INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR THE DATA SUBJECT
TABLE OF CONTENTS
1. Basic provision
2. Purposes of the processing of personal data and the legal basis for their processing
3. The scope of personal data being processed
4. Making personal data available
5. Transfer of personal data to a third country
6. The period for which the personal data will be stored
7. Your rights and other information
8. Where and how you can use your rights?
I. BASIC PROVISION
1.1 Privacy is very important to our company and we encourage you to pay particular attention to this information and to get to know it carefully. In this document we inform you about the ways of processing your personal data within the activities of our company TEX PRINT v.d., based in Továrenská 1066, 900 61 Gajary, ID: 35 802 987, registered in the Commercial Register of the District Court Bratislava I, Section: Dr, Insert No.: 479/B. (hereinafter referred to as "controller" or "company") and comply with the information obligation under the relevant provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council on the Protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR"). If you have any questions regarding the processing of personal data by our company, you can contact us by email at email@example.com or by post at our registered office. When processing your personal data our company is governed by the GDPR Act No. 18/2018 on Personal Data Protection, and on the amendment of certain other acts, and other generally binding legal regulations applicable in the Slovak Republic.
1.2 In terms of the meaning of Section 19 Par. 2 e) of the Act on the Personal Data Protection the data subject is obliged to provide personal data for the purpose below, otherwise it is not possible to conclude a purchase contract, contract for work or another contract of interest.
1.3. The E-shop is not intended for people under the age of 16 years. A person under the age of 16 may use our E-shop only if authorized by his/her legal guardian (parent or tutor). In case of disapproval it is necessary to inform us about this fact on firstname.lastname@example.org.
II. PURPOSES OF THE PROCESSING OF PERSONAL DATA AND THE LEGAL BASIS FOR THEIR PROCESSING
The purposes of personal data processing and the legal basis for processing your personal information by our company for the purposes and on the legal bases are listed below:
2.1 Processing purpose: Pre-contractual relations
Legal base: Art. 6 Par. 1 (b) GDPR
2.2 Processing purpose: Conclusion of contract and provision of contracted performance by
the controller to the data subject
Legal base: Performance of a contract under Art. 6 Par. 1 (b) GDPR
2.3 Processing purpose: Purposes related to the protection of legitimate interests
Legal base: Controller's legitimate interest under Art. 6 Par. 1 (f) GDPR
2.4 Processing purpose: Accounting and tax purposes
Legal base: Performance of the a legal obligation under Art. 6 Par. 1 (c) GDPR
2.5 Processing purpose: Statistical purposes, archival purposes in the public interest and the purposes of historical and scientific research
Legal base: Performance of the a legal obligation under Art. 6 Par. 1 (c) GDPR in conjunction with Art. 89 GDPR
2.6 Processing purpose: Compliance with other legal obligations of the controller
Legal base: Performance of the a legal obligation under Art. 6 Par. 1 (c) GDPR
2.7 Processing purpose: Marketing purposes
Legal base: The consent of the data subject under Art. 6 Par. 1 (a) GDPR
2.8 Processing purpose: sending notifications, news, etc.
Legal base: Section 13 Par. 1 (f) of the Personal Data Protection Act: the processing of personal data is necessary for the purposes of the legitimate interests of the controller or third party, except where the interests or rights of the data subject require the protection of personal data – the legitimate interest of the controller is to inform customers by means of marketing reports on price quotations as well as marketing communication with the customer (in the event of a contractual relationship) within the meaning of Article 6 Par. 1 (f) GDPR Regulation. In accordance with the principle of proportionality, the controller concludes that it is to inform customers through notifications of news and innovations of the goods, resp. to conduct marketing communication with them (in the segment of goods in which the customer has expressed interest ), s/he prevails over the protection of the privacy of the data subject, namely the processing of the the data subject´s email address. To process the email address, the controller has taken appropriate technical and organizational measures to protect it.
In accordance with Art. 6 Par. 1 (f) of the Regulations. the controller after conclusion of the contract, contract for work or another contract on the basis of a legitimate interest, may process the personal data of an email address also for direct marketing purposes and send marketing information about the goods provided to the customer's email address.
The Seller declares that it will process personal data in accordance with good morals and will act in a manner that does not contradict the Personal Data Protection Act and Regulations.
2.9 In the case of the processing of your personal data on the basis of a legitimate interest of the controller, this particular interest is in particular the legitimate interest in extrajudicial and judicial enforcement, proving and enforcing the controller's legal claims or the controller's interest in direct marketing.
2.10 Your personal data is not subject to automated decision making, including the profiling in Art. 22 GDPR.
III. THE SCOPE OF PERSONAL DATA BEING PROCESSED
Our company processes your personal data only to the extent necessary to achieve the purpose of their processing, in particular the following personal data: a) Name and surname b) Address of residence c) Date of birth d) Birth number e) Phone and email contact f) Bank account.
When it comes to processing your personal data for the purpose of pre-contractual relations and marketing, our company, your name and your telephone and email contact are sufficient for our company.
IV. MAKING PERSONAL DATA AVAILABLE
Your personal information is made available by our company only to the extent necessary: a) to our employees and to persons who we entrust with the execution of individual acts in providing our services and performances (or subcontractors), b) our accounting, tax or legal advisor, c) provider software or support for our company, d) courier and shipping companies e) where appropriate, courts, bailiffs, law enforcement agencies or any other public authority, f) state institutions for the purpose of fulfilling the controller´s obligations : tax office, state administration and public authority for the performance of control and supervision (e.g. Slovak Trade Inspection, Office for Personal Data Protection), bailiff, court, law enforcement authority, etc.
V. TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY
In order to send marketing messages and offers to those interested in such a service, the controller processes the e-mail address through a company in a third country that has a European Commission decision on the adequacy of the privacy level.
This company is a company named: The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, United States (controller MailChimp.com)
The Office for Personal Data Protection stated that the third country guaranteeing an adequate level of personal data protection is the country that the European Commission has identified with this status in its decision. The United States of America is such a country (Privacy Shield certified companies)
VI. THE PERIOD FOR WHICH THE PERSONAL DATA WILL BE STORED
Our company stores your personal information as long as necessary for the purposes for which the personal data are processed. Subsequently, we will ensure the liquidation of your personal data in accordance with the GDPR without undue delay.
Regarding the data subject´s consent, we will process your data until you withdraw your consent, but not more than 24 months after you grant it.
In the case of legitimate interest, we will process your personal information for a period that is reasonable in view of the life cycle of the product or service you have purchased so that we may offer and provide related products and services.
In the case of performance of the contract, we will process your personal data for as long as the contractual relationship continues, including the warranty and warranty terms.
In the event of legal compliance, we will process your personal data for as long as required by law. In the case of the Accounting Act, the VAT Act and so on, it may be for 10 years.
VII. YOUR RIGHTS AND OTHER INFORMATION
Hereby you are familiarized with the rights and legally relevant facts related to the protection of your personal data resulting from the relevant provisions of the GDPR:
7.1 you have the right to request access from our company to personal data (detailed in Art. 15 GDPR),
7.2 you have the right to request from our company the correction of personal data (detailed in Art. 16 GDPR),
7.3 you have the right to request from our company the deletion of personal data, the so-called “right to be forgotten” (detailed in Art. 17 GDPR),
7.4 you have the right to require our company to restrict the processing of personal data (detailed in Art. 18 GDPR),
7.5 you have the right to transfer personal data to another controller (detailed in Art. 20 GDPR),
7.6 you have the right to object to our company processing personal data (detailed in Art. 21 GDPR),
7.7 you have the right to lodge a complaint with an independent supervisory authority, which is in the Slovak Republic: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07, Bratislava 27 (detailed in Section 99 to 103 of Act No. 18/2018 on Personal data protection and on the amendment of certain other Acts, as amended),
7.8 if the processing of personal data is based on a legal basis within the meaning of Art. 6 Par. 1 (a) GDPR or Art. 9 Par. 2 (a) GDPR, i.e. your consent, you have the right to withdraw your consent to the processing of personal data at any time, without prejudice to the lawfulness of processing based on consent granted prior to its revocation,
7.9 providing your personal information is a requirement that is required to enter into a contract with our company that constitutes the legal basis for our services to be provided by our company and you will not be able to provide your services if your personal information is not provided.
VIII. WHERE AND HOW YOU CAN USE YOUR RIGHTS
Your rights can be claimed in writing at email@example.com
We will respond to your request free of charge within 30 days. In the case of complexity or a large number of applications, we are entitled to extend this period by another 60 days. If this happens, we will also inform you of the reasons.
In the event of a repeated request, we are entitled to charge a reasonable administrative fee to cover the costs associated with providing this service.