PERSONAL DATA PROTECTION PRINCIPLES

CONTACT FORM

The purpose of processing personal data is to register data subjects when sending responses to a submitted question.

Data subjects: natural persons

List of personal data: telephone number, email, name, surname, message content

Legal basis for processing personal data: Art. 6 par. 1 letter a) of the GDPR Regulation

Categories of recipients: entities to which special regulations entrust the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities

and processors: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland  (link)

and processors: Websupport s. r. o., Karadžičova 7608/12, Bratislava – Ružinov district 821 08, 36421928

and processors: the list of clients is located at the company headquarters and is attached to the GDPR documentation

Transfer of personal data to third countries is not carried out.

Deadlines for erasure of personal data:

Automated decision-making including profiling is not carried out.

The data subject has the right to withdraw consent to the processing of personal data concerning them at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal; before providing consent, the data subject must be informed of this fact. The data subject may withdraw consent in the same way as it was given.

MARKETING

The purpose of processing personal data is to send marketing offers, newsletters, and information about products or news.

Data subjects: natural persons

List of personal data: email, name, surname

Legal basis for processing personal data: Art. 6 par. 1 letter a) of the GDPR Regulation

Categories of recipients: entities to which special regulations entrust the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities

and processors: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland  (link)

and processors: Websupport s. r. o., Karadžičova 7608/12, Bratislava – Ružinov district 821 08, 36421928

and processors: the list of clients is located at the company headquarters and is attached to the GDPR documentation

Transfer of personal data to third countries is not carried out.

Deadlines for erasure of personal data:

Automated decision-making including profiling is not carried out.

The data subject has the right to withdraw consent to the processing of personal data concerning them at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal; before providing consent, the data subject must be informed of this fact. The data subject may withdraw consent in the same way as it was given.

MAIL

The purpose of processing personal data is to record incoming and outgoing mail.

Data subjects: natural persons – addressees.

List of personal data: name, surname, title, address, organization name, job position, email address, subject and content of mail

Legal basis for processing personal data: Art. 6 par. 1 letter c) of the GDPR Regulation: Act No. 395/2002 Coll. on archives and registries and on amendments to certain laws as amended, Act No. 305/2013 Coll. on the electronic form of governance by public authorities and on amendments to certain laws (e-Government Act)

Categories of recipients: entities to which special regulations entrust the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities

and processors: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland  (link)

and processors: Websupport s. r. o., Karadžičova 7608/12, Bratislava – Ružinov district 821 08, 36421928

and processors: the list of clients is located at the company headquarters and is attached to the GDPR documentation

Transfer of personal data to third countries is not carried out.

Deadlines for erasure of personal data:

Automated decision-making including profiling is not carried out.

Due to compliance with the principle of minimization, all personal data you provide is a necessary legal requirement to fulfill the purpose of their processing.

ACCOUNTING AND TAX DOCUMENTS

The purpose of processing personal data is to record accounting documents and related agenda processing.

Data subjects: natural persons – clients, employees

List of personal data: name, surname, title, permanent residence address, temporary residence address, telephone number, email address, date of birth, type and number of identification document, signature, bank account number of natural person

Legal basis for processing personal data: Art. 6 par. 1 letter c) of the GDPR Regulation: Act No. 431/2002 Coll. on accounting as amended, Act No. 222/2004 Coll. on value added tax as amended, Act No. 40/1964 Coll. Civil Code as amended, Act No. 152/1994 Coll. on the social fund and on amendments to Act No. 286/1992 Coll. on income taxes as amended, Act No. 311/2001 Coll. Labor Code as amended

Categories of recipients: social insurance company, health insurance companies, tax office and entities to which special regulations entrust the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities

and processors: EkonomProjekt s.r.o., Krivá 23, Košice 040 01, 44019378

and processors: the list of clients is located at the company headquarters and is attached to the GDPR documentation

Transfer of personal data to third countries is not carried out.

Deadlines for erasure of personal data:

Automated decision-making including profiling is not carried out.

Due to compliance with the principle of minimization, all personal data you provide is a necessary legal requirement to fulfill the purpose of their processing.

REQUESTS OF DATA SUBJECTS TO EXERCISE RIGHTS

The purpose of processing personal data is to record and handle requests from data subjects exercising their rights under the Regulation.

Data subjects: natural persons – data subjects / applicants

List of personal data: title, name, surname, permanent residence, email address

Legal basis for processing personal data: Art. 6 par. 1 letter c) of the GDPR Regulation

Categories of recipients: entities to which special regulations entrust the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities

Transfer of personal data to third countries is not carried out.

Deadlines for erasure of personal data:

Automated decision-making including profiling is not carried out.

Due to compliance with the principle of minimization, all personal data you provide is a necessary legal requirement to fulfill the purpose of their processing.

PHOTOGRAPHS, VIDEO RECORDINGS

The purpose of processing personal data is to publish photographs, video recordings on the controller’s website, on social networks, in the controller’s premises, on YouTube channel, in printed materials and promotional materials of the company – both print and electronic form for the purpose of promotion and presentation of the company.

Data subjects: natural persons

List of personal data: title, name and surname, photograph, video recording

Legal basis for processing personal data: Art. 6 par. 1 letter a) of the GDPR Regulation – consent of the data subject

Categories of recipients: entities to which special regulations entrust the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities

and processors: the list of clients is located at the company headquarters and is attached to the GDPR documentation, 000000

Transfer of personal data to third countries is not carried out.

Deadlines for erasure of personal data:

Automated decision-making including profiling is not carried out.

The data subject has the right to withdraw consent to the processing of personal data concerning them at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal; before providing consent, the data subject must be informed of this fact. The data subject may withdraw consent in the same way as it was given.

JOB APPLICANTS

The purpose of processing personal data is to register job applicants sending resumes and accompanying documents.

Data subjects: natural persons – job applicants

List of personal data: name, surname, title, permanent residence, temporary residence, date of birth, telephone number, education, experience, email address, other data within the scope of the resume, cover letter, and job application

Legal basis for processing personal data: Art. 6 par. 1 letter a) of the GDPR Regulation

Categories of recipients: entities to which special regulations entrust the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities

and processors: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland  (link)

and processors: Websupport s. r. o., Karadžičova 7608/12, Bratislava – Ružinov district 821 08, 36421928

and processors: the list of clients is located at the company headquarters and is attached to the GDPR documentation

Transfer of personal data to third countries is not carried out.

Deadlines for erasure of personal data:

Automated decision-making including profiling is not carried out.

The data subject has the right to withdraw consent to the processing of personal data concerning them at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal; before providing consent, the data subject must be informed of this fact. The data subject may withdraw consent in the same way as it was given.

Data subjects whose personal data are processed for specifically defined purposes may exercise the following rights:

Right to request access to their personal data – Right to rectification of personal data – Right to erasure of personal data – Right to restriction of processing of personal data – Right to object to processing of personal data – Right to portability of their personal data – Right to lodge a complaint with a supervisory authority, i.e., the Office for Personal Data Protection of the Slovak Republic

The above rights of the data subject are further specified in Articles 15 to 21 of the Regulation. The data subject exercises these rights in accordance with the Regulation and other relevant legal regulations. The data subject may exercise their rights against the controller through a written request or by electronic means. If the data subject requests oral provision of information, the information may be provided in this way, provided that the data subject has proven their identity.

Cassovia Code a. s. has taken all reasonable personnel, organizational, and technical measures to maximize the protection of your personal data in order to minimize the risk of their misuse. In accordance with our obligation under Article 34 of the Regulation, we inform you as data subjects that if a situation arises where we as the controller breach the protection of your personal data in a manner that is likely to result in a high risk to the rights and freedoms of natural persons, we will notify you of this fact without undue delay.

Laws and related methods of processing your personal data may change. If we decide to update these principles, we will place the changes on our website and inform you about these changes. In cases where there is to be a more substantial change to these principles, or in cases where the law requires us to do so, we will inform you in advance. We ask you to read these principles carefully and to regularly check these principles during further communication with us or when using our website.

If you have any questions regarding the processing of your personal data, including the exercise of the above rights, you can contact our Data Protection Officer provided by EuroTRADING s.r.o. (www.eurotrading.sk), by email at zo@eurotrading.sk. We will properly investigate all your suggestions and complaints and send you a response.

If you are not satisfied with our response, or you believe that we are processing your personal data unfairly or unlawfully, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Námestie 1. mája, 811 06 Bratislava; phone number: +421 /2/ 3231 3214; E-mail: statny.dozor@pdp.gov.sk.