Data protection and information on the processing of personal data
It is important to us that your personal data is safe. We not only strive to comply with legal obligations regarding data protection, but also see it as an integral part of our business of supplying information technology. The processing of personal data is necessary for us, primarily to provide our services and products, to process personal data of our clients, suppliers, business partners, employees and others for this purpose, to effectively manage human resources, to comply with legal and contractual obligations, or to protect our legitimate interests
All personal data collected during your visit to our website is processed in accordance with Regulation 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”) „Regulation“) and Act 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts (hereinafter referred to as the „Personal Data Protection Act“).
BASIC SUMMARY - WHO PROCESSES YOUR PERSONAL DATA
Evosolutions-sk s.r.o. carries out processing of your personal data as necessary for the performance of the contractual obligations - the Purchase Agreement (or for the implementation of measures taken prior to the conclusion of such Purchase Agreement), and further carries out processing of your personal data necessary for the performance of the public law obligations of this company. The processing of personal data is necessary for us, in particular to provide our services and products.
1. IDENTITY AND CONTACT DETAILS OF THE CONTROLLER
1.1. The Administrator of your personal data is the company Evosolutions-sk s.r.o. with registered office at Galvaniho 15/C, 821 04 Bratislava, Slovakia, ID No.: 56 159 692, registered in the Commercial Register of the Municipal Court Bratislava III, Section: sro, Insert No. 181469/B (hereinafter referred to as „Administrator“).
1.2. The contact details of the Administrator are as follows: delivery address Galvaniho 15/C, 821 04 Bratislava, Slovakia, e-mail address: info@evosolutions.sk.
1.3. We have not appointed a Data Protection Officer as Data Administrator.
2. LEGAL BASIS FOR THE PROCESSING OF PERSONAL DATA
2.1. The legal basis for processing your personal data is that such processing is necessary for:
2.1.1. contractual performance - of the Purchase Agreement between us and you or for the implementation of measures prior to the conclusion of such Purchase Agreement - performance of the contract pursuant to Article 6(1)(b) of the Regulation and legitimate interest pursuant to Article 6(1)(f) of the Regulation ;
2.1.2. Proving, asserting, defending legal claims (legal agenda) - Performance of the contract pursuant to Article 6(1)(b) of the Regulation and legitimate interest pursuant to Article 6(1)(f) of the Regulation;
2.1.3. Client/customer care - Legitimate interest under Article 6(1)(f) of the Regulation
2.1.4. Security of personal data and IT systems - Compliance with legal obligations under Article 6(1)(c) of the Regulation and legitimate interest under Article 6(1)(f) of the Regulation)
2.1.5. Direct marketing communication - Legitimate interest under Article 6(1)(f) of the Regulation
2.1.6. Targeting and personalisation of advertising - Consent pursuant to Article 6(1)(a) of the Regulation and legitimate interest pursuant to Article 6(1)(f) of the Regulation
2.1.7. Marketing Analytics - Consent pursuant to Article 6(1)(a) of the Regulation2.1.8. compliance with the legal obligations applicable to us pursuant to Article 6(1)(c) of the Regulation, in particular compliance with the obligations imposed on the Controller by generally binding legal regulations, in particular Act No. 235/2004 Coll. on value added tax, as amended, Act No. 586/1992 Coll. on income taxes, as amended, and Act No. 563/1991 Coll. on accounting, as amended;
2.1.9. There may be situations where we obtain personal data from a person other than the data subject directly, so this document provides information to all data subjects both within the meaning of Article 13 of the Regulation and within the meaning of Article 14 of the Regulation.
3. THE PURPOSE OF THE PROCESSING OF PERSONAL DATA
3.1. The purpose of processing your personal data is:
- Contractual Performance - Purchase Agreements or the implementation of our actions prior to entering into such Purchase Agreement and the performance of our related public obligations.
This is the processing of personal data that is necessary in particular for the conclusion, modification and performance of any contractual relationships negotiated with natural or legal persons within the framework of commercial and civil law relationships, including negotiation and pre-contractual relationships, whereby, if the data subject whose personal data is necessary to process in the conclusion and performance of contracts (e.g. If the person whose processing is necessary for the processing of personal data necessary for the performance of the contractual relationship (e.g. statutory representative, contact person, employee of the supplier, etc.) is not directly a party to the contractual relationship, such processing falls within the scope of legitimate interest. Furthermore, this processing is necessary for the recording of internal and external authorisations or the recording of contractual supplier-contractor relationships between the controller and its customers, partners and suppliers.
- Proving, asserting, defending legal claims (legal agenda)
It includes the processing of personal data, in particular for reporting various facts to public authorities (including notifications of various offences and crimes) or to insurance companies (e.g. insurance claims), use of legal representation and legal advice from law firms, maintenance of corporate records and fulfilment of all obligations under the Commercial Code, preparation, provision and storage of various legal submissions and evidence containing personal data, debt recovery, sending of notices and reminders for unpaid payments, conduct of various administrative proceedings, lawsuits and other legal proceedings (e.g. entering into amicable settlements, settlement agreements, payment plans), notarisation and official translations, processing visas for employees posted to third countries.
- Client/customer care
Includes the processing of personal data necessary in particular for the handling and resolution of various complaints and complaints about the progress of orders, beyond consumer protection rights, the sending and evaluation of customer satisfaction questionnaires after the completion of the business case
- Security of personal data and IT systems
This includes the processing of personal data necessary in particular for (i) controlling, removing and managing access permissions, (ii) monitoring and evaluating suspicious events based on log analysis via specific software applications, (iii) creating security logs capturing user behaviour in important applications and systems, (iv) managing user access rights, such as. allocation, removal, modification of user access rights of internal systems, (v) creation of security backups, (vi) vulnerability scanning and anti-malware activity, (vii) management of security incidents and data breaches, (vi) management of information security in the operator's management group, (viii) management of information security in the operator's
- Direct marketing communication
Direct marketing communications include the processing of personal data, in particular for the personalisation and sending of marketing electronic mail (e-mail) and/or press releases to existing customers, subject to the restrictions of the regulation of unsolicited electronic communications, or to other interested parties who have given their prior consent
- Ad targeting and personalisation
This is the processing of personal data which is necessary in particular for the customisation and display of advertising on platforms, the customisation and display of sponsored links in searches when using the Internet, the remarketing targeting of advertising to a website visitor who has had third-party marketing-analytical cookies stored on their terminal device or internet browser on the website.
- Marketing Analytics
This is the processing of personal data which is necessary in particular for the measurement of traffic and other indicators relating to the use of our website by the data subject and the performance of the advertising campaign by third-party tools (e.g. Google Analytics), which also make use of cookies placed on the end user's device as a result of the use of our website.
3.2. We do not carry out automated individual decision-making within the meaning of Article 22 of the Regulation.
3.3. The personal data we process may be used for any of the following activities:
Personalizing the offer - Your information helps us tailor our offer to your individual needs.
Improving the website - we regularly improve our website based on the information and feedback you give us.
Improved customer support - Your information helps us respond to your requests and needs efficiently.
To send emails - the email address you enter on our site may be used to send you offers, information and updates regarding your order.
4. RETENTION PERIOD OF PERSONAL DATA
4.1. Your personal data will be retained for the duration of the purpose for which it was provided to us, or for the duration of consent in the case of data that we process on the basis of your consent.
4.2. Your personal data will be held securely, in accordance with the Controller's security policy.
4.3. Your personal data is backed up in accordance with the security requirements of the Regulation and the Data Protection Act.
4.4. If we process your personal data on the basis of your consent, we are obliged not to process your personal data further for that purpose after withdrawal of consent. However, this does not preclude that we may continue to process your personal data on another legal basis, in particular to comply with a legal obligation.
4.5. Personal data is stored:
- Contractual agenda - In the performance of the Purchase Agreement (Conclusion and performance of contractual relations) until the termination of the contractual relationship or until an objection to processing is lodged, if in a particular case the rights and freedoms of the data subject prevail.
- Legal agenda - Until the legal claim is time-barred, the right is properly asserted and the legal claim is satisfied, or the legal case is concluded on the merits and the available legal remedies are exhausted
- Customer/client care - pending evaluation of customer satisfaction questionnaires after completion of the contract, no longer than 1 year after completion of the contract
- Security of personal data and IT systems - no longer than one month
- Direct marketing communications - until an objection to direct marketing is received or until consent to the processing of personal data is withdrawn, if consent is the legal basis for the processing in question
- Targeting and personalisation of advertising - Until consent is withdrawn, if consent is the legal basis for the processing, or until the expiry of the period of use of cookies, whichever is the earlier. Until the objection to the processing of personal data has been duly processed, if the legal basis is a legitimate interest
- Marketing analytics - Until consent is withdrawn, if consent is the legal basis for processing, or until the expiry of the period of use of cookies, whichever is sooner
5. WHAT DATA WE KEEP
5.1. When you place an order on our site, we record the IP address assigned to you by your internet provider. This information is considered personal data as it is your online identifier and therefore we treat this information with extra care.
5.2. You voluntarily enter your personal data in various forms: registration forms, contact forms, order forms, etc. Most often we store the following personal data: name (first and last name or business name, address, e-mail address. Your personal data is used for the purpose of providing the performance of the consumer contract and other services you have requested.
5.3. If you want to know which specific data we hold about you, we will be happy to provide it to you on request.
6. COOKIES
6.1. We use cookies to find out the preferences of website visitors and to tailor our offer to the specific visitor. Cookies may be used to see if you have ever visited our site from your computer.
6.2. Cookies are text files that are stored by your internet browser on your computer disk. If you do not wish to save cookies, you can deactivate them in your internet browser, due to the fact that this is your personal data. You also have the option of using the so-called incognito mode in your internet browser (in which no cookies are stored) or disabling javascript. You can disable the storage of cookies (as well as your browsing history) in your browser or periodically delete them directly from your browser settings or by using free software designed for this purpose.
7. OTHER RECIPIENTS OF PERSONAL DATA
7.1. Other recipients of your personal data may be persons who provide technical services for us in accordance with our instructions (data processors), including the operation of software and data storage, as well as persons providing communications to our customers or potential customers. We also work with a variety of service providers and partners who help us provide various activities necessary for proper operation. These recipients may process your personal data for us as processors or they may also be independent controllers, such as a company:
ECOMAIL.CZ, s.r.o., ID: 02762943, with registered office: Na Zderaze 1275/15, Prague 2, 120 00, registration: C 223183, registered at the Municipal Court in Prague
Dokoran s. r. o., ID No.: 56 072 422, registered office: Karpatské námestie 7770/10A, Bratislava - Rača 831 06, entry in the Commercial Register of the Municipal Court Bratislava III, Section: Sro, Insert No.: 176172/B
Where we use processors to process personal data, we verify that they meet the organisational and technical requirements to ensure the security of the processing of your personal data in accordance with the Regulation before we appoint them.
7.2. The recipients of your personal data for compliance with legal obligations may also be the financial administration authorities or other competent authorities in cases where the controllers are required to do so by generally binding legislation. If a public authority asks us to disclose your personal data, we examine the legal conditions for disclosure and do not disclose your personal data without checking whether these conditions are met.
7.3. We do not intend to transfer your personal data to a third country (to a country outside the EU) or to an international organisation.
8. RIGHTS OF DATA SUBJECTS
8.1. Subject to the conditions set out in the Regulation, you have the right to request access to your personal data from us, the right to rectification or erasure of your personal data or to restriction of its processing, and the right to portability of your personal data.
8.2. If you believe that the processing of your personal data has infringed or is infringing the Regulation, you have the right, inter alia, to lodge a complaint with a supervisory authority.
8.3. You are under no obligation to provide personal data.
8.4. Where the legal basis for the processing of your personal data is the conclusion or performance of a contractual relationship pursuant to Article 6(1)(b) of the Regulation, the provision of personal data is a requirement that is necessary for the conclusion of the contract - the Purchase Agreement, and without the provision of your personal data, the conclusion of the Purchase Agreement or its performance by us is not possible.
8.5. Where the legal basis for processing your personal data is to comply with our legal obligation under Article 6(1)(c) of the Regulation, the provision of your personal data is a legal requirement and is directly related to our need to comply with those legal obligations. We therefore require the provision of this data to the extent necessary.
8.6. If the legal basis for the processing of your personal data is a legitimate interest and we use the legal basis under Article 6(1)(f) of the Regulation to process your personal data, you are obliged to accept this processing, but you have the right to object to it.
8.7. If we process personal data about you on the basis of your consent to the processing of your personal data, you have the right to withdraw your consent at any time. You have the right to object effectively at any time to the processing of personal data for direct marketing purposes, including profiling. You also have the right to object to the processing of your personal data on the basis of the legitimate interests pursued by us.
8.8. If we process your personal data, you, as the data subject, have in particular the right to request access to the personal data we process about you pursuant to Article 15 of the Regulation. This right includes the right to confirm whether we are processing personal data about you, the right to access that data and the right to obtain a copy of the personal data we are processing about you, if technically feasible; the right to rectification and completion of personal data under Article 16 of the Regulation if we are processing incorrect or incomplete personal data about you; the right to erasure (forgetting) of your personal data under Article 17 of the Regulation; the right to restriction of processing of personal data under Article 18 of the Regulation; the right to notification in relation to rectification, erasure or restriction under Article 19 of the Regulation; the right to data portability under Article 20 of the Regulation where the processing of personal data is based on a legal basis of consent pursuant to the performance of a contract; the right to object under Article 21 of the Regulation where the processing is based on a legitimate interest, public interest or for direct marketing purposes, including profiling;
8.9. We hereby reserve the right to modify and update these terms and conditions at any time. We also reserve the right to change the full version of the Terms and Conditions and replace it with a new or more up-to-date version. In the event of significant changes, we will notify you, for example, by a general notice on our website. The current version of the Terms and Conditions is always available on our website.
In Bratislava on 05 November 2024
Want to save money?
Contact us and we will find the optimal solution for you.