CONTACT FORM

The purpose of processing personal data is to record data subjects when sending answers to the question asked.

Scope of data subjects: natural persons

List of personal data: name, surname, email, address, telephone number

 Legal basis for processing personal data: §13 para. 1 letter a) of Act No. 18/2018 Coll. on the Protection of Personal Data, as amended.

 Categories of recipients: entities to which a special regulation entrusts the power to decide on the rights and obligations of natural persons: courts, criminal justice authorities

and intermediaries: Ing. Pavol Dubek.

 Personal data is not transferred to third countries .

Deadlines for erasing personal data:

contact form

maximum 6 months (in case of fulfilling legal obligations or legal claims of the operator under applicable legislation).

 Automated decision-making, including profiling, does not take place .

The data subject has the right to withdraw consent to the processing of personal data concerning him or her at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal; the data subject must be informed of this fact before consent is given. The data subject may withdraw consent in the same way as he or she gave consent.

CAMERA INFORMATION SYSTEM

The purpose of processing personal data is to protect public order and security, detect crime, and protect the health and property of the controller and the data subjects.

Scope of persons concerned: persons located in the area monitored by the camera system

List of personal data: camera footage

Legal basis for processing personal data: Article 6(1)(f) of the Regulation

Categories of recipients: entities to which a special regulation entrusts the power to decide on the rights and obligations of natural persons: courts, criminal justice authorities

Personal data is not transferred to third countries .

Deadlines for erasing personal data:

audio/video recording

3 days

Automated decision-making, including profiling, does not take place .

The main legitimate interest is the protection of the property, financial and other interests of the operator and also the protection of the property, life and health of the data subjects.

ACCOUNTING AND TAX DOCUMENTS

The purpose of processing personal data is to record accounting documents and the agenda associated with its processing.

Scope of data subjects: natural persons – clients, employees

List of personal data: name, surname, title, permanent address, temporary address, telephone number, e-mail address, date of birth, type and number of identity document, signature, bank account number of the natural person

Legal basis for processing personal data: Act No. 431/2002 Coll. on accounting, as amended, Act No. 222/2004 Coll. on value added tax, as amended, Act No. 40/1964 Coll. Civil Code, as amended, Act No. 152/1994 Coll. on social fund and amending Act No. 286/1992 Coll. on income taxes, as amended, Act No. 311/2001 Coll. on labour code, as amended

Categories of beneficiaries: social insurance company, health insurance companies, tax office and entities to which a special regulation entrusts the power to decide on the rights and obligations of natural persons: courts, criminal prosecution authorities

and intermediaries: Conseil sro, 1. mája 230/17, 900 21 Svätý Jur, 45681082

and intermediaries: Ing. Pavol Dubek.

Personal data is not transferred to third countries .

Deadlines for erasing personal data:

Accounting documents

10 years

Automated decision-making, including profiling, does not take place .

Due to compliance with the principle of minimization, all personal data provided by you is a necessary legal requirement to fulfill the purpose of their processing.

POST

The purpose of processing personal data is to record incoming and outgoing mail.

Scope of data subjects: natural persons - addressees.

List of personal data: name, surname, title, address, name of organization, job title, email address, subject and content of the mail

Legal basis for processing personal data: Act No. 395/2002 Coll. on archives and registries and on amending certain acts, as amended, Act No. 305/2013 Coll. on the electronic form of the exercise of powers of public authorities and on amending and supplementing certain acts (e-Government Act) and Act 596/2003 Coll. on state administration in education and school self-government and on amending and supplementing certain acts, Act 71/1967 Coll. on administrative proceedings

Categories of recipients: entities to which a special regulation entrusts the power to decide on the rights and obligations of natural persons: courts, criminal justice authorities

and intermediaries: Ing. Pavol Dubek.

Personal data is not transferred to third countries .

Deadlines for erasing personal data:

Regular correspondence	3 years
Registry diary	10 years

 Automated decision-making, including profiling, does not take place .

Due to compliance with the principle of minimization, all personal data provided by you is a necessary legal requirement to fulfill the purpose of their processing.

E-SHOP

The purpose of processing personal data is to conclude a purchase contract and subsequently make payment, deliver goods or services and possibly provide other related services (especially in connection with legal regulations governing consumer protection).

Scope of data subjects: natural persons - e-shop customers

List of personal data: title, name, surname, residential address, or delivery address, email, telephone, order content, personal data necessary to make a payment via the internet

Legal basis for processing personal data: Section 13, paragraph 1, letter b) of Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts

Categories of recipients: entities to which a special regulation entrusts the power to decide on the rights and obligations of natural persons: courts, criminal justice authorities

and intermediaries: Ing. Pavol Dubek.

Personal data is not transferred to third countries .

Deadlines for erasing personal data:

Contract

10 years

 Automated decision-making, including profiling, does not take place .

Due to compliance with the principle of minimization, all personal data provided by you is a necessary contractual requirement for fulfilling the purpose of their processing.

COMPLAINTS

The purpose of processing personal data is to record clients making complaints.

Scope of data subjects: natural persons – clients making a complaint

List of personal data: name, surname, title, address, telephone, e-mail and nature of the complaint

Legal basis for processing personal data: Act No. 40/1964 Coll. Civil Code, as amended, Act No. 250/2007 Coll. on Consumer Protection and on Amendments to Act of the Slovak National Council No. 372/1990 Coll. on Offences, as amended, and other related generally binding legal regulations

Categories of recipients: SOI – Act No. 128/2002 Coll. on state control of the internal market in matters of consumer protection and on amendments and supplements to certain acts and entities to which a special regulation entrusts the power to decide on the rights and obligations of natural persons: courts, criminal prosecution authorities

and intermediaries: Ing. Pavol Dubek.

Personal data is not transferred to third countries .

Deadlines for erasing personal data:

complaint protocol

10 years

 Automated decision-making, including profiling, does not take place .

Due to compliance with the principle of minimization, all personal data provided by you is a necessary legal requirement to fulfill the purpose of their processing.

PHOTOGRAPHS

The purpose of processing personal data is to publish photos on the operator's website, on social networks, on wall boards, leaflets, printed matter, print and electronic media for the purpose of promoting and presenting the company.

Scope of data subjects: natural persons

List of personal data: name, surname, title, job title, photo, video recording

Legal basis for processing personal data: consent of the data subject

Categories of recipients: entities to which a special regulation entrusts the power to decide on the rights and obligations of natural persons: courts, criminal justice authorities

and intermediaries: Ing. Pavol Dubek.

Personal data is not transferred to third countries .

Deadlines for erasing personal data:

photograph

until the end of the employment relationship

 Automated decision-making, including profiling, does not take place .

The data subject has the right to withdraw consent to the processing of personal data concerning him or her at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent before its withdrawal; the data subject must be informed of this fact before consent is given. The data subject may withdraw consent in the same way as he or she gave consent.

Requests from data subjects to exercise their rights

The purpose of processing personal data is to record and process requests from data subjects when exercising their rights under the Regulation.

Scope of data subjects: natural persons – data subjects / applicants

List of personal data: title, first name, last name, permanent residence, email address

Legal basis for the processing of personal data: Art. 6 (1) (c) of the Regulation

Categories of recipients: entities to which a special regulation entrusts the power to decide on the rights and obligations of natural persons: courts, criminal justice authorities

Personal data is not transferred to third countries .

Deadlines for erasing personal data:

request

10 years

 Automated decision-making, including profiling, does not take place .

Due to compliance with the principle of minimization, all personal data provided by you is a necessary legal requirement to fulfill the purpose of their processing.

Data subjects whose personal data are processed for specific, defined purposes may exercise the following rights:

The right to request access to your personal data - The right to rectify personal data - The right to erase personal data - The right to restrict the processing of personal data - The right to object to the processing of personal data - The right to transfer your personal data - The right to file a complaint with the supervisory authority, i.e. the Office for Personal Data Protection of the Slovak Republic.

The above rights of the data subject are further specified in Articles 15 to 21 of the Regulation. The data subject shall exercise the above rights in accordance with the Regulation and other relevant legal provisions. The data subject may exercise his or her rights against the controller by means of a written request or by electronic means. If the data subject requests information to be provided orally, the information may be provided in this way provided that the data subject has proven his or her identity.

Ekodren sro has taken all appropriate personnel, organizational and technical measures to maximize the protection of your personal data in order to reduce the risk of their misuse to the greatest extent possible. In accordance with our obligation under Article 34 of the Regulation, we inform you as data subjects that if a situation arises where we, as the controller, violate the protection of your personal data in a way that is likely to result in a high risk to the rights and freedoms of natural persons, we will notify you of this fact without undue delay.

Legal regulations and the related methods of processing your personal data may change. If we decide to update this policy, we will place the changes on our website and inform you of these changes. In cases where there is a major change to this policy, or in cases where we are required to do so by law, we will inform you in advance. We ask you to read this policy carefully and to check this policy regularly when communicating with us or using our website.

If you have any questions regarding the processing of your personal data, including the exercise of the above rights, you can contact our contact person: by email at info@ekodren.sk. We will properly review all your suggestions and complaints.

If you are not satisfied with our response, or you believe that we are processing your personal data unfairly or unlawfully, you may file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; E-mail: statny.dozor@pdp.gov.sk.