GDPR - Privacy Policy

LUNA, n. o., Nábrežná 1635/8, Trenčín 91101, IČO: 45736057

as a controller, provides for the purpose of observing fairness

and transparency towards data subjects, this communication to the data subject

on the processing of personal data pursuant to Articles 13 and 14. EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation") and § 19 of the Act of the National Council of the Slovak Republic no. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts

Called

PRIVACY POLICY

Purpose of processing personal data in the Records of accounting and tax documents:

As part of the activity, personal data are processed during the processing of accounting documents and the agenda associated with its processing

Data subjects: natural persons – clients, employees

List of personal data: name, surname, title, permanent address, address of temporary residence, telephone number, e-mail address, date of birth, type and number of identity document, signature, bank account number of a natural person

Legal basis for the processing of personal data: Act No. 431/2002 Coll. on Accounting, as amended, Act No. 222/2004 Coll. on Value Added Tax, as amended, Act No. 40/1964 Coll. Civil Code, as amended, Act No. 152/1994 Coll. on the Social Fund and on Amendments to Act No. 286/1992 Coll. on Income Taxes, as amended, Act No. 311/2001 Coll. Labour Code, as amended

Categories of beneficiaries: social insurance company, health insurance companies, tax office and entities to which a special regulation confers the power to decide on the rights and obligations of natural persons: courts, law enforcement authorities and intermediaries ÚČTOS plus s.r.o., 91105 Trenčín Vážska 285/21, IČO: 43801552

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data:

Accounting documents – 10 years

Automated decision-making, including profiling, shall not take place.

In order to comply with the principle of minimization, all personal data provided by you are a necessary legal requirement for fulfilling the purpose of their processing.

Purpose of processing personal data in the Records of incoming and outgoing mail and in the administration of the registry:

As part of the activity, personal data are processed when registering incoming and outgoing posts and actions related to the administration of the registry

Data subjects: natural persons – addressees, employees

List of personal data: name, surname, title, address, name of the organization, job title, e-mail address, subject and content of the mail

Legal basis for the processing of personal data: Act No. 395/2002 Coll. on Archives and Registries and on the Supplement to Certain Acts, as amended

Categories of recipients: entities to which a special regulation confers the power to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data:

Ordinary correspondence – 3 years

Automated decision-making, including profiling, shall not take place.

In order to comply with the principle of minimization, all personal data provided by you are a necessary legal requirement for fulfilling the purpose of their processing.

Purpose of personal data processing – Photos:

As part of the activity, photographs are published on the website and on projects for the purpose of promotion and presentation.

Data subjects: natural persons – employees, clients of the facility + children and participants of the event

List of personal data: name, surname, title, photo

Legal basis for the processing of personal data: consent of the data subject

Categories of recipients: entities to which a special regulation confers the power to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data:

photos – for the duration of the consent

Automated decision-making, including profiling, shall not take place.

The data subject has the right to withdraw consent to the processing of personal data concerning him or her at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal; Before giving consent, the data subject must be informed of this fact. The data subject may withdraw consent in the same way as the consent was given.

Purpose of processing personal data in debt collection records:

As part of the activities, personal data are processed for the purpose of debt collection.

Data subjects: natural persons – debtors

List of personal data: name, surname, title, permanent/temporary residence, id card number, amount of debt

Legal basis for the processing of personal data: Contract, Act No. 40/1964 Coll. Civil Code, Act No. 233/1995 Coll. on Bailiffs and Enforcement Activities (Enforcement Code)

Categories of recipients: Bailiff – Act No. 233/1995 Coll. on Bailiffs and Enforcement Activities (Enforcement Code) and on Amendments to Certain Acts, as amended, Courts, OČTK – processing is necessary for compliance with the controller's legal obligation within the meaning of Act No. 301/2005 Coll. the Criminal Code, as amended, Act No. 162/2015 Coll. the Administrative Judicial Code, as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll., Act on certain measures related to the adoption of the Code of Civil Procedure, the Code of Civil Procedure and the Code of Administrative Procedure and on the amendment of certain acts, Competent authority of the State – the processing is necessary for compliance with the legal obligation of the controller within the meaning of the General Data Protection Regulation

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data:

arrears, executions, appeals, reminders, debt receipt – 10 years

assumption of the guarantor's obligation – 5 years

Automated decision-making, including profiling, shall not take place.

In order to comply with the principle of minimization, all personal data provided by you are a necessary legal requirement for fulfilling the purpose of their processing.

Purpose of processing personal data in the Records of Contracts:

In the course of the activity, personal data are processed that are necessary for the performance of a contract to which the data subject is a party or for the implementation of a pre-contractual measure at the request of the data subject

Data subjects: natural persons – contracting party

List of personal data: name, surname, title, permanent/temporary residence, account number of a natural person, bank name, id card number, data related to the subject of the contract

Legal basis for the processing of personal data: § 13 par. 1 letter b) of Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain acts

Categories of recipients: entities to which a special regulation confers the power to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data:

contracts – 10 years

Automated decision-making, including profiling, shall not take place.

In order to comply with the principle of minimization, all personal data provided by you are a necessary contractual requirement for fulfilling the purpose of their processing.

Purpose of processing personal data in the records of job seekers:

As part of the activity, personal data are processed when registering job seekers

Data subjects: Natural persons – jobseekers

List of personal data: name, surname, title, permanent residence, temporary residence, date of birth, telephone number, education, experience, e-mail address, other data in the scope of CV, cover letter and job application

Legal basis for the processing of personal data: Consent of the data subject

Categories of recipients: entities to which a special regulation confers the power to decide on the rights and obligations of natural persons: courts, law enforcement agencies

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data:

CVs – for the duration of consent

Automated decision-making, including profiling, shall not take place.

The data subject has the right to withdraw consent to the processing of personal data concerning him or her at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal; Before giving consent, the data subject must be informed of this fact. The data subject may withdraw consent in the same way as the consent was given.

Purpose of processing personal data in the camera information system:

As part of the activities, personal data are processed for the purpose of protecting public order and security, detecting crime, protecting health and property

Data subjects: persons located in the area monitored by the CCTV system

List of personal data: recording from cameras

Legal basis for the processing of personal data: Legitimate interest of the controller

Categories of recipients: Courts, OČTK – processing is necessary for compliance with the legal obligation of the controller within the meaning of Act No. 301/2005 Coll. the Criminal Code, as amended, Act No. 162/2015 Coll. the Administrative Judicial Code, as amended by Act No. 88/2017 Coll., Act No. 125/2016 Coll., the Act on Certain Measures Related to the Adoption of the Code of Civil Procedure, the Code of Civil Procedure and the Code of Administrative Procedure and on the amendment of certain laws, Competent authority of the State – processing is necessary for compliance with the controller's legal obligation under the General Data Protection Regulation

The transfer of personal data to third countries does not take place.

Time limits for erasure of personal data:

audio / video recording – 3 days

Automated decision-making, including profiling, shall not take place.

The main legitimate interest is the protection of the property, financial and other interests of the operator, as well as the protection of property, life and health of the persons concerned.

Data subjects about whom personal data are processed for specific specified purposes may exercise the following rights:

Right to request access to your personal data – Right to rectification of personal data – Right to erasure of personal data – Right to restrict the processing of personal data – Right to object to the processing of personal data – Right to transfer your personal data – Right to lodge a complaint with a supervisory authority, i.e. Office for Personal Data Protection of the Slovak Republic

The stated rights of the data subject are further specified in Articles 15 to 21 of the Regulation. The data subject shall exercise these rights in accordance with the Regulation and other relevant legislation. The data subject may exercise his or her rights against the controller by means of a written request or by electronic means. In the event that the data subject requests oral disclosure, the information may be provided in this way, provided that the data subject has established his or her identity.

LUNA, n. o. has taken all appropriate personnel, organizational and technical measures in order to maximally protect your personal data in order to reduce the risk of their misuse as much as possible. In accordance with our obligation under Article 34 of the Regulation, we inform you as data subjects that if a situation arises that we, as the controller, violate the protection of your personal data in a way that is likely to lead to a high risk to the rights and freedoms of natural persons, we will notify you of this fact without undue delay.

The laws and related methods of processing your personal data are subject to change. If we decide to update this policy, we will post the changes on our website and notify you of those changes. In cases where there is a more fundamental change to this policy, or where we are required to do so by law, we will inform you in advance. We ask you to read this policy carefully and to check this policy regularly when you continue to communicate with us or use our website.

If you have any questions regarding the processing of your personal data, including the exercise of the above rights, you can contact our Responsible Person provided by EuroTRADING s.r.o.(www.eurotrading.sk), by email at zo@eurotrading.sk. We will duly investigate all your suggestions and complaints and send you a statement.

If you are not satisfied with our response, or if you believe that we are processing your personal data unfairly or unlawfully, you may file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27; telephone number: +421 /2/ 3231 3214; E-mail: statny.dozor@pdp.gov.sk.

We hereby inform you that the supervision over the processing of personal data in our company is provided by EuroTRADING s.r.o. and in accordance with § 44 of Act No. 18/20128 Coll. and Article 37 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL provides us with a responsible person who can be contacted at the following e-mail address: zo@eurotrading.sk.

Read more here: www.eurotrading.sk/zo

You can read our privacy policy here.