Privacy Policy

to the processing of personal data by International Association of Innovative Teachers and Managers in Education (IAITME) within the meaning of Art. 13 and Art. 14 ff. of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "the Regulation")

1. Identification of the controller and contact details

The controller is International Association of Innovative Teachers and Managers in Education (IAITME), with registered office at E. Bohúňa 5390/57, 034 01 Ružomberok, Slovakia, ID No.: 56431881, registered in MV SR, Reg. No. VVS/1-900/90-70365.

The controller can be contacted at the International Association of Innovative Teachers and Managers in Education (IAITME), at the same address, by e-mail to info@iaitme.com or by telephone at +421 903 412 551.

In matters relating to the processing and protection of personal data, you can also contact us by e-mail at info@learnandlead.eu or by telephone at +421 903 412 551.

2. General information

The Controller processes personal data in accordance with the Regulation, Act No. 18/2018 Coll. on the Protection of Personal Data (the “Act”), and other applicable legislation.

The Controller obtains personal data directly from you (the “Data Subject”) or from another person who provides us with your data. This document provides information under both Articles 13 and 14 of the Regulation.

All personal data are processed only for legitimate purposes, for a limited period, and with maximum security, based on internal data-processing guidelines and appropriate security measures.

The protection of your personal data is a fundamental priority. In this document and the published Record of Processing Activities (available for download), you will find information about what personal data we process, for what purpose, on what legal basis, to whom we may disclose them, and what rights you have.

3. Purposes of processing personal data

The Controller processes your personal data only lawfully and for the purposes listed in its Record of Processing Activities, if one of the following applies:

• Performance of contractual obligations – e.g. contracts for sale or services between the Controller and the Data Subject.

• Performance of statutory obligations – e.g. compliance with tax, accounting, or administrative regulations.

• Legitimate interests – e.g. property protection through CCTV monitoring or internal operational needs.

Full details, including whether processing is contractual or legal and the legitimate interests pursued, are found in the Record of Processing Activities.

4. Categories of personal data

Processed data include identification data such as:

• First and last name

• Address (permanent/temporary)

• Date of birth

• ID card number

• Signature

• Email address

• Telephone number

• Other necessary data

Special categories (sensitive data) may include health, social, or property information, processed only when justified or legally required.

5. Retention period

Personal data are stored only as long as necessary for the purpose collected, following the principle of minimisation.
Retention periods are defined in the Controller’s internal Documented Information Management Directive and filing plan, or otherwise specified in the Record of Processing Activities.

You can request information on specific retention periods upon request.

6. Rights of Data Subjects

You have the following rights:

• Right of access – to obtain a copy of your personal data and information on its use.

• Right to rectification – to correct inaccurate or incomplete information.

• Right to erasure (“right to be forgotten”) – when data are no longer needed or consent is withdrawn.

• Right to restriction of processing – e.g. if data are inaccurate, unlawfully processed, or no longer needed.

• Right to data portability – to transfer your data to another controller under certain conditions.

• Right to object – to processing based on legitimate interest or profiling.

• Rights related to automated decision-making – you can object to profiling or automated decisions.

• Right to lodge a complaint – with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27;
  Website: dataprotection.gov.sk
  Tel: +421 2 3231 3214, Email: statny.dozor@pdp.gov.sk

7. Exercise of your rights

You can exercise your rights:

• In writing – by mail or in person at the registered address

• By e-mail: info@iaitme.com

• By phone: +421 903 412 551

• Orally – at the company’s registered office (a written record will be made and provided to you).

We will respond within one month, extendable by up to two months for complex cases (you will be notified if extended).

8. Transfers to third countries

In some cases, data may be transferred to the United States of America under the EU-US Privacy Shield framework (Decision 2016/1250). Transfers are made only to companies certified under the Privacy Shield.

9. Profiling

The Controller does not use automated decision-making or profiling.

10. Recipients

Personal data may be provided to:

• Processors (trainers, accounting or consultancy firms, IT service providers managing our website and systems).

• Legally authorised entities such as courts, law enforcement authorities, or labour inspectorates.

All processors have adopted appropriate technical and security measures ensuring GDPR compliance.

11. Final provisions

This Privacy Notice is valid and effective as of 1 April 2025.