Information on your rights as a data subject in relation to the processing of your personal data

This information applies to, and is the same for, all categories of data subjects whose personal data our company processes.

A) Right of access to data

As a person whose personal data we process, you have the right to obtain from us as the Controller confirmation as to whether personal data concerning you are being processed, and, where that is the case, you have the right of access to that personal data and to the following information:

the purposes of the processing;
the categories of personal data concerned;
the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if that is not possible, the criteria used to determine that period;
the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing, or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the personal data were not collected from you as the data subject, any available information as to their source;
the existence of automated decision-making, including profiling, and, in those cases, at least meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you as the data subject.

If you ask us for the data named above, we will, on the basis of your request, provide a copy of the personal data we process about you. For any further copies you request, we can charge a reasonable fee based on administrative costs. If you make this request by electronic means, the information will be provided in a commonly used electronic form, unless you ask for it otherwise. Please note, however, that under Art. 15(4) of the Regulation the right to obtain a copy of your personal data must not adversely affect the rights and freedoms of others.

The purposes, the envisaged retention period of personal data and the recipients of your personal data for the individual purposes of processing are set out on this website. We do not send your personal data to international organisations or to third countries within the meaning of the Regulation, apart from the exceptions named in the individual information notices for specific data subjects.

B) Right to rectification

If you believe that inaccurate, out-of-date or incomplete personal data about you are being processed, you have the right to request the rectification of the personal data processed. You have the right to have us rectify inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

C) Right to erasure (right to be forgotten)

Under the conditions set out in Art. 17 of the Regulation, you are entitled to request the erasure of your personal data, and the Controller is obliged to erase your personal data without undue delay. You can ask for such erasure in particular where: (i) the Controller no longer needs the personal data for the purposes for which they were processed, (ii) you withdraw the consent on which the processing is based and, at the same time, there is no other legal basis for the processing, (iii) the personal data were processed unlawfully, (iv) the personal data must be erased to comply with a legal obligation under Union law or the law of the Member State to which the Controller is subject, (v) you object to the processing of your personal data where our processing is based on our legitimate interest and no overriding legitimate grounds for the processing exist, or at any time where you object to the processing of personal data where the processing is based on a legitimate interest that is direct marketing of our goods and services.

We also inform you that if we published your personal data with your consent and are obliged to erase them as described above, then taking account of available technology and the cost of implementation, we will take reasonable steps, including technical measures, to inform other controllers which process the personal data that the data subject has requested the erasure of any links to, or copy or replication of, those personal data.

We also inform you that we are not obliged to erase your personal data on the basis of your request where the processing is necessary: a) for exercising the right of freedom of expression and information; b) for compliance with a legal obligation which requires processing by Union law or the law of the Member State to which the Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller; c) for reasons of public interest in the area of public health in accordance with Art. 9(2)(h) and (i), as well as Art. 9(3) of the Regulation; d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing, or e) for the establishment, exercise or defence of legal claims.

D) Right to restriction of processing

As a data subject you have the right to have the Controller restrict the processing of your personal data where: (i) you as the data subject contest the accuracy of the personal data processed, for a period enabling the Controller to verify the accuracy of the personal data, (ii) the processing of personal data is unlawful and you as the data subject oppose the erasure of the personal data and request the restriction of their use instead, (iii) the Controller no longer needs the personal data for the purposes of the processing, but you as the data subject need them for the establishment, exercise or defence of legal claims, and (iv) where you as the data subject object to the processing of personal data on the basis of legitimate interest, pending the verification of whether the legitimate grounds of the Controller override your legitimate grounds.

Where the processing of your personal data has been restricted, such personal data, with the exception of storage, are processed only with your consent as the data subject, or for the establishment, exercise or defence of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State. Where you as the data subject have obtained restriction of the processing of your personal data, the Controller is obliged to inform you that the restriction of processing will be lifted, before it happens.

E) Right to information about recipients in accordance with Art. 19 of the Regulation

As a data subject you have the right to request information about which recipients we as the Controller informed that your personal data had been rectified or erased, or that the processing had been restricted, unless this proved impossible or involved disproportionate effort.

F) Right to data portability

Where the processing of personal data is carried out (i) on the basis of your consent as the data subject, or (ii) for the performance of contractual obligations (that is, on the basis of a concluded contract), and at the same time the processing of your personal data as the data subject is carried out by automated means and it is technically feasible, you as the data subject have the right to receive the personal data concerning you which you provided to us in a structured, commonly used and machine-readable format, and you also have the right to transmit those personal data directly to another controller without us obstructing it in any way. The exercise of this right is without prejudice to your right to erasure under Art. 17 of the Regulation. We also inform you that the exercise of this right must not adversely affect the rights and freedoms of others.

G) Right to object to the processing

You have the right to object at any time to the processing of personal data which is carried out for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, or where the processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party. In such cases we will assess whether the legitimate interests of our company override the grounds you named in your objection.

Where your personal data are processed for scientific or historical research purposes or statistical purposes, you have the right to object, on grounds relating to your particular situation, to the processing of personal data concerning you. We must not process your personal data further unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject, or unless grounds exist for the establishment, exercise or defence of legal claims.

Where your personal data are processed for direct marketing purposes on the grounds of the legitimate interest of our company, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, and the personal data must then no longer be processed for direct marketing purposes.

Where you as the data subject granted the Controller consent to the processing of personal data, you have the right to withdraw such consent at any time, in the same way the consent was granted, in particular by written notice to the Controller. Withdrawal of consent does not affect the lawfulness of the processing of your personal data carried out by the Controller up to that point.

I) Right to lodge a complaint with a supervisory authority

If you believe that the processing of personal data breached the legislation on personal data protection, you are entitled to lodge a complaint with a supervisory authority. In the territory of the Slovak Republic, this supervisory authority is Úrad na ochranu osobných údajov, Hraničná 12, 820 07 Bratislava 27, web: https://dataprotection.gov.sk/uoou/, e-mail: statny.dozor@pdp.gov.sk, tel.: +421 /2/ 3231 3214.

J) Information on whether the provision of personal data is a statutory or a contractual requirement

The Controller processes personal data without the consent of the data subject where:

a) the processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract. This is a contractual requirement to provide personal data (that is, a requirement that is necessary to enter into a contract), and the data subject is not obliged by law to give the data to the Controller, on the understanding that in that case a contract with the Controller cannot be concluded.

b) the processing is necessary for compliance with a legal obligation of the Controller. In that case the provision of personal data is a statutory requirement and the data subject must provide it (the personal data are then processed even without the consent of the data subject).

c) the processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child. In such a case we process your personal data even without your consent, but you can object to the processing at any time in accordance with Art. 21 of the Regulation (see the text above).

Whether, in an individual case, the provision of personal data by you as the data subject is a statutory or a contractual requirement follows from the individual legal bases of processing, which are named separately for each purpose of the processing of personal data. Where we process your personal data without your consent because the law imposes that duty on us, you are in those cases obliged to give us the personal data required by law. If you refuse to provide it, we will have to proceed in accordance with the provisions of the relevant legislation.

K) Existence of automated individual decision-making, including profiling

Our company does not carry out automated individual decision-making, including profiling (profiling can in certain cases be carried out when processing personal data on social media, see the information notice for social media users).