Terms of personal data protection
I.
Basic provisions
Operators of personal data according to § 5 letter o) of Act no. 18/2018 Z.z. on the protection of personal data, as amended (hereinafter the “Act”) is a legal entity
Accencis s.r.o., Karpatské námestie 7770 / 10A, 831 06, Bratislava-Rača, IČO: 153241967, entered in the Commercial Register of the District Court Bratislava I, section: Sro, file no. 147256/B (hereinafter referred to as the “operator”).
1. The contact details of the operator are:
Michal Šimoník
address: Karpatské námestie 7770 / 10A, 831 06 Bratislava-Rača email: michal@accencis.sk
2. Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a specific identifier, such as name, identification number, location data, network identifier or by one or more specific elements of physical, physiological, genetic, mental, economic, cultural or the social identity of that natural person.
3. The controller has not appointed a person responsible for personal data protection. In case of questions, you can contact the manager of the company, who is e-mail: gdpr@accencis.sk
II.
Sources and categories of personal data processed
1. The controller processes personal data that you have provided to him or personal data that he has obtained from third parties during the duration of your employment, obligation or other relationship that is related to the performance of the controller’s activities and affects the processing of personal data.
2. The operator processes your identification and contact data and the data necessary for the performance of the contract.
III.
Legal reason and purpose of personal data processing
1. The legal reason (purpose) of the processing of personal data is
▪ fulfillment of the contract between you and the operator according to § 13 par. 1 letter b) of the Act,
▪ fulfillment of obligations related to the employment relationship and the like
relationship pursuant to Article § 13 par. 1 letter b) of the Act,
▪ fulfillment of the obligations of the operator, which is necessary according to the special regulation in accordance with § 13 par. 1 letter c) of the Act
▪ Your consent to processing for the purposes of providing direct marketing (in particular
for sending business announcements and newsletters) according to § 13 par. 1 letter a) of the Act in the event that no goods or services have been ordered.
2. The purpose of the processing of personal data is
▪ processing your order and exercising the rights and obligations arising from
the contractual relationship between you and the operator; when ordering, personal data is required, which is necessary for the successful completion of the order (name and surname, e-mail, telephone number, if you order goods or services to the company, then it is also necessary to enter company data and also it is necessary to state delivery address), the provision of personal data is a necessary requirement for the conclusion and performance of the contract, without the provision of personal data it is not possible to conclude the contract or perform it by the operator,
▪ fulfillment of obligations in employment relations, which are necessary for concluding an employment relationship and other activities related to the employment relationship,
▪ fulfillment of obligations arising from the law, which are given to the operator according to a special regulation or international agreement by which the Slovak Republic is bound and the operator is obliged to comply with these laws and contracts,
▪ in the performance of duties which are necessary to protect the life, health or property of the person concerned or another natural person,
▪ sending business announcements and performing other marketing activities.
3. There is no automatic individual decision by the operator pursuant to Section 28 of the Act.
IV.
Retention period of personal data
1. The controller shall store personal data
▪ for the time necessary to exercise the rights and obligations arising from the contract
relationship between you and the operator and claiming from these
contractual relations (for a period of 15 years from the termination of the contractual relationship).
▪ for as long as the consent to the processing of personal data for marketing purposes is revoked, for a maximum of 5 years if the personal data are processed on the basis of consent.
▪ for a period specified in special regulations and internal documents
of the operator, which is kept at the registered office and this information is available to the persons concerned upon request, which is attached to the operator’s website, which the person concerned then sends to the operator’s registered office, where he enters the password: “Responsible GDPR”, or it will send this request in electronic form to the e-mail address: gdpr@accencis.sk
2. At the end of the retention period of personal data, the controller shall delete the personal data in the manner prescribed by the Regulation and the Act.
V.
Recipients of personal data (subcontractors of the controller)
1. The recipients of personal data are the persons who
▪ providing website operation services,
▪ keep the operator’s invoicing and accounting,
▪ e-mail tool – mailjet, mailchimp, sendinblue,
2. The operator has no intention transfer personal data to a third country (country outside the EU) or an international organization.
VI.
Your rights
1. Under the conditions set out in the Act you have
▪ the right to access their personal data pursuant to Section 21 of the Act,
▪ the right to correct personal data pursuant to Section 22 of the Act, or a restriction processing according to § 24 of the Act,
▪ the right to delete personal data pursuant to Section 23 of the Act,
▪ the right to object to the processing pursuant to Section 27 of the Act,
▪ the right to data portability according to § 26 of the Act,
▪ the right to withdraw the consent to processing in writing or electronically to the address or the email of the operator referred to in Art. III of these conditions.
2. You further have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to privacy has been violated.
VII.
Terms of personal data security
1. The controller declares that it has taken all appropriate technical and organizational measures to secure personal data.
2. The operator has taken technical measures to secure data repositories and repositories of personal data in paper form, in particular security certificates and standards, anti-virus program, encryption, continuous backups of important data.
3. The controller declares that only persons authorized by him have access to personal data.
VIII.
Final provisions
1. By sending the order via the website, you confirm that you are familiar with the conditions of personal data protection and that you accept them in full.
2. You agree to these terms by checking the agreement via the online form. By checking the consent, you confirm that you are familiar with the conditions of personal data protection and that you accept them in full.
3. The operator is entitled to change these conditions. It will publish a new version of the terms and conditions on its website and at the same time send you a new version of these terms and conditions to the e-mail address you provided to the operator.
These conditions take effect on 05.09.2020
Information on personal data processing (COOKIES files)
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on protection individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “Regulation”) and Act no. 18/2018 Coll. on the protection of personal data and on the amendment certain laws (hereinafter referred to as the “Act”) the operator Accencis s.r.o.,
Karpatské námestie 7770 / 10A, 831 06, Bratislava-Rača, ID: 53241967,
Commercial Register of the District Court Bratislava I, section: Sro, file no. 147256 / B (hereinafter entered in “Operator”), processes your personal data to the extent and under the conditions laid down in special regulations. small data files, so-called COOKIES.
What are COOKIES files and what are their purpose
In order to ensure the proper functioning of this website, we sometimes store yours
A COOKIES file is a small text file that a website stores on your computer or
mobile device while browsing. Thanks to this file, you get a website for a while
keeps track of your steps and preferences so you don’t have to visit them again
You do not have to re-list the site or browse its individual pages.
Temporary COOKIES files are used by the server to store information about your activity so you can continue comfortably where you left off on the web. COOKIES files suggest
server which pages to display so that you do not need to remember and do not have to start
browse the web from scratch. COOKIES act as a bookmark in a web page.
The purpose of the processing and the legal basis for the processing of personal data obtained via COOKIES
The operator processes personal data obtained through COOKIES for statistical purposes
and the purpose of monitoring website traffic.
Personal information of the website user obtained by the operator’s COOKIES files processes on the basis of the user’s voluntary consent to the processing of personal data Art. 6,
para. 1 letter a).
How can I change COOKIES usage settings
Most available browsers accept COOKIES files automatically. If you do not want to use COOKIES files, you will need to either delete them or block them. This is possible by changing your browser settings. Depending on the type of browser you use, you can usually find more information using the Help function or in your browser settings. By refusing to use COOKIES, you may still be able to visit the website, but some of its features may not work properly.
Information on personal data processing (COOKIES files)
1 For more information on deleting and rejecting COOKIES files, as well as more information about these files, see e.g. at www.allaboutcookies.org.
Information on personal data processing (COOKIES files)
2 Information on the processing of personal data (GENERAL INFORMATION)
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data ( furtheronly “Regulation”) and Act no. 18/2018 Coll. on the protection of personal data and on the amendment of a amendments to certain laws (hereinafter referred to as the “Act”) the operator Accencis s.r.o.,
Carpathian Square 7770 / 10A, ID: 53241967 , entered in the Commercial Register
Of the District Court Bratislava I, section: Sro, file no. 147256 / B (hereinafter referred to as the “operator”), processes your personal data to the extent and under the conditions set out in special regulations.
This Information on the processing of personal data (hereinafter referred to as “Information”) provides
basic information about your rights when processing personal data by the controller
and information on access to personal data.
PURPOSE OF PROCESSING, LEGAL BASIS AND STORAGE PERIOD
PERSONAL DATA
1. Control activity
The operator processes your personal data in connection with the performance of:
a) the obligations of companies under generally binding legislation within the meaning of Article 6 (1); 1 letter c) Regulations and § 13 par. 1 letter c) of the Act,
b) contractual conditions by the supplier, control of compliance with working procedures, obligations and tasks arising from the contractual relations and internal regulations of the company, based on the company’s legitimate interest in ensuring the protection of its assets and financial interests and proper performance of the contract within the meaning of Article 6. 1 letter f) Regulations and § 13 par. 1 letter f) of the Act.
c) obligations incumbent on the controller in the processing of personal data which are necessary for the protection of the life, health or property of the data subject or of another natural person (OSH, OPP and others) within the meaning of Article 6 (1); 1 letter d) Regulations and § 13 par. 1 letter d) of the Act.
In the event that an incident is detected, documented, investigated or circumstances are determined according to the individual purposes of processing, the records shall be kept until the completion of the actions necessary to achieve the purpose of the processing of personal data.
2. Accounting
Information on personal data processing (general information)
1 We also process your personal data for the purpose of fulfilling the obligations of the operator in keeping accounts in accordance with Article 6, para. 1, letter c) Regulations and § 13 par. 1 letter c) of the Act. (mainly the obligations arising from Act No. 431/2002 Coll., on Accounting, as amended, and Act No. 222/2004 Coll., on Value Added Tax, as amended). We keep your personal data listed on the accounting documents for a period of 10 years following the year to which these accounting documents relate.
3. Customer-supplier relations
On the basis of a pre-contractual and contractual relationship which you are one of the contracting parties within the meaning of Article 6, para. 1 letter b) Regulations and § 13 par. 1 letter b) of the Act. and also on the basis of a legitimate interest of the operator within the meaning of Article 6 (1). 1, letter f) Regulations and § 13 par. 1 letter f) of the Act, we process your personal data, especially within the framework of customer and supply contracts, as data necessary for the conclusion and ensuring the fulfillment of contractual relations.
The Operator may also process your personal data in connection with the conclusion and performance of the contract on the basis of a legitimate interest within the meaning of Article 6, para. 1 letter f) Regulations and § 13 par. 1 letter f) of the Act for the purpose of insuring receivables or provided benefits and credit risk assessment.
We obtain your personal data either directly from you, if you are a person authorized to act on behalf of the company with which we have a contractual relationship or from your employer, as data necessary to ensure contact, in connection with the performance of the contract, as well as from public registers (trade register) , business register, real estate cadastre and others). In the absence of personal data, the controller may not enter into a contractual relationship with you when the processing of personal data is necessary for the conclusion and performance of the contract.
We store your personal data for the duration of the contractual relationship and subsequently for archiving purposes for a period of 50 years from the expiration of the contract.
4. Legal proceedings and extrajudicial debt recovery
We may also process your personal data for the purpose of out-of-court recovery, proving, asserting, defending the legal claims of the operator. The legal basis for the processing of personal data for the above purpose is the legitimate interest of the company in accordance with Article 6, para. 1, letter f) Regulations and § 13 par. 1 letter f) of the Act.
Your personal data is retained for a period of 50 years from the lawful termination of the legal proceedings or out-of-court recovery. The period of deposit begins on the first day of the year following the year in which the legal proceedings or extrajudicial recovery of the claim took place.
5. Enforcement proceedings
Information on personal data processing (general information)
2 We may also process your personal data for the purpose of execution and related proving, asserting, defending the legal claims of the operator. The legal basis for the processing of personal data for the above purpose is the corrected interest of the controller (Article 6, paragraph 1, letter f) of the Regulation and and § 13 par. 1 letter f) of the Act) in the case ofe, if the operator acts as a creditor in the enforcement proceedings. In the event that the controller acts in the execution proceedings as a liable party or a third party who is obliged to provide co-operation in the execution proceedings, the legal basis for personal data processing is the fulfillment of the controller’s legal obligation as arising from Act no. 233/1995 Coll. on Bailiffs and Enforcement Activities and on Amendments to Certain Acts, as amended. This legal basis follows from Article 6 (1). 1 letter c) Regulations and § 13 par. 1 letter c) of the Act.
We retain your personal data for a period of 50 years from the lawful termination of the enforcement proceedings. The period of deposit begins to run on the first day of the year following the year in which the enforcement proceedings were lawfully terminated.
6. Complaints, complaints, complaints from customers and claims
On the basis of a pre-contractual and contractual relationship which you are one of the contracting parties within the meaning of Article 6, para. 1, letter (b) Regulations and also on the basis of the legitimate interest of the operator within the meaning of Article 6 (1). 1, letter f) Regulations and § 13 par. 1 letter f) of the Act, we process your personal data in order to resolve and process your complaints, grievances, customer complaints and claims (including insurance claims), if you are or have been our customer, or you have sent a complaint or grievance to the company.
We process your personal data for the period of handling the complaint, grievance, customer claim and damage event and subsequently for archiving purposes for a period of 10 years from the end of the calendar year in which the complaint, grievance, customer claim or claim event was settled.
7. Other processing of personal data
Further information on the processing of personal data by the operator for other purposes not listed in this information is available on the company’s website www.accencis.sk
PRINCIPLES OF PERSONAL DATA PROTECTION
We process your personal data only on the basis of the legal conditions specified in the Regulation or the Act. When processing personal data by the controller, you are the person concerned, i.e. the person whose personal data are processed. The Operator has a legal obligation to provide your personal data during inspections, supervisory activities or at the request of authorized state authorities or institutions, if this follows from personal regulations.
The Operator reserves the right to provide your personal data in accordance with administrative regulations, especially lawyers, lawyers, notaries, executors, auditors, insurance companies, in which the operator insures its risks, to banks, Slovenská pošta a.s.,
Information on personal data processing (general information)
3 intermediaries if they have been entrusted with the processing of personal data on behalf of the controller and other authorized entities in accordance with the relevant legal regulations. The controller declares that it has duly concluded contracts with its intermediaries, which ensure an adequate level of personal data protection, in accordance with the applicable legislation relating to personal data protection.
Your personal data will be stored securely, in accordance with the security policy of the operator. Access to your personal data will only be granted to persons authorized by the controller to process personal data, which will be processed on the basis of the controller’s instructions, in accordance with the controller’s security policy.
Your personal data is backed up, in accordance with the operator’s retention rules. Your personal data will be completely deleted from the backup storage as soon as possible in accordance with the backup rules. Personal data stored in back-up storage facilities serve to prevent security incidents, in particular data breaches due to a security incident. The Operator is obliged to ensure data backup in accordance with the security requirements of the Regulation and the Act.
Your personal data processed for the purposes stated in this Information is not subject to automated decision-making, including profiling, nor do we disclose or transfer your personal data to third countries.
RESPONSIBLE PERSON
The safe processing of personal data and the compliance of the processing with the Regulation and the Act is supervised by the Responsible Person, to whom you can turn if you exercise your rights.
Contact details of the Responsible person: Correspondence address:
Email: michal@accencis.sk
RIGHTS OF THE PERSON UNDER REGULATION AND LAW
Regulation resp. The Personal Data Protection Act contains detailed information on your rights as a data subject, the means of redress available, as well as their limitations (in particular Articles 15-22, 77, 79, 82 of the Regulation, § 21 – 28, § 38 of the Act). Whenever you request information about the processing of personal data that concerns you, you may request the correction or deletion of your personal data, or the restriction of their processing, you may also object to the processing of personal data based on a legitimate interest in the right to data transfer. Below in the text are summarized the most important provisionsvenia.
The right to information
Accencis, s.r.o. , Carpathian Square 7770 / 10A 831 06,
Bratislava-Rača, Responsible person GDPR Michal Šimoník,
Information on personal data processing (general information)
If the controller processes your personal data, it must provide you with information about the data concerning you, even without your specific request for it, including the main characteristics of the processing of personal data such as purpose, legal basis and retention (processing), identity and contact details of the controller and, where applicable, its representative, recipients of personal data (in case of transfer of personal data to third countries, also indication of reasonable and appropriate safeguards), legitimate interests of the controller or third parties in case of personal data processing based on legitimate interest; data protection and your remedies (including the right to complain to the supervisory authority). In the case of automated decision-making, including profiling, the data subject must be informed in a comprehensible manner of the procedure used, as well as of the significance and expected consequences of such processing for the data subject. The Operator will provide you with the above information by making the Information on the processing of personal data available. The above does not apply to the extent that you already have the information as an affected person.
Right of access to data
You have the right to obtain confirmation from the controller as to whether or not the personal data concerning you are processed and, if so, you have the right to obtain access to this personal data and the following information: purposes of processing, categories of personal data concerned, recipients or categories recipients to whom personal data have been or will be provided, in particular recipients in third countries or international organizations, the expected retention period of personal data, if this is not possible, the criteria for determining it, the data subject’s right to protection of his or her personal data and his or her remedies ( including the right to complain to the supervisory authority), as well as information on the source of the personal data, if the personal data have not been obtained from you as the data subject. Upon your request, the controller will provide a copy of your personal data that is processed. For any additional copies you request, the operator may charge a reasonable fee corresponding to the administrative costs. The right to obtain a copy must not adversely affect the rights and freedoms of others. The operator will provide you with information on the possibility, the procedure used, any costs and other details on the provision of a copy upon receipt of your request. If you have submitted the application by electronic means, the information will be provided to you in a commonly used electronic form, unless you request otherwise.
Right to repair
You have the right to have the operator correct incorrect personal data concerning you without undue delay. With regard to the purposes of processing, you have the right to supplement incomplete personal data, including by providing additional information.
Right of erasure (right to “forget”)
You also have the right to have the controller delete the personal data concerning you without undue delay, and the controller is obliged to delete without undue delay
Information on personal data processing (general information)
5 personal data if certain reasons are met. The reasons why the controller is obliged to delete your personal data at your request are, for example: personal data are no longer needed for the purposes for which they were collected or otherwise processed; you withdraw the consent on the basis of which the processing is carried out and there is no other legal basis for the processing; personal data have been processed illegally or object to the processing and there are no legitimate reasons for the processing; personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which the controller is subject, or personal data have been obtained in connection with the provision of information society services. The operator will not be able to comply with your request in some cases, e.g. where the processing of personal data is necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation requiring processing under Union law or the law of the Member State to which the controller is subject, or for a public interest task in the field of public health, for the purposes of archiving in the public interest, for proving, asserting or defending legal claims.
Right to restrict processing
You have the right to have the operator restrict processing in one of the following cases:
(a) challenge the accuracy of the personal data during a period which allows the controller to verify the accuracy of the personal data;
(b) the processing is unlawful and you object to the deletion of the personal data and request that their use be restricted ;
(c) the controller no longer needs personal data for processing purposes, but you do need them to prove, assert or defend legal claims;
(d) you object to the processing, pending verification that there are legitimate reasons on the part of operator outweighs your legitimate reasons.
Where processing is restricted for the reasons set out above, such personal data, with the exception of storage, shall only be processed with your consent or to prove, assert or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of overriding public interest. state. The operator will inform you before the processing restriction is lifted.
Right to data portability
You have the right to obtain personal data concerning you and which you have provided to the operator, in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another operator without the operator to whom you have provided this data preventing you if:
(a) the processing is based on your consent or on a contract (to which you are a party), and
(b) if the processing is carried out by automated means.
Information on personal data processing (general information)
6 When exercising your right to data transfer, you have the right to transfer personal data directly from one controller to another, if technically possible. The exercise of the right of data portability is without prejudice to the provisions governing the right of erasure. The right to data portability must not adversely affect the rights and freedoms of others.
The right to object
You have the right at any time to object, for reasons relating to your specific situation, to the processing of personal data concerning you which is carried out on the basis of the legitimate interests of the controller, including objections to profiling based on those provisions. The controller may not further process personal data unless it demonstrates the necessary legitimate reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or the reasons for proving, asserting or defending legal claims.
The right to withdraw consent at any time
In cases where the controller processes your personal data on the basis of your consent, you have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal. Withdrawal of consent must be as simple as giving it. You can deliver the withdrawal of consent by post to the address of the operator’s registered office or the e-mail address of the Responsible Person, or in the manner specified in the consent.
The right to lodge a complaint to the supervisory authority
If you believe that the processing of personal data concerning you is in conflict with the Regulation or the Act, you have the right to file a complaint to the supervisory body, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; phone number: + 421/2/323 132 14; e-mail: statny.dozor@pdp.gov.sk.
The right to an effective remedy
You have the right to a judicial remedy if you believe that your rights have been violated as a result of the processing of your personal data in violation of the Regulation or the Personal Protection Act. You can bring an action (action) in the court of the Member State where the operator has an establishment or in the court of your habitual residence.