1. Personal data controller:
The personal data controller, i.e. the entity that processes the personal data of the data subject, is DAJS personal s. r. o., with its registered office at Nám. sv. Mikuláša 1442/21A, Stará Ľubovňa 064 01, ID No.: 55859836 (hereinafter referred to as the “Controller”).
We value the privacy of all individuals and respect their right to personal data protection. The operator processes personal data in accordance with Act No. 18/2018 Coll. on personal data protection and on amendments to certain acts of data subjects Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), (hereinafter referred to as the “Act”).
In connection with our activities, we process personal data for various purposes. In most cases, the processing of personal data is necessary under a specific regulation or international treaty to which the Slovak Republic is bound.
The operator processes personal data only on legal grounds: – performance of a contract or pre-contractual measures, – fulfillment of our legal obligation under a special regulation; – performance of a task carried out in the public interest, – fulfillment of our legitimate interests, unless the legitimate interests of the data subject prevail over these interests, – if it is necessary to protect the life, health, or property of the data subject or another natural person. In other cases, we process the personal data of data subjects only with the consent of the data subject, which the data subject may revoke at any time.
2. Purposes and legal basis for processing personal data:
In the event of a contractual relationship between the data subject and the Controller, the Controller processes the personal data of data subjects on the basis of the legal title of the contract, exclusively to the extent necessary to fulfill the purposes of this contract.
The operator processes the personal data of data subjects for the purpose of resolving complaints, addressing deficiencies, and conducting surveys on the basis of the legal title of legitimate interest or the consent of the data subject, exclusively to the extent of the first name, last name, address, e-mail, and telephone number, the processing of which is necessary to achieve the above.
If the data subject voluntarily provides the Controller with their personal data without prior involvement of the Controller, such personal data will be processed by the Controller to the extent necessary on the basis of the legal title of legitimate interest (in particular for the purpose of assessing the data subject’s request and providing a response to the data subject).
Personal data is processed by DAJS personal s. r. o. for the purpose of
- invoicing of delivered services
- sending email offers of DAJS personal s. r. o. company products
- Real Estate Agencies
DAJS personal s. r. o. will not disclose personal data to third parties, except for:
- Júlia Triščová – Consulting and Accounting Services, Župčany 653, 08001 Župčany
provision of services in the field of human resources and accounting
- Contests conducted on social media:
Some contests may take place in the form of sharing data, particularly comments, through the profiles of the individuals concerned on social media (e.g., a response by the individual on the Controller’s fan page via their profile on Facebook or Instagram). In such cases, for the purpose of enabling participation in the contest and the potential announcement/publication of the contest winner (on the Controller’s profile page on the social network), as well as contacting the winner to deliver the prize (via direct messages on the social network), the Controller will process the personal data of the participants, primarily their username.
The legal basis for processing personal data for these purposes is the consent of the individual, expressed through voluntary participation in the contest. For the purpose of delivering the prize to the winners, the Controller may also process additional personal data, such as first name, last name, and residence address, to the extent necessary to achieve the purpose of delivering the prize, based on the individual’s consent. The individual may withdraw their consent at any time using the Controller’s contact details provided below.
The Controller will process this personal data for as long as necessary to achieve the purpose of the contest or until the withdrawal of consent by the individual. After withdrawal of consent, the Controller will no longer process personal data for the purpose to which the withdrawal applies. However, even after consent is withdrawn, the Controller may continue to process the individual’s personal data in a limited scope, based on a legitimate interest, for the period strictly necessary to demonstrate the lawfulness of personal data processing, to pursue legal claims, or to fulfill obligations under generally binding legal regulations (typically for a period of 3 years after the withdrawal of consent to personal data processing).
3. Retention Period of Personal Data:
All personal data is processed only to the extent necessary to fulfill the purposes specified in Section 2 of these Terms and only for the period required to achieve these purposes, but no longer than the period stipulated by or in accordance with the applicable legal regulations.
Personal data processed by the Controller on the legal basis of the data subject’s consent shall be processed until the consent is withdrawn; however, even after consent has been withdrawn, the Controller may continue to process certain data if another legal ground exists (e.g., to demonstrate the accuracy and lawfulness of the personal data processing or to enable defense against legal claims).
Personal data processed by the Controller on the legal basis of legitimate interest, or personal data processed by the Controller for the purpose of direct marketing, shall be processed until the data subject objects to the processing of their personal data.
4. Identification of Personal Data Recipients:
The Controller may disclose the personal data of data subjects to third parties only in cases where required or permitted by law, or with the consent of the data subject. The Controller discloses personal data only to the usual extent to processors or other recipients:
- to external service providers for the Controller (in particular programming or other supporting technical services, server services, email distribution, services related to measuring website traffic, and customizing website content to user preferences),
- to operators of backup servers or operators of technologies used by the Controller, who process the data to ensure the functionality of the Controller’s respective services,
- to the extent strictly necessary, to the Controller’s legal, economic, and tax advisors, as well as the Controller’s auditors, who process the data for the purpose of providing advisory services to the Controller.
5. Rights of Data Subjects:
Right of Access to Personal Data
The data subject has the right to request from the Controller, based on a submitted request, confirmation as to whether or not their personal data is being processed, and if so, to request information regarding the processing of personal data concerning them.
The data subject has the right to the rectification of personal data concerning them and, with regard to the purpose of personal data processing, the right to have incomplete personal data completed.
In the case of personal data processed on the legal basis of a contract or on the basis of the data subject’s consent, the data subject has the right to data portability of the personal data concerning them and which they have provided to the Controller, in a structured, commonly used, and machine-readable format, provided that the personal data is processed by automated means and before the expiration of the retention period. The exercise of this right must not adversely affect the rights of other individuals.
The data subject has the right to the erasure of personal data (right to be forgotten) that is being processed if:
- the personal data are being processed unlawfully, or
- on the basis of the withdrawal of the data subject’s consent (in cases where the processing of personal data is based on the data subject’s consent), or
- the data subject objects to the processing of personal data carried out on the legal basis of the Controller’s legitimate interest, and the Controller’s legitimate grounds for processing do not override, or
- the personal data is no longer necessary for the purpose for which it was collected or otherwise processed, or
- after the expiration of the personal data retention period.
The right to the erasure of personal data under Section 5 letter d) does not apply if the processing of personal data is necessary for the Controller to:
- exercise the right to freedom of expression, or
- exercise the right to information,
- compliance with obligations under Act No. 18/2018 on the Protection of Personal Data and on Amendments and Supplements to Certain Acts (effective as of 25 May 2018) or under a special regulation,
- the establishment, exercise, or defense of legal claims
- for the purpose of archiving, for scientific purposes, for historical research purposes, or for statistical purposes pursuant to Section 78(8), where it is likely that the right under paragraph 1 would prevent or seriously hinder the achievement of the objectives of such processing.
Right to Restriction of Personal Data Processing if:
- the data subject contests the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data and, if necessary, update it,
- the processing of personal data is unlawful and the data subject objects to the erasure of the personal data and requests the restriction of its use instead,
- the Controller no longer needs the personal data for the purpose of processing, but the data subject requires it for the establishment, exercise, or defense of legal claims, or
- the data subject objects to the processing of personal data pursuant to Section 27(1) of Act No. 18/2018 on the Protection of Personal Data and on Amendments and Supplements to Certain Acts (effective as of 25 May 2018), until it is verified whether the Controller’s legitimate grounds override those of the data subject.
Right to Object to the Processing of Personal Data:
The data subject has the right to object to the processing of their personal data in all cases where the legal basis for processing is the Controller’s legitimate interest. The data subject also has the right to object to the processing of their personal data where such data is processed for direct marketing purposes, including profiling, to the extent that it is related to direct marketing.
In the event of suspected unlawful processing of personal data, the data subject has the right to file a petition to initiate proceedings for the protection of personal data with the Office for Personal Data Protection.
If the legal basis for processing the data subject’s personal data is their consent, the data subject may withdraw such consent at any time free of charge by using the email address provided below. The withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal. The data subject has the right to withdraw consent at any time via email at alkona0@gmail.com, or in writing to the Controller’s address: DAJS personal s. r. o., Nám. sv. Mikuláša 1442/21A, Stará Ľubovňa 064 01.
