[EN NÁVRH – anglický preklad na kontrolu]
[NÁVRH – to be checked by the client; items marked DOPLNIŤ must be completed before launch]
This page explains which personal data we process when you visit the website of Martinský klub medikov or write to us through the contact form, and what your rights are.
1. Who is the controller
The website is operated, and personal data are controlled, by [DOPLNIŤ: exact name of the legal entity, company ID, registered address].
For data-protection matters, contact us at [DOPLNIŤ: e-mail] or through the contact form.
2. What data we process
- Contact form: name, e-mail address, the text of the message and who it is for (MKM or a specific committee).
- Spam protection: to limit the number of messages from one device, we store an irreversibly encrypted fingerprint (hash) of your IP address for 10 minutes. We do not store the IP address itself.
- Technical logs: on every visit, the web-hosting provider and Cloudflare process standard technical data (e.g. IP address, time, browser type) to secure and run the website.
3. Why, and on what legal basis
- Replying to your message – based on your consent, given by ticking the box in the form (Art. 6(1)(a) GDPR).
- Website security and protection against abuse – based on our legitimate interest (Art. 6(1)(f) GDPR).
We do not sell data or use it for marketing or automated decision-making.
4. How long we keep data
- Messages from the form are not stored in the website’s database – they are delivered by e-mail to the mailbox of MKM or the committee concerned. We keep them there only as long as needed to deal with them, at most [DOPLNIŤ: e.g. 2 years].
- IP-address fingerprint for spam protection: 10 minutes.
- Technical logs of the hosting provider and Cloudflare: according to these providers’ terms [DOPLNIŤ: period according to the chosen hosting].
5. Who has access to the data
Only authorised members of MKM or of the committee you wrote to can read your messages. To run the website we use these processors:
- web-hosting provider: [DOPLNIŤ: provider name],
- e-mail provider: [DOPLNIŤ: provider name],
- Cloudflare, Inc. – website security and speed; transfers outside the EU are covered by appropriate safeguards (e.g. the EU–US Data Privacy Framework or standard contractual clauses).
6. Your rights
You have the right to access your data, have it corrected or erased, restrict processing, data portability and the right to object to processing. You can withdraw your consent at any time – this does not affect the lawfulness of processing before the withdrawal. Just write to us.
If you believe we process your data unlawfully, you can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.
7. Cookies
Web does not use analytics or advertising cookies and loads no third-party content – the fonts are stored on our own server and Instagram is only a link. We use only strictly necessary technical cookies:
- WordPress login cookies – only for website administrators after they log in,
- Cloudflare security cookies (e.g.
__cf_bm) – to detect automated attacks; short-lived.
These cookies are strictly necessary for running and securing the website, so they do not require your consent and the website shows no cookie banner. If we ever add, for example, visitor statistics, we will ask for your consent first.
This policy applies from [DOPLNIŤ: date].
