Terms of processing personal data
- Personal data controller:
The personal data controller, i.e. the entity that processes the personal data of the data subject, is the company Rodinná firma, s. r. o., with its registered office at Raková 1631, 02351 Raková, Company ID: 51689871 (hereinafter referred to as the „Controller“). We value the privacy of all persons and respect their right to the protection of personal data. The Controller proceeds with the processing of personal data in accordance with Act No. 18/2018 Coll., on the protection of personal data and on amending and supplementing certain laws of the data subjects Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), (hereinafter referred to as the “Act”). In connection with our activities, we process personal data for various purposes. In most cases, the processing of personal data is necessary pursuant to a special regulation or an international treaty by which the Slovak Republic is bound. The operator processes personal data only on statutory legal grounds: – performance of a contract or pre-contractual measures, – performance of our legal obligation pursuant to a special regulation; – the fulfillment of a task carried out in the public interest, – the fulfillment of our legitimate interests, unless these interests are overridden by the legitimate interests of the data subject, – if it is necessary to protect the life, health or property of the data subject or another natural person. In other cases, we process the personal data of the data subjects only with the consent of the data subject, which the data subject may revoke at any time.
- Purposes and legal basis for processing personal data:
In the event of a contractual relationship between the data subject and the Operator, the Operator processes the personal data of the data subjects on the basis of the legal title of the contract, exclusively to the extent necessary to fulfill the purposes of this contract. For the purpose of resolving complaints, handling deficiencies and surveys, the Operator processes the personal data of the data subjects on the basis of the legal title of legitimate interest or the consent of the data subject, exclusively to the extent of name, surname, address, e-mail, telephone number, the processing of which is necessary to achieve the above. In the event that the data subject voluntarily, without prior intervention by the Operator, notifies the Operator of their personal data, these personal data will be processed by the Operator to the necessary extent on the basis of the legal title of legitimate interest (in particular for the purpose of assessing the data subject’s request and providing a response to the data subject). Personal data is processed by the company Rodinná firma, s. r. o. for the purpose of
- invoicing of delivered goods and services
- sending e-mail offers of products of the company Rodinná firma, s. r. o.
- contact on social networks
- contract execution, debt collection
The company Rodinná firma, s. r. o. will not provide personal data to third parties, with the exception of:
- g.r.o. Economy, s.r.o. , Námestie slobody 1016, Čadca 022 01
providing services in the field of accounting and human resources Competitions taking place on social networks: Some competitions may take place in the form of sharing data, especially comments, through the profiles of the data subjects on social networks (e.g. the data subject’s reaction to the Operator’s fun page through their profile on the social network Facebook or Instagram). In such a case, the Operator will process the personal data of the data subjects, in particular the login name, for the purpose of the data subject’s participation in the competition and the eventual announcement/publication of the winner of the competition (on the Operator’s profile page on the social network) and contacting him/her for the purpose of handing over the prize (via direct messages on the social network). The legal basis for processing personal data for the purposes is the consent of the data subject in the form of voluntary participation in the competition. The Operator may, for the purpose of handing over the prize to the winners, also process other personal data in the scope of name, surname, and place of residence, which are necessary to achieve the purpose of handing over the prize, on the legal basis of the consent of the data subject. The data subject may withdraw consent at any time using the contacts of the Operator listed below. The Operator will process these personal data for the period necessary to achieve the purpose of the competition or until the data subject withdraws his/her consent. After the withdrawal of consent, the Operator will no longer process personal data for the purpose to which the withdrawal of consent relates. However, the Operator may, even after the withdrawal of consent, continue to process the personal data of the data subject to a limited extent on the legal basis of legitimate interest, for the period strictly necessary to demonstrate the legitimacy of the processing of personal data or to exercise legal claims or to fulfill obligations arising from generally binding legal regulations (as a rule, for a period of 3 years from the withdrawal of consent toprocessing of personal data).
- Period of retention of personal data:
All personal data are processed only to the extent necessary to fulfill the purposes set out in point 2 of these Terms and Conditions and only for the period necessary to achieve the stated purposes, but no longer than for the period specified in or in accordance with the relevant legal regulations. Personal data processed by the Operator on the legal basis of the data subject’s consent are processed until the consent is withdrawn; however, the Operator may still process some of these data after the consent is withdrawn if it has another legal reason to do so (e.g. to demonstrate the correctness and lawfulness of the procedure for processing personal data or to defend against legal claims). Personal data processed by the Operator on the legal basis of legitimate interest or personal data processed by the Operator for the purpose of direct marketing are processed until the data subject objects to the processing of their personal data.
- Identification of recipients of personal data:
The operator may disclose the personal data of data subjects to third parties only in cases where it is required or permitted by law or with the consent of the data subject. The Operator makes personal data available only to the usual extent to processors or other recipients:
- suppliers of external services for the Operator (in particular programming or other technical support services, server services, e-mail distribution, services related to measuring traffic to our sites and adapting their content to user preferences),
- operators of backup servers or operators of technologies used by the Operator, who process them to ensure the functionality of the relevant Operator services,
- to the extent strictly necessary, to the Operator’s legal, economic and tax advisors and auditors of the Operator, who process them for the purpose of providing consulting services to the Operator.
- Rights of data subjects:
The data subject has the right to request access to personal data from the Operator upon request confirmation of whether or not the personal data of the data subject are being processed, and if so, to request information about the processing of personal data concerning the data subject. The data subject has the right to rectify personal data concerning him or her, taking into account the purpose of the processing of personal data, and to complete incomplete personal data. In the case of processing of personal data on the basis of a contract or the consent of the data subject, the data subject has the right to the portability of personal data concerning him or her, which he or she has provided to the Controller, in a structured, commonly used and machine-readable format, if the personal data of the data subject are processed in an automated manner and before the expiry of the retention period for the personal data. The exercise of this right must not have adverse consequences for the rights of other persons. The data subject has the right to the destruction of personal data (right to erasure of personal data) that are the subject of processing if:
- the personal data are processed in violation of the law or
- based on the withdrawal of the data subject’s consent (in the case of processing personal data on the legal basis of the data subject’s consent) or
- the data subject objects to the processing of personal data processed on the legal basis of the legitimate interest of the Operator and the legitimate reasons of the Operator for the processing of personal data do not prevail or
- the personal data are no longer necessary for the purpose for which they were obtained or for which they were otherwise processed or
- after the expiry of the retention period for personal data.
The right to the destruction of personal data pursuant to point 5 letter a d) does not apply if the processing of personal data is necessary for the Controller to:
- exercise the right to freedom of expression or
- exercise the right to information,
- fulfillment of obligations pursuant to Act No. 18/2018 on the protection of personal data and on amendments and supplements to other laws (effective from 25.5.2018) or a special regulation,
- exercise a legal claim
- for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes pursuant to Section 78(1) 8, if it is likely that the right under paragraph 1 will make it impossible or seriously impede the achievement of the objectives of such processing.
The right to restriction of processing of personal data if:
- the data subject objects to the accuracy of the personal data, during a period allowing the Controller to verify the accuracy of the personal data and, if necessary, update the personal data,
- the processing of personal data is unlawful and the data subject objects to the erasure of the personal data and requests the restriction of their use instead,
- the controller no longer needs the personal data for the purpose of processing the personal data,but the data subject needs them to exercise a legal claim, or
- the data subject objects to the processing of personal data pursuant to Section 27(1) of Act No. 18/2018 on the Protection of Personal Data and on Amendments to Other Acts (effective from 25.5.2018), pending verification of whether the legitimate reasons on the part of the controller outweigh those of the data subject.
Right to object to the processing of personal data: The data subject has the right to object to the processing of personal data concerning him or her in all cases where the legal basis for the processing of personal data is the legitimate interest of the Controller. The data subject has the right to object to the processing of personal data concerning him or her also where such personal data are processed for the purpose of direct marketing, including profiling, to the extent that it is related to direct marketing. If there is a suspicion that personal data is being processed unlawfully, the data subject has the right to file a motion to initiate proceedings on the protection of personal data with the Office for Personal Data Protection. If the legal basis for the processing of the data subject’s personal data is their consent, the data subject may withdraw such consent at any time free of charge at the email address below. Withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal. The data subject has the right to withdraw consent at any time by email at [email protected] or in writing to the address of the Controller, which is: Rodinná firma, s. r. o., Okružná 150/28, 022 04 Čadca
