CU Mlyny DormitoriesComenius University Bratislava


According to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation), "GDPR”


The controller who processes your personal data is Univerzita Komenského v Bratislave (Comenius University Bratislava), with registered office at Šafárikovo námestie 6, P.O.BOX 440, 814 99 Bratislava, ID number: 00397865 (“we”, “us” or “Comenius University”), which is considered the controller in instances where your personal data is processed by a Comenius University faculty and / or part of Comenius University. 

Providing your personal data is required to conclude an accommodation agreement. 


We process your personal data for the purposes of providing accommodation and catering, on the following legal basis:

  • compliance with a legal obligation (Article 6(1)(c) of the GDPR); particularly for accounting and tax purposes and with reference to Section 89 para. 1 and 2 of Act no. 131(2002) on universities (“Universities Act");
  • performance of a task carried out in the public interest (Article 6(1)(e) of the GDPR), for the purpose of assessing the entitlement to accommodation, maintaining a record of violations, maintaining a record of expulsion and matters related to Sections 98, 99, 73(7) of the Universities Act or;
  • for the performance of a contract (Article 6(1)(b) of the GDPR), for the purposes of accommodation and catering (accommodation application and contract data).


Personal data related to accommodation and payments, and processed in accordance with our legal obligation to maintain accounting and file tax reports will be stored for 10 years after the end of your accommodation. Any data collected from the contract on the provision of accommodation and related services will be processed for the duration of the contract. Any data collected on the basis of public interest will be stored during the existence of the student's entitlement to accommodation, but no longer than 3 years after the completion of the study (due to the possibility of continuing the study at higher levels) or until an objection against the public interest is found to be legitimate. Your personal the data will be processed by our employees trained in personal data protection and may be provided to law enforcement authorities. The complete list of recipients can be found here:

Camera system monitoring

The dormitories are monitored by a camera system. This is considered processing of your personal data. This processing is permitted under Art. 6 (1)(f) GDPR which allows us to process your personal data based on the existence of a legitimate interest. The purpose of the processing of your personal data is the protection of property, order and security. The following areas in particular at Mlyny UK are monitored: mainly the entrances to buildings, turnstiles, car ramp, parking ticket machine, containers at MI and VB, VB vestibule, corridors in the economic and accommodation department in VB, entrances and corridors in the LF and PdF gyms at MI, canteens (premises of the canteen, warehouse, ramp, washing machine) and gates for cars at AD and MI. Camera system recordings are retained for 8 days. When investigating violations of the dorm rules, dorm staff may use body-cams and their footage is stored for up to 72 hours. Your personal data will be processed by our employees trained in personal data protection and may be provided to the relevant public authorities for the purpose of obtaining and using evidence in criminal or misdemeanour proceedings, or exercising the right of access to the data of the data subject according to the GDPR.

Control of access to reserved areas

You enter the accommodation part of the dormitories through turnstiles, using your dorm card. Your data collected by the turnstiles will be processed for the purposes of property protection, order and security. The legal basis for this data processing is the legitimate interest of the controller (Article 6(1)(f) of the GDPR). Protection of property, order and security is such legitimate interest. Turnstile records are stored for the duration of your accommodation in the current school year.

“You have the right to object to the legitimate interest we are following.*

In case of your objection, processing will only continue if CU’s legitimate interest is found to prevail over your rights and freedoms or interests related to the protection of your rights and the exercise of your legal claims. 

Where can you exercise your right to object to the processing of your personal data?

This right is exercised upon request using a request form, or electronically or in writing with the designated data protection officer at Comenius University, who is responsible for supervising the processing of personal data. They may be reached at:


mailing address:                             DPO / Responsible person under GDPR

                                                            Univerzita Komenského v Bratislave (Comenius University Bratislava)

                                                            Centrum informačných technológií (Information Technology Centre)

                                                            Šafárikovo námestie 6, P.O.BOX 440

                                                            814 99 Bratislava 1

As a data subject, you have other rights under GDPR with respect to the processing of your personal data:

  1. Right to request access to personal data we process about you under Article 15 GDPR . This right includes the right to confirmation if we process your personal data, the right to access this information, and the right to a copy of the personal data we process about you, if technically feasible;
  2. Right to correction and amendment of personal data under Article 16 GDPR, if we are processing incorrect or incomplete personal data;
  3. Right to deletion of your personal data under Article 17 GDPR;
  4. Right to restrict processing of personal data under Article 18 GDPR
  5. Right to data portability under Article 20 GDPR;
  6. Right to object to a legitimate or public interest we follow under Article 21 GDPR.
  7. As a data subject, you also have the right to file a complaint with the supervising authority, which in this case is the Office for Personal Data Protection of the Slovak Republic under §100 of the Personal Data Protection Act. More information is available at 

Information on other purposes of processing your personal data and more details of your specific rights can be found in our privacy protection public on our website at: