Personal data processing principles and personal data protection system according to the GDPR regulation
developed in accordance with Regulation (EU) 2016/679 of the European Parliament and Council on the protection of natural persons in the processing of personal data and on the free movement of such data in accordance with Articles 13 and 14 of the Regulation (hereinafter referred to as "GDPR") and Act No. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the "Act on the Protection of Personal Data") Company: TVAROVANIE PCHZ, spol. s r.o. M.R.Štefánika 71 010 01 Žilina IČO: 36 382 655 Tel. number: 0948 522 470 E-mail: katarina.hazdrova@tvarovanie.sk What is personal data? Personal data are data relating to an identified natural person or an identifiable natural person who can be identified directly or indirectly, especially on the basis of a generally applicable identifier, another identifier such as a name, surname, identification number, location data, or an online identifier, or on based on one or more characteristics or signs that make up its physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity. What is personal data processing? The processing of personal data is a processing operation or a set of processing operations with personal data or sets of personal data, in particular obtaining, recording, organizing, structuring, storing, changing, searching, browsing, using, providing by transmission, dissemination or in any other way, rearranging or combining, limiting , erasure, whether by automated means or non-automated means. The Operator (Administrator) has no obligation to appoint/designate a Responsible Person. Sources and categories of personal data: The operator processes personal data (directly from you) that you have provided or personal data obtained based on the fulfillment of your order. Your identification and contact data and data necessary for the performance of the contract. Legal reason and purpose of processing: The legal reason for processing is: Your consent to the processing of personal data for the purpose of providing direct marketing according to Article 6 paragraph 1 letter a) GDPR Fulfillment of the contract between you and the operator according to article 6 paragraph 1 letter b) GDPR The processing is necessary for the fulfillment of the legal obligation of the operator according to Article 6, paragraph 1 letter c) GDPR The purpose of personal data processing is: Fulfillment of your order and performance of rights and obligations arising from the contractual relationship between you and the operator. When placing an order, the required personal data are necessary for the successful processing of the order according to Art. 6 par. 1 letter b) Regulations (subsequent payment, delivery of goods or services, processing of complaints, etc. are also related to this); the processing of the customer's personal data takes place without the customer's consent, since the legal basis for the processing of his personal data for the purpose of fulfilling the contract is a specific order between the customer and the operator. The provision of personal data is a necessary requirement for the conclusion and fulfillment of an order, without the provision of personal data it is not possible to create an order or fulfill its conditions on the part of the operator. The company provides services in the field of production and sale of plastic products. The operator declares that he does not work with the records in any way and does not provide them to third parties or entities. When operating a profile on social networks (Facebook, Instagram), our interest is in raising awareness of the operator in the online environment and communicating with customers. Personal information you post on our social networking sites such as comments, likes, videos, images, etc. will be published via the social network platform. We do not subsequently process personal data for any other purpose. The person concerned has the right to object at any time for reasons related to his specific situation against the processing of personal data concerning him. You can send objections by e-mail to the operator's contact address katarina.hazdrova@tvarovanie.sk Social network operators have their own adopted rules, service infrastructure and their own provisions for the protection of personal data. We have no influence on the transfer of data and the use of your data by social network operators. We recommend that you familiarize yourself with the privacy protection conditions of the social network platform provider: Facebook https://www.facebook.com/policy.php ; Instagram https://help.instagram.com/519522125107875 In certain processing operations, we act as joint operators with operators of social networks within the meaning of Art. 26 point 4 GDPR. There is no automated individual decision-making by the operator in accordance with Article 22 of the GDPR. Retention period: The operator stores personal data: For the period necessary for the exercise of rights and obligations arising from the contractual relationship between you and the operator and the exercise of the claim arising from these contractual relationships. As long as the consent to the processing of personal data for marketing purposes is revoked After the expiry of the personal data storage period which results from Act no. 395/2002 Coll. The Act on Archives and Registries and on Supplementing Certain Acts, the operator deletes personal data Recipients of personal data Who is the recipient? The recipient is anyone to whom personal data is provided, regardless of whether it is a third party. A public authority that processes personal data on the basis of a special regulation is not considered a recipient. There are persons who participate in the delivery of goods, services, and the execution of payments based on the contract The operator does not provide, publish or make available personal data to third countries Terms of personal data security The operator declares that it has taken appropriate personnel, technical and organizational measures to ensure the protection of personal data. The operator has taken technical measures to secure data storage and storage of personal data in file form. The operator declares that only persons authorized by him have access to personal data. Your rights: Under the conditions set out in the GDPR, you have: - The right to access your personal data according to Art. 15 GDPR - The right to correct personal data according to Article 16 GDPR - Right to restriction of processing - The right to erasure according to Article 17 GDPR - The right to object according to Article 21 GDPR - The right to transfer personal data according to Article 21 GDPR - The right to withdraw consent (electronically or to a correspondence address) - The right to file a complaint with the Office for the Protection of Personal Data if you believe that your rights to the protection of personal data have been violated. You also have the right to file a complaint with the Office for Personal Data Protection if you believe that your personal data protection rights have been violated. How can you fulfill your rights? Right of access to data You have the right to know whether we are processing your personal data. If we process them, you can ask us to access them. Based on your request, we will issue a confirmation with information about the processing of your personal data. You can submit the application electronically, to an email address katarina.hazdrova@tvarovanie.sk or by mail to the address TVAROVANIE PCHZ, spol. s r.o., M.R.Štefánika 71, 010 01 Žilina Right to rectification You have the right to have your personal data that we process correct, complete and up-to-date. If your personal data is incorrect or out of date, you can ask us to correct or supplement it electronically to the email address katarina.hazdrova@tvarovanie.sk or by mail to the address TVAROVANIE PCHZ, spol. s r.o., M.R.Štefánika 71, 010 01 Žilina Right to erasure Under certain circumstances, you have the right to have your personal data deleted. You can ask us to delete your data at any time. We will delete your personal data if: - we no longer need your personal data for the purpose for which you provided them, - you withdraw your consent, - you object to the processing of your personal data, - we process your personal data illegally, - personal data must be deleted in order to comply with a legal obligation, - if you are a child, or the parent of a child who agreed to the processing of personal data via the Internet. Right to restriction of processing You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not work with them further. The processing of your data will be restricted if: - you inform us that your personal data are incorrect, until we verify their correctness, - we process your personal data illegally, but you do not agree to their deletion and instead request that we only limit the processing of your personal data, - We no longer need your data, but you need it to prove, exercise or defend your rights - you object to the processing of your personal data, until we verify whether our legitimate interests outweigh your reasons. Right to data portability You have the right to request that we provide you with your personal data in electronic form (e.g. XML or CSV), which will allow you to easily transfer your data to another company. You can also ask us to transfer your personal data directly to the selected company. We will comply with your request if you have provided us with personal data directly and have given us your consent to process it. The right to object You have the right to object to us processing your personal data. If we process your personal data in the following cases: - due to our legitimate interest, - creating a customer profile, - you can object to their processing if you have personal reasons for doing so. How can you exercise these rights? You can contact us with your request in one of the following ways: by email: katarina.hazdrova@tvarovanie.sk or by mail to the business address: TVAROVANIE PCHZ, spol. s r.o., M.R.Štefánika 71, 010 01 Žilina, IČO: 36 382 655 If you believe that your rights to the protection of personal data have been violated, you have the right to file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data at Hraničná 12 820 07 Bratislava 27 Slovenská republika Identification data: IČO: 36064220 DIČ: 2021685985 Secretariat of the office: +421 /2 3231 3214 E-mail: statny.dozor@pdp.gov.sk Considering the epidemiological situation in the Slovak Republic, the Office recommends making submissions via postal or electronic services (www.slovensko.sk). Personal submissions from 29/11/2021 can only be made in necessary cases no later than 12:00 p.m.