Information about the rights of the person concerned in the protection of his personal data

1. The operator of the personal data information system is the commercial company RecAd, s.r.o., Do doliny 590/14, 031 01 Liptovský Mikuláš, registered in the commercial register of the Banská Bystrica District Court, section Sro, insert no. 9079/S, on behalf of which: Ing. Roman Palaj, manager (hereinafter referred to as the “Operator”).Prevádzkovateľ spracúva osobné údaje od nasledovných osôb:

1. clients of the Operator (current and former) – if they are natural persons; in the case of legal entities, their representatives, members of bodies or employees, or other authorized persons, if these data are necessary for the purpose of concluding and fulfilling the contract,
2. potential clients of the Operator (current and former) – if they are natural persons; in the case of legal entities, their representatives, members of bodies or employees, or other authorized persons, if these data are necessary for the purposes of concluding and fulfilling the contract and in pre-contractual relations,
3. suppliers and customers of the Operator (current and former) – if they are natural persons; in the case of legal entities, their representatives, members of bodies or employees, or other authorized persons, if these data are necessary for the purpose of concluding and fulfilling the contract,
4. employees of the Operator (current and former),
5. spouses of current and former employees of the Operator, their supported children, parents of children, or close people

(hereinafter referred to as “affected persons“).

1. The operator processes personal data from the affected persons for the following purposes:

1. processing of personal data of the persons concerned specified in point 2 letter a) and b) above (name and surname, date of birth, residential address, email address, telephone number, signature, identity card number (or other document), bank account number, academic degree) for the purpose of concluding and fulfilling the contract (e.g. purchase contract, contract for the provision of services, etc.), as well as in pre-contractual relations;
2. processing of personal data of the persons concerned specified in point 2 letter c) above (name and surname, date of birth, residential address, email address, telephone number, signature, ID number, bank account number, academic degree) for the purpose of concluding and fulfilling a contract (e.g. purchase contract, contract for the provision of services and etc.), as well as in pre-contractual relations, as well as for the purpose of processing accounting documents, keeping records of customers and suppliers;
3. processing of personal data of the persons concerned specified in point 2 letter d) above (name and surname, date of birth, social security number, residential address, academic degree, email address, telephone number, signature, ID number, nationality, gender, bank account number, education information, other information listed in the CV ) for the purpose of concluding and fulfilling an employment contract, or agreements on work performed outside the employment relationship in terms of the Labor Code, as well as for the purposes of managing the Operator’s personnel and salary agenda, and the Operator’s wage, levy and tax obligations in labor relations;
4. processing of personal data of the persons concerned specified in point 2 letter e) above (name and surname, date of birth, social security number, address of residence) for the purposes of managing the Operator’s personnel and payroll agenda, and the Operator’s wage, levy and tax obligations in employment relations,
5. processing of personal data of the persons concerned in point 2 letter a) to c) (name, surname, e-mail address) for the purpose of sending information about the activities and activities of the Operator and for the purpose of promoting the activity of the Operator to the e-mail address of the person concerned.

1. The operator processes and protects the obtained personal data in accordance with generally binding legal regulations, including Act no. 18/2018 Coll. on the protection of personal data as amended (hereinafter referred to as “ZOOÚ”).

1. Personal data are processed only during the time necessary to achieve the purpose of personal data processing.

1. Legal basis for processing personal data:

1. personal data specified in point 3 letter a) above are processed for the purpose of concluding and fulfilling the contract, i.e. their processing is necessary for the conclusion and performance of the contract, as well as in pre-contractual relations, and therefore their processing does not require the consent of the person concerned,
2. personal data specified in point 3 letter b) above are processed for the purpose of concluding and fulfilling the contract, i.e. their processing is necessary for the conclusion and fulfillment of the contract, as well as in pre-contractual relations, while they are also processed on the basis of the law, their processing is necessary according to special regulations, e.g. according to the Accounting Act, the Income Tax Act, etc., and therefore the consent of the person concerned is not required for their processing,
3. personal data specified in point 3 letter c) and d) above are processed on the basis of the law, their processing is necessary according to special regulations, e.g. according to the Labor Code, the Social Insurance Act, etc., and therefore the consent of the person concerned is not required for their processing, personal data specified in point 3 letter e) above are only processed based on the consent of the person concerned.

1. Personal data is processed only when the persons concerned provide it of their own free will, for example when signing a contract.

1. Provision of personal data is voluntary:

1. if the person concerned decides not to provide the Operator with the personal data specified in point 3 letter a) and b) above, which the Operator requests to state, this decision will not have any consequences for the person concerned; in such a case, however, it will not be possible to conclude a contract with the person concerned, nor to perform any actions necessary in pre-contractual relations ,
2. if the person concerned decides not to provide the Operator with the personal data specified in point 3 letter c) and d) above, which the Operator requests to state, this decision will not have any consequences for the person concerned; in that case, however, it will not be possible to conclude an employment contract with the person concerned, or an agreement on work performed outside the employment relationship in accordance with the Labor Code,
3. if the affected person decides that you do not give the Operator consent to the processing of personal data specified in point 3 letter e) above for the purpose specified in point 3 letter e) above, this decision will not have any consequences for the person concerned; in that case, however, it will not be possible to send information about the activities and activities of the Operator to the affected person’s e-mail address. However, this does not affect the creation and duration of the contract.

1. Personal data are processed through automated, partially automated, or non-automated means of processing, while appropriate technical, organizational and personnel security measures corresponding to the method of processing are applied.

1. Personal data is processed only by authorized persons who have been properly instructed.

1. The affected person acknowledges that he is authorized to proceed according to section § 14 par. 3 ZOOÚ, and therefore can withdraw this consent to the processing of personal data at any time in writing, by sending a withdrawal of consent to the address: RecAd, s.r.o., registered office: Do doliny 590/14, 031 01 Liptovský Mikuláš or to the email: trivody@trivody.sk .

1. The operator is entitled to provide the personal data of the affected persons to the intermediary in accordance with sec. § 34 par. 1 ZOOÚ.

1. The operator does not make personal data available to any third party, except when it is necessary to fulfill obligations arising from the law or contract. The operator does not intend to transfer personal data to a third country or international organization.

1. PThe operator is not responsible for the misuse of personal data by a third party who has access to this personal data without authorization.

1. Only true personal data can be provided to the information system. The person who provided them to the information system is responsible for the falsity of personal data.

1. The affected person has the right to request from the Operator access to personal data concerning the affected person. The affected person has the right to obtain confirmation from the Operator as to whether personal data concerning him or her are being processed. The operator is obliged to provide the person concerned with his/her personal data, which he processes. For the repeated provision of personal data requested by the data subject, the Operator (pursuant to § 21, paragraph 3 of the ZOÚ) may charge a reasonable fee corresponding to administrative costs. The operator is obliged to provide personal data to the person concerned in a manner according to his request. The right to obtain personal data according to this point must not have adverse consequences on the rights of other natural persons.

1. The person concerned has the right to correct personal data, i.e. the person concerned has the right to have the Operator correct incorrect personal data concerning him without undue delay. Taking into account the purpose of personal data processing, the data subject has the right to supplement incomplete personal data.

1. The person concerned has the right to delete personal data, i.e. the person concerned has the right to have the Operator delete personal data concerning him without undue delay. The details are provided by sec. § 23 ZOOÚ.

1. The person concerned has the right to limit the processing of personal data if:

1. he affected person objects to the correctness of the personal data, during the period allowing the Operator to verify the correctness of the personal data,
2. the processing of personal data is unlawful and the data subject objects to the erasure of personal data and requests instead the restriction of its use,
3. The operator no longer needs personal data for the purpose of processing personal data, but the data subject needs them to exercise a legal claim, or
4. the person concerned objects to the processing of personal data according to § 27 par. 1 ZOOÚ, until it is verified whether the legitimate reasons on the part of the Operator prevail over the legitimate reasons of the person concerned.

The details are provided by sec. § 24 ZOOÚ.

1. The person concerned has the right to object to the processing of personal data, namely:

1. the person concerned has the right to object to the processing of his personal data for reasons related to his specific situation carried out according to § 13 par. 1 letter e) or letter f) ZOÚ including profiling based on these provisions. The operator may not further process personal data if he does not demonstrate the necessary legitimate interests for processing personal data that outweigh the rights or interests of the person concerned, or grounds for asserting a legal claim,
2. the person concerned has the right to object to the processing of personal data concerning him for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing. If the affected person objects to the processing of personal data for the purpose of direct marketing, the Operator may not further process personal data for the purpose of direct marketing.

The person concerned has the right to object to the processing of personal data concerning him for reasons related to his specific situation, except in cases where the processing of personal data is necessary for the performance of a task for reasons of public interest, if personal data are processed for a scientific purpose, for the purpose historical research or for statistical purposes according to § 78 par. 8 ZOOÚ.

1. The person concerned has the right to portability of personal data, has the right to obtain personal data concerning him and which he has provided to the Operator in a structured, commonly used and machine-readable format and has the right to transfer this personal data to another operator, if this is technically possible and if:

1. personal data is processed according to § 13 par. 1 letter a), § 16 par. 2 letters a) or § 13 par. 1 letter b) ZOOÚ and
2. processing of personal data is carried out by automated means.

The exercise of the right mentioned above does not affect the right according to § 23 ZOOÚ. The right to portability does not apply to the processing of personal data necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the Operator. The right under this point must not have adverse consequences on the rights of other persons.

1. The affected person has the right to file a motion to initiate proceedings pursuant to Section 100 of the ZOOÚ, i.e. a proposal to initiate proceedings on personal data protection at the Office for Personal Data Protection of the Slovak Republic, the purpose of which is to find out whether there has been a violation of the rights of natural persons in the processing of their personal data or whether there has been a violation of this Act or a special regulation in the field of personal data protection.

1. The person concerned has the right not to be subject to a decision that is based exclusively on the automated processing of personal data, including profiling, and which has legal effects that concern him or similarly significantly affect him. The details are provided by sec. § 28 ZOOÚ.

1. The operator is obliged to notify the affected person of a breach of personal data protection without undue delay, if such a breach of personal data protection may lead to a high risk for the rights of a natural person.

1. The operator provides cooperation to the affected person in the exercise of his rights according to § 21 to 28 ZOOÚ (items 16 to 24 above). In the cases referred to in § 18 par. 2 ZOOÚ The Operator cannot refuse to act on the basis of the request of the affected person in the exercise of his rights according to Sections 21 to 28 of the ZOOÚ (points 16 to 24 above) if he does not prove that he is unable to identify the affected person.

1. The operator is obliged to provide the affected person with information about the measures taken based on his request according to Sections 21 to 28 of the ZOOÚ (points 16 to 24 above) within one month of receiving the request. The Operator may, in justified cases with regard to the complexity and number of requests, extend the said deadline by another two months, even repeatedly. The operator is obliged to inform the affected person of any such extension within one month from the delivery of the request together with the reasons for the extension of the deadline. If the person concerned has submitted a request in electronic form, the Operator will provide information in electronic form, if the person concerned has not requested the provision of information in another way.

1. If the Operator does not take measures based on the request of the affected person, it is obliged to inform the affected person within one month of the delivery of the request about the reasons for not taking action and about the possibility of submitting a proposal according to § 100 to the Office for the Protection of Personal Data of the Slovak Republick.

1. Information according to Sections 19 and 20 of the ZOOÚ and notices and measures taken according to §§ 21 to 28 and 41 of the ZOOÚ (points 16 to 24 above) are provided free of charge. If the request of the person concerned is clearly unfounded or unreasonable, especially due to its recurring nature, the Operator may:

1. požadovať primeraný poplatok zohľadňujúci administratívne náklady na poskytnutie informácií alebo primeraný poplatok zohľadňujúci administratívne náklady na oznámenie alebo primeraný poplatok zohľadňujúci administratívne náklady na uskutočnenie požadovaného opatrenia, aleboodmietnuť konať na základe žiadosti.

The operator proves the obvious groundlessness of the request or the inadequacy of the request.

The operator may request the provision of additional information necessary to confirm the identity of the person concerned, if he has legitimate doubts about the identity of the natural person who submits the application according to Sections 21 to 27 of the ZOOÚ (items 16 to 23 above); the provision of § 18 of the ZOOÚ is not affected by this.

1. The Operator’s web server uses cookies to adapt the pages to the needs of its visitors. A cookie is a text file that the server saves on the visitor’s hard drive. This file extends the functions available on the pages and enables a more accurate analysis of their use. For example, the Operator’s server can create a cookie that prevents the visitor from re-entering the password during a single visit to one of our web servers. However, regardless of how they are used, cookies will not collect personally identifiable information. The visitor can set his web browser to either accept or reject cookies. If the visitor decides to reject them, he will not be able to make good use of the interactive elements that the Operator’s pages contain.

1. The above instructions and information are in accordance with the Regulation of the European Parliament and the Council (REU) 2016/679 of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data.

In Liptovskom Mikuláši day 10.09.2021

RecAd, s.r.o.