back

Information obligation of the operator of the Overdiplom service

1. Operator

The operator of the Overdiplom web service is the Ministry of Education, Research, Development and Youth of the Slovak Republic, with its registered office at Černyševského 50, 851 01 Bratislava.

The operator ensures the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the “GDPR”), and with Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts.

2. Contact details of the operator's data protection officer

The operator's data protection officer can be contacted with questions concerning the processing of the personal data of data subjects and regarding the exercise of their rights at the e-mail address zodpovednaosoba@minedu.sk.

3. Purpose of processing personal data

The purpose of processing personal data is to ensure the operation of the Overdiplom web service, which enables searching for data about issued diplomas based on data provided by Slovak universities, with the aim of

  • verifying the authenticity and existence of a diploma,
  • increasing the transparency and credibility of education.

4. Categories of processed personal data

The processed personal data includes:

  • diploma number,
  • first name,
  • surname,
  • birth surname,
  • academic title,
  • level of study,
  • name of the university,
  • name of the field of study,
  • name of the study programme,
  • name of the faculty,
  • year of completion of study.

The service does not process special categories of personal data (e.g. birth number, permanent residence address).

5. Categories of data subjects

The operator processes the personal data of graduates of Slovak universities.

6. Source of personal data

The personal data is obtained from the Central Register of Students, into which it is supplied directly by universities, which are responsible for its initial collection and submission.

The operator makes the data available to the extent laid down by law, exclusively for the purpose of verifying diplomas, and does not carry out any substantive editing of it.

7. Legal basis

The legal basis for processing personal data is:

  • Article 6(1)(c) and (e) of the GDPR, under which this concerns (i) the fulfilment of the operator's legal obligation and (ii) the performance of a task carried out in the public interest or in the exercise of public authority,
  • Section 132(14) of Act No. 300/2025 Coll. on Universities and on Amendments to Certain Acts (hereinafter the “Universities Act”), under which, for the purposes of automatic verification of diplomas, the operator may process data about graduates from the Central Register of Students (CRŠ).

8. Scope of data disclosure

The web service makes available only the essential scope of data required to search for and verify a diploma.

The data is provided:

  • only after entering the identification data required by law that are necessary to verify the diploma,
  • without the possibility of bulk downloading,
  • with appropriate technical and organisational measures to protect against unauthorised bulk acquisition of data.

Personal data is retained in the system:

  • in accordance with the data provided by the universities,
  • for the period laid down in Section 132(10) of the Universities Act.

9. Accuracy of data and its correction

The accuracy, completeness and up-to-dateness of the data is the responsibility of the universities that provide it.

The operator:

  • is not responsible for content errors in the data,
  • ensures technical processing and disclosure.

If a data subject discovers incorrect or outdated data, they may contact:

  • the relevant university,
  • the operator via the e-mail address overdiplom@portalvs.sk, which will forward the request to the relevant university.

10. Rights of data subjects

Data subjects have the right:

  • to access their personal data,
  • to have incorrect data corrected.

The scope of the data subject's rights is governed by the provisions of the GDPR and Act No. 18/2018 Coll., whereby certain rights may be limited in view of the statutory legal basis for the processing.

11. Important notice

The data published through this service is of an informative nature and serves exclusively for the purposes of verifying diplomas.