCHA v2 service to protect forms. More: Google Privacy Policy.

8.1 Personal Data Retention Period

The Controller processes personal data for the period necessary to fulfil the purpose of the contracts, to ensure the functionality and security of the sk.cloud application, and to comply with legal obligations. Personal data is retained for a period of 4 years for archiving purposes, starting from the date of cancellation or deletion of the user account in the sk.cloud application. After this period, the personal data will be completely deleted by the Controller without undue delay.

9. Security Principles

We take care to store and process data securely. We grant access to the private section only to users approved by an administrator and registered through permitted email domains.

10. Changes to the Privacy Policy

We reserve the right to modify these principles. We will inform you of any changes by publishing them on this page.