The purpose of this document is to provide information about it, who, why, how personal data are processed, whom the personal data are provided, what rights the user, visitor, third subject and operator has and how they may apply under the GDPR and the Act.
1. Who we are?
1.1 Personal data are recorded and collected by the company Jozef Zajac - Slouchat.com, Švábovce 150, 059 12 Hôrka pri Poprade, Slovak Republic, entered in the Commercial Register of the District Court Bratislava I, section: Sro, file no .: 6693/B (hereinafter referred to as the "Operator").
2. What types of information are collected?
2.1 The information that the Operator records and collects and way of using this information is used depends on which specific service the user, visitor or third subject uses. The operator records and collects personal data such as name, surname, e-mail address, date of birth, identification number, age, sex, postal address (permanent residence, delivery address), country, nationality, language, telephone contact, data obtained from files of cookies, password, identity card number, number of bank account, number of payment card or other financial information, requests, complaints, claims, suggestions, notifications and others.
2.2 The operator records and collects information about the interaction of the user, visitor or third subject on this website, how the products and services were used, method of login, from which place the user, visitor or third subject visited this website, how long this website has been used, response times, download errors, method of obtaining access to services and products, termination of their use and others.
2.3 The operator records and collects technical data of used devices and their settings, IP address, type and version of the web browser, settings of web browser, operating system, platform or files of cookies. More information on the use files of cookies can be found on the website www.slouchat.com/cookies.
3. Why is personal data processed?
3.1 The operator records and collects personal data for the purpose of identifying the user, visitor, customer or third subject. The portfolio of services is very wide and the Operator is constantly working to provide better services and products to the user, visitor or third subject. Some websites are available for registered users only and other websites are also available for unregistered users.
3.2 Special legal regulations may impose various obligations on the Operator, for the purpose of which the processing of personal data is necessary. In accordance with the Civil Code and regulations in the field of consumer protection, the Operator records and collects personal data for ordering products, services or paid features, complaints of products, services or paid features, fulfilling of legal obligations on accounting, in accordance with which the Operator is obliged to keep certain personal data on paid services for a period stipulated by law.
3.3 The operator records and collects information about outages or various problems which reported by the user, visitor or third subject. This information ensures the proper functioning of this website, the improvement or innovation of functions, services and products.
3.4 The operator records and collects information to purposes of the provision of customized content or articles, relevant advertising or other similar measures that simplify and help to use of functions and services or improve the user experience with this websites.
3.5 The operator records and collects information to purposes of securing and management of the participation of the user, visitor or third subject in the consumer contest. The information which the Operator processes for this purpose to depends on the statute of the specific contest.
3.6 The Operator records and collects information to purposes of ensure the protection of own IT environment against attacks and other interventions, to promote the security of functions, services and products within the prevention of spam, phishing, harassment, misuse of user accounts or other prohibited activities.
3.7 The Operator records and collects information to purposes of authentication the identity of the user, visitor or third subject, because the Operator seeks to protect the account and privacy. This information are protected by encrypted communication via the HTTPS protocol.
3.8 The Operator records and collects information to purposes of measuring traffic of this website, for statistical purposes, development and improvement of this website, functions, services or products.
3.9 The Operator records and collects information to purposes of protect own rights, good business name, ensuring the security of technical facilities, systems, databases, computer networks against attacks or efforts to misuse data and legitimate interests.
3.10 The Operator records and collects information to purposes of displaying targeted advertising, direct marketing of advertising messages from the Operator and advertising messages from third subjects, providing advertising space on this website for owners of other websites, stores or e-shops.
4. What is the legal basis of the processing of personal data?
4.1 The processing of personal data is necessary for the fulfillment of the contract between the user, visitor or third subject and the Operator, which the user, visitor or third subject has concluded by using this website or accepting the terms. The user, visitor or third subject may give consent to the processing of personal data and this consent may be revoked at any time.
5. Whom the personal data are provided or available?
5.1 The operator may transmit or make available some personal data with:
a) A SMS s.r.o., Šulekova 70, 811 03 Bratislava, Slovak republic
b) Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, United States
c) Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States
6. How long will personal data be processed?
6.1 The processing of personal data is carried out in accordance with legal requirements and the Operator does not store personal data longer than is necessary for the purpose of processing.
6.2 If personal data are processed on a legal basis – fulfillment of the contract, the Operator processes personal data for the entire duration of the contractual relationship. If the contract is terminated, the Operator proceeds to the removal of personal data, unless it is possible to process personal data on another legal basis. If the user used a paid service (PLUS account) during the use of the services, the Operator is entitled to continue to process personal data concerning the payments made for the purpose of fulfilling the obligations arising from tax and accounting legislation.
6.3 If personal data are processed on a legal basis – fulfillment of legal obligations, the Operator processes personal data for a period determined by legal regulations.
6.4 If personal data are processed on a legal basis – the legitimate interest of the Operator or the legitimate interest of third subjects, the Operator processes personal data for the duration of the legitimate interest.
6.5 If personal data are processed on a legal basis – optional consent of the user, personal data are processed by the Operator for the period for which the user has given consent to the processing of personal data. When processing personal data for the purpose of participating in a consumer contest organized by the Operator for the purpose of promoting products, functions or services, this period is stated in the specific statute of the contest or conditions.
7. What are the rights and obligations of the concerned person?
7.1 The user, the visitor and the third subject as the concerned person have the right:
a) of access to personal data;
b) to request a confirmation of the processing of personal data from the Operator;
c) for the purpose of processing personal data;
d) to what personal data are processed;
e) to a list of subjects to which personal data are provided;
f) for how long the personal data will be stored by the Operator;
g) to request the rectification, restriction or erasure of the processing of personal data;
h) to object to the processing of personal data;
i) to make a proposal to initiate proceedings on personal data protection pursuant to the Act or to make a complaint to the supervisory authority pursuant to the GDPR, which is the Office for Personal Data Protection of the Slovak Republic;
j) to request a copy of personal data that are recorded and collected by the Operator;
7.2 The user is obliged to provide correct, true and current data. If the User finds that the Operator is processing incorrect, untrue or out-of-date personal data, the user has the right to edit this personal data or supplement this personal data.
7.3 The user has the right to delete personal data (right to forget) which concerning the user and at least one of the following reasons is met:
a) personal data are not necessary for the purpose for which the Operator obtained or processed them;
b) withdrawal of consent to the processing of personal data and at the same time there is no other legal basis for further processing of personal data;
c) personal data has been processed illegally;
d) personal data must be deleted, because it is necessary to fulfill the obligation under the law of the Slovak Republic or the law of the European Union;
7.4 The operator has the right not to satisfy the user for the right to delete personal data, if the processing of personal data is necessary for:
a) exercising the right of the Operator to freedom of expression or the right to information;
b) fulfillment of legal obligation;
c) exercising the legal claim of the Operator;
d) the purpose of archiving, historical research or for statistical purposes, if it is probable that the right to deleting has made it impossible or seriously difficult for the Operator to achieve the objectives of such processing;
e) verification of the rightness, truthfulness and timeliness of the personal data entered during registration;
f) authentication identity of user and holder of account;
7.5 The user has the right to restrict the processing of personal data and at least one of the following reasons is met:
a) during the period enabling the Operator to verify the rightness of personal data, the user will challenge the rightness of his own personal data;
b) it will be illegal processing of personal data, the user will challenge the deletion of personal data and will request a restriction on the processing of personal data instead of deleting;
c) the operator will not need the personal data of user for any of the purposes of processing, or the user will need to prove or assert his own legal claims;
d) the user will object to the processing of personal data until the time of verification whether the legitimate interests of the Operator outweigh the legitimate interests of the user;
7.6 The User has the right to the transfer of personal data based on consent to the processing of personal data or the fulfillment of obligations arising from the contract between the user and the Operator.
7.7 The user has the right to revoke the consent to the processing of personal data, even before the expiration of the period for which this consent was granted.
7.8 The User has the right to object, if there are reasons related to a specific situation, he has the right to object to the processing of personal data, if the legal basis for such processing is a legitimate interest of the Operator. However, if the legitimate interest of the Operator in the processing of personal data exceeds the personal interest of the user, the Operator may continue to process personal data, despite the objection to processing, if necessary for proving, asserting or defending the legal claims of the Operator.
7.9 The user has the right to object to the processing of personal data for the purposes of direct marketing. The objection also concerns the analysis of personal data (profiling), which is carried out in connection with direct marketing. If the user has objects to direct marketing, the Operator will stop processing personal data for this purpose, as well as for the purpose of all types of direct marketing actions. Of course, the user can simply refuse to receive messages and personal offers on specific channels. The User may receive offers from the Operator by e-mail only, but not via SMS messages.
7.10 If the concerned person does not have full legal capacity, the rights under the GDPR and the Act may be exercised by a legal representative.
7.11 If the concerned person is not alive, the rights can be exercised by a close person.
8. Final provisions
8.1 If there are any questions regarding the processing of personal data, please contact the Operator by e-mail at firstname.lastname@example.org or via the website www.slouchat.com/contact.
8.2 If you are not satisfied with the answer or you believe that the processing of personal data is illegal, you can complain to the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic. Further information on the supervisory authority of the Slovak Republic and the complaint procedure can be found on the website www.dataprotection.gov.sk