Effective from 25 September 2026
This policy explains how the IVEGA Learning Centre language school processes the personal data of visitors to ivega.sk, prospective students and students, in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on the Protection of Personal Data.
1. Controller
IVEGA, s.r.o.
Dlhá 29, Kostoľany nad Hornádom, 044 31 Družstevná pri Hornáde, Slovakia
Company ID (IČO): 46 280 901, Tax ID (DIČ): 2023326624
Premises: IVEGA Learning Centre language school, Letná 27, 043 14 Košice
Data protection contact: info@ivega.sk, tel. +421 905 212 417
The controller has not appointed a Data Protection Officer (DPO), as it is not required by law.
2. What data we process, why and for how long
2.1 Online English language tests
Data: name and surname, e-mail, phone number (optional), your test answers and result, whether you wish to be contacted.
Purpose: assessing your language level, sending the test result to your e-mail and placing you in a course at a suitable level; if you ask us to, contacting you about a course.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
Retention: 1 year from completing the test; if you enrol in a course, as described in 2.2.
2.2 Course sign-up
Data: name and surname, address, year of birth, phone number, e-mail, chosen language and level, note.
Purpose: course enrolment, organising lessons, communication with students, invoicing.
Legal basis: performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR); for accounting records, compliance with a legal obligation (Art. 6(1)(c) GDPR).
Retention: for the duration of the course and 1 year after it ends; accounting records for 10 years under Slovak Act No. 431/2002 Coll. on Accounting. If you do not enrol, we delete the data within 1 year.
2.3 Contact form and e-mail communication
Data: name, e-mail, subject and message.
Purpose: replying to your question or request.
Legal basis: legitimate interest in answering messages (Art. 6(1)(f) GDPR), or pre-contractual steps (Art. 6(1)(b) GDPR).
Retention: until your request is handled, at most 1 year.
2.4 Spam protection and website security
Data: IP address, time of form submission, technical browser data.
Purpose: protecting forms against abuse and spam, keeping the website secure.
Legal basis: legitimate interest in website security (Art. 6(1)(f) GDPR).
Retention: data used for submission rate limits at most 24 hours; server logs according to the hosting provider’s settings.
2.5 Visitor statistics (Google Analytics)
We measure website traffic with Google Analytics only if you consent in the cookie banner (Art. 6(1)(a) GDPR). You can withdraw your consent at any time. Details are in our Cookie Policy.
3. Who we share data with
We do not sell your data. To run the website and our services, we use these processors and providers:
- WebSupport s.r.o. (Slovakia) – web hosting and e-mail services,
- bam.sk, s.r.o. (Slovakia) – technical administration and maintenance of the website, including its forms,
- Google Ireland Limited – Google Analytics (only with consent), reCAPTCHA form protection, maps (Google Maps) and fonts (Google Fonts),
- Automattic Inc. – the Akismet service for detecting spam in contact forms.
Services provided by Google and Automattic may involve transfers of data to the USA. Such transfers are based on the EU–US Data Privacy Framework or on standard contractual clauses approved by the European Commission.
We may also disclose data to public authorities where required by law.
4. Is providing data mandatory?
Providing your data is voluntary. However, without your name and e-mail we cannot evaluate and send your test result, reply to your message or enrol you in a course.
5. Automated decision-making
The result of the online test (number of correct answers) is calculated automatically. Placement in a course, however, is always decided by a person – a member of the school’s staff. We do not carry out profiling or automated decision-making with legal effects.
6. Your rights
You have the right to:
- access your personal data (Art. 15 GDPR),
- have inaccurate data corrected (Art. 16 GDPR),
- have your data erased (Art. 17 GDPR),
- restrict processing (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on legitimate interest (Art. 21 GDPR),
- withdraw your consent at any time where processing is based on consent,
- lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, dataprotection.gov.sk.
You can exercise your rights by e-mail at info@ivega.sk or in writing at the controller’s address. We will reply within one month at the latest.
7. Cookies
Information about cookies and how to change your consent is available in our Cookie Policy.
8. Changes to this policy
We may update this policy. The current version is always published on this page.