GDPR - processing of personal data

GDPR - processing of personal data

PRINCIPLE OF PROTECTION OF PERSONAL DATA

I.

Basic provisions

The terms of personal data protection are applied to the processing of personal data of the operator in the provision of real estate services according to Act no. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the "Act") and pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons during the processing of personal data and on the free movement of such data, which repeals Directive 95/46 /EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation").

Operators are understood as:

Business name: SMARTUP consulting sro
Registered office: Roľnícka 187, Bratislava - Vajnory district 831 07
ID: 52 018 083
Email: [email protected]
Tel. no.: +421 948 383 363

Responsible person: Ing. Vladimíra Gondeková, [email protected]

II.

Purpose of processing

The main reason why we process your personal data is to be able to provide you with our services that you have shown interest in, to inform you about our activities.

Purpose of processing

Legal basis

Personal information

Retention period

Real estate activity

Contract

Common data

During the validity of the contract and after its termination for the time necessary to assert liability claims

Fulfilling the obligations of the liable person according to the law on protection by pre-legalization of income from criminal activity and on protection by pre-financing of terrorism.

Law no. 297/2008 Coll. on protection by pre-legalization of income from criminal activity and on protection by pre-financing of terrorism and on amendments and additions to certain laws

Identification data of the client

Five years after termination of the contractual relationship with the client

Client reviews on the website

Consent

Common data

During the existence of the website

Making claims

Legitimate interest

Common data

Until the end of claim enforcement

Sending - Newsletter

Consent

Common data

For the period granted in the consent

Complaints, claims

Law no. 250/2007 Coll. on consumer protection., Regulation of the European Parliament and the Council (EU) 2016/679 on

Common data

Until the deadline for issuing a fine expires

Records of clients and those interested in real estate services

Consent

Common data

For the time necessary to process the request

Employees - selection procedures

Legitimate interest

Common data

The longest for a period of 12 months from the date of delivery of the request

Employees

Legal regulation

Common data

10 years

III.

Data Disclosure and Recipients

Personal data are made available only to the extent necessary in compliance with the conditions of Act No. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the "Act") and pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons during the processing of personal data and on the free movement of such data, which repeals Directive 95/46 /EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation").

The beneficiaries are mainly:

- cooperating attorney, employees, authorized persons, cooperating companies, notary public, bank employees, mediator, real estate broker, public authorities, website visitors

IV.

Transfer of personal data to third countries

Personal data are transferred only within the territory of the member states.

IN.

Automated decision-making and profiling

No automated decision-making or profiling is used in the processing of personal data.

VI.

Rights of the data subject

A data subject is any natural person whose personal data is processed, regardless of whether that person is an EU citizen or not. The General Data Protection Regulation[1] grants the data subject several rights that he can exercise directly with the operator (i.e. the entity that processes his personal data).

1. The right to access data

you have the right to request from the operator:

-issuance of confirmation as to whether or not your personal data is being processed

- access to your personal data and other information

- providing a copy of the personal data it processes about you

- information on adequate guarantees if personal data is transferred to a third country or an international organization

in the event of a repeated request for a copy, the operator may charge a reasonable fee

2. Right to repair

you have the right to request correction of your personal data from the operator

- incorrect ones

- incomplete

3. Right to erasure (right to be “forgotten”)

you have the right to claim the deletion of your personal data from the operator if one of the following reasons is met:

-Your personal data are no longer necessary for the purposes for which they were obtained or otherwise processed

- you have revoked your consent to processing

- you used the right to object and the operator complied

-Your personal data is being processed illegally

- this is the operator's legal obligation to delete your data

-Your personal data was obtained in connection with the information company's service offer

Art. 17 in paragraph 3 regulates exceptions to this right

4. Right to restriction of processing

you have the right to ask the operator to limit the processing of your data,

- if you have challenged the correctness of personal data with the operator

- if the processing carried out by the operator is illegal and instead of deletion you request a restriction of their use

- if the operator no longer needs the personal data, but you need it to prove, exercise or defend legal claims

- if you have used the right to object and personal data is processed on a legal basis, which is public interest or legitimate interest

Processing is limited for a certain necessary period, which depends on the specific situation, e.g. until the operator verifies the correctness

5. The right to data portability

you have the right to obtain your personal data from the operator and transfer them to another operator provided that the following conditions are met:

- processing is based on consent or contract and

- processing is carried out by automated means

The requested personal data should relate to the person concerned and should be data provided by this person, the exercise of this right should not have an adverse effect on the rights and freedoms of third parties

As part of this right, you can:

- get your personal data from the operator in a structured, commonly used and machine-readable format

- request the direct provision of your data to another operator

6. The right to object

you have the right to object to the operator in the following cases:

- if your personal data is processed on a legal basis, which is public interest or legitimate interest

- if there is profiling based on public interest or legitimate interest

7. The right not to be subject to automated individual decision-making, including profiling

you have the right not to be subject to a decision that is based solely on automated processing and has legal effects that concern you or similarly significantly affect you

based on express consent

8. The right to withdraw consent

if the operator processes your personal data on the basis of consent/express consent, you have the right to revoke this consent at any time

9. The right to submit a proposal to initiate proceedings on the protection of personal data

as a data subject, you have the right to submit a proposal to the Personal Data Protection Office of the Slovak Republic to initiate proceedings on personal data protection

VII.

Cookies

Our company's website also uses cookies. Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit our website and contain information necessary for your device to communicate with our website.

The cookies that may be stored on your computer when you browse the website are cookies that are intended exclusively to facilitate electronic communication, or they are cookies that are necessary to provide the service you request (cookies related to language, cookies related to login, etc.), or cookies with statistical data or other cookies in accordance with the conditions below.

If cookies require your consent before they can be stored, we ask for this consent through the "learn more" link displayed on the first page of the website you reach, where it is clearly stated that by browsing the website to continue using the site, you agree to the use of cookies.