PRINCIPLE OF PROTECTION OF PERSONAL DATA
PRIVACY
The following information relates to the processing of personal data according to Art. 13 of the Regulation of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data (hereinafter referred to as the " Regulation ") in accordance with §19 of Act no. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the " Act ").
OPERATOR
Commercial company VTF WALL s.r.o., ID number: 47 591 790, with registered office at Kendice 475, Kendice 082 01, registered in the Commercial Register of the Prešov District Court, section Sro, insert no. 30010/P (hereinafter referred to as the "operator"), operates the website www.eshop.stvol.sk (hereinafter referred to as the "website"), on the basis of which you can express your interest in information, or directly order the offered goods and services, through the contact details. as well as any communication from the operator. Contact details of the operator: stvol@stvol.sk
PERSON CONCERNED AND PERSONAL DATA
The affected person is any natural person who provides the operator with personal data in connection with the use of the operator's services or in connection with the expressed interest in such services. The affected person is also a natural person acting on behalf of a legal entity, if this natural person provides his personal data in connection with the use of the services of the operator or in connection with the expressed interest in such services. Personal data is data relating to an identified natural person or an identifiable natural person who can be identified directly or indirectly, in particular on the basis of a generally applicable identifier, another identifier such as a name, surname, identification number, location data or an online identifier, or on the basis of one or more characteristics or signs that make up its physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.
WHAT DATA DO WE PROCESS ABOUT YOU?
The operator processes identification and contact data (name, surname, e-mail, delivery address, phone contact). Other personal data that you voluntarily provide to us in communication will be disposed of. The operator does not process any personal data from the special category of personal data. Identification data and contact data are necessary for the operator in order to be able to ensure the conclusion and fulfillment of contracts with you for the provision of individual services (order processing, delivery of goods, return of goods, processing of complaints, sending current information about the status of your order, contacting in case of problems with delivery of ordered goods by telephone or e-mail). This data is also used to provide professional assistance and customer support. by you are intended for processing also for the purpose of pre-contractual communication in connection with the preparation of a price offer.
LEGAL BASIS OF PERSONAL DATA PROCESSING
The operator processes the personal data of the affected persons on the basis of several legal bases:
a) the affected person has expressed his consent to the processing of his personal data for at least one specific purpose,
b) the processing of personal data is necessary for the performance of the contract to which the affected person is a party, or for the execution measures before concluding a contract based on the request of the person concerned,
c) the processing of personal data is necessary according to a special regulation or an international treaty to which the Slovak Republic is bound,
d) the processing of personal data is necessary for the purpose of the legitimate interests of the operator or a third party, except in cases where over these interests are overridden by the interests or rights of the data subject requiring the protection of personal data, especially if the data subject is a child; this legal basis does not apply to the processing of personal data by public authorities in the performance of their tasks.
The personal data provided must be true, up-to-date, and please notify us of any changes. Consent to the processing of your personal data is granted according to the regulation. protection is also adequately covered by the law to the extent determined by this regulation. Personal data must be provided, because without them it is impossible to communicate and inform you. We will use your personal data to the extent necessary for the purpose for which they will be processed. Your personal data will be stored until the termination of the contract, or until the settlement of the contractual relationship (repayment of the obligation), if legal regulations for some personal data do not require a different storage period. If consent to the processing of personal data is granted , it is granted for a period of 5 years. We only process common and not special categories of personal data. The operator's legitimate interest in processing personal data is direct marketing.
PROVISION OF PERSONAL DATA TO THIRD PARTIES
The personal data of the person concerned will be processed by an external company based on the operator's instructions as an intermediary and for the purposes determined by the operator, which is the creator and operator of the operator's website, provider of accounting services, providers of legal and auditing services, provider of marketing services, provider of courier services, website administrator, provider of IT services (hereinafter referred to as
the "Intermediary"), while ensuring the protection of personal data in accordance with the relevant legal regulations and in accordance with the information provided. Your personal data will not be provided outside the territory of the European Union, or personal data will not be transferred to a third country or international organization. Personal data will not be used for automated individual decision-making, including profiling.
YOU HAVE THE RIGHT UNDER THE REGULATION
1) Withdraw consent - in cases where we process your personal data based on your consent, you have the right to withdraw this consent at any time. You can withdraw your consent electronically, in writing, by sending a notice of withdrawal of consent or in person at the operator's headquarters. Withdrawal of consent does not affect the legality of the processing of personal data that we processed about you on the basis of it.
2) Right of access – you have the right to be provided with a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written document form, unless you request another way of providing them. If you have requested the provision of this information by electronic means, it will be provided to you electronically if it is technically possible.
3) Right to rectification – we take reasonable measures to ensure the accuracy, completeness and timeliness of the information we have about you. If you believe that the data we hold is inaccurate, incomplete or out of date, please do not hesitate to ask us to correct, update or supplement this information.
4) Right to erasure (to be forgotten) – you have the right to ask us to delete your personal data, for example, if the personal data we have obtained about you is no longer necessary to fulfill the original purpose of processing. However, your right must be assessed in light of all the relevant circumstances. For example, we may have certain legal and regulatory obligations which mean that we will not be able to comply with your request.
5) Right to restriction of processing – under certain circumstances, you are entitled to ask us to stop using your personal data. These are, for example, cases when you think that the personal data we have about you may be inaccurate or when you think that we no longer need to use your personal data.
6) The right to data portability – in certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to another third party of your choice. However, the right to portability only applies to personal data that we have obtained from you on the basis of consent or on the basis of a contract to which you are a party.
7) Right to object – you have the right to object to data processing based on our legitimate legitimate interests. In the event that we do not have a compelling legitimate reason for processing and you file an objection, we will not process your personal data further.
8) The right to submit a proposal to initiate proceedings on the protection of personal data - if you believe that your personal data has been processed unfairly or illegally, you can file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27 In the case of submission of the proposal in electronic form, it is necessary that it fulfills the requirements according to § 19 par. 1 of Act no. 71/1967 Coll. on administrative procedure (correct order).
If this is not prevented by legal reasons and it is proven that the objection of the person concerned is justified, the operator is obliged to block and dispose of personal data, the processing of which the person concerned has objected, without undue delay, and dispose of it immediately, if the circumstances permit.
By providing personal data and requesting information about the services offered by contacting the operator via e-mail, you consent to the processing of your personal data according to these conditions, only if you declare it. The consent of the person concerned is used only if it is not a pre-contractual communication.
CONSENT TO THE PROCESSING OF PERSONAL DATA
If you decide to contact the operator directly from your e-mail box, we recommend attaching the following written consent to the processing of personal data to the message to the operator.
I hereby grant my consent to the processing and provision of my personal data (e-mail), according to Art. 6, par. 1, letter a) Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation ), the company VTF WALL s.r.o., ID number: 47 591 790, with registered office at Kendice 475, Kendice 082 01, registered in the Commercial Register of the Prešov District Court, section Sro, insert no. 30010/P, for the purpose of their inclusion in the information system database of interested parties with the aim of non-binding information about the operator's goods or services. I declare that all personal data provided by me is true, correct and complete. This consent is voluntary and is granted for a period of 5 years. This consent can be revoked in writing at any time.
If the processing of personal data is based on the consent of the person concerned, this person has the right, after proper identification, to withdraw this consent at any time to the operator's contact e-mail: stvol@stvol.sk
In addition to the above, the affected person has the right at any time not to submit to a decision of the operator that would have legal effects or a significant impact for him, if such a decision is issued solely on the basis of automated processing of his personal data.
The affected person has the right to ask the operator to review the issued decision by a method different from the automated form of processing, while the operator is obliged to comply with the affected person's request, by having the decision reviewed by his authorized person. The operator is obliged to inform the affected person about the method of examination and the result of the finding no later than 30 days from the date of delivery of his request. In this context, the affected person is entitled to become familiar with the processing and evaluation procedure.
The person concerned does not have this right only if it is established by a special law, which regulates measures to ensure the legitimate interests of the person concerned, or if, within the framework of pre-contractual relations or during the existence of contractual relations, the operator issued a decision by which he complied with the request of the person concerned, or if based on the contract, the operator has taken other appropriate measures to ensure the legitimate interests
of the person concerned.
It is essential to note that the right to privacy is not an absolute right;
it must be considered in relation to his function in society and must be balanced with other fundamental rights, in accordance with the principle of proportionality. The Regulation respects all fundamental rights and observes recognized freedoms and principles as enshrined in treaties, in particular respect for private and family life, home and communication, protection of personal data, freedom of thought, conscience and religion, freedom of expression and the right to information, freedom business, the right to an effective remedy and to a fair trial, and cultural, religious and linguistic diversity.
PERSONAL DATA PROCESSING PRINCIPLES
In the principles and rules for the protection of natural persons in the processing of their personal data, regardless of nationality or residence, their basic rights and freedoms, especially the right to the protection of personal data, should be respected.
The regulation of the GDPR is intended to contribute to the completion of the area of freedom, security, justice, to economic and social progress, to the strengthening and convergence of economies within the internal market and to the benefit of natural persons.
The principle of legality – personal data can only be processed in a legal manner and in such a way that the basic rights of the person concerned are not violated.
Principle of purpose limitation – personal data may only be obtained for a specifically determined, explicitly stated and authorized purpose and may not be further processed in a manner that is incompatible with this purpose; further processing of personal data for the purpose of archiving, for scientific purposes, for the purpose of historical research or for statistical purposes, if it is in accordance with a special regulation and if adequate guarantees for the protection of the rights of the person concerned are observed, is not considered incompatible with the original purpose. In such processing of personal data, it is necessary to take into account the adequate guarantees of the operator and intermediary for the rights of the person concerned. These guarantees include the implementation of adequate and effective technical and organizational measures, in particular to ensure compliance with the principle of data minimization and pseudonymisation.
The principle of minimization of personal data - processed personal data must be adequate, relevant and limited to the necessary scope given the purpose for which they are processed.
Principle of correctness – processed personal data must be correct and updated as necessary; adequate and effective measures must be taken to ensure that personal data which are incorrect in terms of the purposes for which they are processed are deleted or corrected without undue delay.
The principle of minimization of storage - personal data must be stored in a form that allows the identification of the person concerned no later than as long as it is necessary for the purpose for which the personal data is processed.
The principle of integrity and confidentiality - personal data must be processed in a way that, through appropriate technical and organizational measures, guarantees adequate security of personal data, including protection against unauthorized processing of personal data, illegal processing of personal data, accidental loss of personal data, erasure of personal data or damage to personal data.
Principle of responsibility – the operator is responsible for compliance with the basic principles of personal data processing, for the compliance of personal data processing with the principles of personal data processing and is obliged to prove this compliance with the principles of personal data processing at the request of the authority.
