• Slovenčina
  • English

    • EEA AND NORWAY GRANTS AND SWISS CONTRIBUTION

    Information for data subjects when personal data is collected

    European Economic Area (EEA), Norway Grants and Swiss Contribution Grants are financial contributions in the form of grants that contribute to a green, competitive and inclusive Europe. The contributors are Norway, Iceland and Liechtenstein as members of the EEA and Switzerland, which is not a member of the EEA, but it is a member of the European Free Trade Association (EFTA). Financial contributions in the form of grants are awarded to applicants to meet the following objectives: reducing economic and social disparities in Europe and strengthening bilateral relations between Slovakia and the contributing countries. Slovakia is one of the beneficiary countries.

     

     The Ministry of Investment, Regional Development and Informatization of the Slovak Republic (hereinafter referred to as the “Ministry”, “MIRDI” or “Controller”) performs the tasks as the National Focal Point or Programme Administrator as set out in the Legal Framework of the European Economic Area Financial Mechanism 2021-2028 and the Norwegian Financial Mechanism 2021-2028, as well as in the Legal Framework of the Swiss-Slovak Cooperation Programme.

     

    Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR”), the MIRDI as the Controller processing the personal data of the data subject, provides the data subject with the following information:

    1.        Identification and contact details of the Controller:

    Ministry of Investment, Regional Development and Informatization of the Slovak Republic Pribinova 25, 811 09 Bratislava, ID No.: 50349287

    2.        Contact details of the person responsible for personal data protection at MIRDI:

    3.        Categories of personal data:

    The Ministry only processes common personal data. The Ministry does not process special categories of personal data or personal data relating to criminal convictions and offences.

    4.        Scope of personal data processed:

    MIRDI processes the following personal data for activities related to the provision of financial contributions from the EEA and Norway Grants and the Swiss Contribution:

    • title, first name, last name;
    • address for service of documents;
    • e-mail;
    • phone number;
    • organisation, job title;
    • signature;
    • personal data contained in the Interim/Final Report of the initiative/project/payment request or in the documentation attached to it (e.g. payroll, invoices, pay slips, contracts, etc.);
    • personal data contained in applications for reimbursement of wage costs and in employment/service contracts of the employees.

    5.        Categories of data subjects:

    MIRDI processes the personal data of grant applicants (beneficiaries), initiative/project partners, as well as their employees and suppliers.

    6.        Purposes of personal data processing:

    MIRDI processes your personal data in order to:

    • implement the European Economic Area Financial Mechanism, Norwegian Financial Mechanism, Swiss-Slovak Cooperation Programme, projects, initiatives and support measures;
    • clearly identify those involved in the implementation of programmes, projects, initiatives and support measures;
    • assess and evaluate the grant applications;
    • ensure that grants are awarded to eligible applicants;
    • communicate with the Parties, e.g. respond to requests, queries, suggestions, etc.;
    • statistically evaluate data and maintain it in the MIRDI information system for the purposes of project/programme/initiative control, assessment, monitoring, and evaluation;
    • assist applicants in finding a suitable Swiss project partner for the implementation of their project;
    • submit applications to Switzerland for reimbursement of wage costs.

     

    7.        Legal basis for processing:

    MIRDI processes the personal data of data subjects on the basis of the performance of tasks carried out in the public interest or in the exercise of official authority pursuant to Article 6(1)(e) of the GDPR: “processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”.

    It is in the public interest to reduce economic and social disparities in Europe and to strengthen bilateral relations between Slovakia and the contributing countries.

    MIRDI performs the tasks of the National Contact Point and the National Coordination Unit, or as the Programme Administrator, implements programmes from the EEA Financial Mechanism, the Norwegian Financial Mechanism and the Swiss-Slovak Cooperation Programme, while it is necessary for MIRDI to process personal data of grant applicants and other persons.

    The processing of personal data results from the tasks assigned to the various actors for the redistribution of the EEA and Norway Grants, in particular pursuant to:

    • Article 3.2 and Article 5.6(1)(a) to (y), of the Regulation for the Implementation of the EEA Financial Mechanism 2021-2028[1];
    • Article 3.2 and Article 5.6(1)(a) to (y), of the Regulation for the Implementation of the Norwegian Financial Mechanism 2021 – 2028[2].

    The processing of personal data also results from the tasks assigned to the various actors for the redistribution of grants under the Swiss contribution, in particular pursuant to Articles 3.3 – 3.5 Article 8.2 of the Regulation on the implementation of the second Swiss contribution to selected Member States of the European Union for the reduction of economic and social disparities within the European Union[3].

    When co-financing projects from the State Budget of the Slovak Republic for the purposes of evaluating the efficiency and effectiveness of public expenditure, the processing of personal data is based on Section 14(5) of Act No. 523/2004 Coll. on Budget Rules of Public Administration and on Amendments and Additions to Certain Acts.

    MIRDI processes the personal data of data subjects for the purposes specified in point 6 of this document, also on the basis of consent pursuant to Article 6(1)(a) of the GDPR: “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”. The data subject has the right to withdraw their consent at any time, in which case their personal data will be deleted and can no longer be used.

    8.        Intermediary processing personal data on behalf of the Controller:

    MIRDI uses ELLMAN, s.r.o. as an intermediary for the processing of personal data. This intermediary provides MIRDI SR with services for the operation, security, and administration of the EGRANT web application – an information system for receiving and managing project applications and grant accounting provided under the second Swiss-Slovak Cooperation Programme.

    9.        Sub-intermediary processing personal data on behalf of the intermediary:

    MIRDI uses sub-intermediaries to process personal data, who are in a contractual relationship with the intermediary under Contract No. 1451/2025 on the processing of personal data between the Controller and the intermediary. 1451/2025 | Central Register of Contracts

    10.    Recipients of personal data:

    MIRDI provides personal data to the following entities: programme partners/donor partners/partners in support measures and programmes, external project evaluators, the State Secretariat for Economic Affairs in Switzerland, the non-profit organisation Swiss Parks Network, potential partners in Switzerland, Norway, Iceland, and Liechtenstein.

    MIRDI may provide personal data to public authorities that may, under the applicable laws of the Slovak Republic, conduct administrative proceedings, judicial proceedings, and inspections (e.g., the Supreme Audit Office, the Ministry of Finance of the Slovak Republic, the Government Audit Office, the Public Procurement Office, law enforcement authorities, courts, and others). MIRDI may also provide personal data to relevant ministries for the purpose of project evaluation or in the case of joint organisation of events, or on the basis of a legal requirement.

    11.    Transfer of personal data to third countries:

    MIRDI carries out transfers to Switzerland. Switzerland ensures adequate protection of personal data in accordance with the decision of the European Commission: https://eur-lex.europa.eu/legal-content/SK/TXT/HTML/?uri=CELEX%3A32000D0518&from=SK.

    12.    Transfer of personal data to third countries:

    MIRDI transfers personal data to the Council of Europe, the Organisation for Economic Cooperation and Development (OECD), and the European Union Agency for Fundamental Rights (FRA). MIRDI provides personal data in the form of first and last names without any additional data that could identify a natural person. The security of the personal data processed will be guaranteed by standard contractual clauses between MIRDI and each of the international organisations mentioned above, or by another means of transferring personal data in accordance with Article 46(2) of the GDPR. Detailed information on the transfer and security guarantees will be provided to the data subjects in this updated document.

    13.    Profiling and automated individual decision-making:

    The personal data of the data subject will not be used for automated individual decision-making, including profiling.

    14.    Period of processing (including storage) of personal data:

    MIRDI processes personal data in activities related to the provision of financial contributions from EEA and Norway Grants from the moment of obtaining personal data until 5 years after the approval of the Final Programme Report/Final Report for the beneficiary state. The processing period for the purpose of assisting applicants in finding a suitable project partner from Norway, Iceland, or Liechtenstein for the implementation of their project may be shorter if the data subject withdraws their consent to the processing of personal data.

     

    Personal data obtained in the implementation of the second Swiss contribution is processed from the moment of obtaining the personal data for a period of 10 years after the end of the support measure (i.e. a specific project, programme, or technical support within the cooperation programme). The processing period for the purpose of assisting applicants in finding a suitable Swiss project partner for the implementation of their project may also be shorter if the data subject withdraws their consent to the processing of personal data.

    15.    Source from which personal data were obtained:

    MIRDI obtains personal data either directly from the data subjects or from their employer.

    16.    Information on legal or contractual requirements:

    The provision of personal data is not a contractual requirement with the data subject, but results from the performance of tasks carried out by MIRDI in accordance with the legal provisions referred to in point 7. If the data subject does not provide the necessary personal data, MIRDI will not be able to assess and evaluate the application for a contribution/grant or pay the contribution/grant.

    17.    Rights of data subjects:

    As a data subject, you can exercise all your rights in accordance with Articles 15 to 22 of the GDPR:

    1. the right to obtain access to personal data, including relevant information regarding its processing, and the right to confirmation of the processing of personal data;
    2. the right to rectify inaccurate and complete incomplete personal data concerning you;
    3. the right to erase personal data concerning you;
    4. the right to restrict the processing of personal data;
    5. the right to data portability;
    6. the right to object to the processing of personal data;
    7. the right not to be subject to a decision based on automated processing, including profiling, which has legal effects on the data subject or significantly affects the data subject.

    18.    Request for the exercise of the rights of the data subject:

    The data subject is entitled to submit a request for the exercise of the rights of the data subject to the Controller or its responsible person by letter to the Controller’s address, by e-mail to zodpovedna.osoba@mirri.gov.sk or in person at the Controller’s filing office.

    19.    Proposal to initiate proceedings on personal data protection:

    If the data subject believes that their rights have been violated in the processing of personal data, they have the right to submit a proposal to initiate proceedings on personal data protection to the Office for Personal Data Protection of the Slovak Republic in accordance with the provisions of Act No. 18/2018 Coll. on Personal Data Protection and on Amendments and Additions to Certain Acts, as amended. A template is available for download at: https://dataprotection.gov.sk/sk/ine/vzory-formulare-stiahnutie/navrh-zacatie-konania-ochrane-osobnych-udajov/.

    20.    Further information is available on the websites:

     

    [1] https://eeagrants.org/en/fmo/documents-library/regulation-implementation-eea-grants-including-annexes-2021-2028

    [2] https://eeagrants.org/en/fmo/documents-library/regulation-implementation-norway-grants-including-annexes-2021-2028

    [3] https://swiss-contribution.sk/?page_id=123&csrt=5955160575165752268