Processing of personal data in accordance with the Regulation of the European Parliament and of the Council of the EU
within the meaning of Articles 13 to 22 of Regulation (EU) No. 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “General Data Protection Regulation” or GDPR – General Data Protection Regulation) and the provisions of § 19 et seq. of Act no. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain laws (hereinafter referred to as the Personal Data Protection Act).
According to Article 13 of the General Data Protection Regulation, resp. the provisions of Section 19 of the Personal Data Protection Act require that the operator of the website: pastorkalt.sk (hereinafter referred to as the “operator”) is obliged to provide the data subject with the following information about the person concerned:
I. Contact details of the operator
Name: PASTORKALT a.s.
Address: Považská 26, 940 02 Nové Zámky
Ident.No.: 314 373 89
Tax ident. No.: 2020413747
VAT ident. No.: SK2020413747
Contact: Ing. Roman Višňovský
II. Purpose of personal data processing
The operator shall process the personal data of the data subject for the following purpose:
- feedback contact
- making a non-binding quotation
III. Range of processing the personal data of the data subject
For the above purpose, the operator shall consciously process the following personal data from the data subject:
- Name and Surname
- E-mail address
Personal data processed by the controller unconsciously from the data subject:
- IP address
IV. Data retention period of the data subject
Personal data of the data subject shall be processed, collected, archived and securely stored for as long as necessary for the purposes for which the data were processed collected and omitted the legal reason for their possible archiving or the granting of consent to the processing of personal data of the data subject. At the data subject’s request to delete data, all personal data will be permanently deleted and the associated orders (if any) will be anonymized.
V. Method of collecting, recording and securing the personal data of the data subject
The most often we obtain the data of the data subject directly from the data subject, for example by filling in the contact form. In this case, the collection of personal data is voluntary and does not entail any contractual or legal obligation. The website operator is obliged to record all user requests for downloading, correcting and deleting the data of the person concerned. In securing the personal data of the data subject, the controller has modern technical and security mechanisms to protect the processed personal data against unauthorized access or transmission, against their loss or destruction, or other possible misuse. The controller shall not transfer or intend to transfer the personal data of the data subject to a third country or an international organization.
VI. Data subject’s rights regarding the processing of his / her personal data
The General Data Protection Regulation and the Personal Data Protection Act lay down the general conditions for the exercise of the individual rights of the data subject. However, this does not automatically mean that the operator will be satisfied with the exercise of individual rights, as exceptions or exemptions may also apply in a particular case, some rights are linked to specific conditions which may not be met in any case. A request for a specific right will always be dealt with and examined by the operator in terms of legislation and applicable exceptions.
i. With the consent of the data subject, the controller may also process other personal data of the data subject for a purpose other than that referred to in point II., resp. personal data other than those necessary to achieve a specific purpose within the meaning of point III. If the processing of personal data is subject to the consent of the data subject, the data subject shall have the right at any time to withdraw his consent to the processing of personal data. The data subject may or may not give the controller consent to the processing of personal data – the lack of consent has no negative impact on the data subject. The withdrawal of the data subject’s consent to the processing of personal data relating to him shall not affect the lawfulness of the processing of personal data based on the consent before his or her withdrawal. The data subject may withdraw the consent to the processing of personal data in the same way as the consent.
ii. The data subject shall have the right to ask the operator whether his personal data are processed or not. The data subject shall have the right to request from the operator access to personal data concerning him. Upon this request, the operator of the data subject shall issue a certificate with information on the processing of his personal data. The operator is obliged to provide the data subject with his / her personal data which he / she processes. The operator may charge a reasonable fee corresponding to administrative costs for the repeated provision of personal data requested by the data subject. The operator shall provide personal data to the data subject in the manner required by the operator.
iii. The data subject shall have the right to have his or her personal data processed, correct, up-to-date and complete. If the personal data of the data subject are outdated, the data subject shall have the right to ask the operator to correct or supplement them. The data subject shall have the right to have the personal data concerning him incorrectly corrected without undue delay. With regard to the purpose of processing personal data, the data subject has the right to add incomplete personal data.
iv. The data subject has the right to object to the processing of his personal data as well as the right to ask the operator to delete personal data that is processed illegally, beyond the purpose for which it was provided or if the data subject withdraws his consent.
v. The data subject shall have the right to object to the processing of his personal data carried out on the basis of the public interest or based on the legitimate interests of the operator or a third party, including profiling. The operator shall not further process personal data unless it demonstrates the necessary legitimate interests in the processing of personal data which override the rights or interests of the data subject or the grounds for exercising a legal claim.
vi. The data subject shall have the right to object to the processing of personal data concerning him for the purpose of direct marketing, including profiling, in so far as it relates to direct marketing. If the data subject objects to the processing of personal data for the purpose of direct marketing, the operator shall not further process the personal data for the purpose of direct marketing.
vii. The data subject shall have the right not to be subject to a decision based solely on the automated processing of personal data, including profiling, concerning or affecting him significantly.
viii. The data subject shall have the right to have the personal data concerning him erased by operator without undue delay. The data subject shall have the right to ask the operator to restrict the processing of personal data if the data subject objects to the accuracy of the personal data during the period allowing the operator to verify the accuracy of the personal data, the processing of personal data is illegal and the data subject objects to the deletion of the personal data and asks instead to restrict their use, the operator no longer needs personal data for the purpose of processing personal data but the data subject needs them to claim a legal claim, or the data subject objects to the processing of personal data on the basis of the public interest or on the basis of the legitimate interests of the operator or of a third party until verification of the legitimate reasons on the part of the controller over the legitimate reasons of the data subject.
ix. Where the processing of personal data has been restricted in addition to retention, the operator may only process personal data with the consent of the data subject or for the purpose of exercising a legal right, for the protection of persons or for reasons of public interest. The data subject shall be informed by the operator before the restriction on the processing of personal data is lifted.
x. The data subject has the right to ask the operator to provide his / her personal data in electronic form, which will enable transfer of personal data of the data subject to another company, resp. third party. The data subject shall have the right to obtain personal data relating to him which he has provided to the operator in a structured, commonly used and machine-readable format and shall have the right to transfer such personal data to another operator if technically possible and if the operator processes the personal data the person concerned or under a contractual relationship.
xi. The data subject shall have the right to initiate proceedings for the protection of personal data in order to ascertain whether there has been a breach of the right of natural persons in the processing of their personal data or a breach of the Personal Data Protection Act or a special regulation; it is reasonable and expedient to impose remedial measures or a fine for breach of this Act or a special regulation for the protection of personal data. Proceedings shall commence at the request of the person concerned or of a person claiming to be directly concerned by his rights established by this Act. The particulars of the petition of the data subject or of the person claiming to be directly affected by their rights established by this Act, as well as the procedure for the protection of personal data itself, are regulated by § 100 of Act no. 18/2018 Z.z. on the protection of personal data.
xii. Information provided by the operator under the right of the data subject shall be provided free of charge. If the request of the data subject is manifestly unfounded or disproportionate, in particular because of its recurring nature, the operator may charge a reasonable fee taking into account the administrative costs of providing the information or refuse to act upon the request.
The data subject may address his / her request to exercise the data subject’s rights described above with respect to the processing of his / her personal data by post or e-mail, with the data subject’s request being handled by the operator and communicated to the data subject. application has been submitted.
VII. Supervisory Authority of the Data Protection
Authority of the Slovak Republic
Hraničná 12
820 07, Bratislava 27
Slovenská republika
Ident. No: 36064220
E-mail: statny.dozor@pdp.gov.sk