A data subject is a natural person whose personal data we process – data subjects are mainly, but not exclusively, employees and clients. These data subjects, whose personal data is processed in our information systems for specific defined purposes, have rights they can exercise in writing or electronically by contacting the controller’s contact person.

(hereafter referred to as the “PDP Principles”)

in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereafter referred to as the “Regulation”) in accordance with section 19 of Act No. 18/2018 Coll. on Personal Data Protection (hereafter referred to as the “Act”).

The purpose of personal data processing is the reason for which the operator processes the personal data of data subjects in information systems on specifically defined legal bases. Each personal data processing is based on a specific legal basis and is performed for a specifically defined, legitimate and explicitly stated purpose. For the sake of preserving the transparency of provided information and for the sake of ensuring its clarity, the individual legal bases and purposes of personal data processing are stated separately at the end of these PDP Principles and divided according to individual information systems.

A data subject is a natural person whose personal data we process – data subjects are mainly, but not exclusively, employees and clients. These data subjects, whose personal data is processed in our information systems for specific defined purposes, have rights they can exercise in writing or electronically by contacting the controller’s contact person.

The right of access to personal data – the right to obtain a confirmation from the competent person whether the personal data of the data subject exercising the right are processed, as well as the right to gain access to such data. As a data subject, you have the right of access to information about: the purposes of processing, the categories of the given personal data, the list of its recipients, the period of processing and storing, the procedure in each automatic processing, or about the consequences of such processing, etc. (Article 15 of the Regulation). As the controller, we have the right to apply all reasonable measures to verify the identity of the data subject requesting access to data, particularly in connection with online services and identifiers. The controller will respond to a request from the data subject by issuing a confirmation as to whether any personal data related to the data subject is processed. If the controller processes such data, he/she will issue a copy of the personal data upon request. The first copy is issued free of charge. The controller will charge a fee corresponding to the administrative costs associated with issuing a copy for any further copies requested by the data subject. If the data subject requests information using electronic means, the information will be provided in a commonly used electronic form, i.e. by e-mail, unless a different method is requested.

The right of correction – if the controller’s records contain incorrect personal data. The data subject also has the right to have his/her incomplete data supplemented. The controller shall make a correction or supplement personal data without undue delay upon request by the data subject.

The right of erasure – the right to be “forgotten” with respect to data related to the data subject. Due to its nature and importance, this right of the data subject is restricted by further conditions, i.e. the controller shall, after the data subject exercises this right, erase the data subject’s personal data without undue delay if one of the following conditions is met: a) the personal data is no longer necessary for the purposes for which it was collected or otherwise processed; b) the data subject withdraws the consent authorising the processing; c) the data subject objects to personal data processing; d) personal data was processed unlawfully; e) the reason for deletion is compliance with law, a special regulation or an international agreement by which the Slovak Republic is bound; or f) personal data was collected in relation to the provision of information society services to a person under the age of 16.

The data subject shall not have the right of personal data deletion if its processing is necessary: a) for exercising the right of freedom of speech and information; b) for compliance with law, a special regulation or an international agreement by which the Slovak Republic is bound, or for fulfilling a duty in public interest or in exercising public authority granted to the controller; c) for reasons due to public interest related to public health; d) for archiving in public interest, for the purposes of scientific or historical research or statistical purposes, if it is likely that the right of deletion precludes or significantly hinders achieving the objectives of such processing; or e) for demonstrating, applying or defending legal claims.

The controller shall delete the personal data of data subjects upon request without undue delay as soon as it is determined that the data subject’s request is justifiable.

The right to restrict processing can be exercised if the data subject questions the correctness of personal data or of other information in accordance with Article 18 (67) of the Regulation, which restriction may take the form of temporarily transferring personal data to a different processing system or preventing user access to selected personal data, or temporarily removing processing.

The right to data portability – as a data subject, you have the right to have the data you provided to the controller transferred to another controller in a commonly used and machine-readable format, provided that the personal data were obtained on the basis of consent of the data subject or on the basis of a contract and that the processing is performed by automatic means.

The right to object – the data subject has the right to object any time to the processing of his/her personal data for reasons related to his/her specific situation. The data subject has the right to object to the processing of his/her personal data on the basis of a) legal reasons due to the fulfilment of duties in public interest or in exercising public authority, or for legal reasons due to the controller’s legitimate interests; b) personal data processing for the purposes of direct marketing; c) processing for the purposes of scientific or historical research or statistical purposes. As the controller, we shall consider an objection delivered to us in due course. In such a case, we must not, as the controller, continue to process personal data unless we demonstrate necessary legitimate interests for personal data processing which outweigh the rights or interests of the data subject, or reasons for exercising a legal entitlement.

The right to submit a proposal for the initiation of proceedings – the data subject has the right to submit a proposal for the initiation of proceedings by the Office for Personal Data Protection of the Slovak Republic, stating that his/her rights related to personal data protection have been violated.

To ensure the highest level of protection of your personal data, we, as the controller, have adopted appropriate personnel, organisational and technical measures. Our aim is, as far as possible, to prevent or reduce the leakage, misuse, disclosure or other use of your personal data. In the case of a circumstance which may lead to a high risk for the rights and freedoms of natural persons, you, as a data subject, will be contacted immediately (Article 34 of the Regulation).

For the sake of observing the principles of personal data processing provided for in the Regulation and the law, the principles of minimising personal data in particular, we require you, as a data subject, to only provide personal data that is a necessary legal or contractual requirement for fulfilling the purpose of its processing. Please note that failure to provide such mandatory data necessary for concluding a contract may lead to a refusal to enter into a contractual relationship.

Účely spracúvania, právny základ, kategórie príjemcov, doba uchovávania, info o cezhraničnom prenose, kategórie dotknutých osôb a informácie o automatizovanom rozhodovaní vrátane profilovania rozdelené podľa jednotlivých informačných systémov:

When you use the services of our store, you entrust your information to us. These principles of personal data protection will help you understand what data we collect, why we collect it and what we do with it. If you share information with us, we can provide even better services to you. For example, we can display the most relevant search and advertising results for you, help you connect with people or enable you to share faster and more easily. When you use our services, we want you to be clear about how we use information and how you can protect your privacy. This is important; we hope you will take the time to read it carefully. Please remember that control tools for managing your information and your privacy protection and security are available. We tried to make it as simple as possible.