GUIDANCE NOTE ON REQUESTS TO EXERCISE DATA SUBJECTS RIGHTS

according to Act. No. 18/2018 Coll. about general data protection rights (hereinafter referred to as “act”) Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “regulation”)

By ticking this box, I confirm that I was informed about the facts and rights by company Emineo Partners s. r. Hviezdoslavovo námestie 7, 811 02 Bratislava, Identification No. (IČO): 44 819 226, registered in the Commercial Register of the District Court Bratislava I, Section: Sro, File No.: 59181 / B, tel. +421 (2) 210 28 210; e-mail: office@emineopartners.sk (for the purposes of this instruction, hereinafter referred to as the “controller”)

As the controller on my rights relating to the collection and processing of my personal data and that they were in accordance with § 19 of the act and Art. 13 of the regulation provide the information to the following extent:

I.
The right to be informed (§ 19 act; Art.. 13 regulation)

You can contact data protection officer by means of e-mail: marcel.murani@emineopartners.sk

The purpose of the processing of personal data is the processing and subsequent processing of your request on the legal basis of the guidance note of the data subject pursuant to 13 par. (1) a) of Art. 7 of regulation.

The data subject for the purposes of this guidance note is understood to be You, ie the person whose personal data will be processed to the extent that you provide them.

The controller handles cookies.

In case you contacted the controller via the web form, only the controller and its authorized employees have access to your data.

If you have contacted us by phone, the information provided by us is securely deposited by VM Telecom, s.r.o., with registered office at Panenská 8, 811 03 Bratislava, Identification No. (IČO) : 35 837 594 and accessed only by its authorized employee and controller.

The controller shall inform the data subject, that its personal data will not be provided to any intermediary or recipient. Personal data will no longer be provided or made available to third parties unless it is subject to special regulations, bodies involved in criminal proceedings. Personal information will not be published. Personal data will not be used for automated individual decisions, including profiling.

II.
Other rights of data subject

(i) Right of access by the data subject (§ 21 of act, Art. 15 of regulation)

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed. If the controller processes such personal data, the data subject has the right to access such personal data and information to the extent that it constitutes the content of such information. The data subject has the right to identify the recipient or the category of the recipient to whom personal data has been or is to be provided

(ii) Right to rectification of personal data (§ 22 of act; Art. 16 of regulation)

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed.

(iii) Right to erasure (‘right to be forgotten’) (§ 23 of act; Art. 17 of regulation)

The data subject in relation to the processing of personal data in the information system has the right to delete its personal data.

(iv) Right to restriction of processing (§ 24 of act; Art. 18 of regulation)

The data subject shall have the right to obtain from the controller restriction of processing if:

a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data,
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims, or
d) the data subject has objected to processing pursuant to § 27 (1) of act, Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

(v) Right to data portability of personal data (§ 26 of act; Art. 20 of regulation)

The data subject in relation to the processing of its personal data in the information system has the right to delete personal data.

(vi) Right to object and automated individual decision-making (§ 27 of act; Art. 21 of regulation)

The data subject in connection with the processing of personal data in the information system has no right to object to the processing of personal data.

The data subject has no right to object to the processing of personal data concerning him / her where the processing of personal data is necessary for the performance of a task on grounds of public interest if the personal data are processed for scientific purposes, for the purpose of historical research or for statistical purposes under § 78 (8) of the act; Art. 89 (1) of the regulation.

(vii) Right to ineffectiveness of Automated individual decision-making, including profiling (§ 28 of act; Art. 22 of regulation)

The processing of personal data of the data subject by the controller does not lead to automated decision making or profiling.

(viii) Right to withdraw consent to the processing of personal data (§ 14 (3) of act; Art. 7 (3) of regulation)

The data subject has the right at any time to withdraw consent to the processing of personal data relating to him/her if he/she has granted it.

(ix) Right to file a claim for the opening of proceedings for the protection of personal data (§ 100 act; Art. 77 and 79 of regulation)

The data subject has the right to submit to the Office for the Protection of Personal Data, registered office at Hraničná 12, 820 07 Bratislava, Slovak Republic, ID: 36064220 (hereinafter “the Office”) or other competent authority, especially in the Member State of his usual residence, place of work or the place of the alleged violation, the motion to initiate the procedure for the protection of personal data, if it considers that the processing of personal data concerning it is contrary to the act and the regulation.

The motion to initiate proceedings (hereinafter referred to as the “proposal”) must include
(a) name, surname, correspondence address and signature of the petitioner,
(b) an indication of the person against whom the application is directed, stating his or her name, surname, permanent address or business name, registered office and identification number, if assigned,
(c) the subject of the proposal, indicating the rights to be violated in the processing of personal data,
(d) evidence to support the facts set out in the proposal,
(e) a copy of the document or other proof proving the exercise of the right under the second part of the second title of act or of the regulation if such right is invoked by the data subject or the reasons given for special consideration for the non-application of the right in question have been lodged by the data subject.

The specimen of the petition to initiate proceedings before the Office is published on the Office’s website.

Without prejudice to the right of the data subject to claim the protection of his rights in the application to institute proceedings before the Office, any data subject shall also have the right to claim his / her rights in the matter and in the local court of the Slovak Republic if it considers that, as a result of its processing personal data in breach of the regulation violated its rights set out in the regulation. The proposal for action may also be brought before the courts of the Member State in which the data subject is usual resident unless the controller or intermediary is a public authority of a Member State acting in the exercise of official authority.

The provision of personal data by the data subject for the purpose of providing healthcare is a legal requirement. Personal data may result in the refusal to provide healthcare.

The services provided by the controller are not addressed to children under 16 years of age. A person under the age of 16 may contact us only if the holder of the parental rights and duties agrees or approves it.

 

III.
Cookies

This website uses cookies to improve the effectivity of the operation and your user experience as well as to provide marketing information or online advertising. The terms of use of cookies are part of the “Information on the rights of the data subject”. In order to ensure more responsive service, EMINEO PARTNERS must have stored information about how you use this website. The necessary information is stored by means of text files called cookies. Cookies contain a small amount of information and the server downloads this information to your computer or other device. Your web browser will then send cookies back to the EMINEO PARTNERS website at each subsequent visit so that it can recognize you and remember your preferences on the site. Whenever you use this website, the information may be collected using cookies and other technologies.

If you do not agree to the use and processing of cookies on this website, please send an objection to the contact email: office@emineopartners.sk. We will address your dispute without delay, and will respond to it within 30 days of receiving it. Please note that without the processing of cookies, the full functionality and compatibility of the website cannot be guaranteed.

EMINEO PARTNERS or its service providers also use analytical applications to evaluate the effectiveness of the website’s content and layout. The information is used for statistical purposes only and EMINEO PARTNERS does not intend to use this information to personally identify any user. EMINEO PARTNERS may combine this information with information from its web analytics services and cookies to analyse in more detail how you use this website. For more information about cookies and their use, please contact us by email at office@emineopartners.com.

EMINEO PARTNERS may modify or change these cookie policies at irregular intervals and in its sole discretion; and therefore invites you to periodically review the cookie policy.

The processing of personal data is carried out by the following providers, but may also process personal data:

  1. Provider of Google Analytics and the Google AdWords advertising system, operated by Google Inc., at 1600 Amphitheater Parkway, Mountain View, CA 94043, USA;
  2. The livechatoo service provider operated by developers s. r. o., with its registered office at Matúškova 390/6, Košice – mestská časť Západ 040 11, IČO: 50 995 171;
  3. Hojar Service Provider, operating by Hotjar Ltd., evel 2, St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta, Company ID: C 65490;
  4. Other providers of software, services and applications, but not currently used by the company.