Privacy Policy for data subjects
provided pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (“GDPR Regulation”) and pursuant to Act No. 18/2018 Coll. on the protection of personal data and on as amended (“Data Protection Act”)
Identification of data controller and contact details
The data controller on behalf of whom personal data is processed shall be RV Development 2 s.r.o., with registered office at Sasinkova 5, 811 08 Bratislava, ID No.: 50 159 305, registered in the Commercial Register of Bratislava I District Court, Section: Sro, Insert No. 109034/B., Tel +421 914 234 567, E-mail: info@pristavna1.sk (“Data Controller”).
Data processing purposes
The Data Controller processes the personal data of the data subjects, to the extent that they have been provided by the data subject, for the following purposes:
- where the data subject is or has been in a contractual or non-contractual relationship with the Data Controller, the Data Controller processes the personal data for the purposes of exercising the rights and performing the obligations of the Data Controller under that legal relationship; the legal basis for such processing is the need to process the data for the performance of the contract to which the data subject is a party; as well as the need to process the data for the purpose of the legitimate interests of the controller or of a third party, except where those interests are overridden by the interests or rights of the data subject requiring the protection of personal data; the legitimate interest of the Data Controller is the exercise of the rights and the obligations of the Data Controller arising out of that legal relationship;
- where the data subject is or has been in a pre-contractual relationship with the Data Controller, the Data Controller shall process the personal data for the purposes of entering into the contractual relationship and for the purposes of preparing the necessary contractual documentation, the legal basis for such processing being the performance of a pre-contractual measure at the request of the data subject;
- the keeping of statistical records and/or accounting records of the Data Controller, as well as the exercise of the rights and obligations of the Data Controller under generally binding legislation, where the legal basis for such processing is the need to process the data for the purpose of the legitimate interests of the Data Controller or of a third party, except where those interests are overridden by the interests or rights of the data subject requiring the protection of personal data; the legitimate interests of the Data Controller are the streamlining of the Data Controller's internal processes and also the exercise of the Data Controller's rights and obligations under generally binding legislation;
- if the data subject has given consent for such processing purpose, the Data Controller also processes personal data for marketing purposes, to inform the data subjects as clients or potential clients about news concerning individual development projects carried out by entities within the GRAFOBAL GROUP and to address clients with further marketing offers of entities within the GRAFOBAL GROUP by direct mail, newsletters, targeted offers or any other appropriate form; the legal basis for such processing of personal data is the consent of the data subject.
Categories of personal data processed
The Data Controller processes only the common categories of data of data subjects, in particular the identification data of the data subject, and does not process special categories of personal data or personal data relating to the acknowledgement of guilt for the commission of a criminal offence or misdemeanour.
Identification of the recipient or category of recipient, if any
It is foreseen that personal data processed on behalf of the Data Controller will also be disclosed to persons who are financially and/or personally linked to the Data Controller, as well as to consultants, auditors, lawyers, or other contractors of the Data Controller, and, where applicable, to a bank or other relevant entity for the purpose of providing a loan or other means of financing the implementation of a project of the Data Controller.
Identification of whether the Data Controller intends to transfer the personal data to a third country or an international organisation
The Data Controller does not intend to transfer the personal data to a third country or an international organisation.
Retention period
The personal data will be processed until the purpose for which they are processed has expired, but at the latest until the legal basis for their processing has ceased to exist.
Information on whether the provision of personal data is a legal requirement or a contractual requirement or a requirement necessary for entering into a contract and on whether the data subject is obliged to provide personal data, as well as on the possible consequences of not providing personal data
The personal data processed for the purposes referred to in (1) and (3) above is a legal and contractual requirement. The personal data processed for the purposes referred to in point (2) above is a requirement which is necessary for the conclusion of a contract. The data subject is obliged to provide personal data for these purposes and failure to do so may result in the Data Controller refusing to enter into contract with the data subject or to perform obligations of the Data Controller with respect to the data subject or liability.
The personal data processed for the purposes referred to in (4) are neither a legal nor a contractual requirement and the data subject may withdraw their subject with the processing of the data subject to the conditions provided in the GDPR Regulation or the Data Processing Act.
Information concerning automated individual decision
During data processing, the Data Controller does not use any of the processes of automated individual decision or profiling.
Information about other rights of data subjects
Subject to complying with the conditions following from legal regulations governing the protection of personal data, data subjects have the following rights:
- right to request from the Data Controller access to the personal data concerning the data subject,
- right to obtain the correction of any inaccurate personal data,
- right to have personal data erased,
- right to restriction of processing,
- right to object,
- right to data portability,
- right to withdraw consent at any time where the legal basis for the data processing is the consent of the data subject,
- Right to lodge a complaint to initiate the personal data protection proceeding as per the GDPR Regulation or a motion as per Section 100 of the Data Protection Act.
Supervisory authority
The authority in charge of supervision shall be the Data Protection Office of the Slovak Republic, with seat at Hraničná 12, 820 07 Bratislava.