Privacy Policy

a) Supplier’s identification data: abc brand s.r.o. with registered office at Landererova 8, 811 09 Bratislava, Slovak Republic, ID No.: 53403703, Registered in the Commercial Register of the District Court Bratislava I, Section: Sro, File No.: 149246/B, e-mail: [email protected], TEL: 0905 301 888;

b) The purpose of the processing of personal data is set out in para. 6. of this Article OP;

c) The legal basis for the processing of personal data is set out in para. 4. and 5. of this Article of the OP;

(d) The list of personal data is set out in par. 3. a 5. of this Article OP;

e) The recipient of personal data may be the following persons: courts, district authorities, other public administration bodies, an authorised intermediary pursuant to paragraph 10 of this Article of the OP, legal representatives, a person performing IT service/support and IT development, third parties pursuant to paragraph 11 of this Article of the OP and other natural or legal persons in a contractual relationship with the Supplier;

f) The Supplier shall retain personal data for the duration of the contractual relationship between the Supplier, the Supplier of legal services and the Customer and for the time necessary for the exercise of the Supplier’s rights and the performance of the Supplier’s obligations;

g) The Customer has the right to request from the Supplier access to personal data concerning the data subject, the right to rectification of personal data, the right to erasure of personal data or the right to restriction of personal data, the right to object to the processing of personal data, as well as the right to portability of personal data;

h) If the Customer suspects that his/her personal data is being processed unlawfully, he/she may submit a petition to the Office for Personal Data Protection of the Slovak Republic to initiate a personal data protection procedure pursuant to Section 100 of the Personal Data Protection Act;

(i) The provision of the personal data referred to in par. 3. of this article of the OP by the Customer is necessary for the conclusion of the Contract and the provision of the Service and the provision of personal data in the scope specified in par. 5. of this article of the OP is a legal requirement.

a) Right of access to personal data pursuant to Article 15 GDPR: The data subject has the right to obtain confirmation from the Supplier as to whether personal data concerning him/her are being processed. The data subject shall have the right to obtain access to such personal data and to the information referred to in par. 7. of this Article OP.

b) Right to rectification of personal data pursuant to Article 16 GDPR: The data subject shall have the right to have inaccurate personal data concerning him or her rectified by the Supplier without undue delay. With regard to the purpose of the processing of personal data, the data subject has the right to have incomplete personal data completed.

c) Right to erasure of personal data pursuant to Article 17 GDPR: The data subject shall have the right to have the Supplier erase the personal data concerning him or her without undue delay if the data subject has exercised the right to erasure if:
(i) the personal data are no longer necessary for the purpose for which they were collected or otherwise processed,
(ii) the data subject withdraws the consent on the basis of which the processing of personal data is carried out and there is no other legal basis for the processing of personal data,
(iii) the data subject objects to the processing of personal data and there are no overriding legitimate grounds for the processing of personal data or the data subject objects to the processing of personal data for the purpose of direct marketing,
iv) the personal data are being processed unlawfully,
v) the reason for erasure is the fulfilment of an obligation under the GDPR, the Personal Data Protection Act, a special regulation or an international treaty to which the Slovak Republic is bound,
vi) the personal data were collected in connection with the offer of information society services.

(d) The right to restriction of the processing of personal data pursuant to Art. 18 GDPR:
(i) the data subject objects to the accuracy of the personal data for a period allowing the Supplier to verify the accuracy of the personal data,
(ii) the processing of the personal data is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of its use,
iii) the Supplier no longer needs the personal data for the purpose of processing the personal data, but the data subject needs them to exercise a legal claim,
iv) the data subject objects to the processing of the personal data, pending verification that the legitimate grounds on the part of the Supplier outweigh the legitimate grounds of the data subject. The data subject whose processing of personal data is restricted shall be informed by the Supplier before the restriction on the processing of personal data is lifted.

e) Pursuant to Article 19 of the GDPR, the Supplier is obliged, if the data subject so requests, to inform the data subject of the recipients to whom the Supplier has notified the rectification of personal data, the erasure of personal data or the restriction of the processing of personal data.

f) The right to data portability pursuant to Article 20 GDPR: The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to the Supplier in a structured, commonly used and machine-readable format and shall have the right to transfer such personal data to another controller.

g) Right to object to the processing of personal data pursuant to Article 21 GDPR: The data subject shall have the right to object to processing of his or her personal data on grounds relating to his or her particular situation carried out on the legal basis that the processing of personal data is necessary for the performance of a task carried out in the public interest or on the grounds that the processing is necessary for the purpose of the legitimate interests of the Supplier or of a third party, including profiling based on these provisions. The Supplier shall not further process the personal data unless it demonstrates compelling legitimate interests for the processing of the personal data which override the rights or interests of the data subject or grounds for exercising a legal claim. The data subject shall have the right to object to the processing of personal data concerning him or her for direct marketing purposes, including profiling to the extent that it is related to direct marketing.

(h) Under Article 22 of the GDPR, the data subject has the right not to be subject to a decision which is based solely on automated processing of personal data, including profiling, and which has legal effects concerning him or her or similarly significantly affects him or her.

i) Pursuant to Article 34 of the GDPR, the data subject shall have the right to be notified by the Supplier of a personal data breach without undue delay if such personal data breach is likely to result in a high risk to the rights of the natural person.

a) The supplier shall provide the data subject, upon request, with the information pursuant to Article 13 GDPR and the notifications pursuant to Articles 15 to 22 and 34 GDPR relating to the processing of his personal data. The information shall be provided in paper or electronic form, as a rule in the same form as the request was made. If the data subject so requests, the information may also be provided orally by the Supplier if the data subject proves his or her identity in another way. The Supplier shall cooperate with the data subject in exercising the rights under Articles 15 to 22 of the GDPR.

b) The Supplier is obliged to provide the person concerned with the information referred to in point a) of this paragraph of this Article of the GC within one month of receipt of the request. The Supplier may, in justified cases and taking into account the complexity and the number of requests, extend the said time limit by a further two months, even repeatedly. The Supplier shall inform the person concerned of any such extension within one month of receipt of the request, together with the reasons for the extension.

c) The Supplier shall provide the information pursuant to point a) of this paragraph of this Article free of charge.

(d) Where a request by a data subject is manifestly unfounded or unreasonable, in particular because of its repetitive nature, the Supplier may charge a reasonable fee, taking into account the administrative costs of providing the information, or a reasonable fee, taking into account the administrative costs of notification, or a reasonable fee, taking into account the administrative costs of carrying out the requested action, or refuse to act on the request.

a) The Customer agrees that the Supplier may entrust the processing of personal data to another processor to the extent that this is necessary to fulfil the purpose of providing personal data and to fulfil the Supplier’s obligations and exercise the Supplier’s rights under this Service Contract and the Act. In this case, the Supplier shall be obliged to impose on such additional processor in a contract or other legal act the same obligations relating to the protection of personal data as are set out in this Agreement, with the Supplier being liable to the Customer if the additional processor fails to comply with its obligations relating to the protection of personal data.

b) The Supplier undertakes to process personal data only for the purpose of providing the Services.

c) The Supplier shall process personal data for the entire duration of the contractual relationship between the Supplier and the Customer and for the time strictly necessary for the performance of the Supplier’s rights and obligations. The Supplier shall process personal data to the identical extent as the Customer processes them.

d) Affected persons are the customers of the Customer.

e) The Supplier is entitled to carry out only the processing operations necessary for the fulfilment of the purpose of the processing, in particular: acquisition, collection, storage and destruction.

f) The Supplier is obliged to process personal data only to the extent necessary to achieve the purpose of the processing and only in accordance with the terms of this article of the OP or the written instructions of the Customer.

g) The Supplier is obliged to protect the processed personal data against damage, destruction, loss, alteration, unauthorised access and disclosure, disclosure or publication, as well as against any other inadmissible means of processing.

h) The Supplier shall immediately notify the Customer if, in the Supplier’s opinion, any instruction given by the Customer violates the Personal Data Protection Act, a special regulation or an international treaty to which the Slovak Republic is bound concerning the protection of personal data.

i) The Supplier undertakes to delete the personal data or return the personal data to the Customer after the end of the Contract, based on the Customer’s decision, if a special regulation or an international treaty to which the Slovak Republic is bound does not require the retention of such personal data.