Legal Information

Privacy Policy

Information about personal data processing in accordance with GDPR.

Controller

Inštitút ekonomických a spoločenských analýz, n.o. (INESS)
Štefanovičova 10, 811 04 Bratislava, Slovak Republic
iness@iness.sk · iness.sk

What personal data we process

The bureaucraticindex.org website is an informational site. We do not require registration or login, and we do not collect personal contact data directly through this website.

The following anonymised technical data is processed automatically via Google Analytics (GA4):

  • Date and time of visit
  • Device type and browser
  • Country (derived from anonymised IP address)
  • Pages viewed and time spent on the site
  • Traffic source (e.g. search engine, direct entry)

IP addresses are automatically truncated (anonymised) — it is not possible to identify any specific individual from the available data.

Legal basis for processing

Analytics processing via Google Analytics is carried out on the basis of the legitimate interests of the controller pursuant to Art. 6(1)(f) of the GDPR — specifically to monitor the performance of the website and to improve its content and user experience.

Recipients of personal data

Anonymised analytics data is shared with Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, acting as a processor in connection with the Google Analytics service. INESS does not sell or otherwise disclose personal data to third parties for commercial or advertising purposes.

International transfers

Google Analytics may transfer anonymised data to the United States. Google Ireland Limited is certified under the EU–US Data Privacy Framework, which ensures an adequate level of data protection.

Retention period

Anonymised analytics data is retained for 26 months from the last activity, after which it is automatically deleted.

Your rights

To the extent permitted by applicable law, you have the following rights:

  • Right of access — to know what personal data we hold about you.
  • Right to rectification — to have inaccurate or incomplete data corrected.
  • Right to erasure — to request deletion of your personal data (right to be forgotten).
  • Right to restriction — to request temporary suspension of processing.
  • Right to data portability — to receive your data in a structured, machine-readable format.
  • Right to object — to object to processing carried out on the basis of legitimate interests.

To exercise your rights, please send a request to iness@iness.sk. We will respond without undue delay and at the latest within 30 days.

Right to lodge a complaint

If you believe that our processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority in your country of residence or with the Slovak supervisory authority:

Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava, Slovak Republic
dataprotection.gov.sk

Changes to this document

This Privacy Policy may be updated periodically in response to changes in our data processing activities or applicable legislation. The current version is always available on this page.

Effective from: 1 January 2025