Privacy

Updated: 27 Jan 2024

Privacy

Processing of personal data in accordance with the Regulation of the European Parliament and the Council of the EU

in accordance with articles 13 to 22 of the Regulation of the European Parliament and the Council (EU) no. 2016/679 on the protection of natural persons in the processing of personal data and the free movement of such data (hereinafter referred to as the “General Data Protection Regulation” or “GDPR - General Data Protection Regulation”) and the provisions of § 19 et seq. Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws (hereinafter referred to as the “Act on the Protection of Personal Data”).

According to Article 13 of the General Data Protection Regulation, or provisions of § 19 of the Personal Data Protection Act, the operator of the website: https://www.wallcreo.sk/ (hereinafter referred to as the “operator”) is obliged, in cases where it obtains personal data concerning the affected person, to provide the affected person the following information:

I. Contact details of the operator

  • Name: Bizzon studio s.r.o.
  • Address: Ostricova 757/1
  • VAT number: SK2023875491
  • Contact: [email protected]
  • Tel. No.: +421 948 805 645
  • Business register of the Ba I District Court, Section: SRO, insert no. 92381/B, Purpose of processing personal data of the person concerned

II. The operator processes the personal data of the person concerned for the following purposes:

  • 1.contacting back
  • 2.preparation of a non-binding price offer

III. Scope of processing personal data of the person concerned

For the aforementioned purpose, the operator knowingly processes the following personal data from the affected person:

  • Name
  • Surname
  • E-mail adress
  • Telephone number
  • Personal data that the operator unwittingly processes from the affected person:
  • IP address

IV. Storage period of personal data of the person concerned

The personal data of the person concerned will be processed, collected, archived and securely stored for a period that is unavoidable for the purposes for which the personal data were processed or collected and the legal reason for their eventual archiving has passed or until the consent to the processing of the personal data of the person concerned has expired. Upon the request of the data subject for data deletion, all personal data will be irretrievably deleted and related orders (if any) will be anonymized.

V. Method of obtaining, recording and securing the personal data of the person concerned

We most often obtain the personal data of the person concerned directly from him, for example by filling out a contact form. In such a case, the acquisition of personal data is voluntary and does not represent any contractual or legal obligation. The operator of the website is obliged to record all user requests in connection with the download, correction and deletion of the personal data of the person concerned. When securing the personal data of the person concerned, the operator has modern technical and security mechanisms that ensure the protection of processed personal data against unauthorized access or transfer, against their loss or destruction, or other possible misuse. The operator does not transfer and does not intend to transfer the personal data of the person concerned to a third country or international organization.

VI. The rights of the person concerned regarding the processing of his personal data

The General Data Protection Regulation and the Personal Data Protection Act establish the general conditions for the exercise of individual rights of the person concerned. However, this does not automatically mean that the operator will comply with the exercise of individual rights, as exceptions or some rights are linked to specific conditions that may not be met in every case. The operator will always deal with a request related to a specific right and examine it from the point of view of legislation and applicable exceptions.

1.With the consent of the affected person, the operator may also process other personal data of the allegedly affected person for a purpose other than that stated in point II., or also other personal data than those that are necessary to achieve a specific purpose in accordance with point III. If the processing of personal data is tied to the consent of the person concerned, the person concerned has the right to withdraw his consent to the processing of personal data at any time. The affected person may or may not give the operator consent to process personal data - failure to grant consent has no negative impact on the affected person. Withdrawal of the consent of the person concerned to the processing of personal data concerning him does not affect the legality of the processing of personal data based on consent before its withdrawal. The person concerned can revoke consent to the processing of personal data in the same way as he granted consent.

2.The person concerned has the right to ask the operator for information on whether his personal data is being processed or not. The person concerned has the right to request from the operator access to personal data concerning him. On the basis of this request, the operator of the person concerned will issue a confirmation with information on the processing of his personal data. The operator is obliged to provide the person concerned with his/her personal data, which he processes. For the repeated provision of personal data requested by the data subject, the operator may charge a reasonable fee corresponding to the administrative costs. The operator is obliged to provide personal data to the person concerned in a manner according to his request.

iii. The person concerned has the right to have his/her personal data that is processed correct, up-to-date and complete. If the personal data of the person concerned is out of date, the person concerned has the right to ask the operator for their correction or addition. The person concerned has the right to have the operator correct incorrect personal data concerning him without undue delay. Taking into account the purpose of personal data processing, the data subject has the right to supplement incomplete personal data.

1.The person concerned has the right to object to the processing of his personal data as well as the right to ask the operator to delete personal data that is processed illegally, beyond the scope of the purpose for which it was provided or in the event that the person concerned withdraws his consent.

2.The person concerned has the right to object to the processing of his personal data carried out on the basis of public interest or on the basis of the legitimate interests of the operator or a third party, including profiling. The operator may not continue to process personal data if he does not demonstrate the necessary legitimate interests in processing personal data that outweigh the rights or interests of the person concerned, or grounds for asserting a legal claim.

3.The person concerned has the right to object to the processing of personal data concerning him for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing. If the affected person objects to the processing of personal data for the purpose of direct marketing, the operator may not further process personal data for the purpose of direct marketing.

vii. The person concerned has the right not to be subject to a decision that is based exclusively on the automated processing of personal data, including profiling, that relate to him or similarly significantly affect him.

viii. The person concerned has the right to have the operator delete personal data concerning him without undue delay. The affected person has the right to ask the operator to limit the processing of personal data, if the affected person objects to the correctness of the personal data, during the period allowing the operator to verify the correctness of the personal data, the processing of personal data is illegal and the affected person objects to the deletion of personal data and instead requests the restriction of their use, the operator no longer needs the personal data for the purpose of processing personal data, but the data subject needs it to assert a legal claim, or the data subject objects to the processing of personal data on the basis of public interest or on the basis of the legitimate interests of the operator or a third party, until it is verified whether legitimate reasons on the part of the operator prevail over the legitimate reasons of the person concerned.

1.If the processing of personal data has been limited except for storage, the operator may process personal data only with the consent of the person concerned or for the purpose of exercising a legal claim, for the protection of persons or for reasons of public interest. The operator is obliged to inform the affected person whose processing of personal data will be restricted before the restriction of personal data processing is cancelled.

2.The affected person has the right to request the operator to provide his/her personal data in an electronic form, which will enable the personal data of the affected person to be transferred to another company, or to a third person. The person concerned has the right to obtain personal data concerning him and which he has provided to the operator in a structured, commonly used and machine-readable format and has the right to transfer this personal data to another operator, if it is technically possible and if the operator processes the personal data on the basis of consent of the person concerned or on the basis of a contractual relationship.

3.The person concerned has the right to submit a proposal to initiate a procedure on the protection of personal data, the purpose of which is to find out whether there has been a violation of the rights of natural persons in the processing of their personal data or there has been a violation of the Act on the Protection of Personal Data or a special regulation, and in the case of detection of deficiencies , if it is reasonable and expedient, to impose remedial measures or a fine for the violation of this law or a special regulation in the area of personal data protection. Proceedings are initiated at the request of the affected person or a person who claims that they are directly affected by their rights established by this law. The requirements of the proposal of the affected person or the person who claims that they are directly affected by their rights established by this law, as well as the procedure for the protection of personal data itself, are regulated in § 100 of Act no. 18/2018 Coll. on the protection of personal data.

xii. Information provided by the operator on the basis of the right of the person concerned is provided free of charge. If the request of the person concerned is clearly unfounded or unreasonable, especially due to its recurring nature, the operator may demand a reasonable fee taking into account the administrative costs of providing information or refuse to act on the request.

The affected person can apply in writing by mail or e-mail with his request, with which he is interested in exercising the rights of the affected person characterized above regarding the processing of his personal data, while the operator will deal with the affected person’s request and inform the affected person of the result in the same way as a request has been made.

VII. Supervisory body

Personal Data Protection Office of the Slovak Republic
Hraničná 12
820 07, Bratislava 27
Slovak republic
IČO: 36064220
E-mail: [email protected]