This document describes the manner and purpose of personal data processing by the operator S&G – interior solutions, s.r.o. Mytna 50, 81107 Bratislava ((hereinafter referred to as the "Operator") and also provides any other information required by law, including information about the rights of the data subject and how to exercise them.
Act No. 18/2018 Coll. on the Protection of Personal Data and Amendments to Certain Laws, as well as Regulation (EU) 2016/679 on the Protection of Personal Data (hereinafter referred to as the "Regulation"), is the legal framework governing the protection of individuals in the processing of personal data and the free movement of such data, and protects fundamental rights and freedoms of individuals, particularly with regard to the right to personal data protection.
According to Article 4 (1) of the Regulation, the term "personal data" means any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject").
"Processing" means any operation or set of operations performed on personal data or sets of personal data, whether automated or non-automated, such as collection, recording, organizing, structuring, storing, altering or modifying, retrieving, consulting, using, disclosing by transmission, dissemination, or otherwise making available, aligning or combining, restricting, erasing, or destroying (Article 4(2) of the Regulation).
According to Article 12 et seq. of the Regulation, the data subject must also be provided with relevant information about the processing activities of the operator and the rights of the data subject.
"Validity" due to the potential need to update the information on personal data processing contained in these Policies in the future, the Operator is entitled to update these Policies at any time. This version of the statement was issued on 20.07.2022.
ON WHAT BASIS CAN WE PROCESS YOUR PERSONAL DATA?
Processing is lawful only when at least one of the following conditions is met:
WHAT IF PERSONAL DATA IS NOT PROVIDED?
In the case of processing your personal data within:
WHERE DO WE COLLECT YOUR PERSONAL DATA?
Your personal data is most often provided to us:
WHAT IS THE PURPOSE OF PROCESSING PERSONAL DATA, WHAT PERSONAL DATA DO WE PROCESS, AND HOW LONG DO WE KEEP YOUR PERSONAL DATA?
The operator processes your personal data in the following ways and for the following purposes:
WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA?
Categories of recipients: State and public administration authorities, local government, website administrator, auditor, lawyer, intermediaries (for accounting agenda), companies providing IT management and support, providers of information services in justified cases, courts, and authorities involved in criminal proceedings.
SOCIAL NETWORK COMPETITIONS
Anyone over the age of 18 with a valid address for delivery in Slovakia who is registered on social networks such as Instagram and Facebook and has an active account for the duration of the competition can participate. The organizer will post the terms of participation in the competition. The winners will be announced through a comment under the competition post. The winner will also be contacted via message and asked to send their contact information for the purpose of sending the prize or arranging with the company representative to receive the prize. If the winner does not send their contact details, the prize will be forfeited to the organizer.
By participating in the competition, participants voluntarily grant the organizer (operator under the Personal Data Protection Act) consent to process their personal data, which was provided during the competition, as well as in connection with the possible award of prizes, for the purpose of entering the competition, evaluating it, and delivering the prize. The participant has the right to request access to personal data, the right to correct personal data, the right to delete personal data, and the right to restrict the processing of personal data, the right to object to the processing of personal data, and the right to data portability.
The operator will store the personal data of the winner for the time necessary to deliver the prize, but no longer than 2 months. This consent to process personal data is voluntary. The withdrawal of consent during the competition is effective upon delivery to the organizer and results in the exclusion of the participant from the competition.
Disclosure of Personal Data
Personal data will not be disclosed.
AUTOMATED INDIVIDUAL DECISION-MAKING
Personal data will not be used for automated individual decision-making, including profiling.
TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
Personal data will not be transferred to a third country or international organization.
We assure you that our employees and collaborators who will process your personal data are obligated to maintain confidentiality about your personal data. This confidentiality obligation persists even after the termination of contractual relationships with us.
SECURITY OF PERSONAL DATA
Your personal data is secure with us. To prevent unauthorized access and misuse of your personal data, we have implemented appropriate technical and organizational measures. We are committed to protecting your personal data. Therefore, we not only regularly check its security but also continuously improve its protection. We strive to use security measures that provide adequate protection given the current state of technology. The security measures implemented are regularly updated.
The main data subjects are employees, clients, and any individual whose personal data is processed.
Withdraw consent – In cases where your personal data is processed based on your consent, you have the right to withdraw your consent at any time. You can withdraw consent electronically to the provided email address, in writing, or in person at the operator's headquarters. Withdrawal of consent does not affect the lawfulness of the processing of personal data that we have processed based on your consent.
Right to Access – You have the right to request a copy of the personal data we hold about you and information on how we use your personal data. In most cases, your personal data will be provided in paper form unless you request another method of provision. If you requested this information electronically, it will be provided in electronic form, if technically feasible.
Right to Rectification – We take appropriate measures to ensure the accuracy, completeness, and up-to-date nature of the information we hold about you. If you believe that the data we hold is inaccurate, incomplete, or outdated, please do not hesitate to ask us to correct, update, or complete that information.
Right to Erasure (Right to be Forgotten) – You have the right to request the deletion of your personal data, such as when the data we have about you is no longer necessary for the purposes it was originally collected for. However, your right to erasure must be considered in light of all relevant circumstances. For instance, we may have legal and regulatory obligations that prevent us from fulfilling your request.
Right to Restriction of Processing – In certain circumstances, you are entitled to request that we stop using your personal data. This applies, for example, if you believe the personal data we hold about you is inaccurate or if you believe we no longer need to use your personal data.
Right to Data Portability – In certain circumstances, you have the right to request the transfer of personal data you provided to us to another third party of your choice. However, this right only applies to personal data we obtained from you based on consent or a contract to which you are a party.
Right to Object – You have the right to object to data processing based on our legitimate interests. If we cannot demonstrate compelling legitimate grounds for processing, and you file an objection, we will stop processing your personal data.
Right to Lodge a Complaint – If you believe that your personal data is being processed unfairly or unlawfully, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hranicná 12, 820 07 Bratislava 27; Tel: +421 /2/ 3231 3214; Email: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk. If you file a complaint electronically, it must comply with the requirements of § 19 (1) of Act No. 718/1967 Coll. on administrative proceedings (administrative fee).
To exercise your rights, you may contact the operator as follows:
We will respond to your request free of charge within 30 days. If the request is complex or if there is a large number of requests, we are entitled to extend this deadline by an additional 60 days. If this happens, we will inform you of the extension and the reasons for it.
In case of repeated requests, we are entitled to charge a reasonable administrative fee to cover the costs associated with providing this service.
CLOSURE
If you have questions regarding data protection, you can contact us via our phone lines or through the contact form. In addition to the contact form, you can reach us by email or by mail at the operator's address. If you exercise any of the rights of the data subject according to personal data protection laws and we are unable to verify the identity of the requester, or if we have legitimate doubts about the identity of the person making the request, we reserve the right to ask for additional information necessary to confirm the identity of the individual exercising the request.
