Information on the processing of personal data for prospective clients and applicants
Fractera, s.r.o., as the controller, processes your personal data for several purposes of processing, which are set out below.
First of all, however, we would like to explain what is meant by “personal data” in the context of our company.
Personal data
Personal data are data relating to an identified or identifiable natural person who can be identified directly or indirectly, in particular data provided by a client and/or a prospective client acting as an applicant for the provision of a service or the conclusion of a contract (hereinafter the “client”), personal data processed for the purpose of contacting you with new offers of products and services. Personal data can also be data you gave us when granting consent to the processing of personal data, or data we process in fulfilling our legal obligations (mainly identification, contact and biometric personal data, data needed to verify your identity and similar).
Purposes, legal basis of processing, retention period and recipients of personal data
1. Information on the processing of personal data for the purpose of registering an interest
For this purpose we process the personal data necessary to register an interest and to use certain related benefits (first name, last name, telephone number, e-mail address). We process this personal data on the legal basis of your consent in accordance with Art. 6(1)(a) of the Regulation, which you can withdraw at any time by writing to the registered address of our company or by e-mail to the address of our data protection officer. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We keep your personal data for the duration of your registration, but for a maximum of 5 years from the granting of consent.
2. Information on the processing of personal data for the purpose of marketing contact with clients or prospective clients
Marketing contact on the basis of the data subject’s consent
If you are not yet a client of our company, that is, you have never used our product or services, but you want to be informed about our current offers, you can ask us to send you promotional offers. In that case we will ask you for consent to the processing of your personal data. You grant such consent for a period of 5 years from the moment it is given. You can withdraw it at any time. Please note that withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
3. Information on the processing of personal data for the purpose of records management
Under Act No. 395/2002 Coll. on archives and records and on the amendment of certain acts, as amended, we are obliged to keep records that arise from our activity. For this purpose we process your correspondence data where you send correspondence to us or we send it to you. The legal basis for processing your personal data for this purpose is therefore the act named above, in accordance with Art. 6(1)(c) of the Regulation. We keep this correspondence in our company for 10 years.
4. Information on the processing of personal data for the purpose of communication
E-mail / telephone call / chat
If you contact us with a request, a question or a suggestion by e-mail, by telephone or directly on our website through chat (instant message), and you give us your personal data in the process, we will process that personal data confidentially and solely to handle your request. Your e-mail address is considered personal data only where it is not generic and you can be identified from it, in particular in connection with your first name and last name.
Legal basis of the processing of personal data
The legal basis for processing your personal data can be either Art. 6(1)(b) of the Regulation (where it is needed to perform a contract or within pre-contractual relations) or Art. 6(1)(f) of the Regulation, that is, the legitimate interest of our company, where you ask us for information without a further interest in entering into a contractual relationship. Our legitimate interest is the interest in answering your questions and providing you with the information you ask for.
How long we process and keep your personal data
We will process the personal data provided in this way for the time needed to handle the request, for the purpose of contacting you back. The personal data are then destroyed. Where the communication served to perform a contract already concluded, or to give information about a contract already concluded, and such data exist in written form, they are kept further together with the contract documentation.
5. Information on the processing of personal data for the purpose of recording exercised rights of data subjects
If you exercise your rights as a data subject, that is, a person whose personal data we process, we keep a record of it, because we register such an enquiry and we also register our answers to the questions or requests you send, on the basis of Art. 15, 16, 17, 18, 20, 21 and 22 of the Regulation. For this purpose we process all categories of your personal data, for a period of 5 years.
List of recipients for the purposes named above
Our company processes your personal data mainly through its employees, who are bound by a duty of confidentiality and can process your personal data only to the extent and in the manner necessary to perform their work duties. To achieve the purposes of processing, it can be necessary for us to provide your personal data to other parties (recipients) as well.
Depending on the circumstances of your relationship with our company, the recipients of your personal data can be law firms, audit companies, and parties that provide us with services such as Slovenská pošta, a courier or transport companies.
We inform you that, under Art. 4(9) of the Regulation, public authorities which may receive personal data in the framework of a particular inquiry are not regarded as recipients. Even so, we inform you that in the exercise of investigative powers we are obliged to provide your personal data to law enforcement authorities, courts, the Office for Personal Data Protection of the Slovak Republic, the National Bank of Slovakia, and possibly other public authorities, where they call on us to do so in accordance with the law.
Cross-border transfer of personal data
We also inform you that a transfer of your personal data to a third country (outside the EU) or to an international organisation takes place in connection with the storage of some of your data and with the use of certain online tools. Where we transfer personal data to third countries, we do so only on the basis of an adequacy decision of the EU Commission (for example the EU-US Data Privacy Framework), or we require other safeguards for the protection of personal data (for example standard contractual clauses) in accordance with Art. 46 of the Regulation.