Personal data processing principles and data protection system under the GDPR

The operator (controller) of your personal data pursuant to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the GDPR) is the company: FANMONTAGE s. r. o., Mútne 695, 029 63 Mútne, Slovakia, ID No.: 53 834 160

The contact details of the operator are:
Tel: +421 910 606 354
E-mail: info@fanmontage.sk

(hereinafter referred to as the “Operator”)

What is personal data?

Personal data is data relating to an identified natural person or an identifiable natural person who can be identified, directly or indirectly, in particular by reference to a generally applicable identifier, to another identifier such as a first name, surname, identification number, location data or an online identifier, or to one or more characteristics or attributes which constitute his or her physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.

What is the processing of personal data?

Processing of personal data means a processing operation, or a set of processing operations concerning personal data or sets of personal data, in particular the obtaining, recording, organization, structuring, storage, alteration, retrieval, consultation, use, provision by transmission, dissemination or otherwise, alignment or combination, restriction, erasure, whether or not by automated or non-automated means.
The operator (controller) is not obliged to appoint/designate a Responsible Person.

Sources and Categories of Personal Data:

The operator processes personal data (directly from you) that you have provided to him/her or personal data that he/she has obtained as a result of fulfilling your order.
Your identification and contact data and data necessary for the fulfillment of the contract.

Lawful Basis and Purpose of Processing :

The lawful basis for processing is:

Your consent to the processing of your personal data for the purposes of providing direct marketing pursuant to Article 6 paragraph 1 letter a) of the GDPR
Fulfilment of a contract between you and the operator pursuant to Article 6 paragraph 1 letter b) of the GDPR
The processing is necessary for compliance with a legal obligation of the operator pursuant to Article 6 paragraph 1 letter c) of the GDPR

The purpose of the processing of personal data is:

To process your order and to execute the rights and obligations arising from the contractual relationship between you and the operator. When placing an order, the personal data required is necessary for the successful processing of the order pursuant to Article 6 paragraph 1 letter b) of the Regulation (this includes the subsequent payment, delivery of the service, handling of a complaint, etc.); the processing of the customer’s personal data takes place without the customer’s consent, since the legal basis for the processing of their personal data for the purposes of the fulfilment of the contract is the specific contract between the customer and the operator. The provision of personal data is a necessary requirement for the conclusion and fulfilment of the contract; without the provision of personal data, it is not possible to conclude the contract or for the operator to fulfil its terms.
There is no automated individual decision-making on the part of the operator within the meaning of Article 22 of the GDPR.

Retention Period:

The operator shall retain the personal data:

For as long as necessary to execute the rights and obligations arising from the contractual relationship between you and the operator and to assert a claim arising from that contractual relationship.
For as long as the consent to the processing of personal data for marketing purposes is withdrawn.

After the expiration of personal data retention period resulting from Act No. 395/2002 Coll., the Act on Archives and Registers and on the amendment of certain acts, the operator shall delete the personal data

Recipients of Personal Data

Who is the recipient?

The recipient is anyone to whom the personal data is disclosed, regardless of whether they are a third party. A public authority which processes personal data on the basis of a specific regulation shall not be considered a recipient.
Persons involved in the supply of goods, services, making payments under a contract
The operator does not provide, disclose or make personal data available to third countries

Conditions for the Security of Personal Data

The operator declares that he/she has taken appropriate personal, technical and organizational measures to ensure the protection of personal data.

The operator has taken technical measures to secure data storage and storage of personal data in a file form.
The operator declares that the personal data can be accessed only by persons authorized by the operator.

Your rights:

Under the conditions set out in the GDPR, you have:

The right of access to your personal data pursuant to Article 15 of the GDPR
The right to correction of your personal data pursuant to Article 16 GDPR
The right to restriction of processing you data
The right to erasure under Article 17 GDPR
The right to object under Article 21 GDPR
The right to transfer personal data pursuant to Article 21 GDPR
The right to withdraw the consent (electronically or to a correspondence address)
The right to submit a complaint with the Office for Personal Data Protection if you believe that your data protection rights have been violated.

You also have the right to submit a complaint with the Office for Personal Data Protection if you believe that your data protection rights have been violated.

How can you enforce your rights?

a. The Right of Access to Data

You have the right to know whether we are processing your personal data. If we are processing it, you can ask us for access to it. Upon your request, we will issue a confirmation with information about the processing of your personal data. You can submit your request electronically, to the email address info@fanmontage.sk or by post to the following correspondence address: FANMONTAGE s. r. o., Mútne 695, 029 63 Mútne, Slovakia, ID No.: 53 834 160

b. The Right to Correction

You have the right to have your personal data processed by us to be correct, complete and up-to-date. If your personal data is incorrect or outdated, you can ask us to correct or complete it electronically at the email address info@fanmontage.sk, or by post to the following correspondence address: FANMONTAGE s. r. o., Mútne 695, 029 63 Mútne, Slovakia, ID No.: 53 834 160

c. The Right to Erasure

Under certain circumstances you have the right to have your personal data erased by us. You can ask us to erase your data at any time. We will erase your personal data if:
-we no longer need your personal data for the purpose for which you provided it to us,
-you withdraw your consent,
-you object to the processing of your personal data,
-we are processing your personal data unlawfully,
-the personal data must be erased in order to comply with a legal obligation,
-if you are a child or parent of a child who has consented to the processing of personal data via the Internet.

d. The Right to Restriction of Processing

You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not process it further. Restriction of the processing of your data will occur if
– you notify us that your personal data is incorrect until we have verified its accuracy,
– we are processing your personal data unlawfully, but you do not consent to its erasure and instead request that we only restrict the processing of your personal data,
– we no longer need your data but you need it to establish, enforce or defend your rights
– you object to the processing of your personal data until we have verified that our legitimate interests outweigh your reasons.

e. The Right to Transfer Data

You have the right to request that we provide you with your personal data in an electronic format (e.g. an XML or CSV file) that allows you to easily transfer your data to another company. You can also ask us to transfer your personal data directly to the company of your choice. We will comply with your request if you have provided us with the personal data directly and have given us your consent to process it.

f. The Right to Object

You have the right to object to us processing your personal data. If we process your personal data in the following cases:
– for our legitimate interest,
– creating a customer profile,
– you can object to the processing if you have personal reasons to do so.

How can you enforce these rights?
You can contact us with your request in any of the following ways:
in writing by e-mail: info@fanmontage.sk or by post to the following correspondence address: FANMONTAGE s. r. o., Mútne 695, 029 63 Mútne, Slovakia, ID No.: 53 834 160

If you believe that your rights to the protection of personal data have been violated, you have the right to submit a complaint with the supervisory authority, the Office for Personal Data Protection, at the following address
Hraničná 12
820 07 Bratislava 27
Slovak Republic

Identification data:
ID No.: 36064220
VAT No.: SK2021685985

Secretariat of the Authority:
+421 /2 3231 3214

E-mail: statny.dozor@pdp.gov.sk