Privacy Policy

Annex No.7

These privacy terms explain how we process personal data within ZAK Slovakia s.r.o. pursuant to REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (“GDPR”) and no. 18/2018 on the protection of personal data and on the amendment of certain laws (hereinafter referred to as the “Act”).

TECHIMPEX spol. Ltd. with registered office: Vodná 7/7, 945 01 Komárno, Slovakia, IČO: 34 126 856, registration: Commercial Register of the District Court of Nitra, section: Sro, file no. 1628 / N

(hereinafter referred to as the “Operator” or “we“). The operator does not have a designated person responsible for personal data protection. Receipt and processing of applications of the persons concerned is resolved at the level of the authorized person of the company. Contact details of the authorized person:

TECHIMPEX spol. Ltd.

Email: techimpex@techimpex.sk

Telephone number: +421 357777050, +421 357777051

Correspondence address: Vodná 7/7, 945 01 Komárno, Slovakia

These conditions of privacy protection serve primarily to fulfill the information obligations under Art. 13 and 14 of the GDPR, § 19 and § 20 of the Act against the persons concerned about whom we process personal data. These are mainly our employees or the employees of our business partners, clients or suppliers. When processing personal data, we follow primarily the general EU regulation on personal data protection (“GDPR”), which also regulates your rights as a data subject, the provisions of the law on personal data protection that apply to us, as well as other legal regulations. If you do not understand any of the information and / or the summary of information contained in this document, please do not hesitate to contact us.

Why do we protect your personal information?

Privacy is also very important to us out of a non-legal obligation. It is therefore our goal to provide our services in such a way that the basic principles and principles of privacy and, in particular, personal data protection are respected in all circumstances. In order to ensure the maximum protection of personal data in our report, we have decided to introduce modern, effective and simple measures to ensure compliance with the GDPR and the Act.

Why do we process personal data?

The processing of personal data is necessary on our part, in particular so that we can:

    provide our services and products and, for this purpose, process the personal data of our employees, customers, suppliers, business partners, employees of business partners and others;

    perform various legal and contractual obligations;
    protect our legitimate interests.

For what purposes and on what legal bases do we process personal data?

The overview below explains the purposes of processing within ZAK Slovakia s.r.o ..

Purpose of personal data processing      /       Legal basis     /       Type of personal data **

Processing for accounting and tax purposes     /     Art. 6 par. 1 letter c) GDPR; § 13 par. c) Law     /     current personal data, delivery address, contact details

Fulfillment of the employer’s obligations related to the employment relationship or similar relationship     /     Art. 6 par. 1 letter b) GDPR; § 13 par. b) Law     /     current personal data, contact details, account number, personal

    /     Art. 6 par. 1 letter c) GDPR; § 13 par. c) Act     /     data of family members, data on health status

Fulfillment of contractual obligations     /     Art. 6 par. 1 letter b) GDPR; § 13 par. b) Law     /     current personal data, delivery address, contact details

Complaint handling     /     Art. 6 par. 1 letter c) GDPR; § 13 par. c) Law     /     current personal data, contact details

Effective defense in case of dispute     /     Art. 6 par. 1 letter f) GDPR; § 13 par. f) Law     /     current personal data, contact details

Archiving of the Operator’s documentation     /     Art. 6 par. 1 letter c) GDPR; § 13 par. c) Act     /     personal data according to the type of archived document

Fulfillment of obligations from security documents.     /     Art. 6 par. 1 letter c) GDPR; § 13 par. c) Law     /     current personal data, signature

Postal communication     /     Art. 6 par. 1 letter c) GDPR; § 13 par. c) Law     /     current personal data, delivery data, contact details

Contact form on the website     /     Art. 6 par. 1 letter f) GDPR; § 13 par. f) Law     /     current personal data, contact details

Visit to the website     /     Art. 6 par. 1 letter f) GDPR; § 13 par. f) Law     /     IP address, geolocation data, cookies

* If we process your personal data on the basis of your consent, you are entitled to revoke this consent at any time in the manner in which it was granted or in writing to the above contacts of the Operator (this does not apply to consents regarding cookies)

The cookie settings on this website are set to “allow cookies” to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click(ed) “Accept” on the banner below then you are consenting to this.

What are the legitimate interests we pursue in the processing of personal data?

For the following purposes, we rely on the legal basis of the legitimate interest under Art. 6 par. 1 letter f) GDPR. Below you will find a more detailed explanation of these purposes or. legitimate interests:

Effective defense in case of dispute settlement of disputes

Website visitor identification,

ensuring the technical operation of the website This is mainly an improvement of the website browsing service

Processing of messages sent via

contact form on the website Ensuring other communication with website visitors

How do we collect personal data about you?

We most often obtain your personal data directly from you. In this case, the collection of personal data is voluntary. You can provide personal data to our company in various ways, e.g. :

▪ in the process of concluding a contract with our company;

▪ communication with you;

▪ by sending a contact form with your comments, requests or questions.

However, we may also obtain your personal data from your employer or from the company in connection with which we process your personal data. These are most often cases where we enter into or negotiate a contractual relationship or its conditions with a given company. If the collection of personal data concerns a contractual relationship, it is most often a contractual requirement or a requirement that is necessary for the conclusion of a contract. Failure to provide personal information (whether to you or your colleagues) may have negative consequences for the organization you represent, as the contractual relationship may not be entered into or implemented. If you are a member of the statutory body of an organization that is our contracting party or with whom we are negotiating a contractual relationship, we may obtain your personal data from publicly available sources and registers. In no case do we further systematically process any accidentally obtained personal data for any purpose of personal data processing defined by us.

We process personal data on the basis of the consent of the data subject under the age of 16 pursuant to Article 18 of the GDPR, Section 15 of the Act, only if the consent of the data subject’s legal representative is granted.

Do you always have to provide your data and what are the possible consequences if you do not do so?

The provision of personal data on our website is voluntary, but necessary for the use of certain functions of our site, e.g. use of our contact form.

To whom do we provide your personal data?

We take the confidentiality of personal data very seriously, and therefore we have adopted internal regulations, thanks to which your personal data is shared only with authorized persons of the Operator or verified by third parties. Only authorized persons authorized to work with personal data may have access to your personal data. We provide personal data of our clients, employees, business partners and other natural persons only to the extent necessary to the following categories of recipients of personal data:

– our verified and duly legally bound intermediaries (eg accountants, lawyers, etc.);

– our professional advisers (eg lawyers, auditors);

– software provider;

– providers of technical (IT) support for our company;

– institutions in fulfilling our legal obligations in connection with the above-mentioned purposes of personal data management, e.g. Social Insurance, Pension Management Companies, Supplementary Pension Savings Banks, Health Insurance Companies, the Office of Social Affairs and the Family, the Tax Office;

– postal delivery service;

– employees of the above persons.

If we use an intermediary for the processing of personal data, we will always check in advance whether the intermediary meets the requirements of an organizational and technical nature in terms of ensuring the security of the processing of your personal data. If you are interested in information about our current intermediaries, please do not hesitate to contact us at the above contacts.

To which countries do we transfer your personal data?

We do not transfer standard personal data to third countries outside the European Economic Area (EU, Iceland, Norway and Liechtenstein) unless absolutely necessary.

How long do we keep your personal data?

We store personal data for as long as necessary for the purposes for which the personal data are processed. In general, the retention period follows from the legal regulations and legislation of the Slovak Republic. Unless required by law, we always determine the retention period of your personal data in relation to specific purposes. If you have any questions regarding the retention period of your personal data, please contact us at the above contacts.

What are your rights as a person?

If we process personal data about you on the basis of your consent to the processing of personal data, you have the right to withdraw your consent at any time. You have the right at any time to object effectively to the processing of personal data for direct marketing purposes, including profiling. Processed personal data are not subject to profiling. All our offers tailored to our customer are made on the basis of a manual assessment of orders.

You also have the right to object to the processing of your personal data on the basis of the legitimate interests we pursue, as explained above.

GDPR sets out the general conditions for the exercise of your individual rights. We will always deal with and examine your request for a specific right in the light of the legislation and our internal policy for dealing with the complaints of the persons concerned. In particular, as an affected person, you have:

     ▪ The right to request access to personal data, pursuant to Article 15 of the GDPR, § 21 of the Act, which we process about you. This right includes the right to confirm whether we process personal data about you, the right to access this data and the right to obtain a copy of the personal data we process about you, if technically feasible;

▪ The right to correct and supplement personal data, pursuant to Article 16 of the GDPR, § 22 of the Act, if we process incorrect or incomplete personal data about you;

▪ The right to delete your personal data, pursuant to Article 17 of the GDPR, § 23 of the Act;

▪ The right to restrict the processing of personal data, pursuant to Article 18 of the GDPR § 24 of the Act;

▪ The right to data portability, according to Article 20 of the GDPR, § 26 of the Act;

▪ The right to object to the processing of data pursuant to Article 21 of the GDPR, Section 27 of the Act;

▪ The right to ineffectiveness of automated individual decision-making, including profiling, according to Article 22 of the GDPR, § 28 of the Act.

Based on a written request addressed to the Operator, the person has the right to object:

    a) the processing of his personal data which he assumes are or will be processed for the purposes of direct marketing without his consent, and request their destruction,
    b) use of his personal data – title, name, surname, address – for the purposes of direct marketing in the postal system.

A person has the right, upon a written request addressed to the Operator, or in person at any time to object to the processing of his personal data by expressing legitimate reasons or submitting evidence of unauthorized interference with his rights and legally protected interests. These are the following cases of personal data processing:

    a) processing of personal data that have already been published in accordance with the law and the Operator has duly marked them as published,
    b) the processing of personal data is necessary for the protection of the rights and legally protected interests of the Operator or a third party. Upon a written request addressed to the Operator or in person at any time, a person has the right to object and not to submit to a decision of the Operator that would have legal effects or significant impact on him, if such a decision is issued solely on the basis of automated processing of his personal data. In such a case, the person has the right to request the Operator to review the issued decision by a method different from the automated form of processing. In the event that a person suspects that his data are being processed unjustifiably, he has the right to submit a proposal to the Office for Personal Data Protection of the Slovak Republic to initiate proceedings on personal data protection.

Is there an automated individual decision-making?

We do not currently perform such processing operations, on the basis of which a decision would be made with legal effect or other significant impact on your person, which would be based exclusively on fully automated processing of your personal data in accordance with Art. 22 GDPR.

If you believe that we are processing incorrect personal data about you with regard to the purpose and circumstances, you may request the correction of incorrect or supplementation of incomplete personal data through contacts through our contact channels.

You also have the right to file a complaint at any time with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, (https://dataprotection.gov.sk/uoou/sk), or to file a lawsuit with the relevant court. In any case, we recommend resolving any disputes, questions or objections primarily through mutual communication.

External websites

Our websites may contain links to other websites and / or services of other providers. We are not responsible for the content and administration of the websites or services of other Providers to which we link. These privacy terms do not apply to the processing of personal data as part of your movement on other websites.

How do we protect your personal information?

It is our responsibility to protect your personal information in an appropriate manner. Our company has adopted generally accepted technical and organizational standards in order to maintain the security of processed personal data, especially against their loss, misuse, unauthorized modification, destruction or other impact on the rights and freedoms of data subjects. Your personal data is preferably stored on our secure servers or data carriers in the Slovak Republic.

Change of privacy conditions

The protection of personal data is a very important condition for us in building a confidential relationship with our employees, customers and others. The information we are required to provide to you in connection with the processing of personal data may change over time. For this reason, we reserve the right to modify and change these conditions at any time to the extent necessary. In the event that we change these conditions in a material way, we will bring this change to your attention, e.g. general notice on this website.

Thank you for your trust in the processing of your personal data.

TECHIMPEX spol. Ltd.

in Komárno, May 25, 2018

** types of personal data:

Common personal data: title, name, surname, address

Contact details: e-mail address, telephone number

Payment terms: account number, form of payment