DATA CONTROLLER’S STATEMENT ON THE PROCESSING OF PERSONAL DATA<\/p>\n\n\n\n
In this section, we provide information on the processing and protection of personal data within the meaning of<\/p>\n\n\n\n
Regulation (EU) 2016\/679 of the European Parliament and of the Council on the protection of natural persons with regard<\/p>\n\n\n\n
to the processing of personal data and on the free movement of such data, repealing Directive 95\/46\/EC (General Data<\/p>\n\n\n\n
Protection Regulation) and Act of the Slovak Republic No. 18\/2018 Coll. on the Protection of Personal Data and on<\/p>\n\n\n\n
Amendments to Certain Acts (hereinafter: the “Personal Data Protection Act”).<\/p>\n\n\n\n
The Controller ES-RD 5 s.r.o., with its registered office at \u0160pit\u00e1lska 55, Company ID No.: 50264109 (hereinafter referred<\/p>\n\n\n\n
to as the “Controller”), has taken appropriate technical and organizational measures to ensure the protection of the rights<\/p>\n\n\n\n
of data subjects, which declare the lawful processing of personal data. Furthermore, the Operator has implemented a<\/p>\n\n\n\n
transparent system for recording security incidents and any questions from the data subject as well as other persons.<\/p>\n\n\n\n
If necessary, the data subject can also obtain individual information by phone at: +421 911 907 127 or by e-mail:<\/p>\n\n\n\n
miramat.eshop@gmail.com.<\/p>\n\n\n\n
1. Controller<\/p>\n\n\n\n
ES-RD 5 s.r.o.<\/p>\n\n\n\n
\u0160pit\u00e1lska 55<\/p>\n\n\n\n
811 08 Bratislava – Old Town District<\/p>\n\n\n\n
Company ID: 50264109<\/p>\n\n\n\n
We process your data for our own purposes as the Controller. This means that we determine the purpose for which we<\/p>\n\n\n\n
collect your personal data, determine the means of processing and are responsible for their proper implementation.<\/p>\n\n\n\n
2. Intermediaries<\/p>\n\n\n\n
In certain cases, the Controller may also process the personal data of data subjects through processors who are entrusted<\/p>\n\n\n\n
with the processing of personal data in accordance with Article 28 of the GDPR.<\/p>\n\n\n\n
The processors process the personal data of data subjects on behalf of the Controller. The processing of personal data by<\/p>\n\n\n\n
the processor does not adversely affect the exercise and exercise of the rights of the data subject. The Controller uses<\/p>\n\n\n\n
only processors providing appropriate technical, organizational and other measures so that the processing meets the<\/p>\n\n\n\n
requirements of the GDPR and that the protection of the rights of the data subject is fully ensured.<\/p>\n\n\n\n
The Controller uses the following categories of processors when processing personal data of data subjects:<\/p>\n\n\n\n
\u2022 supplier ensuring the supply of technical solutions, web hosting services, maintenance and support of IT systems<\/p>\n\n\n\n
used by the Operator<\/p>\n\n\n\n
\u2022 a supplier providing services in the field of accounting and tax obligations of the Operator<\/p>\n\n\n\n
Categories of recipients of personal data: persons acting on the basis of a mandate from the controller, legal<\/p>\n\n\n\n
representative, auditor, state administration and public authorities to perform control and supervision.<\/p>\n\n\n\n
3. Purpose of personal data processing<\/p>\n\n\n\n
As a controller, we exclusively process personal data that we can substantiate on a legitimate legal basis and a defined<\/p>\n\n\n\n
purpose:<\/p>\n\n\n\n
\u2022 Response to an inquiry, suggestion or question submitted physically, by telephone or electronically: In order<\/p>\n\n\n\n
to provide feedback and comply with the requests of the data subject, we apply the legal basis for processingpursuant to Article 6(1)(f) of the GDPR \u2013 legitimate interest of the controller. As a data subject, you have the<\/p>\n\n\n\n
right to object to such processing at any time.<\/p>\n\n\n\n
\u2022 Expression of interest in our services or products, planned cooperation: The legal basis for data processing is<\/p>\n\n\n\n
Article 6 (1) (b) of the GDPR \u2013 data processing is necessary for the implementation of measures prior to the<\/p>\n\n\n\n
conclusion of the contract, i.e. during the pre-contractual relationship.<\/p>\n\n\n\n
\u2022 Conclusion and performance of the contractual relationship: After the conclusion of the contract between the<\/p>\n\n\n\n
controller and the data subject, the processing of data is necessary for its performance in accordance with Article<\/p>\n\n\n\n
6(1)(b) of the GDPR.<\/p>\n\n\n\n
\u2022 Recruitment of new employees: If you are looking for a job and are interested in working for our company, you<\/p>\n\n\n\n
can provide us with your CV and cover letter based on your consent to the processing of personal data pursuant<\/p>\n\n\n\n
to Article 6(1)(a) of the GDPR. We will include the data obtained in this way in the register of job seekers. You<\/p>\n\n\n\n
can withdraw your consent at any time.<\/p>\n\n\n\n
4. Period of processing and storage of your personal data<\/p>\n\n\n\n
Your personal data that we have processed or are processing pursuant to Article 6(1)(b) of the GDPR \u2013 as part of the<\/p>\n\n\n\n
fulfilment of the controller’s obligations, we also process for the purpose of fulfilling our legal obligations regarding taxes<\/p>\n\n\n\n
and accounting. These obligations arise from generally binding legal regulations, such as Act No. 431\/2002 Coll. on<\/p>\n\n\n\n
Accounting, as amended, or Act No. 595\/2003 Coll. on Income Tax and Act No. 563\/2009 Coll. on Tax Administration. We<\/p>\n\n\n\n
must retain the data for the period stipulated by this legislation. We follow the principle of minimizing the storage of<\/p>\n\n\n\n
personal data according to Article 5 (1) (e) of the GDPR, and therefore your personal data, which is not subject to archiving<\/p>\n\n\n\n
according to special legal regulations, will be deleted or anonymized.<\/p>\n\n\n\n
We process personal data processed on the basis of the consent granted pursuant to Article 6(1)(a) of the GDPR, for<\/p>\n\n\n\n
example for the inclusion of the data subject in the register of job applicants or for the purpose of sending current<\/p>\n\n\n\n
marketing news, for a period of 3 years or until the consent is withdrawn. In the event that the end of the data processing<\/p>\n\n\n\n
period is approaching, we will contact the data subject with the possibility of renewing and extending the consent for the<\/p>\n\n\n\n
next processing period. If the data subject does not give consent or does not respond to contact, we will stop processing<\/p>\n\n\n\n
personal data \u2013 we will automatically remove it from the records, we will technically delete the electronic data from the<\/p>\n\n\n\n
systems and shred the physical documents.<\/p>\n\n\n\n
Personal data processed on the basis of a legitimate interest pursuant to Article 6(1)(f) of the GDPR, which were obtained<\/p>\n\n\n\n
in response to a submitted inquiry, suggestion or question for the purpose of providing feedback to the data subject, are<\/p>\n\n\n\n
deleted immediately after processing, unless they have subsequently been forwarded to a pre-contractual or contractual<\/p>\n\n\n\n
relationship.<\/p>\n\n\n\n
As the Controller, we will ensure the deletion of personal data without undue delay after: all contractual relations<\/p>\n\n\n\n
between you and us as the controller have been terminated; and\/or<\/p>\n\n\n\n
– all your obligations to the Controller have ceased to exist; and\/or<\/p>\n\n\n\n
– all your complaints and requests have been handled; and\/or<\/p>\n\n\n\n
– all other rights and obligations between you and us as the controller have been settled; and\/or<\/p>\n\n\n\n
– all the purposes of processing set out by law or the purposes of processing for which you have given us your consent<\/p>\n\n\n\n
have been fulfilled, if the processing was based on the consent of the data subject; and\/or<\/p>\n\n\n\n
– the period for which consent was granted has expired or the data subject has withdrawn his\/her consent; and\/or<\/p>\n\n\n\n
– the data subject’s request for the erasure of personal data has been granted and one of the reasons justifying the<\/p>\n\n\n\n
granting of this request has been met; and\/or- the decisive legal fact for the termination of the purpose of processing has occurred and at the same time the protective<\/p>\n\n\n\n
retention period defined with regard to the principle of minimizing the retention period of personal data has expired;<\/p>\n\n\n\n
– and at the same time the legitimate interest of the controller does not exist, all obligations stipulated by generally<\/p>\n\n\n\n
binding legal regulations that require the storage of personal data of the data subject (in particular for the purposes of<\/p>\n\n\n\n
archiving, tax audit, etc.) have ceased to exist, or which could not be fulfilled without their storage.<\/p>\n\n\n\n
In any case, we do not systematically process any accidentally obtained personal data for any purpose defined by us.<\/p>\n\n\n\n
Where possible, we will inform the data subject to whom the accidentally collected personal data belongs about their<\/p>\n\n\n\n
accidental collection and, depending on the nature of the case, we will provide them with the necessary cooperation<\/p>\n\n\n\n
leading to the restoration of control over their personal data. Immediately after these necessary actions aimed at<\/p>\n\n\n\n
resolving the situation, we will immediately dispose of all accidentally obtained personal data in a secure manner.<\/p>\n\n\n\n
If you are interested in further information about the specific retention period of your personal data, please contact us<\/p>\n\n\n\n
using the contact details provided.<\/p>\n\n\n\n
5. Disclosure of data<\/p>\n\n\n\n
Our company does not arbitrarily disclose the personal data obtained in any way.<\/p>\n\n\n\n
6. Cross-border transfer and profiling of personal data<\/p>\n\n\n\n
Cross-border transfers outside the EU and profiling of personal data is not carried out and is not intended for the future.<\/p>\n\n\n\n
7. Rights and obligations of the data subject<\/p>\n\n\n\n
\u2022 The data subject is obliged to provide only complete and truthful data.<\/p>\n\n\n\n
\u2022 In the event of a change, the data subject undertakes to update his\/her data at the latest before the first<\/p>\n\n\n\n
order following the change occurs.<\/p>\n\n\n\n
\u2022 The data subject undertakes that if he provides personal data of a third party (name, surname, telephone<\/p>\n\n\n\n
number), he does so only with the consent of the third party and the data subject is familiar with the<\/p>\n\n\n\n
procedures, rights and obligations set out on this page.<\/p>\n\n\n\n
\u2022 As a data subject, you have the right to decide on the handling of your personal data to the specified extent.<\/p>\n\n\n\n
You can exercise these rights in person at the Controller’s registered office or by phone \u2013 in writing (by post \/<\/p>\n\n\n\n
e-mail).<\/p>\n\n\n\n
We will try to respond to you as soon as possible, but we will always respond to you no later than 30 days after<\/p>\n\n\n\n
receiving your request. The applicable legal regulations and the GDPR Regulation, or the Act, provide you in particular:<\/p>\n\n\n\n
Right of access \u2013 You have the right to request confirmation from us as to whether your personal data is being processed,<\/p>\n\n\n\n
and if so, to obtain a copy of this data and additional information resulting from Article 15 of the Regulation or Section<\/p>\n\n\n\n
21 of the Act. In the event that we collect a large amount of data about you, we may require you to specify your request<\/p>\n\n\n\n
for a range of specific data that we process about you.<\/p>\n\n\n\n
Right to rectification \u2013 In order for us to constantly process only up-to-date personal data about you, we need you to<\/p>\n\n\n\n
notify us of their change as soon as it occurs. In the event that we process incorrect data about you, you have the right<\/p>\n\n\n\n
to request their correction.<\/p>\n\n\n\n
Right to erasure \u2013 If the conditions of Article 14 of the Regulation or Section 23 of the Act are met, you can request the<\/p>\n\n\n\n
deletion of your personal data. Therefore, you can request erasure, for example, if you have withdrawn your consent tothe processing of personal data and there is no other legal basis for processing, or if we process your personal data<\/p>\n\n\n\n
unlawfully, or the purpose for which we processed your personal data has ceased to exist and we do not process them<\/p>\n\n\n\n
for another compatible purpose. However, we will not delete your data if it is necessary to establish, exercise or defend<\/p>\n\n\n\n
legal claims.<\/p>\n\n\n\n
Right to restriction of processing \u2013 If the conditions of Article 18 of the Regulation or Section 24 of the Act are met, you<\/p>\n\n\n\n
can request us to restrict the processing of your personal data. Therefore, you can request restriction, for example, when<\/p>\n\n\n\n
you object to the accuracy of the processed data or if the processing is unlawful and you do not want us to delete the<\/p>\n\n\n\n
data, but you need their processing to be restricted while you exercise your rights. We continue to process your data if<\/p>\n\n\n\n
there are grounds for establishing, exercising or defending legal claims.<\/p>\n\n\n\n
Right to portability \u2013 If the processing is based on your consent or carried out for the purpose of performing a contract<\/p>\n\n\n\n
concluded with you and at the same time carried out by automated means, you have the right to receive from us your<\/p>\n\n\n\n
personal data that we have collected from you in a commonly used machine-readable format. If you are interested in it<\/p>\n\n\n\n
and it is technically possible, we will transfer your personal data directly to another controller. This right will not be<\/p>\n\n\n\n
applicable to processing carried out for the performance of a task carried out in the public interest or in the exercise of<\/p>\n\n\n\n
official authority.<\/p>\n\n\n\n
Right to object to processing \u2013 If we process your personal data for the performance of a task carried out in the public<\/p>\n\n\n\n
interest or in the exercise of official authority vested in us, or if the processing is carried out on the basis of our legitimate<\/p>\n\n\n\n
interests or those of a third party, you have the right to object to such processing. On the basis of your objection, we will<\/p>\n\n\n\n
restrict the processing of personal data and unless we prove compelling legitimate reasons for the processing that<\/p>\n\n\n\n
outweigh your interests, rights and freedoms or the reasons for proving, exercising or defending legal claims, we will no<\/p>\n\n\n\n
longer process the personal data and we will delete your personal data. You have the right to object at any time to the<\/p>\n\n\n\n
processing of personal data for direct marketing purposes, including profiling to the extent that it is related to such direct<\/p>\n\n\n\n
marketing. Once you have objected, we will no longer process your personal data for this purpose.<\/p>\n\n\n\n
Right to lodge a complaint \u2013 If you believe that the processing of your personal data is contrary to the Regulation or the<\/p>\n\n\n\n
Law, you have the right to lodge a complaint with one of the competent supervisory authorities, in particular in the<\/p>\n\n\n\n
Member State of your habitual residence, place of work or the place of the alleged infringement. For the territory of the<\/p>\n\n\n\n
Slovak Republic, the supervisory authority is the Office for Personal Data Protection, with its registered office: Hrani\u010dn\u00e1<\/p>\n\n\n\n
4826\/12, 820 07 Bratislava, Slovak Republic, web: www.dataprotection.gov.sk, tel.: +421 \/2\/ 3231 3220.<\/p>\n\n\n\n
Right to withdraw consent \u2013 If the processing of your personal data is based on consent, you have the right to withdraw<\/p>\n\n\n\n
this consent at any time. The withdrawal of consent does not affect the processing already carried out. If at any time later<\/p>\n\n\n\n
you decide that you are interested in receiving commercial and marketing offers from us about our products and services<\/p>\n\n\n\n
again, you can re-give your revocation of your consent (or objection) at any time by any of the above-mentioned forms<\/p>\n\n\n\n
of contact.<\/p>\n\n\n\n
8 . Contact details of the Office for Personal Data Protection<\/p>\n\n\n\n
Office for Personal Data Protection of the Slovak Republic<\/p>\n\n\n\n
Address:<\/p>\n\n\n\n
Park one building<\/p>\n\n\n\n
N\u00e1mestie 1.m\u00e1ja 18<\/p>\n\n\n\n
811 06 Bratislava<\/p>\n\n\n\n
Slovak RepublicCompany ID: 36 064 220<\/p>\n\n\n\n
Registry:<\/p>\n\n\n\n
Monday \u2013 Thursday: 8:00 – 15:00<\/p>\n\n\n\n
Friday: 8:00 – 14:00<\/p>\n\n\n\n
Telephone consultations in the field of personal data protection:<\/p>\n\n\n\n
Tuesday and Thursday from 8:00 to 12:00 +421 2 323 132 20<\/p>\n\n\n\n
Secretariat of the President of the Office +421 2 323 132 11<\/p>\n\n\n\n
Office Secretariat +421 2 323 132 14<\/p>\n\n\n\n
Fax: +421 2 323 132 34<\/p>\n\n\n\n
Spokesman:<\/p>\n\n\n\n
Mobile: 0910 985 794<\/p>\n\n\n\n
E-mail: hovorca@pdp.gov.sk<\/p>\n\n\n\n
Email:<\/p>\n\n\n\n
a) in general: statny.dozor@pdp.gov.sk<\/p>\n\n\n\n
b) for the provision of information pursuant to Act No. 211\/2000 Coll.: info@pdp.gov.sk<\/p>\n\n\n\n
c) Website: webmaster@pdp.gov.sk<\/p>\n\n\n\n
d) to submit requests for the provision of information pursuant to Act No. 211\/2000 Coll. on Free Access to Information,<\/p>\n\n\n\n
use the online form.<\/p>\n\n\n\n
e) an e-mail address through which the Office will provide you with advice in the field of personal data protection. It is<\/p>\n\n\n\n
intended for children, youth, students, teachers, parents who suspect that their personal data has been misused:<\/p>\n\n\n\n
ochrana@pdp.gov.sk<\/p>\n\n\n\n
A template for initiating a personal data protection procedure can be found on the Office’s website<\/p>\n\n\n\n
(https:\/\/dataprotection.gov.sk\/uoou\/sk\/content\/konanie-o-ochrane-osobnych-udajov).<\/p>\n\n\n\n