GDPR
Protection of personal data
Personal data
According to Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, as amended (hereinafter referred to as the “Act on the Protection of Personal Data”), personal data are data relating to an identified natural person or an identifiable natural person who can be identified directly or indirectly, in particular on the basis of a generally applicable identifier, another identifier, such as a name, surname, identification number, location data, or an online identifier, or on the basis of one or more characteristics or features that constitute his or her physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.
Contractor
You provide your personal data to the company NESTOR s. r. o., with its registered office at Trieda KVP 1C, 040 23 Košice – city district Sídlisko KVP, Slovak Republic, Company ID: 53 167 953, Tax ID: 2121289643, VAT ID: SK2121289643, registered in the Commercial Register of the Municipal Court of Košice, Section: Sro, file number: 49360/V (hereinafter referred to as the “Supplier”). The Supplier is the controller pursuant to the Personal Data Protection Act.
When processing personal data, the Supplier proceeds in accordance with the relevant legal regulations of the Slovak Republic and the legislation of the European Union, while paying maximum attention to the privacy of the data subjects and the protection of their personal data that has been provided to it and that it processes.
Reasons for processing personal data
The processing of the personal data obtained and provided is necessary for the proper performance of our business and business activities and the fulfillment of obligations arising from legal relationships. Without the provision of personal data of the data subjects and their processing, we would not be able to provide services to our clients, customers and partners to the required extent.
Legal basis for processing your personal data
We process your personal data on the legal basis of Section 13, Paragraph 1, Letter a) and Letter b) of the Personal Data Protection Act, i.e. on the basis of:
- your consent
- concluded contract
- if necessary for the fullfilment of contractual obligations.
Disclosure of personal data to third parties
Your personal data that we process may be provided to or processed by third parties, but only if this is necessary to fulfill our obligations to you, our clients, customers and partners, or to provide our services. Within the framework of the above, we take great care to maintain the highest possible standard of protection of your personal data.
Handling of personal data
We process your personal data either manually or using electronic systems. For the above purpose, we have taken all necessary and unavoidable measures, not only of a technical but also of a personnel and control nature, to ensure the highest possible level of protection of your personal data.
Your rights
If we process your personal data, as a data subject under the Personal Data Protection Act, you have the right to:
to obtain confirmation from the Supplier as to whether it processes personal data concerning you; if the Supplier processes such personal data, as a data subject you have the right to access this personal data and information about:
the purpose of processing personal data,
the category of personal data being processed,
the identification of the recipient or the category of recipient to whom the personal data have been or are to be disclosed, in particular a recipient in a third country or an international organisation, if possible,
the period of retention of personal data; if this is not possible, information on the criteria for determining it,
the right to request from the controller the correction of personal data concerning the data subject, their erasure or restriction of their processing, or the right to object to the processing of personal data,
that the Supplier corrects incorrect personal data concerning you without undue delay;
having regard to the purpose of the processing of personal data, you have the right as the data subject to have incomplete personal data completed,
to have the Supplier delete personal data concerning you without undue delay if you exercise your right to erasure, if:
the personal data are no longer necessary for the purpose for which they were collected or otherwise processed,
as the data subject, you withdraw the consent on the basis of which the processing of personal data is carried out, and there is no other legal basis for the processing of personal data,
personal data is processed unlawfully,
the reason for deletion is the fulfillment of an obligation under this Act, a special regulation or an international treaty by which the Slovak Republic is bound,
for the Supplier to restrict the processing of personal data if:
as the data subject, you object to the accuracy of the personal data, during the period allowing the Supplier to verify the accuracy of the personal data,
the processing of personal data is unlawful and you, as the data subject, object to the erasure of the personal data and request the restriction of their use instead,
The supplier no longer needs the personal data for the purpose of processing the personal data, but you as the data subject need them to exercise a legal claim, or
as a data subject, you object to the processing of personal data pursuant to Section 27(1) of the Personal Data Protection Act, pending verification of whether the legitimate reasons on the Supplier’s side outweigh the legitimate reasons of you as the data subject,
object to certain types of processing (e.g. direct marketing, cookies, etc.),
to object to the processing of personal data concerning you, on grounds relating to your particular situation, except where the processing of personal data is necessary for the performance of a task carried out for reasons of public interest, where the personal data are processed for scientific purposes, for historical research purposes or for statistical purposes pursuant to Section 78(7) of the Personal Data Protection Act,
not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning you or similarly significantly affects you,
withdraw your consent to the processing of personal data at any time, if the data is processed on the basis of consent,
file a complaint with the relevant supervisory authority.
n the event that your personal data has been shared with a third party, all of the above requests will be sent to the third parties.
Personal data retention period
The retention period for personal data results from specific laws, in particular Act No. 40/1964 Coll. Civil Code, as amended, Act No. 513/1991 Coll. Commercial Code, as amended, Act No. 431/2002 Coll. on accounting, as amended, Act No. 395/2002 Coll. on archives and registries and on amendments to certain acts, as amended, as well as Act No. 595/2003 Coll. on income tax, as amended. We retain your data only for the necessary period of time so that we can properly fulfill our obligations under the above (and other) legal regulations.
How can I complain about the use of my data or exercise my rights?
You can exercise your rights as a data subject in connection with the processing of your personal data by e-mail at: info@nestor.sk. After receiving the e-mail request and your subsequent identification as a data subject, we will process the request within the statutory period based on the data provided in the request.
If you wish to file a complaint about the processing of your personal data by the Supplier (or third parties), or about the manner in which your complaint/request has been handled, you may contact the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic, at any time.
NESTOR s. r. o.
