PERSONAL DATA – INFORMATION OBLIGATION

1. We approach the protection of your personal data responsibly and fully guarantee your right to information. When processing personal data, we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council and Act No. 18/2018 Coll. on Personal Data Protection, as amended. When processing personal data, we follow the principles of lawfulness and transparency, purpose limitation, data minimization, and storage limitation. We apply information security management principles focused on ensuring the confidentiality, availability, and integrity of personal data.

2. We process only the personal data that users provide themselves and only for the purpose for which they were provided. Personal data will be processed only for the period necessary to fulfill the purpose of processing, which is determined by the question or issue with which the user contacts our company. Providing personal data is voluntary.

3. CONTROLLER

4. František Holub – Golden eye Diamond / Jokaiho 25, 98401 Lučenec

5. RESPONSIBLE PERSON

6. Due to the scope and nature of its activities, our company is not legally required to appoint a responsible person. To exercise the rights listed below, you may contact our company Golden eye Diamond via
   goldeneye.fh@gmail.com
   or by post at: František Holub – Golden eye Diamond / Jokaiho 25, 98401 Lučenec.

7. PURPOSE OF PROCESSING PERSONAL DATA

8. Our company processes the personal data provided for the following purposes:

9. Processing contractual and pre-contractual obligations

10. Processing personnel and payroll agenda

11. Processing accounting agenda

12. Protection of security and property

13. Employee attendance records

14. Customer service provision

15. Marketing purposes

16. Measures for detecting corrupt activities

17. LEGAL BASIS FOR PROCESSING PERSONAL DATA OF DATA SUBJECTS

18. Your personal data may only be processed if one of the following legal bases applies:

19. You have given consent to the processing of your personal data for one or more specific purposes.

20. Processing is necessary for the performance of a contract to which you are a party, or in order to take steps at your request prior to entering into a contract.

21. Processing is necessary under a special law or an international treaty binding on the Slovak Republic.

22. Processing is necessary to protect your life, health, or property, or that of another natural person.

23. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

24. Processing is necessary for the purposes of the legitimate interests of the company or a third party, except where excluded by law.

25. CONSENT OF THE DATA SUBJECT

26. Consent to the processing of personal data is given freely, without pressure or coercion, and without conditioning it by the threat of refusal of a contractual relationship, provided services, or obligations arising from applicable legislation.

27. Consent is granted separately for each purpose of personal data processing.

28. You may withdraw your consent at any time as a data subject.

29. Our company respects privacy and considers the personal data provided to be confidential.

30. CONDITIONS AND METHOD OF PROCESSING PERSONAL DATA OF DATA SUBJECTS

31. Personal data is processed by automated and non-automated means.

32. We do not disclose processed personal data, except where required by a special legal regulation or by a court decision or decision of another public authority.

33. We will not process your personal data without your explicit consent or another lawful legal basis.

34. RIGHTS OF THE DATA SUBJECT

35. As a data subject, in accordance with the relevant provisions of Act No. 18/2018 Coll. on Personal Data Protection, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC, you have the following rights:

36. The right to withdraw consent at any time

37. The right of access to your personal data

38. The right to request rectification

39. The right to object to processing

40. The right to erasure of your personal data (“right to be forgotten”)

41. The right to data portability

42. The right to request restriction of processing of your personal data

43. The right to lodge a complaint with the competent supervisory authority, which in Slovakia is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic

44. If you have doubts as to whether your personal data is being processed in accordance with applicable legal regulations, or if inaccurate personal data is being processed, you may request an explanation or rectification of the situation, in particular blocking, correction, supplementation, or deletion of your personal data.

45. RECIPIENTS

46. Our company may provide your personal data to the following recipients:

47. Statutory recipients

48. Recipients defined by the applicable laws of the Slovak Republic and the EU – health insurance companies, Social Insurance Agency, Financial Administration, state and self-government authorities, supervisory authorities, and law enforcement authorities

49. Processors

50. Who provide our company with support services in payroll and accounting, security and property protection, and web hosting services.

51. We solemnly declare that when selecting individual processors, we paid attention to their professional, technical, organizational, and personnel competence and their ability to guarantee the security of processed personal data through adopted security measures in accordance with applicable legislative requirements.

52. The relevant processors are authorized in writing pursuant to Section 34 of the Personal Data Protection Act to process the personal data of data subjects to the extent, under the conditions, and for the purpose agreed contractually and in accordance with the Personal Data Protection Act.

53. RETENTION PERIOD OF PERSONAL DATA OF DATA SUBJECTS

54. The retention period of personal data is determined according to the purpose of processing and the requirements of special regulations. Personal data whose purpose of processing and retention period have expired will be irreversibly deleted.

55. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

56. No transfer of personal data to third countries takes place.

57. AUTOMATED INDIVIDUAL DECISION-MAKING, INCLUDING PROFILING

58. Cookies

59. In addition to the data you provide to our company, we also obtain so-called “cookies” information. This information is generated through monitoring our website by analytical tools that create a data chain and monitor how visitors use websites on the internet. This may include data about:

60. Websites linked to this website

61. Third-party websites you visit after leaving this website

62. Your IP address

63. The length of time spent on this website

64. You may disable the use of cookies in your web browser settings. If you do so, the full functionality of the website may be affected.

65. More about cookies

66. When someone browses the website, the system generates a cookie to record information related to the visit (visited pages, time spent on our website, browsing data, leaving the website, etc.), but this data must not be linked to the identity of the visitor. This tool is used to improve the ergonomic design of the website, create a user-friendly website, and enhance the online experience of visitors. Most internet browsers accept cookies, but visitors may delete them or refuse them automatically.

67. Analytical and Other Tools

68. We use third-party services providing external services:

69. Measurement

70. We use website traffic analysis tools. We may also use this data to customize our services and marketing strategies. These are third-party services whose operators may use your data for their own purposes, including profiling and preparing other types of advertising.

71. Google

72. Online Marketing

73. We use tools for targeted marketing. These are third-party services whose operators may use your data for their own purposes, including profiling and preparing other types of advertising.

74. Google

75. Social Media

76. We use social media for communication and presentation. These are third-party services whose operators may use your data for their own purposes, including profiling and preparing other types of advertising.

77. Facebook

78. Twitter

79. By the above information, we have informed you as a data subject about the protection of your personal data and instructed you about your rights in relation to personal data protection to the extent of this written information obligation.