Instruction on the rights of the Person Concerned in relation to the personal data processing under the GDPR 2016/679
Dear client of the company TAKATA s.r.o.
The security of your personal data and its processing in a lawful way is our first priority. Here you will find out what rights you have as a Person concerned in relation to the processing of the personal data and what you may request from us, according to the EP Regulation 2016/679 and Act no. 18/2018 Coll. of the Slovak Republic.
What are your rights?
- The right to information (article 13 GDPR)
In order to meet the information obligation of the operator, which corresponds to the right of the person concerned to information, the operator in accordance with the provisions of Section 19 of the Act and the Article 13 of the Regulation provides the person concerned with the following information:
Identification data and contact details of the operator:
Trade name : TAKATA s.r.o.
Registered seat : Hviezdoslavova 11, 053 11 Smižany
Trade ID : 48 151 271
Phone number : +421 911 733 840 (10:00-18:00)
Email : info@tricklandia.sk
The purposes of the personal data processing of the data subject by the operator:
- Conclusion of the Purchase Contract, initiation of the tender procedure, booking procedure, Information, instruction and consent of the consumer for the distance or off-premises contracts, filling in the web forms, placement into the database of the clients, suppliers, jobseekers, preparation of the relevant contract or other document, record of the contract and related documents, including any changes in the internal system of the operator, fulfillment of the subject matter of the contract and control of its fulfillment by the person concerned, handling complaints, recovery of claims incurred in connection with the non-fulfillment of the contract under the Article 6 (1) b) GDPR.
- Bookkeeping and preparation of accounting documents, in particular the administration and invoicing of services provided on the basis of the contracts, processing of accounting, tax documents and invoices and fulfillment of obligations under special regulations, especially the Act no. 431/2002 Coll. on accounting as amended, Act No. 222/2004 Coll. on the value added tax, as amended, and under the Section 6 (1) (p) (c) of the GDPR.
- Keeping records of mail and administration of the registry, registration and management of the postal items, mail sent and delivered from and to the electronic mailboxes and record and archiving of contracts, accounting, tax and related documents in the internal systems of the operator under section 6 (1) (p) (c) of the GDPR and according to the relevant legislation of the Slovak Republic.
- Marketing services and advertisements of the operator’s products, in particular sending information newsletters about our products and services and the current offer. Consumer competitions, bonus and loyalty programs, under section 6 (1) (p) (f) or (c) of the GDPR.
- Booking systems, time and place booking systems of our entertainment facilities. We are unable to make a reservation to provide reasonable service, time and space without the personal data. At the same time, this system helps to more efficiently allocate resources and improve our services, plans and expansion.
We will keep your personal data for the time necessary to meet the defined purposes of the processing of personal data, but at most for the duration of the relevant contract, settlement of mutual obligations arising from it. Invoices, as well as other tax and accounting documents, shall be retained in accordance with applicable legislation for the period of10 years after the year to which they relate.
We keep personal data processed for the advertising and marketing purposes for a period of 5 years from their provision. After this time, your personal data will be deleted. If at any time during the duration of the contractual relationship you object to the processing of your personal data for the direct marketing of our services and products, we will cease processing your personal data for this purpose.
All your personal data will be stored in our internal systems with a reasonable degree of security, and will be further provided to the cooperating parties (intermediaries), which are in particular companies providing ICT services and cloud services, marketing services and which will also have access to the provided or made available information to the extent and under the terms agreed upon in a written agreement concluded with us or established by the generally binding legal regulations with their obligation to keep such information confidential.
If we also process your personal data on the basis of consent, you are entitled to revoke this consent to processing your personal data at any time. Revocation of consent does not affect the lawfulness of the processing of personal data based on consent prior to its revocation. You can withdraw the consent granted in the same way that consent was granted.
- Right of access by the data subject (article no. 15 GDPR)
You are entitled to know if we process your personal data. If we process it, you can ask us to access the data. Based on your request, we will issue a confirmation containing information on processing your personal data.
- Right to rectification (article no. 16 GDPR)
You are entitled to be ensured that your personal data we process is correct, complete and up to date. If your personal data is incorrect or out of date, you may ask us for a correction or addition.
- Right to erasure (article no. 17 GDPR)
Under certain circumstances, you are entitled to have your personal data deleted by us. You can request the erasure of your data at any time. We will delete your personal data if
- We no longer need your personal data in relation to the purpose for which it was provided;
- You withdraw your consent;
- You object against the processing of your personal data;
- The personal data have been unlawfully processed;
- The personal data have to be erased for compliance with a legal obligation;
- If you are a child or a parent of a child who agreed with the personal data processing through the Internet.
- Right to restriction of the processing (article no. 18 GDPR)
You may ask us to restrict the processing of your personal data. If we accept your request, we will only keep your personal data and will not continue working with it. The processing of your data will be limited if
- you inform us that your personal data is incorrect, until we have verified that it is correct;
- we process your personal data unlawfully, but you do not agree to delete them, and in this case we ask that we only restrict the processing of your personal data;
- we no longer need your data, but you need them to prove, enforce or defend your rights;
- You object against the processing of your personal data until we have verified that our legitimate interests prevail over your reasons.
- Right to data portability (article no. 20 GDPR)
You are entitled to request that we provide you with your personal data in electronic form (e.g. an XML or CSV file) that allows you to easily transfer your data to another company. You may also ask us to transfer your personal data to the selected company directly. We will satisfy your request if you personally have provided us with personal data and you have given us permission to process it.
- Right to object (article no. 21 GDPR)
You are entitled to object that we process your personal data. If your personal data is processed for direct marketing purposes, you may object to processing at any time. Based on the objection, we will delete your personal data. If we process your personal data in the following cases:
- to carry out a task in the public interest or in the exercise of public authority;
- due to our legitimate interest;
- creating a customer profile
you may object to processing if you have personal reasons.
- The right to file a motion to initiate the proceeding on the personal data protection (Section 100 of the Act no. 18/2018; Art. 77 and 79 GDPR)
If you believe the processing of your personal data is contrary to the law and you have the right to file a motion to initiate the proceeding on the personal data protection with the Office for the Protection of Personal Data with the registered office at Hraničná 12, 820 07 Bratislava, Slovak Republic, ID No: 36 064 220 (hereinafter referred to as “the Office”) or other competent authority, especially in the member state of your habitual residence, work or at the place of the alleged violation,
- Right to the ineffectiveness of the automated individual decision making, including a profiling (article no. 22 GDPR)
We do not use the automated decision-making or profiling when processing your personal data.
How to exercise your rights?
You can contact us with one of the following ways:
- Email us to info@tricklandia.sk
- Send us a letter to the following address: Takata s.r.o., Hviezdoslavova 11, 05311 Smižany, SR
We will deal with all of your requests and we will inform you on the outcome of your request in the same way as you file your request and within the statutory time limit. – End of document
This document enters into force on 25 May 2018, version 2018001