General Data Protection Regulation (GDPR)

If you fill out the contact form on our website:

By doing so, as a data subject, you consent to the processing of the provided personal data, including your name, surname, email and telephone contact, for the purpose of pre-contractual communication. You can revoke this consent at any time by sending an email to the following email addresses: info@profe-industry.sk or kupcak@profe-industry.sk or in person at the company’s address. If a contractual relationship is not established, the data will be erased.

If your photographs are published on our website:

As a data subject, you have consented to this. In case you wish to modify or delete the reference to your construction, please contact us at the following email address: info@profe-industry.sk.

If you receive any newsletters, updates from us:

As a data subject, you have consented to this. In case you wish to modify or cancel your subscription, please contact us at the following email address: info@profe-industry.sk.

Information for data subjects about the processing of personal data according to EU Regulation No. 2016/679 (hereinafter referred to as “GDPR”), Article 13 and others.

Personal Data Information System Accounting documents

Company address:

PROFE Industry, s. r. o.

Štrková 95/21

010 09 Žilina

Tel.: +421 949 133 323

E-mail: info@profe-industry.sk

Legal basis for processing:

The processing of personal data is governed by the Accounting Act, VAT Act, Commercial Code, and others. This implies that obtaining personal data is a legal requirement and a data subject is obligated to provide such information. Failure to do so would result in the inability to fulfill the purpose of processing (see above).

Legitimate interests of the data controller:

if the processing of personal data is based on GDPR Article 6(1)(f): The processing of personal data is not based on GDPR Article 6(1)(f) (legitimate interests)

Sources of personal data:

Directly from a data subject. Note: The data controller obtains personal information through various methods, including copying, scanning, or otherwise recording official documents onto information carriers.

Categories of personal data:

Name, surname, academic title, address of permanent residence, address of temporary residence, telephone number, email address, date of birth, type and number of identification document, signature, bank account number of a natural person.

Set of operations performed on personal data (applicable items checked):

[x] collection,
[x] recording,
[x] organisation,
[x] structuring,
[x] storage,
[x] adaptation or alteration,
[x] retrieval,
[x] consultation,
[x] use,
[ ] disclosure (by transmission, dissemination or otherwise)
[x] alignment or combination,
[x] restriction,
[x] erasure,
[x] destruction.

Note: Regardless of whether the processing of personal data is carried out by automated or non-automated means.

Recipients or categories of recipients:

INTERMEDIARY: Personal data are not provided to intermediaries. OTHER RECIPIENTS (who do not further process personal data): IT management. Note: In accordance with the GDPR, a public authority, if personal data are provided to it, is not considered a recipient.

Transfer of personal data to third countries:

Does not occur.

Retention period for personal data:

10 years after the processing is completed or after the termination of the contractual relationship, unless otherwise specified in the data controller’s records management policy, except for the use of the record for the purposes of criminal proceedings or administrative offenses.

Rights of a data subject:

A data subject has the following rights: the right to request and access their personal data, the right to have personal data amended or erased, the right to object to the processing of personal data, and the right to ensure the accuracy of personal data. A data subject also has the right not to be subject to a decision based solely on automated processing, including profiling.

A data subject has the right to lodge a complaint with a supervisory authority, particularly in the Member State of their habitual residence (Office for the Protection of Personal Data or“ Úrad na ochranu osobných údajov“ in Slovakia). According to the GDPR (Article 17), a data subject has the right to have their personal data erased (“right to be forgotten”).

Automated decision making:

The process of making a decision by automated means without any human involvement. Automated decision making is not applied in the processing of personal data by the data controller.

Profiling

Monitoring and predicting of an individual’s behaviour. Profiling is not applied in the processing of personal data by the data controller.