Processing of personal data

Processing of personal data in accordance with the Regulation of the European Parliament and the Council of the EU

in accordance with articles 13 to 22 of the Regulation of the European Parliament and the Council (EU) no. 2016/679 on the protection of natural persons in the processing of personal data and the free movement of such data (hereinafter referred to as the “General Data Protection Regulation” or “GDPR – General Data Protection Regulation”) and the provisions of § 19 et seq. Act No. 18/2018 Z. z. on the protection of personal data and on the amendment of certain laws (hereinafter referred to as the “Act on the Protection of Personal Data”). According to Article 13 of the General Data Protection Regulation, or provisions of § 19 of the Personal Data Protection Act, the operator of the website: https://www.shadowphoto.sk/ (hereinafter referred to as the “operator”) is obliged, in cases where it obtains personal data relating to the person concerned, to provide the concerned person the following information:

I. Contact details of the operator

Name: TECHNIA, spol. s r.o.
Headquarters: Komárňanská cesta 72, 940 01 Nové Zámky
IČO: 31410936
DIČ: 2020413373
IČ DPH: SK2020413373
Contact: stin@technia.sk

II. The purpose of processing the personal data of the person concerned

Osobné údaje dotknutej osoby prevádzkovateľ spracúva za týmto účelom:

For the purpose of further contact to the e-mail address entered through the contact form
preparation of a non-binding price offer

III. Scope of processing personal data of the person concerned

For the aforementioned purpose, the operator knowingly processes the following personal data from the affected person:

Name
Surname
E-mail adress
Telephone number

Personal data that the operator unwittingly processes from the affected person:

IP address

IV. Storage period of personal data of the person concerned

The personal data of the person concerned will be processed, collected, archived and securely stored for a period that is unavoidable for the purposes for which the personal data were processed or collected and the legal reason for their possible archiving has passed or until the consent to the processing of the personal data of the person concerned has expired. Upon the request of the data subject for data deletion, all personal data will be irretrievably deleted and related orders (if any) will be anonymized.

V. Method of obtaining, recording and securing the personal data of the person concerned

We most often obtain the personal data of the person concerned directly from him, for example by filling out a contact form. In such a case, the acquisition of personal data is voluntary and does not represent any contractual or legal obligation. The operator of the website is obliged to record all user requests in connection with the download, correction and deletion of personal data of the person concerned. When securing the personal data of the affected person, the operator has modern technical and security mechanisms that ensure the protection of processed personal data against unauthorized access or transfer, against their loss or destruction, or other possible misuse. The operator does not transfer and does not intend to transfer the personal data of the person concerned to a third country or international organization.

VI. The rights of the person concerned regarding the processing of his personal data

The General Data Protection Regulation and the Personal Data Protection Act establish the general conditions for the exercise of individual rights of the person concerned. However, this does not automatically mean that the operator will comply with the exercise of individual rights, as exceptions or some rights are linked to specific conditions that may not be met in every case. The operator will always deal with a request related to a specific right and examine it from the point of view of legislation and applicable exceptions.

i. With the consent of the affected person, the operator may also process other personal data of the allegedly affected person for a purpose other than that stated in point II., respectively. also other personal data than those that are necessary to achieve a specific purpose in accordance with point III. If the processing of personal data is tied to the consent of the person concerned, the person concerned has the right to withdraw his consent to the processing of personal data at any time. The affected person may or may not give the operator consent to process personal data – failure to grant consent has no negative impact on the affected person. The revocation of the consent of the person concerned to the processing of personal data concerning him does not affect the legality of the processing of personal data based on consent before its revocation. The affected person can revoke the consent to the processing of personal data in the same way as the consent was granted.

ii. The affected person has the right to ask the operator for information on whether his personal data is being processed or not. The person concerned has the right to request from the operator access to personal data concerning him. On the basis of this request, the operator of the person concerned will issue a confirmation with information on the processing of his personal data. The operator is obliged to provide the person concerned with his/her personal data, which he processes. For the repeated provision of personal data requested by the data subject, the operator may charge a reasonable fee corresponding to the administrative costs. The operator is obliged to provide personal data to the person concerned in a manner according to his request.

iii. Dotknutá osoba má právo, aby jej osobné údaje, ktoré sa spracúvajú, boli správne, aktuálne a úplné. The person concerned has the right to have his/her personal data that is processed correct, up-to-date and complete. The person concerned has the right to have the operator correct incorrect personal data concerning him without undue delay. So zreteľom na účel spracúvania osobných údajov má dotknutá osoba právo na doplnenie neúplných osobných údajov.

iv. The person concerned has the right to object to the processing of his personal data as well as the right to ask the operator to delete personal data that is processed illegally, beyond the scope of the purpose for which it was provided or in the event that the person concerned withdraws his consent.

v. The person concerned has the right to object to the processing of his personal data carried out on the basis of public interest or on the basis of the legitimate interests of the operator or a third party, including profiling. The operator may not continue to process personal data if he does not demonstrate the necessary legitimate interests in processing personal data that outweigh the rights or interests of the person concerned, or grounds for asserting a legal claim.

vi. The person concerned has the right to object to the processing of personal data concerning him for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing. If the affected person objects to the processing of personal data for the purpose of direct marketing, the operator may not further process personal data for the purpose of direct marketing.

vii. The person concerned has the right not to be subject to a decision based solely on the automated processing of personal data, including profiling, that relate to him or similarly significantly affect him.

viii. The person concerned has the right to have the operator delete personal data concerning him without undue delay. The affected person has the right to ask the operator to restrict the processing of personal data, if the affected person objects to the correctness of the personal data, during the period allowing the operator to verify the correctness of the personal data, the processing of personal data is illegal and the affected person objects to the deletion of personal data and instead requests the restriction of their use, the operator no longer needs the personal data for the purpose of processing personal data, but the data subject needs them to assert a legal claim, or the data subject objects to the processing of personal data on the basis of public interest or on the basis of the legitimate interests of the operator or a third party, until it is verified whether legitimate reasons on the part of the operator prevail over the legitimate reasons of the person concerned.

ix. If the processing of personal data has been limited to storage, the operator may process personal data only with the consent of the person concerned or for the purpose of asserting a legal claim, for the protection of persons or for reasons of public interest. The operator is obliged to inform the affected person whose processing of personal data will be restricted before the restriction of personal data processing is cancelled.

x. The affected person has the right to request the operator to provide his/her personal data in electronic form, which will enable the transfer of the affected person’s personal data to another company, or to a third person. The person concerned has the right to obtain personal data concerning him and which he provided to the operator in a structured, commonly used and machine-readable format and has the right to transfer this personal data to another operator, if it is technically possible and if the operator processes the personal data on the basis of consent of the person concerned or on the basis of a contractual relationship.

xi. The person concerned has the right to submit a proposal to initiate proceedings on the protection of personal data, the purpose of which is to find out whether there has been a violation of the rights of natural persons in the processing of their personal data or there has been a violation of the Act on the Protection of Personal Data or a special regulation, and in the event of detection of deficiencies, if it is reasonable and expedient to impose corrective measures or a fine for violation of this law or a special regulation for the protection of personal data. Proceedings are initiated at the request of the affected person or a person who claims that they are directly affected by their rights established by this law. The requirements of the proposal of the affected person or the person who claims that they are directly affected by their rights established by this law, as well as the procedure for the protection of personal data itself, are regulated in § 100 of Act no. 18/2018 Coll. on the protection of personal data.

xii. Information provided by the operator on the basis of the right of the person concerned is provided free of charge. If the request of the person concerned is clearly unfounded or unreasonable, especially due to its recurring nature, the operator may demand a reasonable fee taking into account the administrative costs of providing information or refuse to act on the request.
The affected person can apply in writing by mail or e-mail with his request, with which he is interested in exercising the rights of the affected person characterized above regarding the processing of his personal data, while the operator will deal with the affected person’s request and inform the affected person of the result in the same way as a request has been made.

VII. Supervisory authority

Personal Data Protection Office of the Slovak Republic
Hraničná 12
820 07, Bratislava 27
Slovak republic
IČO: 36064220
E-mail: statny.dozor@pdp.gov.sk