GDPR - Privacy Policy

LUNA, n. o., Nábrežná 1635/8, Trenčín 91101, ID No.: 45736057 as the controller, provides the following information to the data subject on the processing of personal data pursuant to Articles 13 and 14 in order to ensure fairness and transparency towards the data subject. 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation") and Article 19 of Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts under the name of

PRIVACY POLICY

1. Purpose of processing of personal data in the Register of accounting and tax documents:
The activity involves the processing of personal data in the processing of accounting documents and the agenda associated with its processing

Type of data subjects: natural persons - clients, employees

List of personal data: name, surname, title, permanent address, temporary address, telephone number, e-mail address, date of birth, type and number of identity document, signature, bank account number of the natural person

Legal basis for the processing of personal data: Act No. 431/2002 Coll. on Accounting as amended, Act No. 222/2004 Coll. on Value Added Tax as amended, Act No. 40/1964 Coll. Act No. 152/1994 Coll. on the Social Fund and on amendment and supplementation of Act No. 286/1992 Coll. on Income Taxes as amended, Act No. 311/2001 Coll. on the Labour Code as amended, Act No. 311/2001 Coll. on the Labour Code as amended

Categories of recipients: social insurance company, health insurance companies, tax authorities and entities to which a special regulation confers the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities and intermediaries ÚČTOS plus s.r.o., 91105 Trenčín Vážska 285/21, ID No.: 43801552

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data: accounting documents - 10 years

Automated decision-making, including profiling, does not take place.
In order to comply with the principle of minimisation, any personal data provided by you is a necessary legal requirement for the fulfilment of the purpose of its processing.

2. Purpose of processing of personal data in the Incoming and Outgoing Mail Register and in the management of the registry:
Within the scope of the activity, personal data are processed in the registration of incoming and outgoing mail and in the operations related to the management of the registry.

Concerned persons: natural persons - addressees, employees

List of personal data: name, surname, title, address, name of organisation, job title, e-mail address, subject and content of mail

Legal basis for the processing of personal data: Act No. 395/2002 Coll. on archives and registers and on the amendment of certain acts, as amended

Categories of recipients: entities to which a specific provision confers competence to decide on the rights and obligations of natural persons: courts, law enforcement authorities

The transfer of personal data to third countries does not take place.

Periods for erasure of personal data: ordinary correspondence - 3 years

Automated decision-making, including profiling, does not take place.
In order to comply with the principle of minimisation, any personal data provided by you is a necessary legal requirement for the fulfilment of the purpose of its processing.

3. Purpose of processing of personal data - Photographs:
The activity involves the publication of photographs on the website and on projects for the purpose of promotion and presentation.

Affected persons: natural persons - employees, clients of the facility + children and participants of the event

List of personal data: name, surname, title, photo

Legal basis for the processing of personal data: consent of the data subject

Categories of recipients: entities to which a specific provision confers competence to decide on the rights and obligations of natural persons: courts, law enforcement authorities

The transfer of personal data to third countries does not take place.

Periods for erasure of personal data: photos- for the duration of the consent

Automated decision-making, including profiling, shall not take place.

The data subject has the right to withdraw consent to the processing of personal data concerning him or her at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal; Before giving consent, the data subject must be informed of this fact. The data subject may withdraw consent in the same way as the consent was given.

4. Purpose of processing of personal data in the debt recovery register:
Within the scope of the activities, personal data is processed for the purpose of debt recovery.

Affected persons: natural persons - debtors

List of personal data: name, surname, title, permanent/temporary residence, ID card number, amount of debt

Legal basis for the processing of personal data: the Contract, Act No. 40/1964 Coll., the Civil Code, Act No. 233/1995 Coll. on bailiffs and enforcement activities (the Execution Code)

Categories of recipients: bailiff - Act No. 233/1995 Coll. on bailiffs and enforcement activities (the Execution Code) and on amendments and supplements to certain acts, as amended, Courts, CID - processing is necessary for the fulfilment of the legal obligation of the operator in accordance with Act No. 301/2005 Coll. on the Criminal Procedure Code, as amended, Act No. 162/2015 Coll. on the Administrative Procedure Code, as amended by Act No. 88/2017 Coll. on the Administrative Procedure Code, as amended, Act No. 125/2016 Coll., Act on certain measures related to the adoption of the Civil Procedure Code, the Civil Procedure Code and the Administrative Procedure Code and on amendments and supplements to certain acts, Authorised State Authority - the processing is necessary for the fulfilment of the legal obligation of the controller within the meaning of the General Data Protection Regulation

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data: arrears, execution, summons, reminders, assumption of debt - 10 years; assumption of a guarantee obligation - 5 years

Automated decision-making, including profiling, does not take place.
In order to comply with the principle of minimisation, any personal data provided by you is a necessary legal requirement for the fulfilment of the purpose of its processing.

5. Purpose of the processing of personal data in the Register of Contracts:
The activity involves the processing of personal data which is necessary for the performance of a contract to which the data subject is a party or for the performance of a pre-contractual measure at the request of the data subject

Type of data subjects: natural persons - contracting party

List of personal data: name, surname, title, permanent/temporary residence, account number of the natural person, name of the bank, ID card number, data related to the subject of the contract

Legal basis for the processing of personal data: section 13(1)(b) of Act No 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts

Categories of recipients: entities to which a specific provision confers competence to decide on the rights and obligations of natural persons: courts, law enforcement authorities

The transfer of personal data to third countries does not take place.

Periods for erasure of personal data: contracts - 10 years

Automated decision-making, including profiling, does not take place.
In order to comply with the principle of minimisation, any personal data provided by you is a necessary contractual requirement for the fulfilment of the purpose of its processing.

6. Purpose of processing of personal data in the registration of job seekers:
In the framework of the activity, personal data are processed in the registration of job seekers

Type of data subjects: natural persons - job seekers

List of personal data: name, surname, title, permanent residence, temporary residence, date of birth, telephone number, education, work experience, e-mail address, other data in the scope of CV, cover letter and job application

Legal basis for the processing of personal data: consent of the data subject

Categories of recipients: entities to which a specific provision confers competence to decide on the rights and obligations of natural persons: courts, law enforcement authorities

The transfer of personal data to third countries does not take place.

Periods for erasure of personal data: CVs - for the duration of the consent

Automated decision-making, including profiling, does not take place.
The data subject shall have the right to withdraw the consent to the processing of personal data concerning him or her at any time. Withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal; the data subject must be informed of this fact before consent is given. The data subject may withdraw the consent in the same way in which he or she gave the consent.

7. Purpose of processing of personal data in the camera information system:
Within the scope of the activities, personal data is processed for the purpose of protecting public order and security, detecting crime, protecting health and property.

Affected persons: persons present in the area monitored by the CCTV system

List of personal data: footage from cameras

Legal basis for the processing of personal data: the legitimate interest of the controller

Categories of recipients: Courts, CID - the processing is necessary for the fulfilment of the legal obligation of the controller within the meaning of Act No. 301/2005 Coll., the Criminal Procedure Code as amended, Act No. 162/2015 Coll., the Administrative Procedure Code as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll, Act on Certain Measures Related to the Adoption of the Civil Procedure Code, the Civil Procedure Code and the Administrative Procedure Code and on Amendments and Additions to Certain Acts, Authorised State Authority - the processing is necessary for the fulfilment of the legal obligation of the controller within the meaning of the General Data Protection Regulation

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data: audio / video recording - 3 days

Automated decision-making, including profiling, does not take place.
The main legitimate interest is the protection of the property, financial and other interests of the controller, as well as the protection of the property, life and health of the data subjects.

Data subjects about whom personal data are processed for specific specified purposes may exercise the following rights:

- Right to request access to your personal data

- Right to rectification of personal data

- Right to erasure of personal data

- Right to restriction of processing of personal data

- Right to object to the processing of personal data

- The right to transfer your personal data

- The right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection of the Slovak Republic

The stated rights of the data subject are further specified in Articles 15 to 21 of the Regulation. The data subject shall exercise these rights in accordance with the Regulation and other relevant legislation. The data subject may exercise his or her rights against the controller by means of a written request or by electronic means. In the event that the data subject requests oral disclosure, the information may be provided in this way, provided that the data subject has established his or her identity.

LUNA, n. o. has taken all appropriate personnel, organizational and technical measures in order to maximally protect your personal data in order to reduce the risk of their misuse as much as possible. In accordance with our obligation under Article 34 of the Regulation, we inform you as data subjects that if a situation arises that we, as the controller, violate the protection of your personal data in a way that is likely to lead to a high risk to the rights and freedoms of natural persons, we will notify you of this fact without undue delay.

The laws and related methods of processing your personal data are subject to change. If we decide to update this policy, we will post the changes on our website and notify you of those changes. In cases where there is a more fundamental change to this policy, or where we are required to do so by law, we will inform you in advance. We ask you to read this policy carefully and to check this policy regularly when you continue to communicate with us or use our website.

If you have any questions regarding the processing of your personal data, including the exercise of the above rights, you can contact our Responsible Person provided by EuroTRADING s.r.o.(www.eurotrading.sk), by email at zo@eurotrading.sk. We will duly investigate all your suggestions and complaints and send you a statement.

If you are not satisfied with our response, or if you believe that we are processing your personal data unfairly or unlawfully, you may file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; telephone number: +421 /2/ 3231 3214; E-mail: statny.dozor@pdp.gov.sk.

We hereby inform you that the supervision over the processing of personal data in our company is provided by EuroTRADING s.r.o. and in accordance with § 44 of Act No. 18/20128 Coll. and Article 37 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL provides us with a responsible person who can be contacted at the following e-mail address: zo@eurotrading.sk.

Read more here: www.eurotrading.sk/zo

You can read our privacy policy here.