Privacy notice
Who is the controller?
TERNIPE is the data controller and operator of arcokmogott.eu. Registered name: Ternipe - združenie pre rómsku mládež na Slovensku a v Maďarsku Ternipe - le romenge andar o Slovakia thaj Ungrika. Registered address: Záhradná 414, 980 42 Rimavská Seč, Slovensko. Organisation ID (IČO): 45016241. Privacy contact: info@ternipe.sk · ternipe1@gmail.com.
What data do we process?
We process contact details you voluntarily provide, your message and story, attachments, selected language, submission time, and the wording and version of your consent. Contact details are optional. Your text, photograph or voice may still identify you without contact details. With consent, published material may include a name or nickname, story, image and voice. Hosting logs may contain an IP address, time, requested page and browser information.
Purposes and legal bases
We use form submissions to handle your enquiry, respond and have people assess whether your story fits the project, based on consent under GDPR Article 6(1)(a). If you include your ethnic origin or health information, these are special categories of data; we request separate explicit consent under Article 9(2)(a). Requests to exercise your rights are handled under our GDPR legal obligations, without requiring consent. Operational and security logging relies on Article 6(1)(f): our legitimate interests are keeping the website secure, preventing abuse and resolving faults.
Access and storage
The project manager, organisation president and administrator can access submissions to the extent needed for their duties. The form emails contact@arcokmogott.eu, hosted by Websupport; submissions are not automatically forwarded to Gmail. Hosting and email are provided by Websupport s. r. o., Karadžičova 12, 821 08 Bratislava, Slovakia, organisation ID: 36421928. The provider may have technical access necessary to operate the infrastructure and backups.
If you contact the Gmail address
Requests sent directly to ternipe1@gmail.com and related correspondence are handled using Gmail. The EEA consumer service provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google’s global infrastructure may involve processing outside the EEA, including in the United States. Google states that, where applicable, it relies on adequacy decisions, the EU–US Data Privacy Framework and standard contractual clauses. Details and safeguards are available in Google’s information.
When can a story be published?
Submission does not authorise publication. If a story fits the project rules and purpose, we seek separate consent from the person concerned for the final material. The use of a name or nickname, text, photograph, voice and translations can be selected separately. Publication of special categories of data also requires explicit consent. Only authorised elements may be published. Published content is public and accessible worldwide; search engines may index it and others may copy it. We cannot guarantee removal of all third-party copies. After withdrawal, we remove the content from our website and take reasonable additional steps where needed.
How long do we keep data?
Unpublished messages, stories and attachments are kept in our email correspondence for up to one year from receipt, then deleted. This includes submissions that do not fit the project or have not received publication consent. Earlier withdrawal leads to earlier erasure unless another legal basis requires retention. Published stories, authorised images, recordings and translations remain on the website indefinitely until consent is withdrawn. Evidence of consent is retained while processing based on that consent continues. Where a legal obligation or a specific legal claim requires retention, only necessary data is kept separately for the necessary period.
Technical logs and backups
Technical log retention is determined by the time needed for operation, troubleshooting and security incidents, and by Websupport’s log rotation. Logs are not used to select stories. Deleted emails may temporarily remain in the provider’s rolling backups. Copies remaining in backups expire as the provider replaces its rolling backups. Deleted content is not restored for active use; previous erasures must be reapplied after recovery. Provider backup information.
Your rights
You may request access, a copy, rectification, erasure and restriction, and data portability where the legal conditions apply. You may object to processing based on legitimate interests. You may withdraw consent at any time without detriment at info@ternipe.sk · ternipe1@gmail.com. Withdrawal does not affect the lawfulness of earlier processing. We normally reply within one month and notify you within that period of any justified extension. We request only information needed to verify your identity. You can complain directly to Úrad na ochranu osobných údajov Slovenskej republiky, or in particular to the supervisory authority in the EEA country where you usually live or work.
Voluntary participation and other people’s data
Submitting a message is voluntary. You can view the exhibition without providing data or consent. Without consent we cannot process the form submission on this legal basis; privacy requests can also be sent directly by email. Without contact details we cannot reply personally. Do not include identifiable or sensitive information about other people without an appropriate legal basis; leave out unnecessary information. Stories are reviewed by people. We do not use profiling or solely automated decision-making.