Privacy Policy
ZIP Citizenship · Last updated: 11 August 2026
This online privacy policy provides an overview of how we process personal data at ZIP Citizenship under the controller Beehive Services s. r. o., with registered seat at Alvinczyho 3455/26, 040 01 Košice – mestská časť Staré Mesto; IČO 56722940, DIČ 2122405956 (hereinafter referred to as “us” or “we”).
If you have any questions concerning how we process your personal data, please contact us at: info@zip-citizenship.sk.
This Privacy Policy is primarily designed to ensure compliance with our informational obligations pursuant to Articles 13 and 14 GDPR towards data subjects about whom we process personal data as a controller. Typical data subjects are our clients and their relatives. Being an EU-based company, we comply with the EU General Data Protection Regulation (“GDPR”), provisioning your individual rights under Articles 12–22 GDPR, applicable sections of the national data protection legislation (“Data Protection Act”), and other applicable legislation.
Why we process personal data
Generally, we need to process personal data in order to:
- provide our services and products, and for that purpose process personal data of our clients, suppliers, business partners, employees, and other persons;
- meet our legal and contractual obligations; and
- pursue our own legitimate interests.
Purposes and legal bases of processing
We process personal data for the following purposes and legal grounds:
| Purpose of processing | Legal ground |
|---|---|
| Provision of our services – Free Eligibility Check, Slovak Ancestry Search, Full Service Assistance | Performance of contract pursuant to Article 6(1)(b) GDPR |
| Ancestry Research | Legitimate Interest pursuant to Article 6(1)(f) GDPR Consent pursuant to Article 6(1)(a) GDPR |
| Establishment, exercise or defence of legal claims | Legitimate Interest pursuant to Article 6(1)(f) GDPR |
| Statistics | Article 89 GDPR and other legal grounds of processing |
Our services
We provide several services related to expert guidance and personalised support through the citizenship process. Specifically, we provide:
- Free Eligibility Check – to assess whether individuals qualify for Slovak Citizenship by Descent.
- Slovak Ancestry Search – to help people discover their Slovak roots.
- Full Service Assistance – comprehensive professional assistance covering every aspect of your citizenship application, including translation of documents.
Our legitimate interests
We rely on legitimate interest pursuant to Article 6(1)(f) GDPR for the following purposes:
| Purpose of processing | Explanation |
|---|---|
| Ancestry Research | Our legitimate interest is to identify potential family connections, locate relevant historical documents, improve the accuracy and efficiency of our research, and maintain a reliable genealogical knowledge base that may assist both existing and future clients. If we share personal data collected for this purpose with other clients, we do so only with your consent. |
| Establishment, exercise or defence of legal claims | From time to time we may need to pursue a legal claim, seek compensation, reach an out-of-court settlement, or report certain facts to public authorities. Such processing operations are considered our legitimate interest. |
What personal data we process
In most cases we process standard contact and identification data such as name, surname, address, and email address.
How we collect your personal data
Generally, we collect your personal data directly from you. Provision of personal data is voluntary. You may provide it to us by different means, for example:
- by contacting or communicating with us;
- through provision by your relatives – where a client provides data about living family members in connection with a citizenship application, we process that data in accordance with Article 14 GDPR and will inform the relevant individuals where required.
Website visits. When you visit zip-citizenship.sk, our web server records only the minimal technical data necessary to deliver the page (such as your IP address and browser type in standard server logs). We do not use analytics software, tracking cookies, or advertising pixels.
Recipients of your personal data
We take the confidentiality of your personal data very seriously and have internal policies to ensure that your data is only shared with verified third parties. Personal data of our clients is provided, to the extent necessary, to the following categories of recipients:
- our employees, contractors, and partners, including Martin Husovec – Counsel, s. r. o. (Org ID: 57461767), a law firm providing necessary legal services;
- our verified and properly mandated processors;
- providers of software, AI, and cloud services.
International transfers
By default, we seek not to transfer your personal data outside the EU and/or European Economic Area where not necessary (for example where you yourself are based outside the EU). Personal data provided by you is stored in an EU-based cloud. Some of our sub-contractors or the above-mentioned recipients may be based, or have their servers located, in the United States of America. In such cases we rely on the EU–US adequacy decision (2023) as the legal ground for international transfer of personal data.
How long we store your personal data
We do not store your personal data for longer than necessary for the given purpose of processing. Retention periods are either set by law or established by us in our internal policies. Where processing is based on consent and you withdraw it, we cease processing for that specific purpose — though we may continue to process your personal data on a different legal ground, in particular due to our legal obligations.
| Purpose of processing | Retention period |
|---|---|
| Provision of our services | During the contractual relationship with the natural person. |
| Ancestry Research | Ten years after its last meaningful use for ancestry research activities, with necessity reviews every three years; or until withdrawal of consent. |
| Establishment, exercise or defence of legal claims | Based on the applicable limitation period under law. |
| Statistics | During the existence of the other purposes of processing. |
Your rights
If we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. The withdrawal of consent shall not affect the lawfulness of processing carried out before its withdrawal. You have the right to effectively object to the processing of your personal data for direct marketing purposes, including profiling. You also have the right to object to processing based on the legitimate interests we pursue, as explained above. If you exercise your right to object, we will demonstrate how we evaluated those legitimate interests as overriding your interests, rights, and freedoms.
The GDPR lays down general conditions for the exercise of individual rights. Their existence does not automatically mean that they will be accepted in every case, as exceptions may apply. Your request will always be examined in light of applicable legal regulations and exemptions. Among others, you have:
- Right to access (Article 15 GDPR) – to confirm whether we process data about you, and to obtain a copy.
- Right to rectification (Article 16 GDPR) – if we process incomplete or inaccurate data about you.
- Right to erasure (Article 17 GDPR).
- Right to restriction of processing (Article 18 GDPR).
- Right to data portability (Article 20 GDPR).
- Right to object to processing based on legitimate or public interest, including profiling (Article 21(1) GDPR).
- Right to object to direct marketing, including profiling (Article 21(2) GDPR).
- Right not to be subject to automated individual decision-making (Article 22 GDPR).
You have the right to lodge a complaint with the relevant data protection supervisory authority or apply for judicial remedy. Our competent authority is the Office for Protection of Personal Data of the Slovak Republic. We encourage you to contact us first with any questions or requests.
Automated decision-making
We do not currently conduct processing operations that produce decisions based solely on automated processing which would produce legal effects or similarly significantly affect you within the meaning of Article 22 GDPR.
External websites
Our website may occasionally contain links to websites and/or services operated by third parties (for example, CAPTCHA-like services). We are not responsible for the content or privacy practices of third-party websites or services. This Privacy Policy does not apply to personal data processed when browsing or using any third-party website or service.