GDPR
According to Act no. 18/2018 Coll. on the protection of personal data and amending certain laws and pursuant to EP and R Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation) Protection of personal data in the controller With effect from 25.5.2018, all personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data. and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation - hereinafter the Regulation ).
Operator details
Operator identification data:
Company Name: ADRIATIK STONE a.s.
Registered office: Komárňanská cesta 3, 940 02 Nové Zámky
ID: 46 915 460
Steuernummer: 2023660166
VAT number: SK2023660166
Registered in: Commercial Register of the District Court of Nitra
Section: Sa
Insert No .: 10462 / N
On behalf of which he acts: Feriz Mazreku
What is the privacy policy?
Your personal data will be stored securely, in accordance with the security policy of ADRIATIK STONE a.s. for the time necessary to fulfill the purpose of the processing. Only the operator will have access to your personal data; persons authorized by the controller to process personal data; designated intermediaries who process personal data on the basis of the controller s instructions, on behalf of the controller and in accordance with the security policy of the controller and the entities to which the controller is obliged to provide personal data by law. Your personal data will be backed up in accordance with the operator s retention rules. If your personal data is backed up to backup repositories, this data will be deleted in accordance with the individual backup rules. The data stored in the backup repositories are used to navigate security incidents, in particular data breaches due to the security incident.
What are your rights as a data subject?
The right to request access to personal data concerning the controller:
The data subject shall have the right to obtain confirmation from the controller as to whether personal data concerning him or her are being processed and, if so, to have access to such personal data and the following information:
processing purposes;
the categories of personal data concerned;
the recipients or categories of recipients to whom the personal data have been or will be provided, in particular recipients in third countries or international organizations;
if possible, the expected retention period of personal data or, if this is not possible, the criteria for determining it;
the existence of the right to require the controller to correct or delete or restrict the processing of personal data concerning the data subject, or the right to object to such processing;
the right to lodge a complaint to the supervisory authority;
if personal data have not been obtained from the data subject, any available information as to their source;
the existence of automated decision-making, including the profiling referred to in Article 22 (2). 1 and 4 of the Regulation and in these cases at least meaningful information on the procedure used as well as the significance and expected consequences of such processing for the data subject.
Where personal data are transferred to a third country or an international organization, the data subject shall have the right to be informed of the adequate guarantees regarding the transfer pursuant to Article 46 of the Regulation.
The controller shall provide a copy of the personal data being processed. The operator may charge a reasonable fee corresponding to the administrative costs for any additional copies requested by the person concerned. If the person concerned has submitted the request by electronic means, the information shall be provided in a commonly used electronic form, unless the person concerned has requested another method. The right to obtain a copy must not adversely affect the rights and freedoms of others.
Right to correct personal data:
The data subject has the right to have the controller correct incorrect personal data concerning him without undue delay. With regard to the purposes of processing, the data subject has the right to supplement incomplete personal data, including by providing a supplementary declaration.
Right of erasure (right to forget ):
The data subject shall also have the right to have the personal data concerning the controller deleted without undue delay, and the controller shall be obliged to delete the personal data without undue delay if any of the following reasons is met:
personal data are no longer needed for the purposes for which they were obtained or otherwise processed;
the data subject shall withdraw the consent on the basis of which the processing is carried out in accordance with Article 6 (2). 1 letter (a) or Article 9 (1) 2 letter (a) Regulations and, unless there is another legal basis for processing;
the data subject objects to the processing pursuant to Article 21 (2). 1 of the Regulation and do not outweigh any legitimate reasons for processing ie the person concerned objects to the processing provided for in Article 21 (2). 2 Regulations;
personal data were processed illegally;
personal data must be deleted in order to comply with a legal obligation under Union law or the law of the Member State to which the controller is subject;
personal data have been collected in connection with the offer of information society services pursuant to Article 8 (1). 1 of the Regulation.
The right of erasure does not apply if processing is necessary:
to exercise the right to freedom of expression and information;
to fulfill a legal obligation equiring processing under Union law or the law of the Member State to which the controller is subject, or to fulfill a task carried out in the public interest or in the exercise of official authority conferred on the controller;
on grounds of public interest in the field of public health in accordance with Article 9 (2). 2 letter (h) and (i) as well as Article 9 (2). 3 of the Regulation;
for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Article 89 (2). 1 of the Regulation, if the law referred to above is likely to make it impossible or seriously difficult to achieve the objectives of such processing, or to prove, assert or defend legal claims.
Right to restrict processing:
The data subject has the right to have the controller restrict processing in one of the following cases:
the data subject challenges the accuracy of the personal data during a period allowing the controller to verify the accuracy of the personal data;
the processing is illegal and the data subject objects to the deletion of the personal data and calls instead for their use to be restricted;
the controller no longer needs personal data for processing purposes, but the data subject needs them to prove, assert or defend legal claims;
the person concerned objected to the processing under Article 21 (1). 1 of the Regulation, until it is verified that the legitimate reasons on the part of the operator outweigh the legitimate reasons of the person concerned.
Where processing in accordance with the above is restricted, such personal data shall, with the exception of retention, be processed only with the consent of the data subject or to establish, assert or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of overriding public interest or a Member State. The controller shall inform the person concerned who has reached the processing restriction in accordance with the above before the processing restriction is lifted.
Right to data portability:
The data subject shall have the right to obtain personal data concerning him or her which he or she has provided to the controller, in a structured, commonly used and machine-readable format, and shall have the right to transfer such data to another controller without being prevented by the controller to whom the personal data were provided, if: (a) the processing is based on consent in accordance with Article 6 (2); 1 letter (a) or Article 9 (1) 2 letter (a) of the Regulation or in a contract pursuant to Article 6 (1) 1 letter and (b) if the processing is carried out by automated means.
In exercising his right to data portability, the data subject shall have the right to transfer personal data directly from one controller to another, as far as technically possible.
The right to data portability must not adversely affect the rights and freedoms of others.
Right to object to processing, including objections to profiling (if any):
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her which is carried out pursuant to Article 6 (2). 1 letter (e) or (f) of the Regulation, including objections to profiling based on those provisions. The controller may not further process personal data unless it demonstrates the necessary legitimate reasons for the processing which outweigh the interests, rights and freedoms of the data subject, or the reasons for proving, asserting or defending legal claims. Where personal data are processed for the purposes of direct marketing, the data subject shall have the right to object at any time to the processing of personal data concerning him or her for the purposes of such marketing, including profiling to the extent that they relate to such direct marketing. If the data subject objects to processing for direct marketing purposes, personal data may no longer be processed for such purposes.
Right to lodge a complaint to the supervisory authority:
Without prejudice to any other administrative or judicial remedy, any person concerned shall have the right to lodge a complaint with the supervisory authority, in particular in his or her Member State of habitual residence, place of work or alleged infringement, if he or she considers that the processing of personal data: which is in breach of this Regulation. The supervisory authority to which the complaint has been lodged shall inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78.
to which the data subject addresses his complaint in justified cases, means the Office for Personal Data Protection of the Slovak Republic.
Right to withdraw processing consent:
Where the legal basis for the processing of personal data is the consent of the data subject, the data subject shall be entitled to withdraw his or her consent at any time, without prejudice to the lawfulness of the processing based on the consent given prior to his or her withdrawal. The right to withdraw consent at any time, even before the expiry of the period for which the consent was given, may be exercised by the person concerned in the following ways:
by e-mail sent to the address osobneudaje@adriatikstone.com (enter the text GDPR - withdrawal of consent in the subject line)
by sending a written request to the address of the operator s registered office Komárňanská cesta3, 940 02 Nové Zámky (indicate the text GDPR - withdrawal of consent on the envelope).
What is the purpose and legal basis of the processing of personal data? What are the categories of recipients of personal data? What is the retention period of the personal data processed? Does the controller transfer personal data to a third country or international organization? All information is available in the table. Annex entitled Record of the operator s processing activities
Does the operator use your personal data for automated individual decision-making?
The operator will not use your personal data for automated decision making and the operator will not use profiling in relation to employees.
What are the legitimate interests of the operator?
The operator is obliged to develop a so-called proportionality test (comparative test) in case he would like to use the so-called personal data processing as a legal basis. legitimate interest.
The legitimate interests of the operator are, in the sense of Art. 6 par. 1 letter f) Regulations:
Client records
Register of suppliers
Employee records
Network and information security
camera recording of employees § 13 par. 4 ZP
camera record
Prior to the processing of personal data of the persons concerned, the operator performed the so-called proportionality test (comparative test) for each of the above legitimate interests, in which it assessed its legitimacy, necessity, appropriateness, proportionality as well as the application of adequate guarantees for the protection of the rights and freedoms of the persons concerned.
What if the processing of personal data is a legal or contractual requirement?
If the provision of personal data is a legal / contractual requirement, you as the person concerned are obliged to provide this personal data. Failure to provide the personal data necessary to enter into the contract may result in the non-conclusion of the contractual relationship.
How can I object to the processing of your personal data?
In the event of an objection concerning the processing of your personal data, you have the right to submit a complaint or request in writing to the address of the operator ADRIATIK STONE a.s., Komárňanská cesta 3, 940 02 Nové Zámky, or to e-mail: osobneudaje@adriatikstone.com. The person in charge of handling complaints / requests related to personal data protection is appointed an authorized person mail osobneudaje@adriatikstone.com.