Personal data processing principles and data protection system under the GDPR

drawn up in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data within the meaning of Articles 13 and 14 of the Regulation (hereinafter referred to as “GDPR”) and on the protection of personal data (hereinafter referred to as “Personal Data Protection Act”)

Controller:

Ku-Li Therm s.r.o.
Černyševského 10
851 01 Bratislava – Petržalka
Registration number: 52 254 381
Tel.: +421 908 660 900
E-mail: info@vykurene.sk
(hereinafter referred to as “Operator”)

What is personal data?

Personal data is data relating to an identified natural person or an identifiable natural person who can be identified, directly or indirectly, in particular by reference to a generally applicable identifier, to another identifier such as a first name, surname, identification number, location data or an online identifier, or to one or more characteristics or attributes which constitute his or her physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.

What is personal data processing?

Processing of personal data means a processing operation or set of processing operations concerning personal data or sets of personal data, in particular the obtaining, recording, organisation, structuring, storage, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise, alignment or combination, restriction, erasure, whether or not by automated or non-automated means.

The Operator (Controller) is not obliged to appoint/designate a Responsible Person.

Sources and categories of personal data:

The Controller processes personal data (directly from you) that you have provided to it or personal data that it has obtained as a result of fulfilling your order.

Your identification and contact data and data necessary for the performance of the contract.

Lawful basis and purpose of processing:

The lawful basis for processing is:

Your consent to the processing of your personal data for the purposes of providing direct marketing pursuant to Article 6 (1) (a) of the GDPR

Performance of a contract between you and the controller pursuant to Article 6 (1)(b) GDPR

The processing is necessary for the performance of a legal obligation of the controller pursuant to Article 6 (1)(c) GDPR Regulation

The purpose of the processing of personal data is:

To process your order and to exercise the rights and obligations arising from the contractual relationship between you and the controller. When ordering services, the personal data required is necessary for the successful performance of the contract pursuant to Article 6 (1)(b) of the Regulation (this includes the subsequent payment, delivery of goods or services, handling of complaints, etc.); the processing of the customer’s personal data takes place without the customer’s consent, since the legal basis for the processing of their personal data for the purposes of the performance of the contract is the specific contract between the customer and the operator. The provision of personal data is a necessary requirement for the conclusion and performance of a contract, without the provision of personal data it is not possible to conclude a contract or for the controller to fulfil its terms.

Provision of the agreed service in the field of installation and servicing of gas equipment.

When operating a profile on social networks (Facebook, Instagram), our interest is to raise awareness of the operator in the online environment and to communicate with customers.

The personal data you post on our social networking sites such as comments, likes, videos, pictures, etc. will be published through the social networking platform. We do not subsequently process the personal data for any other purpose.

The data subject has the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her. You can send your objections by e-mail to the contact address of the controller info@vykurene.sk

Social network operators have their own adopted rules, service infrastructure and their own provisions on data protection. We have no influence on the transfer of data and the use of your data by social network operators. We recommend that you familiarize yourself with the privacy policy of the social network platform provider:

Facebook
https://www.facebook.com/policy.php ;

Instagram
https://help.instagram.com/519522125107875;

In certain processing operations, we act as joint controllers with social network operators within the meaning of Article 26 (4) of the GDPR.
There is no automated individual decision-making on the part of the controller within the meaning of Article 22 of the GDPR.

Retention period:

The controller shall retain the personal data

For the period necessary for the exercise of the rights and obligations arising from the contractual relationship between you and the controller and the exercise of a claim arising from that contractual relationship.

After the expiration of the retention period of the personal data which results from Act No. 395/2002 Coll., the Act on archives and registers and on the amendment of certain acts, the controller shall delete the personal data.

Recipients of personal data

Who is the recipient?

The recipient is anyone to whom the personal data is disclosed, regardless of whether they are a third party. A public authority which processes personal data on the basis of a special regulation is not considered to be a recipient.

They are persons who are involved in the delivery of goods, services, making payments under a contract.

The controller does not provide, disclose or make available personal data to third countries.

Conditions for the security of personal data

The controller declares that it has taken appropriate personal, technical and organisational measures to ensure the protection of personal data.

The controller has taken technical measures to secure data storage and storage of personal data in file form.

The controller declares that the personal data can be accessed only by persons authorised by the controller.

Your rights:

Right to access your personal data under Article 15 GDPR
Under the conditions set out in the GDPR, you have:

The right to rectification of your personal data pursuant to Article 16 GDPR

Right to restriction of processing
Right to erasure under Article 17 GDPR
Right to object under Article 21 GDPR
Right to transfer personal data under Article 21 GDPR
Right to withdraw consent (electronically or to a correspondence address)
The right to lodge a complaint with the Data Protection Authority if you believe that your data protection rights have been violated.

You also have the right to lodge a complaint with the Data Protection Authority if you believe that your data protection rights have been violated

How can you exercise your rights?

Right of access to data

You have the right to know whether we are processing your personal data. If we are processing it, you can ask us for access to it. Upon your request, we will issue a confirmation with information about the processing of your personal data. You can submit your request electronically, to the email address info@vykurene.sk or by post to the correspondence address Ku-Li Therm s.r.o., Černyševského 10, Bratislava – Petržalka 851 01, Registration number: 52 254 381

Right to rectification

You have the right to have your personal data that we process correct, complete and up-to-date. If your personal data is incorrect or out of date, you can ask us to correct or supplement it electronically to the email address info@vykurene.sk or by mail to the correspondence address: Ku-Li Therm s.r.o., Černyševského 10, Bratislava – Petržalka 851 01, Registration number: 52 254 381

Right to erasure

You have the right to have your personal data erased in certain circumstances. You can ask us to erase your data at any time. We will delete your personal data if:

we no longer need your personal data for the purpose for which you provided it to us,
you withdraw your consent,
you object to the processing of your personal data,
we are processing your personal data unlawfully,
the personal data must be erased in order to comply with a legal obligation, if you are a child or the parent of a child who has consented to the processing of personal data via the internet.

Right to restriction of processing

You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not process it further. Restriction of the processing of your data will occur if

You notify us that your personal data is incorrect until we have verified its accuracy,
we are processing your personal data unlawfully, but you do not consent to its erasure and instead request that we only restrict the processing of your personal data,
we no longer need your data but you need it to establish, exercise or defend your rights
you object to the processing of your personal data until we have verified that our legitimate interests outweigh your reasons.

Right to data portability

You have the right to request that we provide you with your personal data in an electronic format (e.g., an XML or CSV file) that allows you to easily transfer your data to another company. You can also ask us to transfer your personal data directly to the company of your choice. We will comply with your request if you have provided us with the personal data directly and have given us your consent to process it.

Right to object

You have the right to object to us processing your personal data. If we process your personal data in the following cases:

for our legitimate interest,
creating a customer profile,
you can object to the processing if you have personal reasons to do so.

How can you exercise these rights?

You can contact us with your request in any of the following ways:

in writing by email to: info@vykurene.sk or by post to the correspondence address:

Ku-Li Therm s.r.o., Černyševského 10, Bratislava – Petržalka 851 01, Registration number: 52 254 381

If you believe that your personal data protection rights have been violated, you have the right to file a complaint with the supervisory authority, the Office for Personal Data Protection, at the following address

Hraničná 12
820 07 Bratislava 27
Slovak Republic

Identification data:

Registration number: 36064220
Identification number: 2021685985

Office Secretariat:

+421 /2 3231 3214

E-mail: statny.dozor@pdp.gov.sk

This Privacy Policy is effective as of 25.05.2018 and replaces the previous Privacy Policy.