Personal data protection and processing policy
- By accepting the personal data protection policy and submitting forms on www.saunypatrik7.sk, you consent to the processing of your personal data under Act No. 18/2018 Coll. on Personal Data Protection and to being contacted by the Controller by telephone, text, electronic or other means of communication for the purposes of responding to your enquiry, sending a business offer, collecting data to monitor traffic on www.saunypatrik7.sk, and contacting customers through the contact form.
- Controller’s identification details: SaunyPatrik7 s.r.o., Hlaváčikova 21, 841 05 Bratislava, Slovak Republic, Company ID: 36683230
- In all cases, our company will be the sole recipient of personal data; we do not provide personal data to third parties.
- Consent may be withdrawn at any time by sending a request by email to: saunypatrik@gmail.com
- The Controller does not publish the personal data obtained from customers who are natural persons.
Fundamental rights of Data Subjects
1. Right of access to personal data
The Data Subject has the right to be informed before their personal data are processed, and at any time during processing, whether their personal data are being processed and, if so, of the scope and categories of their personal data, the purpose of processing, the identity of the recipient, the processing period, and the other rights listed below (the right to erasure and destruction, and the right to rectification).
The Data Subject has the right to request confirmation of the above. Confirmation is free of charge and will be provided to the Data Subject in the manner and form they request. The Controller will provide confirmation only insofar as it does not adversely affect the rights of other natural persons.
2. Data Subject’s right to information where the data have not been obtained from the Data Subject
Where the Controller has not obtained the personal data directly from the Data Subject, the Data Subject has the right, before the Controller processes the data, to be informed of the Controller’s identity, the scope and categories of their personal data, the purpose of processing, the identity of the recipient, the identity of the source from which the Data Subject’s personal data were obtained, the retention period, and the other rights listed below (the right to erasure and destruction, and the right to rectification).
The information will be provided no later than 1 month after the personal data are obtained, or at the time of the first communication with the Data Subject if the personal data are to be used to communicate with them.
If the Controller intends to use the personal data for a purpose other than that for which they were obtained, the Controller must inform the Data Subject of this and request their consent to this new purpose of processing their personal data.
3. Right to rectification and amendment
The Controller will rectify and/or amend inaccurate personal data concerning the Data Subject, or complete incomplete personal data, without undue delay. For this purpose, the Controller must identify the Data Subject. The Controller will ensure rectification within 1 month of the Data Subject exercising their right to rectification or amendment.
4. Right to erasure
The Data Subject has the right to have the Controller erase their personal data without undue delay. The Controller is obliged to do so if
- the personal data are no longer necessary for the purpose for which they were obtained or processed,
- the Data Subject withdraws the consent they gave to the Controller,
- the Data Subject objects to processing and there are no overriding legitimate grounds for processing the personal data,
- the personal data are being processed unlawfully.
The above does not apply if processing the personal data is necessary for the Controller to exercise a legal claim.
5. Right to restriction of processing
The Data Subject has the right to have the Controller restrict the processing of personal data if
- the Data Subject contests the accuracy of the personal data, for a period enabling the Controller to verify their accuracy,
- the processing of personal data is unlawful and the Data Subject opposes erasure of the personal data and requests restriction of their use instead,
- the Controller no longer needs the personal data for processing purposes, but the Data Subject needs them to exercise a legal claim, or
- the Data Subject objects to the processing of personal data, pending verification of whether the Controller’s legitimate grounds override those of the Data Subject.
Where processing is restricted, the Controller may process the personal data, other than storing them, only with the Data Subject’s consent or for the purpose of exercising a legal claim.
6. Right to object to processing
The Data Subject has the right to object to the processing of their personal data on grounds relating to their particular situation if they are unsure of the lawfulness of processing under Section 13(1)(f) (concerning the Controller’s legitimate interests), including profiling based on that provision. The Controller must cease processing the personal data unless it demonstrates compelling legitimate interests for processing that override the rights or interests of the Data Subject, or grounds for exercising a legal claim.
The Data Subject has the right to object to the processing of personal data concerning them for direct marketing purposes, including profiling to the extent that it relates to direct marketing. If the Data Subject objects to the processing of personal data for direct marketing purposes, the Controller must cease processing the personal data for those purposes.
7. Data Subject’s right to submit an application to initiate proceedings under Section 100 of Act No. 18/2018 Coll. on Personal Data Protection
The Data Subject has the right to submit an application to initiate proceedings to verify whether their personal data are being processed lawfully and securely. Proceedings are initiated on application by the Data Subject or a person who claims that their rights are directly affected.
8. Right to personal data portability
If the Data Subject requests that their personal data be provided to another company, the Controller will address the request without undue delay and transfer the Data Subject’s personal data in an appropriate format to the designated entity, provided that no legal or otherwise significant obstacle prevents fulfilment of this obligation.