PERSONAL DATA PROCESSING CONDITIONS
Article I.
Introductory Provisions
The operator of personal data processing on this website is the business entity
Cassovia Code a.s.,
with its registered office at Skladná 1/B,
ID No.: 47 217 952,
040 01 Košice – Staré mesto,
registered at the Municipal Court in Košice, section: Sa, file no.: 1784/V.
Contact details: office@cassoviacode.com
These personal data processing conditions are intended to inform the data subjects (who are our customers or website visitors) about the processing of personal data at Cassovia Code a.s.
The operator is responsible for processing personal data in accordance with the European Parliament and Council Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons regarding the processing of personal data and on the free movement of such data, more commonly known as GDPR.
The operator has implemented all appropriate technical and organizational measures to ensure the protection of personal data.
The operator does not designate a specific responsible person in the sense of GDPR. Any questions regarding the processing of personal data in our company should be directed to the statutory body.
What is personal data?
“Personal data” are any information concerning an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, especially by reference to an identifier such as a name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Article II.
Purposes of processing, legal basis for processing, categories of data subjects, retention period for personal data, recipients of personal data
| Purpose of processing | Legal basis for processing | Categories of data subjects | Category of personal data | Retention period of personal data | Category of recipients of personal data |
|---|---|---|---|---|---|
| For the purpose of entering into a contract with the customer | Article 6(1)(b) GDPR | Processing necessary for the performance of contractual obligations | Customers, potential customers, or physical persons acting on behalf of customers | Common personal data, especially: Business name, first and last name, telephone number, email, relationship to customers, role, data on contractual relationship | Until the purpose for which they were obtained is fulfilled, and 5 years from the last provision of service. |
| Fulfillment of obligations according to other legal provisions | Fulfilling a legal obligation under Article 6(1)(c) GDPR, public interest under Article 6(1)(e) GDPR | Customers, website visitors | Personal data whose scope is determined by a special regulation | Until the purpose for which they were obtained is fulfilled and 5 years thereafter | Public authorities to whom the obligation to provide personal data arises from the law (e.g., Slovak Police, Courts, etc.) |
| Processing is necessary for the purposes of the legitimate interests we hold as a business | Article 6(1)(f) GDPR | Customers, website visitors | Name, surname, email, telephone contact, data on the scope of services provided | Until the purpose for which they were obtained is fulfilled and 5 years thereafter | Your personal data may be shared with third parties who provide services to us, such as law firms, accountants, etc. These people process personal data only on our behalf and for the purpose for which we obtained them. |
| Use of cassovia code website cookies | Article 6(1)(a) GDPR Processing based on consent | Website visitors | Common personal data and online identifiers (IP address) and data contained in cookies | Retention times and more information about the use of cookies can be found here | We may share your personal data with third parties who provide services to us, such as web hosting providers, content management agencies, etc. These persons process personal data only on our behalf and for the purpose for which we obtained them. |
Advertising purposes | Article 6(1)(a) GDPR Processing based on consent | Individuals who agreed to receive the newsletter, individuals who used the contact form on the website | In the scope of data found in our online form, in the scope found in public listings | Until revocation | Operators of services such as Mailchimp and similar. |
When providing personal data, which is a legal or contractual requirement, the data subject is obliged to provide these personal data. Without providing personal data, it is not possible to provide our services.
Our legitimate interest in processing your personal data is the protection of our contractual and legal claims, such as the emergence of debt, claims, compensation for damages, and similar.
We would like to remind you that as a person affected by the processing of personal data, you have an obligation to provide accurate and current personal data. In case of a change in personal data, the data subject is obliged to report the change to the operator without delay.
Your consent to the processing of personal data serves as the basis for processing personal data for the purposes of cookies located on our website. You can revoke your consent to the use of cookies that are not necessary for the operation of our website here:
Your personal data are not transferred to third countries, except for cookies prepared by third parties and in cases where we use standard software solutions from third parties such as (Office 365). However, your data is only transferred to countries that ensure an adequate level of protection as we have in the European Union.
Article III
Your rights as a data subject
Your rights as a data subject are defined in Chapter 3 of the GDPR.
What rights do you have?
Revoke consent – in cases where we process your personal data based on your consent, you have the right to revoke this consent at any time. Consent can be revoked electronically, at the contact person’s address, in writing, by notification of withdrawal of consent, or in person at the office. Revocation of consent does not affect the legality of processing based on consent before its withdrawal.
Right to access – you have the right to obtain a copy of the personal data we hold about you, as well as information on how we use your personal data. In most cases, your personal data will be provided in written form, unless you request another technical method of provision. If you have requested the provision of this information by electronic means (e.g., email), the data will be provided electronically, if technically possible.
Right to rectification – we take reasonable steps to ensure the accuracy, completeness, and timeliness of the information we hold about you. If you believe that the data we hold are inaccurate, incomplete, or outdated, please do not hesitate to ask us to modify, update, or supplement this information.
Right to erasure (to be forgotten) – you have the right to ask us to delete your personal data, for example, if the personal data we obtained about you is no longer necessary for the original purpose of processing. However, your rights must be assessed in view of all circumstances. For example, we may have certain legal obligations (e.g., archiving, etc.), which means that we may not be able to comply with your request.
Right to restrict processing – under certain circumstances, you are entitled to ask us to stop using your personal data. This is the case, for example, when you believe that the personal data, we hold about you may be inaccurate or when you think we no longer need to use your personal data.
Right to data portability – under certain circumstances, you have the right to ask us to transfer personal data that you have provided to us to another third party of your choice. The right to data portability, however, only applies to personal data that we have obtained from you based on consent or on a contract in which you are one of the contracting parties.
Right to object – you have the right to object to the processing of data based on our legitimate interests. If we do not have a compelling legal reason for processing and you object, we will no longer process your personal data.
You also have the right to file a complaint with the supervisory authority (Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Tel: 02/ 32 31 3214, Email: statny.dozor@pdp.gov.sk)
If personal data are processed based on written consent, the data subject has the right to revoke their consent at any time. Revocation of consent does not affect the legality of processing based on consent before its revocation.
For information regarding the protection of personal data, as well as to exercise your rights as a data subject, please do not hesitate to contact us:
Contact details:
office@cassoviacode.com
Person responsible for data processing:
Ján Berežný, Chairperson of the Board
Kosice, September 1, 2024