Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation) (Nariadenie the Regulation ’or GDP GDPR’) provides for an obligation on the controller to provide the data subject with all the information referred to in Articles 13 and 14 and all , in a transparent, comprehensible and easily accessible form, worded clearly and simply, especially in the case of information specifically for the child. If the person concerned so requests, the information may also be provided orally, provided that the person concerned has proved his or her identity.
As the operation of the www.afrodity.sk website also involves the processing of personal data, in accordance with applicable law Of the Slovak Republic and with the legislation of the European Union, the controller fulfills its information obligation and through this document informs the data subject about the conditions of personal data processing.
Operator
Website operator www.afrodity.sk (the "Website").
The controller proceeds with the processing of personal data in accordance with the Regulation and Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain regulations (hereinafter referred to as the “Act”).
Given the scope and subject matter of its activities, the operator is not obliged to appoint a responsible person in accordance with Section 44 of the Act. If you, as the person concerned, have any questions regarding the processing of your personal data, please write to the operator at the following e-mail address: info@afrodity.sk.
Affected person
The data subject is any identified or identifiable natural person whom the operator allegedly processes. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier:
For the purposes of this document, the data subject shall be a natural person - a visitor to the operator's website, or another natural person who has provided his personal data to the operator.
Personal information
Personal data is any information relating to an identified or identifiable natural person.
Processing of personal data
Personal data processing is the operation or set of operations involving personal data or personal data files, such as the acquisition, recording, organization, structuring, storage, processing or alteration, search, browsing, exploitation, transmission, dissemination or otherwise, regrouping or combining, limiting, erasing or disposing of it, whether by automated or non-automated means.
Legal basis
The controller is only entitled to process personal data if one of the legal bases established by the GDPR allows it. The controller shall process personal data on one or more of the following legal bases:
Retention period
In general, the controller shall store the personal data of the persons concerned only:
Processing of personal data for contact form purposes:
We process cookies on a legal basis under Article 6 para. 1 letter a) GDPR - the data subject has consented to the processing of his or her personal data for one or more specific purposes.
The data subject has the right to withdraw his / her consent to the processing of personal data via cookies at any time by clicking on the "Cookie settings" link at the bottom of the website. Withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal.
The operator's website uses cookies to ensure the necessary functionality, as well as to make the operator's website more attractive, to remember user settings and to collect statistical information about users.
Google Analytics
The operator also uses Google Analytics in connection with cookies, through which it analyzes user behavior in order to optimize the functionality of the website. The operator uses Google Analytics with the "IP anonymization" function activated.
For more information on all cookies used by the operator, see the Cookie Processing Information section, which is an integral part of this document.
The person concerned has the right to request from the operator:
upon written request
The person concerned may address the request or information on the leakage of personal data or other serious facts concerning the processing of personal data by the controller to the controller at the following e-mail address: info@afrodity.sk.
Right of access to personal information
The data subject has the right to have the controller confirm whether he or she processes personal data concerning him or her. If the controller processes personal data, the data subject shall have the right to obtain access to them and other information on the purpose of their processing, the category of personal data processed, to whom they were or are to be provided, in particular the recipient in a third country or an international organization. possible; if personal data are transferred to a third country or international organization, the data subject has the right to be informed of the reasonable guarantees required by law, the retention period of personal data; if this is not possible, information on the criteria for its determination, the right to request the correction of personal data, their deletion or restriction of their processing, or the right to object to the processing of personal data, the right to initiate proceedings on personal data protection, sources of personal data if did not obtain personal data from you, the existence of automated individual decision-making, including profiling. Profiling is any form of automated processing of personal data which consists in the use of such personal data to evaluate certain personal aspects relating to a person, in particular performance, job conditions, health, personal preferences, interests, reliability, behavior, location or movement. In such cases, the controller shall provide the data subject with particular information on the procedure used as well as on the significance and expected consequences of such processing of personal data for the data subject. The operator is obliged to provide personal data that it processes. The controller may charge a reasonable fee for the repeated provision of personal data, corresponding to the administrative costs. The operator is obliged to provide you with personal data in the manner required by you. The right to obtain personal data must not adversely affect the rights of other natural persons.
Right to correct personal information
The data subject has the right to have the controller correct incorrect personal data concerning him without undue delay. Depending on the purpose of the processing of personal data, he has the right to supplement incomplete personal data.
The right to object to the processing of personal data
The data subject has the right to object to the processing of his or her personal data on grounds relating to a specific situation if the controller carries out profiling or processes personal data on the following legal grounds:
The controller may not further process the personal data of the data subject unless he or she demonstrates the necessary legitimate interests for the processing of personal data which outweigh his or her rights or interests or the grounds for exercising a legal claim. The data subject has the right to object to the processing of personal data concerning him / her for the purposes of direct marketing, including profiling, to the extent that they relate to direct marketing. If the data subject objects to the processing of personal data for direct marketing purposes, the controller may not further process personal data for direct marketing purposes. The data subject has the right to object to the processing of personal data concerning him or her on grounds relating to his or her specific situation, if his or her personal data are processed for scientific, historical research or statistical purposes, except where the processing of personal data is necessary. for reasons of public interest.
Right to erase personal information (right to "forget")
The data subject has the right to have the controller delete personal data concerning him without undue delay. If you request the controller to delete personal data, the controller is obliged to delete them in the following cases:
If the controller has disclosed the personal data of the data subject and is obliged to delete them in accordance with the above conditions, he is also obliged to inform other controllers processing personal data, taking into account the available technology and costs, so that those controllers delete the personal data references and their copies. or depreciation.
The operator is not obliged to delete personal data if necessary
Right to restrict the processing of personal data
The data subject has the right to have the controller restrict the processing of his or her personal data if
If the processing of personal data is restricted, in addition to storage, the controller may only process personal data with the consent of the data subject or for the purpose of asserting a legal claim, for the protection of persons or for reasons of public interest. The controller is obliged to inform the data subject before the restriction on the processing of personal data is lifted.
Reporting obligation to correct, delete or restrict the processing of personal data
The controller is obliged to notify the recipient (anyone to whom the personal data of the data subject have been provided) of the correction of personal data, erasure of personal data or restrictions on the processing of personal data, unless this proves impossible or requires a disproportionate effort. If the person concerned so requests, the operator shall inform him of those recipients.
Right to transfer personal data
Personal data concerning the data subject, which he / she has provided to the controller, he / she has the right to obtain in a structured, commonly used and machine-readable format. At the same time, he has the right to transfer this personal data to another controller, if technically possible and if the processing of your personal data is carried out by automated means (i.e. electronically), while the personal data are processed either
This right must not adversely affect the rights of others. The exercise of the right of portability does not affect the right to delete personal data. The right of portability shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
The right to initiate privacy proceedings
In the event that the data subject would be directly affected by his / her rights stipulated by the Personal Data Protection Act pursuant to Section 100 of the Act, he / she has the right to submit a proposal to initiate proceedings on personal data protection. The purpose of the proceedings is to determine whether the rights of natural persons have been violated in the processing of their personal data or the law has been violated and, if deficiencies are found, if necessary and expedient, to impose remedial measures or fines for violating the law. The Office shall publish a model of the proposal on its website. The request to initiate proceedings must contain evidence in support of the allegations made in the proposal and a copy of the document or other evidence proving the right of the controller (right of access to personal data, right to request correction of personal data, right to delete or restrict processing personal data, the right to the transfer of personal data), if such a right has been exercised by the data subject, or a The above rights (in addition to the right to initiate personal data protection proceedings) may be exercised by e-mail or in writing by the controller supervising the processing of personal data. The controller may also be notified of any personal data leakage or other serious facts concerning the processing of personal data by the controller.
If the data subject suspects that his or her personal data are being processed unlawfully, he or she may submit a request for personal data protection proceedings to:
Office for Personal Data Protection of the Slovak Republic
with its registered office at Hraničná 12, 820 07 Bratislava 27
or contact the office through its website http://www.dataprotection.gov.sk .
If the person concerned does not have full legal capacity, his or her rights may be exercised by a legal representative. If the person concerned is not alive, his or her rights under this law may be exercised by a close person.
The controller shall process the data subject's request pursuant to the Personal Data Protection Act free of charge, except for payment in an amount which may not exceed the amount of expediently incurred material costs associated with making copies, supplying technical media and sending information to the data subject, unless a special law provides otherwise. The operator is obliged to process the request of the person concerned in writing no later than 30 days from the date of delivery of the request. The controller shall notify the data subject and the Office for Personal Data Protection of the Slovak Republic in writing without undue delay of any restrictions on the rights of the data subject pursuant to the Personal Data Protection Act.
5. Transfer of personal data to a third country or international organization
The operator does not provide any personal data to third countries or international organizations.
6. Automated individual decision making, including profiling
As the person concerned, you have the right not to be subject to a decision which is based solely on automated processing, including profiling, and which has legal effects affecting or similarly affecting him or her.
The controller does not use automated individual decision-making or profiling when processing personal data for any of the above purposes.
The website operator takes the protection of personal data responsibly and seriously. It treats personal data as confidential in accordance with the relevant data protection legislation and this document.
The operator processes personal data either manually or using electronic systems. The controller has taken all necessary and necessary organizational, technical and administrative measures to ensure the accuracy and timeliness of personal data, as well as to protect personal data from unauthorized or illegal processing and accidental loss, destruction or damage and to maximize the level of personal data protection. br /> This privacy statement may change over time. It shall publish any changes concerning this document on the website and inform the persons whose personal data it processes before making any changes. If required by law, seek the consent of the person concerned before making any changes to this document.