logo

Information on the processing of personal data for the persons concerned

(English version of this document for informational purposes only. Use Slovak version for legal purposes.)

according to Art. 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "Regulation"), in accordance with
Article 19 of Act No. 18/2018 Z.z. on the Protection of Personal Data (hereinafter referred to as the "Act").
I. Operator
 
The operator is Lotario s. r. 811 08 Bratislava - mestská časť Staré Mesto, Cintorínska 9, IČO: 50 257 137, registered in the Commercial Register of the District Court Bratislava I, Section: Sro, File no .: 110350 / B (hereinafter referred to as the "Operator")
Telephone contact: +421908651113
E-mail contact: info@acco.sk

II. Purpose and legal basis of the processing
 
The Operator processes personal data in the scope of: title, name, surname, e-mail address, for the following purposes: 

a. marketing purposes. 
The legal basis for processing is the consent of the data subject to the processing of his or her personal data.

III. Beneficiaries or categories of recipients of personal data

An operator may entrust the processing of personal data of a third party, intermediaries.

Intermediaries of the Operator are those persons who can provide the Operator with the preparation of contractual documents such as, external advocates or collaborating lawyers, or servers providing server or IT services, as well as auditors or accountants.

Within the exercise of the investigative powers, the Operator is obliged to provide personal data also to the Slovak Trade Inspection, the Tax Office, the Personal Data Protection Office, the law enforcement authorities and other public authorities, if the Operator is in compliance with the national law, in accordance with European Union law, calls for such personal data to be provided.

IV. Transmission of personal data to a third country
 
The operator does not assume that personal data may be transferred outside the territory of the Slovak Republic.

V. Retention period of personal data
 
Personal data will be stored during the duration of the cooperation with the Operator. Under the retention minimization principle, the retention of personal data will generally be limited by the duration of the rights and obligations arising from the contractual relationship between the client and the Operator.
 
Upon termination of the contractual cooperation, the Operator will only process the personal data necessary
  • to fulfill its legal obligations of the Operator (eg pursuant to Act No. 395/2002 Coll., on Archives and Registers, Section 35 of Act No. 431/2002 Coll., on accounting - processing for 10 years following the year to which the documentation relates),
  • for the protection of the Operator (eg due to a complaint or a litigation during the passing of the limitation period).

VI. Rights of the persons concerned
 
The person concerned is an identified or identifiable natural person whose personal data are subject to processing by the Operator.

a. Right of Access
The person concerned has the right to access his or her data. Upon the request of the person concerned, the Operator will provide a confirmation that the personal data of the person concerned are processed. Provided that the Operator processes such data, he / she shall issue a copy of the person's personal data on request.
 
Issuance of the first copy as per paragraph above is free of charge. For any further copies requested by the person, the Operator will charge a fee corresponding to the administrative costs incurred by the person issuing the copy. If a person requests information by electronic means, they will be provided in a commonly used electronic form, by e-mail, unless otherwise requested.

b. Right to rectify and supplement personal data

The person concerned has the right to correct personal data if the Operator records incorrect personal data. At the same time, the person concerned has the right to supplement incomplete personal data. The operator shall make a correction or supplement the personal data without undue delay after the person concerned requests it.

c. Right of deletion

The person concerned has the right to delete personal data concerning him / her, provided that:
  • personal data are no longer needed for purposes for which they were obtained or otherwise processed;
  • the person concerned withdraws the consent under which the processing is carried out,
  • the person concerned objects to the processing of personal data,
  • personal data was processed illegally,
  • is the reason for deletion of the obligation of a law, special regulation or international treaty binding on the Slovak Republic, or
  • Personal information has been obtained in connection with the provision of information society services to persons under 16 years of age.
 
The person concerned will not be entitled to the deletion of personal data, provided that processing is necessary:
  • to exercise the right to freedom of expression and information;
  • to fulfill an obligation under a law, a special regulation or an international treaty binding on the Slovak Republic or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,
  • on grounds of public interest in the field of public health,
  • for archiving purposes in the public interest for the purpose of scientific or historical research or for statistical purposes, as it is likely that the right to erasure prevents or seriously impedes the achievement of the objectives of such processing, or
  • for the purpose of proving, applying or defending legal claims.
 
An operator shall delete the personal data of the persons concerned on request, without undue delay, after assessing that the request of the person concerned is justified.

d. Right to Restrict Processing

The person concerned has the right to limit the processing of personal data if:
  • asserts the accuracy of personal data by an objection, during a period allowing the Operator to verify the accuracy of personal data;
  • processing is unlawful and the person concerned requests instead of deletion of personal data to restrict their use;
  • An operator no longer requires personal data for processing purposes but is required by the person concerned to prove, apply or defend legal claims;
  • the person concerned has objected to the processing of personal data on the basis of the operator's legitimate right, up to the verification that the legitimate reasons on the part of the operator outweigh the legitimate reasons for the person concerned.
 
If the person concerned requests a limitation on the processing of his or her personal data, the Operator will not perform any processing operations other than storage without the consent of the data subject
  • the person concerned will be informed by the operators if the limitation of the processing of these data is canceled

e. The right to data portability
 
The data subject has the right to data portability, which means obtaining the personal data he has provided to the Operator while having the right to pass this data to another operator in a user-friendly and machine-readable format provided that personal data were obtained with the consent of the data subject and their processing takes place in the form of automated means.

f. Right to object to the processing of personal data

The person concerned has the right at any time to object to the processing of his / her personal data on grounds relating to his or her particular situation. The person concerned may object to the processing of his or her personal data on the basis of:
  • the legal title for performance of tasks carried out in the public interest or in the exercise of public authority, or the legal title of the Operator's legitimate interest,
  • the processing of personal data for the purposes of direct marketing,
  • processing for the purpose of scientific or historical research or for statistical purposes.
 
If the person concerned objects to the processing of personal data for the purposes of direct marketing, his or her personal data can not be processed by the Operator.
 
The Operator shall assess the objection within a reasonable time. An operator may not further process personal data unless it demonstrates the necessary legitimate interests in the processing of personal data that outweigh the rights or interests of the data subject or the grounds for exercising a legal claim.

g. Right at any time to withdraw your consent to the processing of personal data

The person concerned has the right at any time to withdraw his or her consent to the processing of personal data when the processing of personal data was based on this legal title. The person concerned shall withdraw his / her consent by writing to the Operator in writing, with his / her request, in any of the ways selected. However, the lawfulness of the processing of personal data on the basis of the granted consent is not affected by its appeal.

VII. The manner of exercising the rights of the persons concerned
 
The person concerned may exercise his rights in the following ways:
  • a registered postal mail sent to the address of the Operator referred to in point I of this information,
  • by e-mail to info@acco.sk 

VIII. Complaint of the person concerned

The person concerned has the right to file a complaint (complaint) with the Office for the Protection of Personal Data of the Slovak Republic, based in Hraničná 4826/12, 820 07 Bratislava, Slovak Republic, telephone: +421 2 3231 3220, www.dataprotection.gov.sk, statny.dozor@pdp.gov.sk, insofar as it considers that her personal data protection rights have been violated. If the person concerned has no legal capacity in full, his rights under the Regulation and the Personal Data Protection Act may be invoked by a legal representative. The rights of the person concerned within the meaning of the Regulation and the non-living data protection law may be invoked by a close person.

IX. Existence of automatic decision making including profiling

 
An operator does not make automated decisions, including profiling.

logo sasy
Captcha