Principles of Personal Data Processing and Data Protection System according to the GDPR Regulation
The Controller (Administrator) of your personal data under Article 4(7) of the European Parliament and Council Regulation (EU) 2016/679 on the protection of individuals concerning the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR) is the company: AB NEREZ s.r.o., Šoltésovej 5262/13, 940 02 Nové Zámky, ID number: 54 126 355
The contact details of the Controller are as follows:
Phone number: 0907 705 641
Email: benko@abnerez.sk
(hereinafter referred to as the “Controller”)
What is personal data?
Personal data refers to data relating to an identified natural person or an identifiable natural person, which can be identified directly or indirectly, especially based on a commonly used identifier, other than a name, surname, identification number, location data, or an online identifier, or based on one or more characteristics or attributes that constitute their physical identity, physiological identity, genetic identity, mental identity, economic identity, cultural identity, or social identity.
What is personal data processing?
The processing of personal data is a processing operation or a set of processing operations with personal data or sets of personal data, in particular, collection, recording, organization, structuring, storage, alteration, retrieval, consultation, use, transmission, dissemination, or any other form of making available, alignment or combination, restriction, erasure, whether it is carried out by automated means or not.
The Controller (Administrator) is not obliged to appoint a Data Protection Officer.
Sources and categories of personal data:
The Controller processes personal data (provided directly by you) that you have provided to them or personal data obtained based on the fulfillment of your order.
Your identification and contact details, and data necessary for fulfilling the contract.
Legal basis and purpose of processing:
The legal basis for processing is:
Your consent to the processing of personal data for the purpose of direct marketing under Article 6(1)(a) of the GDPR
Fulfillment of the contract between you and the Controller under Article 6(1)(b) of the GDPR
Processing is necessary to fulfill the legal obligations of the Controller under Article 6(1)(c) of the GDPR.
The purpose of processing personal data is:
Fulfilling your order and performing the rights and obligations arising from the contractual relationship between you and the Controller. Personal data required for successful order processing is requested according to Article 6(1)(b) of the Regulation (including subsequent payment, service delivery, handling complaints, etc.); processing of customer’s personal data is carried out without the customer’s consent, as the legal basis for processing their personal data for the purpose of contract fulfillment is the specific contract between the customer and the Controller. Providing personal data is a mandatory requirement for concluding and fulfilling the contract; without providing personal data, it is not possible to conclude the contract or meet its conditions.
The Controller does not engage in automated individual decision-making according to Article 22 of the GDPR.
Retention period:
The Controller retains personal data:
⦁ For the period necessary to perform the rights and obligations arising from the contractual relationship between you and the Controller and to assert a claim arising from these contractual relationships.
⦁ Until the consent to the processing of personal data for marketing purposes is revoked.
After the expiry of the retention period of personal data specified by the law no. 395/2002 Z.z. Act on Archives and Registries and Amendments to Certain Acts, the Controller will erase the personal data.
Recipients of personal data:
Who is the recipient?
A recipient is anyone to whom personal data is provided, regardless of whether they are a third party. An authority of public power that processes personal data based on a special regulation is not considered a recipient.
These are individuals involved in the delivery of goods, services, and payment processing under the contract.
The Controller does not provide, disclose, or make personal data accessible to third countries.
Conditions for securing personal data:
The Controller declares that it has taken appropriate personnel, technical, and organizational measures to protect personal data.
The Controller has taken technical measures to secure data stores and personal data stores in paper form.
The Controller declares that only authorized persons designated by them have access to personal data.
Your rights:
Under the conditions set out in the GDPR, you have:
- The right to access your personal data under Article 15 of the GDPR
- The right to rectification of personal data under Article 16 of the GDPR
- The right to restriction of processing
- The right to erasure under Article 17 of the GDPR
- The right to object under Article 21 of the GDPR
- The right to data portability under Article 21 of the GDPR
- The right to withdraw consent (electronically or to the correspondence address)
- The right to lodge a complaint with the data protection authority if you believe that your personal data protection rights have been violated.
You also have the right to lodge a complaint with the data protection authority if you believe that your personal data protection rights have been violated.
How can you exercise your rights?
You can contact us with your request in one of the following ways:
In writing by email: benko@abnerez.sk or by post to the correspondence address:
AB NEREZ s.r.o., Šoltésovej 5262/13, 940 02 Nové Zámky, ID number: 54 126 355
If you believe that your personal data protection rights have been violated, you have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection, at the following address:
Hraničná 12
820 07 Bratislava 27
Slovakia
Identification data:
ID: 36064220
VAT: 2021685985
Office of the Authority:
+421 /2 3231 3214
Email: statny.dozor@pdp.gov.sk
Due to the epidemiological situation in Slovakia, the Office recommends submitting applications through postal or electronic services (www.slovensko.sk). Personal submissions from November 29, 2021, are possible only in essential cases, no later than 12:00.
