Privacy policy - Ruvirex.com

Subject: PRIVACY POLICY

written in accordance with Articles 13 and 14 of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 EC (hereinafter also referred to as the “Regulation”) and in accordance with Sec. 19 et seq. of Act No. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts (hereinafter also referred to as the “PDP Act”).

We value your privacy and the protection of your personal data is one of our most significant priorities. This Privacy Policy (hereinafter also referred to as the “Policy”) contains information about personal data we collect within the scope of our business, how we use it, and how we protect it.

We use the personal data you provide exclusively to enable us to render you quality services. When providing our services, we always take your privacy into account and we approach the protection of your personal data with respect and responsibility. We recommend that you read this Policy carefully to familiarise yourself with all your rights before entering into a legal relationship with us.

ARTICLE 1.

IDENTIFICATION OF THE OPERATOR

Operator: RUVIREX, a.s.

Registered seat: Pod Hradiskom 373, 010 04 Žilina

ID: 50 470 833

VAT ID: SK2120336691

Registered in: Commercial Register of District Court in Žilina, section Sa, insert No.10899/L

Acting through: Ing. Milan Obrk, Chairman of the Board of Management

Contacts: email: ruvirex@ruvirex.com, phone: +421 917 654 555

Person in charge: Not designated.

(hereinafter referred to as the “Operator” or “we”), we hereby inform you, as the data subject, about the manner and extent of the processing of personal data, including the scope of your rights related to the processing of your personal data. The Operator is engaged in retail and wholesale of metallurgical materials, fasteners as well as locksmith production. A detailed description of the services is published on the Operator’s website: https://www.mpometal.sk/o-nas/.

Basic terms:

The operator is the natural or legal person who is responsible for the protection and processing of personal data. We are the operator of your personal data in accordance with Article 4, point 7 of the Regulation and with Sec. 5, letter o) of the PDP Act.
An intermediary is anyone who processes personal data on behalf of the operator. Our intermediaries are the entities listed in Article 5 of this Policy.
The Privacy Policy (hereinafter referred to as the “Policy”) governs the legal relations of the Operator and its clients, potential clients and users of the Operator’s website, the Operator and its suppliers, the Operator and its intermediaries in processing of their personal data according to the PDP Act and the Regulation.
For the purposes of this Policy, the data subject (hereinafter also referred to as the “data subject”, “client” or “you”) is referred to any natural person whose personal data are processed. The data subjects include in particular:

– clients and potential clients who have expressed interest in our goods and our services and have placed an order electronically via email or by phone;

– natural persons, with whom we have concluded a contract within the scope of our business, who have ordered services from us;

– users of our website;

– client representatives, natural persons representing legal persons;

– natural persons, who constitute the statutory authority of a legal person;

– natural persons in the position of our intermediaries, with whom we have concluded a special cooperation agreement within the scope of our business;

RUVIREX, a.s., Pod Hradiskom 373, 010 04 Žilina – Bánová, ID: 50470833, VAT ID: SK2120336691, phone: +421 917 654 555, email: ruvirex@ruvirex.com,

– natural persons who use goods or services offered by our company;

– natural persons who are the authorised representatives of the customer of our company who uses the goods or services offered by our company (in any legal relationship with the customer);

– natural persons in the position of suppliers/customers of the provided goods or services, or their employees, statutory authorities;

– natural persons who enter personal data in the form published on our website;

– natural persons who visit our shop or business premises and are filmed by a camera system;

– natural persons – senders and recipients of correspondence.

When providing our services and/or concluding a contract, we need to obtain personal data from the Client, the Potential Client or their representative, which will be used for the provision of these services and for communication with the Client or the Potential Client. We ensure the protection of all personal data provided to us by the Potential Client or the Client in any form, in accordance with the PDP Act. In particular, we take care to prevent personal data breach, mainly by taking appropriate security measures to eliminate the accidental or unlawful erasure, loss, alteration or unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed. For this purpose, we have taken appropriate technical, organisational and personnel measures corresponding to the method of processing. All personal data of the client or the potential client is stored on a secure server and in locked rooms, and we make every effort to protect them. When processing personal data of the client, potential client, client representative and statutory authorities acting on behalf of the legal person who is our client, we observe in particular the principles of legality, purpose restriction, personal data minimisation, accuracy, minimisation of retention, the principles of integrity and confidentiality and the principle of accountability.

ARTICLE 2.

PERSONAL DATA PROCESSED BY THE OPERATOR

In accordance with the Regulation and the PDP Act, as the operator, we process personal data that you provide us with in connection with the scope of our business. We process only such personal data which is necessary to provide you our services, individual products, to comply with our legal obligations, and also to protect our legitimate interests.

We collect personal information about our clients, including potential clients who are interested in our services or who have given us consent to contact them with the offer of products and services, personal data that you provide in connection with the purchase of goods or use of services (e.g. within the scope of creating an order electronically, by phone, the purchase of goods and entering your personal data within the issuance of an invoice by the Operator, or when claiming goods through a complaint form). These are mainly personal data:

– identification and contact details (particularly degree, name, surname, address of permanent residence, delivery address, date of birth, email address, phone number);

– contract reference data and transaction data (particularly signature, order code, data relating to purchases made (e.g.: type, quantity and price of goods, date of purchase, information about customer account balance, possibly voluntary additional data, transaction history of orders, data on purchased goods, bank account);

– telecommunication data (traffic data, location data, data on online identifiers or IP addresses);

– video recording from the camera system in case of a personal visit of our shop. The Operator processes this personal data only in accordance with the purposes listed below, to the extent and for the time necessary to fulfil these specified purposes, otherwise only during mandatory archiving in accordance with special regulations of the Slovak legal order.

ARTICLE 3.

PURPOSES AND LEGAL BASIS FOR PROCESSING OF PERSONAL DATA

Processing of personal data in connection with the purchase of goods by phone order, electronically or at a brick-and-mortar shop

The processing of personal data is primarily based on your legal status, as the data subject, i.e. the processing of personal data is necessary for the performance of a contract, a contracting party of which is you, as the data subject, or in order to take measures, at your request, before the conclusion of the contract (Article 6 (1) letter b) of the Regulation or Sec. 13 (1), letter b) of the PDP Act). The processing of personal data is therefore necessary for the purposes of concluding a purchase agreement and its subsequent implementation, delivery of ordered goods and also due to compliance with legal tax obligations, or obligations within a legal complaint (Article 6 (1), letter c) of the Regulation or Sec. 13 (1) letter c) of the PDP Act).

During the preparation of creation and implementation of the order, the Operator collects and processes via its information system your personal data encompassing:

– degree, name, surname, address of permanent residence or delivery address, phone number, email address, date of birth and signature, order code, details of previous purchases, bank account, purchased goods details. The provision of this personal data is a primary condition for concluding or alteration of the purchase agreement, while the provision of personal data serves primarily for your unequivocally and unmistakable identification and also for contacting you in order to deliver the ordered goods.

Processing of personal data in connection with the handling of motions, inquiries and complaints

We use your personal data to resolve your complaints, fulfil our obligations in relation to you, enforce rights and legal claims that concern you or our company, for instance, in case you are not satisfied with our goods or services, or in the event of an accident occurring in our shop. The legal grounds for processing personal data is fulfilment of the legal obligations of the Operator – Act No. 40/1964 Coll. of the Civil Code and Act. No. 250/2007 Coll. on Consumer Protection, as amended (Article 6 (1), letter c) of the Regulation or Sec. 13 (1), letter c) of the PDP Act). In connection with the handling of complaints, the Operator also processes personal data for the purposes of its legitimate interests in the event of a possible dispute during the complaint handling (Article 6 (1), letter f) of the Regulation or Sec. 13 (1), letter f) of the PDP Act).

When handling complaints, the Operator collects and processes your personal data encompassing: degree, name, surname, address of residence or delivery address, phone number, email address, transaction history of orders, purchased goods details, bank account, signature, contract reference data.

Processing of personal data via a camera system in the brick-and-mortar shop and manufacturing site of the operator

If you enter our shop or the premises we operate, we process your personal data in the extent of video recording in order to protect the property and rights of the operator and the persons concerned, located in the monitored premises. Monitored premises are clearly marked in front of the entrance. This personal data is considered an ordinary category of personal data, as the captured image record cannot be paired with a specific person via biometric data (therefore, it is not a so-called special category of personal data). The legal grounds for processing personal data is the legitimate interest of the Operator (protection of property, health, prevention and assistance in detecting anti-social behaviour, criminal activity, etc.) in accordance with Art. 6 (1), letter f) of the Regulations of Sec. 13 (1), letter f) of the PDP Act.

Processing of personal data for marketing and advertising purposes
A) Sending of business news, newsletters and offers WITHOUT previous legal relationship with the data subject – we also use your personal data to inform you about the offer of our services, news, and discounts through the newsletter sent by email or in another form.

Legal basis: If you register your email address to receive news without a previous legal relationship, we will process your personal data encompassing: email address, name and surname, degree, (possibly signature for paper registration) on the basis of your consent to the processing of personal data in accordance with Sec. 13 (1), letter a) of the PDP Act and Art. 6 (1), letter a) of the Regulations for the purpose of sending offer emails and other commercial notifications by electronic means. You may revoke your consent at any time in the manner stated in this Policy. Withdrawal of consent does not affect the legitimacy of the processing of personal data based on consent prior to its withdrawal.

B) Sending of business news, newsletters and offers AFTER realisation of the legal relationship with the data subject – we use your personal data to stay in touch with you and inform you about the news on a regular basis.

Legal basis: In case of existing clients, we may process your personal data encompassing: email address, name and surname, degree, for the above-mentioned purpose on the basis of the legal grounds of our legitimate interest in accordance with Sec. 13 (1), letter f) of the PDP Act and Art. 6 (1), letter f) of the Regulations. In case you are not interested in receiving business offers, send us the request via email stated in Article 1 of this Policy.

Processing of personal data in connection with the exercise of the rights of data subjects

Legal basis: we use your personal data to exercise your rights under the PDP Act. In the event that you exercise any of your rights specified in this Policy, we have the right to identify you. The legal grounds for processing your personal data is the fulfilment of the legal obligations of the Operator in accordance with Sec. 13 (1), letter c) of the PDP Act and Art. 6 (1), letter c) of the Regulations, i.e. according to the PDP Act. In connection with the exercise and implementation of your rights, the Operator continues to process your personal data for the purposes of its legitimate interests in the event of a possible dispute in accordance with Sec. 13 (1), letter f) of the PDP Act and Art. 6 (1), letter f) of the Regulations, even without the need of your consent.

Scope of personal data processed: In exercising your rights, the Operator collects and processes your personal data encompassing: degree, name, surname, date of birth, address of permanent residence, delivery address (if it differs from the address of permanent residence), email address, phone number or personal data indicated in the identity document.

Processing of personal data in connection with the legitimate interests of the operator

Legal basis: we use your personal data for the purposes of our internal legitimate interests, while we process personal data on a legal basis pursuant to Art. 6 (1), letter f) of the Regulations or Sec. 13 (1), letter f) of the PDP Act, with the exception of cases where such interests outweigh the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, especially if the data subject is a child.

Such legitimate interests are in particular:

– protection of our rights under generally binding legal regulations and agreements in relation to contractual partners and other persons – for this purpose, we store personal data for the period necessary to protect such rights and legitimate interests;

– promoting the security of our services, preventing the misuse of services and investigating breaches of our terms;

– prevention of fraudulent conduct, if we reasonably believe that there is a risk of such conduct – for this purpose, we store personal data for a period of time established by generally binding legal regulations; client database administration.

The legal grounds for processing personal data for the purposes of record keeping of the data subjects and the related communication with them is based on a legitimate interest, since this database is used to gain an overview during the realisation of our business, internal functions necessary for our business (audit, controlling, IT operations, taxes, accounting, administration, database administration, etc.). You can object to legitimate interest processing, we will review your objection and assess whether the mediation meets the regulatory requirements.

Processing of personal data in connection with the fulfilment of legal obligations of the operator, namely providing cooperation with state authorities and public authorities in the exercise of control, the purpose of registration and archiving of documents, performing activities to fulfil obligations arising from the corresponding taxation and accounting regulations.

Legal basis: Processing of personal data for the above-stated purposes is necessary according to the relevant special regulations in accordance with Sec. 13 (1), letter c) of the PDP Act and Art. 6 (1), letter c) of the Regulations.

Processing of personal data in connection with the completion and submission of the contact form published on the operator’s website and the implementation of feedback from the Operator

Legal basis: If you want to contact us via the contact form published on our website, we process your personal data on the basis of your consent to the processing of your personal data in accordance with Sec. 13 (1), letter a) of the PDP Act and Art. 6 (1), letter a) of the Regulations. You may withdraw your consent at any time in the manner stated in Article 9 of this Policy. Withdrawal of consent does not affect the legitimacy of the processing of personal data based on consent prior to its withdrawal. In connection with the processing of your application, the Operator also processes personal data for the purposes of its legitimate interests in the event of a possible dispute in accordance with Sec. 13 (1), letter f) of the PDP Act and Art. 6 (1), letter f) of the Regulations.

The scope of personal data processed: For the purpose of providing feedback based on the completed contact form, we collect and process your personal data encompassing: name, email address, phone number, and personal data that you enter in the text of the contact form. The Operator undertakes to provide the data subject with information about different purpose and other relevant information pursuant to the PDP Act before further processing of personal data, if they intend to further process personal data for a purpose other than the original purpose of data collection.

The Operator is entitled to process personal data to the extent defined in accordance with the specific legal basis for other purposes defined further in this document, provided that other conditions are met.

ARTICLE 4.

YOUR PERSONAL DATA PROCESSING PERIOD

The Operator processes your personal data in case the goods were purchased electronically or at the shop (if the goods purchased in the shop are not paid in cash) for the duration of the contractual relationship, for the time strictly necessary to ensure mutual rights and obligations arising from the contract and for 2 years from the date of expiration of the warranty period for legitimate interests of the Operator (see above). The issued tax invoices are archived for a period of 10 years from their issuance in accordance with Sec. 70 of Act No. 222/2004 Coll. on Value Added Tax, as amended. Due to the need to document the legal reason for issuing tax invoices, orders are also archived for a period of 10 years from the date of sending the order by the customer.
After the termination of the ordered service/contract, personal data are further processed exclusively for the purpose of protecting the Operator and your rights and interests, for the time necessary to ensure their performance. This period is primarily determined according to the limitation periods set by law (Civil Code) or by contract. Our business is also subject to special sectoral regulation (distribution of services), which establishes the retention of certain types of documents relating to the Operator’s business for a period specified by law so that they are able to prove fulfilment of their duties and professional care (usually 10 years). The period of personal data retention arises in particular from Act No. 395/2002 Coll. on Archives and Registries, from Act No. 40/1964 Coll. of the Civil Code and relevant accounting and taxation regulations.
In the event that the client, potential client, client representative or the statutory authority of the legal person who is the client, gives us consent to the processing of personal data specified in this document, we will keep the data for a period specified in the consent to personal data processing. If you revoke your consent, this does not affect the processing of your personal data by the Operator on the basis of other legal grounds, in accordance with this Policy.
If the purpose for processing personal data is terminated, or your consent to the processing of personal data is revoked, we proceed to the erasure of your personal data, unless it is possible to process your personal data on other legal grounds. When handling personal data, we apply the principle of minimisation, which means that as soon as the period during which we are obliged to store personal data has elapsed, we erase your personal data from our databases and information systems. There are strict internal rules on the storage of personal data within our organisation, which ensure that we do not keep information longer than we are authorised or obliged.

ARTICLE 5.

ENTITIES AUTHORISED TO ACCESS YOUR PERSONAL DATA

Personal data may be processed by other entities in addition to the Operator and its employees in order to fulfil the above-mentioned purposes. The Operator carefully selects external partners, who can process your personal data as processors, and entrusts personal data only to those entities that provide sufficient guarantees to ensure appropriate technical and organisational security measures to prevent, in particular, accidental or unlawful erasure, loss, alteration, unauthorised access to personal data transmitted, stored or otherwise processed.

Entities that may have access to your personal information, are or can be in the future:

– third parties who provide us with the technical operation of a certain service, or operators of technologies used by the Operator for these services (typically programming or other support technical services, server services, email distribution or technical administrators or administrators of our email domain);

– third parties who provide us with services related to measuring the traffic of our website and adapting its content to the preferences of users, the website administrator and the intermediaries listed in point 3 of this article, who process your personal data on our behalf; accounting, legal, tax and other advisors with whom we are in the contractual relationship ensuring the provision of such services, to the extent necessary for the provision of such services by security administrator.

As the Operator, we are obliged to transfer some of your personal data on the basis of generally binding valid legal regulations to the recipients listed below in cases where such an obligation arises from law, or is it necessary to determine, exercise or defend the rights and our legitimate interests or that of the third parties. These recipients have the status of independent operators.

Recipients of your personal data can be:

– courts of the Slovak Republic (the legal basis: Act No. 160/2015 Coll., the Contentious Civil Procedure Code, as amended, Act No. 301/2005 Coll., the Criminal Procedure Code);

– bodies active in criminal proceedings (the legal basis: Act No. 301/2005 Coll., the Contentious Civil Procedure Code), tax authorities (the legal basis: Act No. 563/2009 Coll. on Tax Administration (Tax Procedure Code), Act No. 479/2009 Coll. on State Administration Bodies in the Field of Taxes and Fees);

– the service of criminal police, the service of border police, the service of alien police, the service of financial police of the Police Force (the legal basis: Act No. 171/1993 Coll. on the Police Force);

– bailiffs (the legal basis: Act No. 233/1995 Coll. on Bailiffs and Execution (Execution Procedure));

– lawyers (the legal basis: Act No. 586/2003 Coll. on Advocacy);

– social insurance company, health insurance companies, tax office (Act No. 595/2003 Coll. on Income Tax), Labour Inspectorate, Office for Personal Data Protection and other state bodies of supervision and control, Central Office of Labour, Social Affairs and Family (Act No. 125/2006 Coll. on Labour Inspection, Act No. 124/2006 Coll. on Occupational Safety and Health, PDP Act).

As the Operator, we are entitled to entrust the processing of your personal data to intermediaries who are authorised to process personal data on our behalf and are obliged to follow our instructions. In accordance with the regulation, your specific consent is not required for such authorisation. Such mediator is any person who has a special contract with us on the processing of personal data.

Our intermediaries are:

– persons providing accounting services;

– authorised safety technician for occupational health and safety;

– service providers with whom we have concluded a special contract.

Some of the service providers we cooperate with, operate online media channels (websites, social networking sites), providing relevant online advertisements for our products and services on our behalf through these online media channels. You can see advertisement for our products and services if you visit a particular page on social networks. Such service providers include e.g. Facebook, Google, Adobe.

The data subject acknowledges that the range of recipients and intermediaries may change during the processing of personal data. As an operator, we are not obliged to inform the data subject about the narrowing of the circle of recipients or intermediaries mentioned in this article.

ARTICLE 6.

SOURCE OF YOUR PERSONAL INFORMATION

We obtain your personal data directly from you during the performance of our business, during the conclusion and the term of the contract and during the performance of this contract or through other persons, if these persons have your consent.

ARTICLE 7.

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

We do not intend to transfer your personal data to a third country or an international organisation.

ARTICLE 8.

AUTOMATED PROCESSING OF YOUR PERSONAL DATA

When performing our business, we do not use automated processing of your personal data or profiling of personal data.

ARTICLE 9.

YOUR RIGHTS IN PROCESSING OF YOUR PERSONAL DATA

Proper processing of your personal data is important to us and their protection is a matter of course. You can exercise the following rights during the processing of personal data:

– information about the processing of your personal data;

– the content of information, which is stated particularly in this Policy, is the identification and contact details of the operator, the purposes and legal bases of processing your personal data, categories of processed personal data, legitimate interests of the operator, categories of recipients of your personal data as well as our intermediaries, information about transfer of personal data to third countries, retention period of personal data, authorised operators, calculation of your rights, possibility to contact the Office for Personal Data Protection, source of processed personal data, information on occurrence of automated decision-making and profiling, information about the right of withdrawal of the consent, information on whether the provision of personal data is a legal or contractual requirement, or a requirement necessary for the conclusion of the contract, and whether the data subject is obliged to provide personal data, as well as the possible consequences of not providing personal data, (before further processing of personal data) information on other purposes and other relevant information if the operator intends to further process personal data for a purpose other than the original purpose of data collection.

– the right to access your personal data

You have the right to confirmation as to whether or not your personal data is processed and, if so, you have the right to access information about the purposes of their processing, the categories of personal data concerned, recipients or categories of recipients, the period of personal data retention, information about your rights, the right to lodge a complaint with the Office for Personal Data Protection, information on the source of personal data, information on the occurrence of automated decision-making and profiling, information and guarantees in case of transfer of personal data to a third country or international organisation. You have the right to provision of copies of the processed personal data. You can send the request electronically to our email address or in paper form to the address specified in Article 1 of this Policy. We can send you a sample of such request by email. In the event that you request specific personal data, under this point, we will require you to have the request officially verified.

– The right to rectification. Are the personal data we process outdated or inaccurate? For example, have you changed your home address? Please let us know and we will rectify your personal data. You can send the request electronically to our email address or in paper form to the address specified in Article 1 of this Policy. We can send you a sample of such request by email.

– The right to erasure (the right to be forgotten). In some cases established by law, we are obliged to erase your personal data at your request. However, each request is subject to an individual assessment of whether the conditions are met, since, we may have an obligation or a legitimate interest, if it outweighs your interests, to retain personal data. You can send the request electronically to our email address or in paper form to the address specified in Article 1 of this Policy. We can send you a sample of such request by email.

– The right to restriction of processing. If you wish us to process your personal data only for the essential legal reasons or to block your personal data, you can send a request to restrict the processing of personal data electronically to our email address or in paper form to the address specified in Article 1 of this Policy. We can send you a sample of such request by email.

– The right to data portability. If you wish us to provide another operator or another company with your personal data, we will transfer your personal data in the appropriate format, provided that we are not prevented from doing so by any legal or other significant obstacles, to the entity designated by you, if technically possible and if personal data are processed on the basis of your consent, consent to the processing of a special category of personal data, or if personal data necessary for the performance of the contract are processed, and the processing of personal data is performed by automated means, with the proviso that these rights does not have adverse effects on the rights of other persons. You can send the request electronically to our email address or in paper form to the address specified in Article 1 of this Policy, together with an officially verified signature on the request concerned. We demand a verified signature on the request concerned in order to prevent unauthorised disclosure of your personal data to other entities.

– The right to object to processing of your personal data for marketing purposes and automated individual decision-making. If you find or believe that we are processing personal data in contradiction to the protection of your private and personal life, or in contradiction to the law, please contact us and request an explanation or eliminating of the unsatisfactory condition. You can also object directly to the automated decision-making or processing of your personal data for marketing or advertising purposes, if such processing is performed without your consent for the purpose of the legitimate interest of the operator. You can send the request electronically to our email address or in paper form to the address specified in Article 1 of this Policy. We can send you a sample of such request by email.

You are entitled not to be subject to a decision which is based solely on the automated processing of your personal data, including profiling, and which has legal effects related to it or significantly affecting it. This right does not apply if the decision is necessary for the conclusion of the contract or performance of the contract between you and the operator, executed on the basis of a special regulation or international agreement by which the Slovak Republic is bound, and which also establish appropriate measures to protect the rights and legitimate interests of the data subject, or based on your explicit consent to the processing of personal data.

– The right to withdraw your consent to the processing of personal data. In the event that the processing of your personal data is based on your specific consent, e.g. granting the consent to the processing of personal data related to health, or marketing consent (see Article 3 legal basis for the processing of personal data according to individual purposes), you can withdraw your consent at any time. Withdrawal of consent does not affect the legitimacy of the processing of personal data based on consent prior to its withdrawal. You can send a request for withdrawal of consent electronically to our email address or in paper form to the address specified in Article 1 of this Policy. We can send you a sample of such request by email.

– The right to file a motion or complaint with the Office for Personal Data Protection. You can contact the supervisory authority with your motion or complaint regarding the processing of personal data, namely the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, ID: 36 064 220, phone: +421/2/32313220, website: https://dataprotection.gov.sk/uoou/. In order to process your application and unequivocally identify the applicant as a data subject, we are entitled to request additional information. The client or the potential client is obliged to provide only complete and truthful information. The client or the potential client is obliged to update their data in the event of a change, and they bear full responsibility for the consequences of a breach of this obligation.

ARTICLE 10.

EXERCISE OF THE RIGHTS OF THE DATA SUBJECT

We provide all notifications and statements about your exercised rights free of charge. However, if the request is manifestly unfounded or disproportionate, particularly due to being repeated, we are entitled to charge a fee taking into account the administrative costs associated with providing the required information in the amount of €10. When will I receive the response? We will provide you with a statement and, if necessary, information on the measures taken as soon as possible, within one month at the latest. We are entitled to extend the deadline by two months, if necessary, and due to the complexity and number of request. We will timely inform you about a possible extension of the time limit, including the reason of the extension.

ARTICLE 11.

CHANGE OF PRIVACY POLICY

The Operator reserves the right to change or amend this Privacy Policy at any time. Such change or amendment shall in no way affect your rights under the applicable generally binding legal regulations on personal data protection without your explicit consent. In case of any questions about the processing of your personal data or the exercise of the above-mentioned rights, you can contact the Operator using the contacts specified in Article 1 of this Policy.

ARTICLE 12.

OVERVIEW OF SELECTED LEGISLATION GOVERNING THE ISSUE OF PERSONAL DATA

European framework:

The Charter of Fundamental Rights of the European Union

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR)

National legislation:

The Constitution of the Slovak Republic (No. 460/1992 Coll.) Act No. 18/2018 Coll. on Personal Data Protection.

Contact us