Personal data processing statement

The company ŽIAROMAT a.s., (hereinafter referred to as “Controller“) collects, processes and uses personal data in compliance with the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27,2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and with the Act. 18/2018 Coll. on the protection of personal data and does everything necessary so as to ensure compliance with this legislation.

The Controller: ŽIAROMAT, a.s.
Responsible person – contact data: zodpovednaosoba@ziaromat.sk
Recipients or categories of recipients: ŽIAROMAT a.s., Továrenská 1, 985 01 Kalinovo
Transfer of personal data to third countries: not applicable
Retention period for personal data: two years

The Controller shall process personal data only for the purpose for which they were acquired. The Controller declares that personal data shall be processed only in accordance with fair practice and the Controller will not act in a manner that is contrary to the Act on the protection of personal data, or to other generally binding legal regulations, or circumvent these rules. After fulfilling the purpose of personal data processing the Controller shall, without undue delay, ensure the disposal of personal data unless stipulated otherwise by a specific regulation.

The Controller shall ensure an adequate level of personal data protection. The Controller also protects personal data against damage, destruction, loss, alteration, unauthorized access and disclosure or publication as well as against any other unauthorized forms of processing and for this purpose the Controller has adopted appropriate security measures corresponding to the manner of personal data processing.

The Controller shall process personal data in accordance with the rights of the data subject. The data subject has the right to obtain from the Controller confirmation as to whether or not personal data concerning him or her are being processed. If the Controller processes such personal data, the data subject has the right to access this personal data and information on:

Purpose of personal data processing
Category of personal data processed
Identification of the recipient or the category of a recipient to whom the personal data have been or are to be transferred, in particular, identification of a recipient in a third country or an international organization, if possible
Retention period of personal data; if this is not possible, information on the criteria for the period determination
The right to request the Controller to correct personal data relating to the data subject, delete them or restrict their processing, or the right to object to the processing of personal data
The right to initiate proceedings
The source of personal data, if personal data are not obtained from the data subject
The existence of automated individual decisions, including profiling.

The operator ŽIAROMAT a.s., Tóvárenská 1, 985 01 Kalinovo, contact person responsible: zodpovednaosoba@ziaromat.sk hereinafter referred to as the “Operator”

REQUEST FOR OFFER (DEMAND)

The personal data you provide us will only be used for the purpose of sending a quotation to you. After accomplishing the purpose of processing of your personal data, ŽIAROMAT a.s., will secure liquidation of the personal data without any undue delay. ŽIAROMAT a.s. will secure appropriate level of personal data privacy, it will only process the personal data in accordance with good manners and it will behave in a way consistent with the act on protection of personal data and with other generally binding legal regulations, and it will not circumvent the law.

The Controller: ŽIAROMAT a.s.
Contact data of a person in charge: zodpovednaosoba@ziaromat.sk
Recipients or categories of recipients: ŽIAROMAT a.s., Továrenská 1, 985 01 Kalinovo
Transfer of personal data to a third country: no
Retention period of personal data: until the offer is dealt with, or for 2 years

Rights of the Personal Data Provider:

Consent to personal data processing can be withdrawn at any time in writing to the Controller.
The data provider has the right to request access, correction, deletion, restriction of processing, objection to processing, and the right to data portability.
The applicant has the right to defend his or her rights through the responsible person or by submitting a request for investigation, a complaint, to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to Section 100 of Act No.: 18/2018 Coll.

By providing consent, the data provider agrees that the Controller may process and store their personal data for possible changes in the offer or for further contact. The data retention period is 2 years.

Information on the collection of personal data – SPECIAL LAW

The Controller: ŽIAROMAT a.s.
Contact: zodpovednaosoba@ziaromat.sk
Legal basis: Special law
Recipients: ŽIAROMAT a.s., Továrenská 1, 985 01 Kalinovo
Transfer to third countries: Will not occur
Retention period: According to special law and record-keeping rules

After fulfilling the purpose of processing personal data, the operator will ensure the destruction of personal data without undue delay, unless otherwise required by a special law. The operator declares that it will ensure an adequate level of protection of personal data and that it will process personal data only in accordance with good morals and will act in a manner that does not contradict the Personal Data Protection Act or special laws under which personal data are processed.

Applicant’s rights:

the applicant has the right to request from the Operator access to his/her personal data and the right to rectify them, as well as the right to data portability,
The applicant has the right to defend his or her rights through the responsible person or by submitting a request for investigation, a complaint, to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to Section 100 of Act No.: 18/2018 Coll.

PERSONAL DATA ACQUISITION – CONTRACT

Controller: ŽIAROMAT a.s.
Contact: zodpovednaosoba@ziaromat.sk
Legal basis: contract
Recipients: ŽIAROMAT a.s., Továrenská 1, 985 01 Kalinovo
Transfer to third countries: Will not occur
Retention period: According to special law, record-keeping rules, or specify exact retention period

Applicant’s rights:

the applicant has the right to request from the Operator access to his/her personal data and the right to rectify them, as well as the right to data portability,
The applicant has the right to defend his or her rights through the responsible person or by submitting a request for investigation, a complaint, to the supervisory authority, in Slovakia the Office for Personal Data Protection pursuant to Section 100 of Act No.: 18/2018 Coll.

I am younger than 16 and my parent or other holder of parental rights and obligations agrees to the processing of my personal data.
I am over 16. The data subject has the right to immediate correction of personal data relating to him or her by the Controller.
Having regard to the purpose of personal data processing the data subject has the right to supplement incomplete personal data.

The data subject has the right to immediate deletion of personal data relating to him or her by the Controller in the following cases:

Personal data are no longer necessary for the purpose for which they were collected or otherwise processed.
The data subject withdraws his or her consent on which the processing of personal data is based and where there is no other legal ground for the processing.
The data subject objects to the processing of personal data and no legitimate grounds for personal data processing prevail.
The personal data have been unlawfully processed.

The data subject has the right to limitation of personal data processing by the Controller if:

The data subject raises objections to the personal data accuracy for a period enabling the Controller to verify the accuracy of personal data.
The processing is illegal and the data subject opposes their erasure and requests the restriction of their use instead.
The Controller no longer needs the personal data for the purpose of personal data processing, but they are required by the data subject for issuing a legal claim.
The data subject objects to the processing of his or her personal data.

The data subject has the right to obtain personal data relating to him or her that have been provided to the Controller, in a structured and commonly used machine-readable format and has the right to transfer such personal data to another Controller, if technically possible. The data portability right does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of public power entrusted to the Controller.

The data subject has the right to object to the processing of his or her personal data on grounds relating to his or her particular situation carried out under the legitimate interest of the Controller, including profiling based on these provisions. The Controller must not further process personal data unless the necessary legitimate interests of the personal data processing are proven that outweigh the rights or interests of the data subject, or the reasons for the issuing a legal claim.

The data subject has the right to object to the personal data processing relating to him or her for the purpose of direct marketing, including profiling to the extent that it relates to direct marketing. If the data subject objects to the processing of personal data for direct marketing purposes, the Controller must not further process the personal data for direct marketing purposes.

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her if it does not apply to personal data necessary for the conclusion or performance of a contract between the data subject and the Controller.

The data subject has the right to initiate an investigation pursuant to the §100 of the Act No. 18/2018 Coll. on the protection of personal data if he or she suspects that his or her personal data is treated in an unlawful manner or there has been an infringement of his or her rights due to his or her personal data processing or breach of the security of processing.

The Controller or intermediary may, under the conditions laid down by a special regulation or an international treaty having binding effect on the Slovak Republic, limit the scope of the obligations and rights when such a restriction is laid down to ensure:

the security of the Slovak Republic
the Defence of the Slovak Republic
public policy
the performance of tasks for the purpose of criminal proceedings
other important objectives of general public interest of the European Union and the Slovak Republic, in particular the subject of an important economic interest or significant financial interest of the European Union and the Slovak Republic, including monetary, budgetary and taxation matters, public health or social security
the protection of judicial independence and judicial proceedings
prevention of breaches of ethics in the regulated professions or regulated professional activities
monitoring function, control function or regulatory function associated with the exercise of official authority
protection of rights of the data subject and others
fulfilment of a legal claim
economic mobilization

The data subject has the right to defend his or her rights with a help of a responsible person or through the initiative of the investigation or complaint to a supervisory authority, the Office for Personal Data Protection in of the Slovak Republic, pursuant to the § 100 of the Act No. 18/2018 Coll.

Responsible person – contact data: zodpovednaosoba@ziaromat.sk