This is a translation. The Slovak version is legally binding.
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the protection of personal data.
Last updated: 7 November 2026
1. The controller
The controller is Asociácia ukrajinských psychológov v Slovenskej republike (Association of Ukrainian Psychologists in the Slovak Republic), a civic association with its registered office at Bajzova 5313/14, 821 08 Bratislava-Ružinov, Organisation ID (IČO) 57646741, entered in the register of civic associations under No. VVS/1-900/90-74457 (the “association” or “we”). Data protection contact: office.aups@gmail.com.
2. What data we process and why
Membership application and verification
- Data
- full name, e-mail, phone, city, education and qualifications, specialisation, working languages, interest in being listed in the directory, optional note; for verification, also the documents on your education and experience that you provide.
- Purpose
- assessing your application, verifying your education and professional experience and communicating about membership; for members, managing membership matters.
- Legal basis
- steps taken at your request before membership and the exercise of membership rights and duties under Art. 6(1)(b) GDPR.
- Retention
- if you do not become a member, no longer than 6 months after the decision on your application; for members, for the duration of membership and afterwards to the extent required by law. We keep copies of documents submitted for verification only until the verification is complete; after that we keep only a record that verification took place and when.
Directory of verified specialists (for professionals)
- Data
- full name and academic title, professional focus, working languages, format of work, city, the contact details you choose to publish, and the date of verification.
- Purpose
- publishing your profile in the directory so that clients and institutions can contact you.
- Legal basis
- your consent under Art. 6(1)(a) GDPR. You give consent to publication separately and in writing (for example by e-mail), only after verification and together with the details you want published. The interest you mark in your application is not yet consent. You can withdraw consent at any time, and we will then remove your profile from the website without undue delay. Withdrawal does not affect the lawfulness of publication before it.
- Retention
- for as long as your consent and your membership of the association last and you continue to meet the verification conditions.
We never publish documents on your education and experience or any other verification data in the directory.
Cooperation enquiry and contact form
- Data
- full name, organisation and position, e-mail, phone, message content.
- Purpose
- responding to your enquiry and communicating about cooperation.
- Legal basis
- legitimate interest in replying to messages and developing cooperation under Art. 6(1)(f) GDPR. When preparing a contract, Art. 6(1)(b) GDPR.
- Retention
- 12 months after the last communication, unless it leads to a contractual relationship.
Please don’t include information about your health in your messages, because we don’t need it to reply.
Donations and financial support
- Data
- the donor’s name or the name of the organisation, account number, amount and date of the donation and the payment reference; if we sign a donation agreement, also the details in it.
- Purpose
- receiving and recording the donation and, where applicable, concluding and performing a donation agreement.
- Legal basis
- compliance with our legal obligation to keep accounts under Art. 6(1)(c) GDPR together with Slovak Act No. 431/2002 Coll. on accounting. For a donation agreement, Art. 6(1)(b) GDPR.
- Retention
- accounting documents for 10 years following the year to which they relate (Section 35 of the Accounting Act).
E-mail communication
- Data
- your e-mail address and the content of your message.
- Purpose
- replying to your message.
- Legal basis
- legitimate interest under Art. 6(1)(f) GDPR.
- Retention
- 12 months after the last communication.
Technical data when you visit the website
- Data
- IP address, time of access, requested page, browser type (processed automatically by the hosting provider).
- Purpose
- delivering the website securely and protecting it from abuse.
- Legal basis
- legitimate interest under Art. 6(1)(f) GDPR.
- Retention
- for a short period, in line with the hosting provider’s terms; we do not use this data for any other purpose.
3. Who we share data with
- Netlify, Inc. (USA) provides website hosting and receives form submissions as a processor.
- Google (Google Ireland Limited / Google LLC) provides the office.aups@gmail.com mailbox, which receives the form messages and your e-mails.
- The website administrator Martin Ruščák (Edena Systems), IČO 57075492, Vranov nad Topľou, Slovakia, provides technical administration of the website as a processor under a data processing agreement and accesses form submissions only to the extent needed for technical support.
- The public sees only the details of professionals in the directory of verified specialists, and only to the extent each professional has chosen to publish.
- Public authorities receive data only where the law requires it.
We never sell your data or use it for marketing.
4. Transfers to third countries
Netlify, Inc. and Google LLC are based in the USA. Transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, under which both companies are certified.
6. Your rights
You have the right of access (Art. 15 GDPR) and the rights to rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You also have the right to object to processing based on our legitimate interests (Art. 21). You can withdraw consent at any time. Send your request to office.aups@gmail.com and we will reply without undue delay, in any case within one month of receiving it.
7. How to complain
If you believe we process your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR), Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
8. Other information
We do not use automated decision-making or profiling. The website is protected by an encrypted connection (HTTPS), and only people authorised by the association (and the website administrator, only to the extent strictly necessary) can access form submissions. Providing data is voluntary, but without contact details we cannot reply. We may update this information; the current version is always published on this page.
Last updated: 7 November 2026
