Personal Data Protection Rules (GDPR)

Personal Data Protection Rules (GDPR)

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) (hereinafter "Regulation" or "GDPR") stipulates the obligation of the controller to provide the data subject with all the information referred to in Articles 13 and 14 and all notifications according to Articles 15 to 22 and Article 34 that relate to the processing, in a concise, transparent, comprehensible and easily accessible manner form, formulated clearly and simply, especially in the case of information intended specifically for the child. If the data subject requests it, the information can also be provided verbally, provided that the data subject has proven his identity.

 

The company Prince Movement s.r.o., with registered office at Doležalova 15/C, 821 04 Bratislava, ID number: 55675069, registered in the commercial register of the Bratislava III District Court, department Ltd., insert no. 171983/B, is aware, that personal data is also processed in connection with the operation of the website www.princemotion.com. In accordance with the relevant legal regulations of the Slovak Republic and with the legislation of the European Union, the company fulfills its information obligation and, through these rules, informs the person concerned about the conditions of personal data processing.

 

1. BASIC INFORMATION

 Operator

The company Prince Movement s.r.o., with registered office at Doležalova 15/C, 821 04 Bratislava, ID number: 55675069, registered in the commercial register of the Bratislava III District Court, department Ltd., insert no. 171983/B, as the operator of the website www.princemovement.com (hereinafter referred to as the "website").

The website operator processes personal data in accordance with the Regulation and the Law.

If you, as a data subject, have any questions regarding the processing of your personal data, write to the operator at the e-mail address: contact@princemotion.com or call the number: +421 903 200 300.

 

The person concerned

The affected person is any identified or identifiable natural person whose personal data is allegedly processed by the operator. An identifiable natural person is a person who can be identified directly or indirectly, by reference to an identifier:

• Name, surname, date of birth,
• identification number – birth number, identity card number,
• location data (address),
• data related to the state of health of the person concerned, which provide information about the past, present, or future physical or mental state of health of the person concerned,
• online identifier - natural persons may be assigned online identifiers provided by their devices, applications, tools, and protocols (IP address, cookies, or other identifiers).

For the purposes of these Rules, a natural person - a visitor to the operator's website, or another natural person who has provided the operator with their personal data - is considered a data subject.

 

Personal information

Personal data is any information relating to an identified or identifiable natural person.

 

Processing of personal data

The processing of personal data is an operation or a set of operations with personal data or sets of personal data, such as obtaining, recording, organizing, structuring, storing, processing, or changing, searching, viewing, using, providing by transmission, rearranging, or combining, restriction, erasure, or disposal, whether by automated or non-automated means.

 

Legal basis

The operator is authorized to process personal data only if it is permitted by one of the legal bases established by the GDPR. When processing personal data, the operator is based on one or more of the following legal bases:

• the person concerned has expressed his consent to the processing of his personal data for one or more specific purposes,
• processing is necessary for the performance of a contract to which the affected person is a party,
• processing is necessary to fulfill the legal obligation of the operator,
• processing is necessary to protect the vital interests of the data subject or another natural person,
• processing is necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,
• processing is necessary for the purposes of legitimate interests pursued by the operator or a third party.

 

Personal data retention period

In general, the operator stores the personal data of the affected persons only:

• during the period that is necessary for the relevant purpose,
• to the extent reasonably necessary to comply with any applicable legislation or as is reasonable in relation to applicable statute of limitations provisions.

 

Intermediary

An intermediary is a natural or legal person, public authority, agency, or other entity that processes personal data on behalf of the operator.

 

2. PERSONAL DATA AND THE PURPOSE OF THEIR PROCESSING

Processing of personal data for the purpose of sending the newsletter

 

Purposes of personal data processing:

– informing about various promotions, news, services, and activities of the operator.

 

Scope of processed personal data:

– first name, last name, residential address, e-mail address, telephone number, IP address.

 

Legal basis for personal data processing:

– article 6 par. 1 letter a) Regulations - the person concerned has expressed his consent to the processing of his personal data for one or more specific purposes. Giving consent is voluntary.

 

Period of storage of personal data:

- the validity of consent to sending the newsletter is 5 years from the date of its provision or for the duration of the interest in receiving the newsletter on the part of the person concerned; the person concerned can withdraw his consent at any time, by written notification sent to the e-mail address of the operator vajczikova@mvalko.sk or via a link to cancel his subscription directly in the newsletter. Data processed before cancellation of the newsletter is processed legally by the operator.

 

Recipients of personal data:

– the operator provides personal data for the purpose of operating websites to the web hosting provider Websupport, s.r.o., with registered office at Staré Grunty 12, 841 04 Bratislava.

 

3. COOKIES

The website of the operator uses cookies to ensure necessary functionality, as well as to make the website of the operator more attractive, remember user settings and collect statistical information about users.

 

Google Analytics

In connection with cookies, the operator also uses the Google Analytics service, through which it analyzes user behavior to optimize the functionality of the website. The operator uses the Google Analytics service with the "IP anonymization" function activated.

 

More detailed information about the cookie files used by the operator can be found in the Cookies section, which forms an integral part of these Rules.

 

4. RIGHTS OF THE PERSON CONCERNED

The affected person has the right to demand from the operator, based on a written request:

• confirmation of whether personal data about you is being processed,
• in a generally comprehensible form, information on the processing of personal data in the information system to the extent of the operator's and intermediary's identification data (if established); the purpose of personal data processing; list or scope of processed personal data; instructions on the voluntariness or obligation to provide the requested personal data, the validity period of the consent or notification that the legal regulation imposes the obligation to provide personal data; third parties, if personal data is to be provided to them; range of recipients, if personal data is to be made available to them; the form of publication of personal data, if personal data are to be published; third countries, if personal data is to be transferred to these countries,
• in a generally comprehensible form, accurate information about the source from which the operator obtained personal data for processing,
• in a generally comprehensible form, a list of personal data that is the subject of processing,
• correction or disposal of her incorrect, incomplete, or out-of-date personal data that is the subject of processing,
• disposal of personal data whose purpose of processing has ended; if the subject of processing is official documents containing personal data, he can request their return,
• disposal of personal data that is the subject of processing, if there has been a violation of the law,
• blocking of personal data due to withdrawal of consent before the expiration of its validity period, if the operator processes personal data based on consent.
• The person concerned can address the request or information about the leakage of personal data or other serious facts related to the processing of personal data by the operator to the operator at the above address or at tel. number: +421 903 200 300, or at the email address: contact@princemotion.com.

 

Your right of access to personal data

You, as the person concerned, have the right to have the operator confirm whether it is processing personal data concerning you. If the operator processes personal data, the person concerned has the right to obtain access to them and other information about the purpose of their processing, the category of processed personal data, to whom they were or are to be provided, in particular about the recipient in a third country or about an international organization, if possible; if personal data is transferred to a third country or an international organization, the person concerned has the right to be informed about adequate guarantees required by law, the period of storage of personal data; if this is not possible, information about the criteria for its determination, the right to request the correction of personal data, their deletion or restriction of their processing, or the right to object to the processing of personal data, the right to submit a proposal to initiate proceedings on the protection of personal data, the source of personal data, if personal data were not obtained from you, the existence of automated individual decision-making, including profiling. Profiling is any form of automated processing of personal data, which consists of the use of such personal data to evaluate certain personal aspects relating to a person, primarily related to performance at work, assets, health, personal preferences, interests, reliability, behavior, location, or movement. In these cases, the operator will provide the data subject with information about the procedure used, as well as the meaning and expected consequences of such processing of personal data for the data subject. The operator is obliged to provide the personal data it processes. For repeated provision of personal data, the operator may charge a reasonable fee corresponding to administrative costs. The operator is obliged to provide you with personal data in the manner requested by you. The right to obtain personal data must not have adverse consequences on the rights of other natural persons.

 

The right to correct personal data

You as the affected person have the right to have the operator correct incorrect personal data concerning you without undue delay. Depending on the purpose of personal data processing, you have the right to supplement incomplete personal data.

 

The right to object to the processing of personal data

The person concerned has the right to object to the processing of his personal data for a reason related to a specific situation, if the operator performs profiling or processes personal data on the following legal bases:

• the processing of personal data is necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,
• the processing of personal data is necessary for the purpose of the legitimate interests of the operator or a third party.
• The operator may not further process the personal data of the person concerned, if he does not prove the necessary legitimate interests for the processing of personal data that prevail over his rights or interests or reasons for asserting a legal claim. The person concerned has the right to object to the processing of personal data concerning him for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing. If the person concerned objects to the processing of personal data for the purpose of direct marketing, the operator may not further process personal data for the purpose of direct marketing. The person concerned has the right to object to the processing of personal data concerning him, for reasons related to his specific situation, if his personal data is processed for a scientific purpose, for the purpose of historical research or for a statistical purpose, except when the processing of personal data is necessary to perform the task for reasons of public interest.

 

The right to erasure of personal data (the right "to be forgotten")

The person concerned has the right to have the operator delete personal data concerning him without undue delay. If you ask the operator to delete personal data, the operator is obliged to delete them in the following cases:

• personal data are no longer necessary for the purpose for which they were obtained or otherwise processed,
• the data subject revokes the consent based on which the controller processes her personal data and there is no other legal basis for the processing of personal data,
• the data subject objects to the processing of personal data and there are no valid reasons for the processing of personal data or will object to the processing of personal data for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing,
• personal data is processed illegally,
• the reason for erasure is the fulfillment of the obligation established by the legal order,
• personal data was obtained in connection with the offer of information society services according to § 15 par. 1. of the Act.
• If the operator has published the personal data of the person concerned and is obliged to delete them based on the above-mentioned conditions, it is also obliged, given the available technology and costs, to inform other operators who process personal data so that these operators delete references to personal data and their copies or write-offs.

 

The operator has no obligation to delete personal data if it is necessary:

• to exercise the right to freedom of expression or the right to information,
• to fulfill an obligation according to the law or an international agreement or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,
• for reasons of public interest in the field of public health,
• for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes, if it is likely that the deletion will make it impossible or seriously hinder the achievement of the goals of such processing, or
• to exercise a legal claim.

 

The right to restrict the processing of personal data

The affected person has the right for the operator to limit the processing of his personal data if

• disputes the correctness of his personal data; the operator will limit the processing of her personal data for the period of verification of their correctness,
• the processing of his/her personal data is illegal and instead of erasure, the data subject requests restriction of their use,
• the operator no longer needs personal data for the purpose of processing personal data, but the data subject needs them to assert a legal claim, or
• you object to the processing of personal data;
• the operator will limit the processing of personal data until it is verified whether the legitimate reasons on the part of the operator prevail over the legitimate reasons of the person concerned.
• If the processing of personal data has been limited, in addition to storage, the operator may process personal data only with the consent of the person concerned or for the purpose of asserting a legal claim, for the protection of persons or for reasons of public interest. The operator is obliged to inform the affected person before the restriction on the processing of personal data is cancelled.

 

Notification obligation in connection with correction, deletion, or restriction of processing of personal data

The operator is obliged to notify the recipient (everyone to whom the personal data of the data subject has been provided) of the correction of personal data, deletion of personal data or restriction of processing of personal data, unless this proves to be impossible or requires disproportionate effort. If the person concerned so requests, the operator informs him about these recipients.

 

The right to portability of personal data

The data subject has the right to obtain personal data relating to the data subject that he/she has provided to the operator in a structured, commonly used, and machine-readable format. At the same time, he has the right to transfer this personal data to another operator, if this is technically possible and if the processing of your personal data is carried out by automated means (i.e., electronically), while the personal data is processed either.

• based on consent,
• if the processing is carried out by automated means,
• or they are necessary for the performance of a contract to which the person concerned is a party, or for the execution of measures prior to the conclusion of a contract based on a request.

This right must not have adverse consequences on the rights of other persons. Exercising the right to portability does not affect the right to erasure of personal data. The right to portability does not apply to the processing of personal data necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator.

 

The right to file a motion to initiate proceedings on personal data protection

If the data subject would be directly affected by his or her rights established by the Personal Data Protection Act pursuant to Section 100 of the Act, he or she has the right to submit a proposal to the Personal Data Protection Office of the Slovak Republic to initiate proceedings on personal data protection. The purpose of the procedure is to find out whether the rights of natural persons have been violated during the processing of their personal data or whether there has been a violation of the law and, in the event of detection of deficiencies, if it is reasonable and expedient, to impose remedial measures, or a fine for violating the law. The Office publishes the sample proposal on its website. The motion to initiate proceedings must contain evidence to support the claims stated in the motion and a copy of the document or other evidence demonstrating the exercise of the right by the controller (right to access personal data, right to request correction of personal data, right to delete or limit processing of personal data, right to object to processing personal data, the right to portability of personal data), if the person concerned has exercised such a right, or stating the reasons worthy of special attention for the non-application of the right in question.

 

The above-mentioned rights (except for the right to submit a proposal for the initiation of personal data protection proceedings) can be exercised by e-mail or in writing by post with the operator who supervises the processing of personal data. The operator can also be notified of a leak of personal data or other serious facts related to the processing of personal data by the operator.

 

If the person concerned suspects that his/her personal data is being processed without authorization, he/she can submit a proposal to initiate a personal data protection procedure to:

 

Personal Data Protection Office of the Slovak Republic with registered office Hraničná 12, 820 07 Bratislava 27 or contact the office via its website http://www.dataprotection.gov.sk.

 

If the person concerned does not have full legal capacity, his rights can be exercised by a legal representative. If the person concerned is not alive, the rights that he had under this law can be exercised by a close person.

 

According to the Act on the Protection of Personal Data, the operator will handle the request of the person concerned free of charge, except for payment in an amount that cannot exceed the amount of material costs incurred for the purpose of making copies, importing technical media, and sending information to the person concerned, unless a special law provides otherwise. The operator is obliged to process the request of the affected person in writing no later than 30 days from the date of delivery of the request. The operator shall notify the affected person and the Office for Personal Data Protection of the Slovak Republic in writing without undue delay of the limitation of the rights of the data subject pursuant to the Personal Data Protection Act.

 

5. TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATION

The operator does not provide any personal data to third countries or international organizations.

 

6. AUTOMATED INDIVIDUAL DECISION-MAKING INCLUDING PROFILING

As a data subject, you have the right not to be subject to a decision that is based solely on automated processing, including profiling, and which has legal effects that concern or similarly significantly affect you.

 The operator does not use automated individual decision-making or profiling when processing personal data for any of the above-mentioned purposes.

 

7. STORAGE AND PROTECTION OF PERSONAL DATA

The website operator takes the protection of personal data responsibly and seriously. It treats personal data as confidential in accordance with the relevant legislation on the protection of personal data and with these Rules.

The operator processes personal data either manually or using electronic systems. The operator has taken all necessary and necessary organizational, technical, and administrative measures to ensure the accuracy and timeliness of personal data, as well as to protect personal data from unauthorized or illegal processing and accidental loss, destruction or damage, and to ensure that the level of personal data protection is as high as possible.

The privacy policy may change over time. Any changes related to the Rules will be published on the website and before making any changes, it will inform the affected persons whose personal data it processes. If required by law, to operate before any change to the Rules, request consent from the person concerned.