We respect your privacy and are committed to protecting your personal data. We process personal data in accordance with Act No. 18/2018 Coll. on Personal Data Protection of the Slovak Republic and Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR). Personal data is processed lawfully, fairly and transparently, and only to the extent necessary for the specific purposes related to our activities.
2. Data Controller
Košice IT Valley z.p.o.
Letná 1/9
040 01 Košice
Slovakia
Company ID (IČO): 355 78 041
Tax ID (DIČ): 202 235 8415
Email: info@itvalley.sk
Phone: +421 (55) 602 3653
Košice IT Valley is an association of legal entities representing the technology sector in Eastern Slovakia and supporting cooperation between IT companies, educational institutions and the public sector.
3. Data Protection Officer (DPO)
At present, we have not appointed a Data Protection Officer (DPO). If you have any questions regarding the processing of your personal data, please contact us at info@itvalley.sk.
4. What Personal Data We Process
Depending on the specific situation, we may process the following categories of personal data:
- First name and surname
- Email address
- Telephone number
- Identification and billing information (e.g. Company ID (IČO), Tax ID (DIČ), VAT ID, organisation name), where required for entering into a contractual relationship or issuing accounting documents
- Photographs and video recordings taken during events
We do not always process all of the above categories of data. The specific data processed depends on the type of event, the purpose of processing or the form of cooperation.
5. Purposes of Processing and Legal Basis
| Purpose | Personal Data | Legal Basis | Retention Period |
|---|---|---|---|
| Sending newsletters | Name, email | Consent of the data subject | Until consent is withdrawn |
| Event registration | Name, email, telephone number | Legitimate interest or consent of the data subject, depending on the nature of the event and the purpose of processing | 5 years |
| Membership records | Name, email, telephone number, Company ID (IČO), Tax ID (DIČ) | Performance of a contract (membership application / membership record) | During the membership period and for 3 years after its termination |
| Marketing and promotion of events | Name, email, photographs | Legitimate interest of the controller or consent of the data subject | As appropriate for the given purpose |
| Photographs and video recordings from events | Photographs and video recordings | Legitimate interest of the controller; for individual portraits or other processing where required, the consent of the data subject | For the duration of the promotional or archival purpose, or until a justified objection is raised, unless another legal basis requires further retention |
| Contact form | Name, email, telephone number | Legitimate interest | 12 months |
| Accounting | Name, email, telephone number, Company ID (IČO), Tax ID (DIČ) | Legal obligation | 10 years |
6. Who We Share Personal Data With
Personal data may be disclosed to our contracted data processors providing services such as IT support, web hosting, email services, event registration systems, accounting, legal services or marketing tools. Personal data may also be disclosed to public authorities where required by law.
In particular, personal data may be shared with:
- Providers of email and cloud services (e.g. Microsoft 365, Mailchimp)
- Event partners, where necessary for organising or promoting an event and for sharing photographs or video recordings for marketing purposes
All recipients are required to process personal data in accordance with the GDPR.
7. Transfers of Personal Data Outside the European Union
Some of our service providers (such as Google, Microsoft or Meta, the operator of Facebook and Instagram) may process personal data outside the European Economic Area (EEA). Such transfers are carried out exclusively in accordance with the GDPR, in particular on the basis of an adequacy decision of the European Commission or the Standard Contractual Clauses.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected. The specific retention periods for individual processing activities are listed in the table in Section 5. Where applicable legislation requires a longer retention period, we comply with such legal obligations.
9. Automated Decision-Making and Profiling
We do not carry out automated individual decision-making or profiling within the meaning of Article 22 of the GDPR.
10. Your Rights
You have the right to:
- Access your personal data
- Request correction of inaccurate personal data
- Request erasure of your personal data (where it is no longer required to fulfil legal obligations)
- Request restriction of processing
- Request data portability
- Object to processing based on the controller’s legitimate interest, including direct marketing
- Withdraw your consent at any time where processing is based on consent
11. How to Exercise Your Rights
You may exercise your rights by email at info@itvalley.sk or by post to:
Košice IT Valley z.p.o.
Letná 1/9
040 01 Košice
Slovakia
12. Complaints
If you believe that your personal data has been processed in breach of the GDPR, you have the right to lodge a complaint with the Personal Data Protection Office of the Slovak Republic. Current contact details of the Personal Data Protection Office are available at: www.dataprotection.gov.sk
13. Cookies
Our website uses cookies to ensure its proper functioning, improve user experience and analyse website traffic.
We use the following types of cookies:
- Essential cookies, which are necessary for the proper functioning of the website and do not require your consent.
- Analytical cookies, which help us understand how visitors use our website and enable us to improve its content and functionality. For this purpose, we use Google Analytics. Analytical cookies are used only with your prior consent.
You can change or withdraw your cookie preferences at any time through the cookie banner or the cookie settings available on our website.
14. Updates
This Privacy Notice may be updated to reflect changes in legislation or our processing activities.
Last updated: July 2026