1 INFORMATION ON THE PROCESSING OF PERSONAL DATA (“PII”)

Information and advice on rights under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and also pursuant to the provisions of Act No. 18/2018 Z. z, of 29. November 2017 on the protection of personal data and on amendment and supplementation of certain laws, as amended.

Operator slovakiamartin.sk

VENEZIA MT s.r.o.

registered at the District Court in Žilina, Section: Sro, File number: 20125/L

with place of business 03601 Martin, Str. 29. August 635/6

ID: 43 948 189

Contact details: e – mail/telephone. Number: centrum@slovakiamartin.sk / 043 / 430 4916

11 FINAL PROVISIONS

This information comes into force and effect on 1.11.2018. The Controller reserves the right to change these terms and conditions in the event of a change in the processing of Personal Data in the company and in the event of a legislative change.

registered at the District Court in Žilina, Section: Sro, File number: 20125/L

with place of business 03601 Martin, Str. 29. August 635/6

ID: 43 948 189

We follow the rules, so protecting your IP is important to us. We process PI in accordance with these terms and conditions. By giving consent to the processing of Personal Data on the portal www.slovakiamartin.sk, you are giving your consent to a serious and freely given, specific, informed and unambiguous expression of the data subject’s will in the form of an unambiguously confirmatory act within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and also pursuant to the provisions of Act No. 18/2018 Z. z, of 29. November 2017 on the protection of personal data and on amendment and supplementation of certain laws, as amended (hereinafter referred to as the “GDPR and the LAW”).

2 PURPOSE OF PROCESSING OU

If you have contacted us, used one of our services or are a visitor to our website slovakiamartin.sk . We hereby inform you what we are doing with your OUs.

2.1 Contact form

We work with personal data name and surname, email, phone number

2.2. Online environment

We run our own profiles on social networks. The purpose of processing personal data is to communicate with you on social networks, e.g. LinkedIn/Facebook. The protection of data subjects’ personal data is subject to the operating and contractual terms and conditions of those companies. We may collect anonymous statistical data about your visits through a feature called Facebook Insight, which is provided to us free of charge by Facebook under non-negotiable terms of use. This data is collected via hidden files (hereinafter referred to as “cookies (ID)”), each of which contains a unique user code that is active for a period of two years and is stored by Facebook on the hard drive of the computer or other device of visitors to the fan page. A user code, which can be associated with the connection data of users registered on Facebook, is collected and processed when fan pages are opened. – the website also contains the logos of individual social networks called. plug-ins. If you do not click on the logos, no data will be transferred to social networks. By clicking on these logos, you accept communication with the social network servers, thereby creating a link. The legal basis for the processing of personal data is the consent of the data subject – Art. 6 para. 1 lit. a) GDPR. For information on the purposes and scope of data collection, further processing and use of data by the respective social network, and privacy rights and settings, please refer to the information provided by the following social media sites: Facebook: http://www.facebook.com/about/privacy INSTAGRAM: https://help.instagram.com/285881641526716?helpref=page_content LinkedIN:https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy Google:http://www.google.com/intl/de/policies/privacy

If you do not want social networks to collect data about you, do not click on the logos mentioned above. The controller processes the personal data of the data subjects to the extent specified in the relevant legislation, contracts and other documents of the controller.

3 THIRD PARTIES

Your personal data may be disclosed to third parties such as courts, state and public authorities, notaries, or our intermediaries, technical support providers, providers of data analysis, processing and storage tools

(Google Analytics, Adwords), software (Microsoft, Google), social networks such as Facebook, Instagram, LinkedIn. At the Company, we take care to minimise the disclosure of your personal data. If we process OU through intermediaries, we make sure that we choose intermediaries that meet the requirements of the GDPR, i.e. technical, organisational and personnel.

4 PROCESSING PERIOD

The data subject consents to the processing of personal data from the date of consent in accordance with these terms and conditions. Over a period of 5 years and within the meaning of specific regulations (Accounting Act).

5 TRANSFER TO A THIRD COUNTRY

The controller does not intend to transfer the PI to a third country or international organisation, including the identification of the country or international organisation. However, some of the recipients may have servers located outside the EU (Google, LinkedIN, Facebook). These servers may be located in the United States of America (USA). U.S.-based companies that have access to OA are certified under a privacy system called. in Private Schields and consider the companies provide an appropriate level of protection. This transfer only takes place subject to strict compliance with the GDPR.

6 AUTOMATED PROFILING

The operator processes the OA in paper and electronic form. In order to improve the quality of marketing campaigns, the controller uses automated profiling. By profiling, we segment the offer(s) that may be of interest to you and are more profitable for you. In the case of profiling, we use the following systems Google Adwords, Facebook Pixel. Consent is not required for basic statistical data collection, e.g. using Google Analytics measurement code.

7 IP ADDRESS

Is a set of numbers uniquely identifying a device on a computer network. An IP address can be considered as data relating to an identifiable person from a data protection point of view. An IP address becomes personal data if:

– The IP address is personal data if it is processed by the ISP together with another identification (name, email…),

– Static IP addresses used by individuals/individuals should be considered as personal data,

– the dynamic IP address will be considered personal data if the online service provider processes, together with the dynamic IP address, other identifiers considered personal data (e.g. first name, last name, email, etc.).

In the case of storing the IP address on a website (e.g. WordPress editorial system for comments), it is necessary to choose an appropriate processing purpose or to use pseudonymisation.

8. SECURE DATA TRANSFER

Your personal data is transmitted securely thanks to encryption. The Secure Socket Layer (SSL) encryption system is most commonly used for secure communication with web servers. The personal data in our systems as well as the website are secured by appropriate technical and organisational measures against loss, destruction, alteration and further dissemination of data by unauthorised persons.

9 RIGHTS OF THE DATA SUBJECT

The data subject has the right under the GDPR to (i) the right to rectification, (ii) the right to erasure, (iii) the right to data portability, (iv) the right to object, (v) the right to withdraw consent, (vi) the right of access to information.

  • Right to correction.

The data subject shall have the right to have incorrect personal data concerning him or her corrected by the controller without undue delay and to have incomplete data completed.

  • Right to erasure.

The data subject shall have the right to have the controller erase the personal data concerning him or her without undue delay. The operator is obliged to delete these OUs without undue delay if one of the following reasons is met:

– OU is no longer necessary for the purpose for which it was obtained or processed,

– the data subject withdraws consent to the processing of personal data for at least 1 specific purpose or the consent is invalid if its provision is excluded by a specific regulation,

– the data subject objects to the processing of personal data for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing,

– OUs are processed illegally,

– the reason for deletion is the fulfilment of an obligation under this Act, a special regulation or an international treaty by which the Slovak Republic is bound,

– the PSI was collected in connection with the offer of information society services and the data subject is under 16 years of age. If the controller has disclosed the OU and is obliged to erase it, it is also obliged to take appropriate security measures, including technical measures, having regard to the technology available and the cost of implementing them.

To that end, it shall also inform the other controllers who process the data subject’s personal data of the data subject’s request that those controllers erase the references to his or her personal data and copies or copies thereof.

  • Right to data portability.

The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and shall have the right to transfer such personal data to another controller if technically feasible and if: – the personal data are processed on the basis of the data subject’s consent, on the basis of a contract and on the basis of the data subject’s consent, which is not valid unless its provision is excluded by a specific regulation, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means.

  • Right to object

The data subject shall have the right to object to the processing of personal data concerning him or her for the purpose of direct marketing, including profiling to the extent that the profiling is related to direct marketing, the controller shall explicitly inform the data subject of his or her rights at the latest at the time of the first communication with him or her, and the information about this right shall be clearly and separately stated from any other information. The data subject may exercise his or her right to object by automated means using technical specifications.

  • Withdrawal of consent

The data subject shall have the right to withdraw consent to the processing of personal data concerning him or her at any time. Withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal; the data subject shall be informed of this fact before consent is given. The data subject may withdraw consent in the same way as he or she gave consent.

  • Right of access to information

The data subject shall have the right to obtain confirmation from the controller as to whether the personal data relating to him or her are being processed. Where the controller processes such PII, the data subject shall have the right to obtain access to and information about that PII:

– the purpose of the processing of OU,

– the category of processed OU – in our case, it is normal OU, the controller does not process a special category of OU,

– the identification of the recipient or the category of recipient to whom the PSI has been or is to be disclosed, in particular a recipient in a third country or an international organisation, if possible, – the period of retention of the PSI; if this is not possible, information on the criteria for determining it,

– the right to request from the controller the rectification, erasure or restriction of the processing of personal data concerning the data subject, or the right to object to the processing of personal data,

– the right to institute proceedings, the source of the OU, if the personal data were not obtained from the data subject,

– the existence of automated individual decision-making, including profiling, in such cases, the controller shall provide the data subject with information, in particular on the procedure used, as well as on the significance and foreseeable consequences of such processing of personal data for the data subject

The controller is obliged to provide information on the basis of this request within 30 days of receipt of this request. This period may be extended by a further 60 days, and the operator will inform you of the postponement. The controller may charge a reasonable fee corresponding to the administrative costs for the repeated provision of the OU requested by the data subject. The controller shall provide the data subject with a response in the manner requested by the data subject or as requested by the data subject

  • Right to bring proceedings by the person concerned

The person concerned may file a petition to initiate proceedings under Section 100 of the Act if he feels that his rights have been affected. The application must contain: – details of the applicant – against whom the application is directed with the subject matter of the application with an indication of the rights allegedly infringed in the processing of personal data – evidence in support of the allegations. A template of the proposal will be published on the website of the Office for Personal Data Protection, Hraničná 12, 820 02 Bratislava. The Authority shall consider the complaint within 30 days, take a decision within 90 days or may extend the time limit accordingly.

10 QUESTIONS ?

If you have any questions or comments regarding the processing of personal data, you can contact us

Operator slovakiamartin.sk

VENEZIA MT s.r.o.

registered at the District Court in Žilina, Section: Sro, File number: 20125/L

with place of business 03601 Martin, Str. 29. August 635/6

ID: 43 948 189

Contact details: e – mail/telephone. Number: centrum@slovakiamartin.sk / 043 / 430 4916

11 FINAL PROVISIONS

This information comes into force and effect on 1.11.2018. The Controller reserves the right to change these terms and conditions in the event of a change in the processing of Personal Data in the company and in the event of a legislative change.

VENEZIA MT s.r.o.

registered at the District Court in Žilina, Section: Sro, File number: 20125/L

with place of business 03601 Martin, Str. 29. August 635/6

ID: 43 948 189

We follow the rules, so protecting your IP is important to us. We process PI in accordance with these terms and conditions. By giving consent to the processing of Personal Data on the portal www.slovakiamartin.sk, you are giving your consent to a serious and freely given, specific, informed and unambiguous expression of the data subject’s will in the form of an unambiguously confirmatory act within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27. April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and also pursuant to the provisions of Act No. 18/2018 Z. z, of 29. November 2017 on the protection of personal data and on amendment and supplementation of certain laws, as amended (hereinafter referred to as the “GDPR and the LAW”).

2 PURPOSE OF PROCESSING OU

If you have contacted us, used one of our services or are a visitor to our website slovakiamartin.sk . We hereby inform you what we are doing with your OUs.

2.1 Contact form

We work with personal data name and surname, email, phone number

2.2. Online environment

We run our own profiles on social networks. The purpose of processing personal data is to communicate with you on social networks, e.g. LinkedIn/Facebook. The protection of data subjects’ personal data is subject to the operating and contractual terms and conditions of those companies. We may collect anonymous statistical data about your visits through a feature called Facebook Insight, which is provided to us free of charge by Facebook under non-negotiable terms of use. This data is collected via hidden files (hereinafter referred to as “cookies (ID)”), each of which contains a unique user code that is active for a period of two years and is stored by Facebook on the hard drive of the computer or other device of visitors to the fan page. A user code, which can be associated with the connection data of users registered on Facebook, is collected and processed when fan pages are opened. – the website also contains the logos of individual social networks called. plug-ins. If you do not click on the logos, no data will be transferred to social networks. By clicking on these logos, you accept communication with the social network servers, thereby creating a link. The legal basis for the processing of personal data is the consent of the data subject – Art. 6 para. 1 lit. a) GDPR. For information on the purposes and scope of data collection, further processing and use of data by the respective social network, and privacy rights and settings, please refer to the information provided by the following social media sites: Facebook: http://www.facebook.com/about/privacy INSTAGRAM: https://help.instagram.com/285881641526716?helpref=page_content LinkedIN:https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy Google:http://www.google.com/intl/de/policies/privacy

If you do not want social networks to collect data about you, do not click on the logos mentioned above. The controller processes the personal data of the data subjects to the extent specified in the relevant legislation, contracts and other documents of the controller.

3 THIRD PARTIES

Your personal data may be disclosed to third parties such as courts, state and public authorities, notaries, or our intermediaries, technical support providers, providers of data analysis, processing and storage tools

(Google Analytics, Adwords), software (Microsoft, Google), social networks such as Facebook, Instagram, LinkedIn. At the Company, we take care to minimise the disclosure of your personal data. If we process OU through intermediaries, we make sure that we choose intermediaries that meet the requirements of the GDPR, i.e. technical, organisational and personnel.

4 PROCESSING PERIOD

The data subject consents to the processing of personal data from the date of consent in accordance with these terms and conditions. Over a period of 5 years and within the meaning of specific regulations (Accounting Act).

5 TRANSFER TO A THIRD COUNTRY

The controller does not intend to transfer the PI to a third country or international organisation, including the identification of the country or international organisation. However, some of the recipients may have servers located outside the EU (Google, LinkedIN, Facebook). These servers may be located in the United States of America (USA). U.S.-based companies that have access to OA are certified under a privacy system called. in Private Schields and consider the companies provide an appropriate level of protection. This transfer only takes place subject to strict compliance with the GDPR.

6 AUTOMATED PROFILING

The operator processes the OA in paper and electronic form. In order to improve the quality of marketing campaigns, the controller uses automated profiling. By profiling, we segment the offer(s) that may be of interest to you and are more profitable for you. In the case of profiling, we use the following systems Google Adwords, Facebook Pixel. Consent is not required for basic statistical data collection, e.g. using Google Analytics measurement code.

7 IP ADDRESS

Is a set of numbers uniquely identifying a device on a computer network. An IP address can be considered as data relating to an identifiable person from a data protection point of view. An IP address becomes personal data if:

– The IP address is personal data if it is processed by the ISP together with another identification (name, email…),

– Static IP addresses used by individuals/individuals should be considered as personal data,

– the dynamic IP address will be considered personal data if the online service provider processes, together with the dynamic IP address, other identifiers considered personal data (e.g. first name, last name, email, etc.).

In the case of storing the IP address on a website (e.g. WordPress editorial system for comments), it is necessary to choose an appropriate processing purpose or to use pseudonymisation.

8. SECURE DATA TRANSFER

Your personal data is transmitted securely thanks to encryption. The Secure Socket Layer (SSL) encryption system is most commonly used for secure communication with web servers. The personal data in our systems as well as the website are secured by appropriate technical and organisational measures against loss, destruction, alteration and further dissemination of data by unauthorised persons.

9 RIGHTS OF THE DATA SUBJECT

The data subject has the right under the GDPR to (i) the right to rectification, (ii) the right to erasure, (iii) the right to data portability, (iv) the right to object, (v) the right to withdraw consent, (vi) the right of access to information.

  • Right to correction.

The data subject shall have the right to have incorrect personal data concerning him or her corrected by the controller without undue delay and to have incomplete data completed.

  • Right to erasure.

The data subject shall have the right to have the controller erase the personal data concerning him or her without undue delay. The operator is obliged to delete these OUs without undue delay if one of the following reasons is met:

– OU is no longer necessary for the purpose for which it was obtained or processed,

– the data subject withdraws consent to the processing of personal data for at least 1 specific purpose or the consent is invalid if its provision is excluded by a specific regulation,

– the data subject objects to the processing of personal data for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing,

– OUs are processed illegally,

– the reason for deletion is the fulfilment of an obligation under this Act, a special regulation or an international treaty by which the Slovak Republic is bound,

– the PSI was collected in connection with the offer of information society services and the data subject is under 16 years of age. If the controller has disclosed the OU and is obliged to erase it, it is also obliged to take appropriate security measures, including technical measures, having regard to the technology available and the cost of implementing them.

To that end, it shall also inform the other controllers who process the data subject’s personal data of the data subject’s request that those controllers erase the references to his or her personal data and copies or copies thereof.

  • Right to data portability.

The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and shall have the right to transfer such personal data to another controller if technically feasible and if: – the personal data are processed on the basis of the data subject’s consent, on the basis of a contract and on the basis of the data subject’s consent, which is not valid unless its provision is excluded by a specific regulation, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means, – the processing of the personal data is carried out by automated means.

  • Right to object

The data subject shall have the right to object to the processing of personal data concerning him or her for the purpose of direct marketing, including profiling to the extent that the profiling is related to direct marketing, the controller shall explicitly inform the data subject of his or her rights at the latest at the time of the first communication with him or her, and the information about this right shall be clearly and separately stated from any other information. The data subject may exercise his or her right to object by automated means using technical specifications.

  • Withdrawal of consent

The data subject shall have the right to withdraw consent to the processing of personal data concerning him or her at any time. Withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal; the data subject shall be informed of this fact before consent is given. The data subject may withdraw consent in the same way as he or she gave consent.

  • Right of access to information

The data subject shall have the right to obtain confirmation from the controller as to whether the personal data relating to him or her are being processed. Where the controller processes such PII, the data subject shall have the right to obtain access to and information about that PII:

– the purpose of the processing of OU,

– the category of processed OU – in our case, it is normal OU, the controller does not process a special category of OU,

– the identification of the recipient or the category of recipient to whom the PSI has been or is to be disclosed, in particular a recipient in a third country or an international organisation, if possible, – the period of retention of the PSI; if this is not possible, information on the criteria for determining it,

– the right to request from the controller the rectification, erasure or restriction of the processing of personal data concerning the data subject, or the right to object to the processing of personal data,

– the right to institute proceedings, the source of the OU, if the personal data were not obtained from the data subject,

– the existence of automated individual decision-making, including profiling, in such cases, the controller shall provide the data subject with information, in particular on the procedure used, as well as on the significance and foreseeable consequences of such processing of personal data for the data subject

The controller is obliged to provide information on the basis of this request within 30 days of receipt of this request. This period may be extended by a further 60 days, and the operator will inform you of the postponement. The controller may charge a reasonable fee corresponding to the administrative costs for the repeated provision of the OU requested by the data subject. The controller shall provide the data subject with a response in the manner requested by the data subject or as requested by the data subject

  • Right to bring proceedings by the person concerned

The person concerned may file a petition to initiate proceedings under Section 100 of the Act if he feels that his rights have been affected. The application must contain: – details of the applicant – against whom the application is directed with the subject matter of the application with an indication of the rights allegedly infringed in the processing of personal data – evidence in support of the allegations. A template of the proposal will be published on the website of the Office for Personal Data Protection, Hraničná 12, 820 02 Bratislava. The Authority shall consider the complaint within 30 days, take a decision within 90 days or may extend the time limit accordingly.

10 QUESTIONS ?

If you have any questions or comments regarding the processing of personal data, you can contact us

Operator slovakiamartin.sk

VENEZIA MT s.r.o.

registered at the District Court in Žilina, Section: Sro, File number: 20125/L

with place of business 03601 Martin, Str. 29. August 635/6

ID: 43 948 189

Contact details: e – mail/telephone. Number: centrum@slovakiamartin.sk / 043 / 430 4916

11 FINAL PROVISIONS

This information comes into force and effect on 1.11.2018. The Controller reserves the right to change these terms and conditions in the event of a change in the processing of Personal Data in the company and in the event of a legislative change.