Privacy Policy

Slovak Philharmonic · Legal document

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter “GDPR”) and Act No. 18/2018 Coll. on Personal Data Protection, we provide you with the following information about the processing of personal data on the website of the Concert Archive of the Slovak Philharmonic (stream.filharmonia.sk).

This statement applies exclusively to the web application Concert Archive of the Slovak Philharmonic (stream.filharmonia.sk). Information about data processing on the main website of the Slovak Philharmonic can be found at www.filharmonia.sk.

Data Controller

Slovak Philharmonic Medená 3, 816 01 Bratislava, Slovak Republic ID No.: 00 164 976

Data Protection Officer

Email: gdpr@filharmonia.sk
Post: to the address of the data controller, marked “DATA PROTECTION OFFICER GDPR”

Purposes and Legal Bases of Processing

1. Personal Data of Artists in the Archive

The Concert Archive contains names, photographs and biographical data of artists (conductors, performers, composers and others) who have performed at concerts of the Slovak Philharmonic.

Scope of data: name, surname, photograph, biographical data, nationality; for composers also year of birth and death
Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR) — documentation and public access to cultural heritage; public interest (Art. 6(1)(e) GDPR) — performance of tasks carried out in the public interest in the field of culture
Processing period: for the duration of the archive (permanent preservation as part of cultural heritage)

2. User Authentication

The Archive allows login for administrators and editors of the application. Visitors access published content anonymously, without the need to log in.

Scope of data: username, password (hashed), role, date of last login
Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR) — ensuring administration and content management of the archive; for employees also performance of a contract (Art. 6(1)(b) GDPR)
Processing period: for the duration of access authorisation; data is deleted after account removal

3. Traffic Analytics

We use Fathom Analytics to measure website traffic, a service designed with user privacy in mind.

Scope of data: Fathom Analytics does not use cookies, does not collect IP addresses or any other personal data. It processes only aggregated, anonymised statistics (visit counts, page views)
Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR) — analysis of archive usage to improve the service
Processing period: aggregated data is retained indefinitely

4. User Interactions

Visitors to the Archive may rate concerts using the “Love It” feature.

Scope of data: no personal data — ratings are tied to an anonymous session, not to a specific individual
Legal basis: legitimate interest of the controller (Art. 6(1)(f) GDPR)

Cookies and Technical Data

Strictly Necessary Cookies

PHPSESSID — session identification for login and basic functionality. Duration: until browser is closed.

These cookies are essential for the operation of the website and do not require your consent (Art. 5(3) of the ePrivacy Directive 2002/58/EC).

Local Storage (localStorage)

The website stores display preferences in your browser's local storage (dark/light mode, language, last calendar view). This data does not leave your browser, is not sent to the server and does not contain personal data.

Cookies We Do Not Use

The Concert Archive does not use advertising cookies, third-party tracking cookies, Google Analytics or Facebook Pixel.

Third Parties

Vimeo (Video Player)

We use the Vimeo platform (Vimeo, Inc., USA) to play concert recordings. When a video is started, Vimeo may set its own cookies and process data in accordance with its privacy policy.

Transfer to a third country: Vimeo is a US-based company. Data transfers to the USA are safeguarded by Standard Contractual Clauses (Art. 46(2)(c) GDPR)
Vimeo Privacy Policy: vimeo.com/privacy

Multiplace (Hosting)

The website is hosted on servers operated by the civic association Multiplace. Multiplace, as a processor, processes technical data (IP address, access logs) necessary for server operation.

Processing Periods

Artist data in the archive — permanent (cultural heritage)
Administrator and editor login — for the duration of the account
Analytics (Fathom) — aggregated data, indefinite
Session cookies — until browser is closed

Your Rights

The Concert Archive does not collect or store personal data of anonymous visitors. The rights listed below therefore apply primarily to individuals whose data is part of the archive (artists) and to registered administrators and editors of the application.

Right of access — you may request information about what personal data we process about you and obtain a copy thereof
Right to rectification — you may request correction of inaccurate or incomplete data
Right to erasure — you may request deletion of personal data if the purpose for processing has ceased or if you withdraw your consent
Right to restriction of processing — you may request temporary suspension of the processing of your data
Right to data portability — you may request transfer of your data to another controller in a structured format
Right to object — you may object to processing based on legitimate interests of the controller
Right to lodge a complaint — you may contact the data protection officer or the supervisory authority directly

You may exercise your rights by contacting the Data Protection Officer at gdpr@filharmonia.sk.

Automated Decision-Making

The Concert Archive does not carry out automated decision-making or profiling within the meaning of Art. 22 GDPR.

Supervisory Authority

Office for Personal Data Protection of the Slovak Republic

Web: dataprotection.gov.sk
Address: Hraničná 12, 820 07 Bratislava 27
Phone: +421 2 3231 3214
Email: statny.dozor@pdp.gov.sk

Last updated: 28 February 2026