PRIVACY STATEMENT - Personal Data Protection Policy (Business Partners)
These Principles apply to the processing of your personal data as a business partner, or a representative of our business partner, or a representative - contact person for the performance of the contract with our business partner.
If you are interested in obtaining more detailed information than is provided in this statement, please contact the person responsible for data protection (see below).
We may update this statement from time to time without notice. Therefore, we ask you to regularly familiarize yourself with its wording. This version of the statement was issued on May 25, 2018.
WHY DO WE HAVE ACCESS TO YOUR DATA AND WHY DO WE PROCESS THEM?
In order to conclude and fulfill a contract with you or the company you represent, or a company that is a business partner of the company you represent, it is necessary to process your personal data.
We process your personal data only if we have a legal basis to do so. It means that the processing must be necessary for the performance of a contract in which you or the company you represent are a party to the contract, or to be able to take steps upon request even before the conclusion of the contract, processing is possible on the basis of a legitimate interest or on the basis of obligations arising from a special regulation. In accordance with our legitimate interest, we may also use your data to provide you with information about our services, prospects, analyses, events that may be in your best interest or to perform necessary or required tasks resulting from a business relationship that you represent.
We have a legal obligation to provide your personal data during checks by authorized institutions and in the prevention, monitoring and proof of fraud, the fight against money laundering and other crimes.
Your data will be stored securely in accordance with data protection laws.
WHAT PERSONAL DATA DO YOU PROCESS ABOUT ME AND WHY?
We keep the information necessary for the management and fulfillment of the contractual or business relationship. In order to be able to communicate with you and ensure secure and true identification, we need, for example, your name, job title and contact details such as address, phone number and email. Unless we agree otherwise with you or it is not necessary to establish, exercise or defend legal claims, we will not include special categories of personal information. (often called "sensitive personal data", such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership and the processing of data relating to health or sex life).
WILL YOU SHARE MY PERSONAL DATA WITH OTHER PARTIES?
We may share your personal data with our suppliers who mediate and/or provide part of our services, e.g. legal services. Our employees will also have access to personal data. In such a case, access will be granted only if it is necessary for the described purposes and only if the employee in question is bound by an obligation of confidentiality.
WILL MY PERSONAL DATA BE TRANSFERRED TO ANOTHER COUNTRY?
Your data will be transferred to another country within the European Union and the European Economic Area only in the case of fulfilling a contractual relationship.
HOW LONG DO YOU KEEP MY PERSONAL DATA?
We keep your data for as long as it is necessary to fulfill the purpose of processing according to special regulations and the purpose for which they were obtained, if we have a legitimate interest in keeping them, e.g. until the termination of the contractual relationship and/or the expiration of the limitation period within which we should be able to defend ourselves against legal claims. From a legal point of view, we are also obliged to keep your personal data for a certain period of time in order to prevent and detect fraud, to detect and prove the fight against money laundering as well as for financial audits.
Regarding our data backups, we will also delete your data from the backup storage, but only if and when the backup is available for recovery, according to our retention rules, BCM and DRP. If the backup is subject to deletion according to the backup rules, we will delete your data completely.
WILL I BE SUBJECT TO AUTOMATED DECISION-MAKING?
Your personal data will not be used in automated decision-making.
WHAT ARE MY RIGHTS?
It is important that you understand that it is your personal data that we are processing and that we want you to understand this. Although we do not need your permission to process your personal data, you have many rights in relation to the processing of your personal data.
| Your Rights | What does it mean? |
|---|---|
| Right of access | You can request information about how we process your personal data, including information about:
You can also request a copy of the personal data we process about you. However, additional copies will be charged. |
| Right to correct or change | It is important that we have correct information about you and we ask that you notify us if any of your personal information is incorrect, e.g. if you have changed your name or if you have moved. |
| Right to be forgotten or right to erasure | If we process your personal data in an unlawful way, for example if we process your personal data for longer than necessary or without reason, you can ask us to delete this data. |
| Right to restriction of processing | From the moment you have requested the correction of your personal data or if you have objected to the processing and until we are able to investigate the problem or confirm the accuracy of your personal data (or change it according to your instructions), you are entitled to limited processing. This means that we (with the exception of personal data retention) may only process your personal data in accordance with your consent if it is necessary in connection with legal claims, to protect the rights of someone else, or if there is a significant public interest in the processing. You can also request that we restrict the processing of your personal data if the processing is unlawful, but you do not want us to delete the personal data. |
| Right to object to processing | If you believe that we do not have the right to process your personal data, you can object to our processing. In such cases, we can only continue processing if we can demonstrate compelling legitimate reasons that outweigh your interests, rights and freedoms. However, we can always process your personal data if it is necessary to determine, exercise or defend legal claims. |
| Right to data portability | You can request that your personal data, which you have provided to us for processing on the basis of consent or to fulfill a contract, be provided in a structured, commonly used and machine-readable format. You also have the right to request the transfer of this information to another operator. |
| Withdraw consent | In most cases, we do not process your personal data based on your consent. However, it may happen that in specific cases we ask for your consent. In cases where we do this, you have the right to withdraw your consent to further use of your personal data. |
We will also inform other parties to whom we may have provided your personal data about your request/requests.
How can I complain about the use of my data or exercise my rights?
If you want to file a complaint about how we process your personal data, including in relation to the above-mentioned rights, you can contact our Data Protection Officer and your suggestions and requests will be verified.
Person responsible for supervising the protection of personal data: E-mail address, e.g. ochranudajov@paletexpress.sk, or in writing via standard contact points.
If you are not satisfied with our answer, or if you believe that we are processing your data unfairly or illegally, you can complain to the Supervisory Authority, which is the Personal Data Protection Office (ÚOOÚ). You can find more information about the ÚOOÚ and their complaints procedure here: www.dataprotection.gov.sk.
If you have any further questions regarding the processing of your personal data, you can contact us through our Data Protection Officer.