PERSONAL DATA PROTECTION AND PROCESSING

What is personal data?

Personal data means any information relating to an identified or identifiable data subject. A data subject shall be considered to be identified or identifiable if the data subject can be identified, directly or indirectly, in particular by number, code or one or more elements specific to his physical, physiological, mental, economic, cultural or social identity. Personal data therefore includes in particular name, surname, address of a natural person, e-mail, IP address, information about the use of services or about activities and preferences of natural person. The protection of personal data is regulated by Act no. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts, as amended ("Personal Data Protection Act").

What is personal data processing?

Processing of personal data means any operation or set of operations which a controller or processor systematically carries out with personal data, either automatically or by other means, in particular the collection, storage, disclosure, modification or modification, retrieval, use, transmission, dissemination, disclosure, storage, exchange, sorting or combination, blocking and disposal.

Who is the administrator or. personal data processor?

We are the company Muth s.r.o., ID No. 48136913, with its registered office at Laurinská 3, 811 01 Bratislava, registered in the Commercial Register of the District Court of Bratislava.
We process your personal data as an administrator, ie. we determine how personal data will be processed and for what purpose, for how long and we may select other processors who will assist us with the processing.

Contact details of the responsible person

If you would like to contact us regarding the data processing with any questions, you can contact us at tel. number +421 948 681 720 or by e-mail to gdpr@praveoleje.sk.

Scope of personal data and purposes of processing

We process personal data that you entrust to us yourself for the following reasons (for
fulfillment of the following purposes):

• provision of services, performance of the contract: Your personal data in the range: e-mail, telephone number, postal address, name and surname we urgently need to fulfill the contract (sending the goods).

• Accounting: If you are a customer, we urgently need your personal data (invoicing data) to comply with the legal obligation to issue and record tax documents.


• marketing - sending newsletters: We use your personal data (e-mail and name) for the purpose of direct marketing - sending business announcements. If you are our customer, we do so out of a legitimate interest, because we reasonably assume that you are interested in our news, for a period of 2 years from the last order. If you are not our customer, we send you newsletters only with your consent, for a period of 2 years from the granting of consent. In either case, you can revoke this consent by using the opt-out link in each email we send


We retain your personal data for the period of limitation, unless the law provides for a longer period for their retention or we have stated otherwise in specific cases.

Cookies.

When browsing our website, we record your IP address, how long you stay on the page and from which page you come. We perceive the use of cookies to measure website traffic and customize the display of websites as our legitimate interest of the administrator, because we believe that thanks to this we can offer you even better services.

Advertising targeting cookies will only be processed with your consent. You can also browse our website in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.

Security and personal data protection

We will handle your personal data responsibly and in accordance with applicable legislation. We use automated and non-automated means for processing personal data. All data is stored on secure servers stored exclusively in the European Union. We protect personal data as much as possible using modern technologies that correspond to the level of technical development.
We have adopted and maintain all possible (currently known) technical and organizational measures that prevent the misuse, damage or destruction of your personal data.

Provision of personal data to third parties

Our employees and co-workers have access to your personal data. To ensure specific processing operations that we cannot provide on our own, we use the services and applications of processors who know how to protect data and for the given processing.
data specialize. These processors are:


- carriers who deliver goods to you (Slovak Post)

SuperFaktura, s.r.o. - accounting and invoices


Provision of personal data outside the EU

We process data exclusively in the European Union or in the countries that provide it
adequate level of protection on the basis of a decision of the European Commission.

Your rights regarding personal data processing and protection

You have your rights regarding the protection of personal data. If you want to use some of these rights, please contact us via e-mail: gdpr@praveoleje.sk.
You have the right to information that is already filled in this information page with the principles of personal data processing. Thanks to the right of access, you can call us at any time and we will prove to you within 15 days what your personal data is being processed and why. If something changes for you or you consider any of your personal data to be out of date or incomplete, you have the right to supplement and change your personal data. You can exercise the right to restrict processing if you believe that we are processing your inaccurate data, that you think we are processing illegally, but that you do not want to delete all data or that you have objected to the processing. You can limit the range of personal data or processing purposes. (For example, unsubscribing from a newsletter restricts the purpose of processing to sending business announcements.)

Right to data portability

If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right of access - with the only difference being that we supply / send the information to you in machine-readable form. We need at least 15 days here.

Right to erase your data (be forgotten)

Your next right is the right to erase your data (be forgotten). You can send a request for deletion to the email address gdpr@praveoleje.sk. In this case, we will delete all your personal data from our systems as well as from the systems of all sub-processors and also from backups. We need 20 days to secure the right to delete. In some cases, we are bound by a legal obligation, and e.g. we must register the issued tax documents for the period stipulated by law. In this case, we will delete all such personal data that are not bound by other law. We will inform you by e-mail about the completion of the deletion.

Complaint to the Office for Personal Data Protection

If you feel that we are not processing your data in accordance with the law, you have the right to contact your Personal Data Protection Office at any time with your complaint. We will be very happy if you inform us of this suspicion first so that we can do something about it and correct any mistakes.

Unsubscribe from newsletters and business announcements

We send you e-mails with advertising, articles or product information and services if you are our customer based on our legitimate interest. If you are not a customer yet, we send you emails only with your consent. In either case, you can unsubscribe from our emails by clicking on the unsubscribe link in each email you send.

Confidentiality

We would like to assure you that our employees and co-workers who will process your personal data are obliged to maintain the confidentiality of personal data and security measures, the disclosure of which would jeopardize the security of your personal data. At the same time, this secrecy continues even after the end of our contractual relations with us. Your personal data will not be disclosed to any other third party without your consent. These principles of personal data protection and processing apply from 9/1/2020.