PROTECTION OF PERSONAL DATA
KASPER SK, S.R.O.
Welcome to the website www.vaznikykasper.sk. We appreciate your interest in our company. The protection of the personal data you have entrusted to us is a priority for us, and we want you to feel safe and fully informed about the personal data we collect and how we use it. In connection with the processing of your personal data by KASPER SK, s.r.o. as the controller, we have prepared the following information for you as the affected person (hereinafter referred to as the "data subject").
ABOUT US
KASPER SK, s.r.o. is engaged in the production and supply of wooden load-bearing structures for family houses, commercial properties, public utility buildings, and atypical projects.
Our goals are primarily reliability and quality of the products and services we provide, as well as safety, which we also perceive in the area of handling your data. To successfully fulfill this mission, it is essential to ensure adequate data protection and all means of data processing, thereby ensuring the minimization of possible leaks in accordance with the Regulation of the European Parliament and Council (EU) 2016/679 of April 27, 2016, on the protection of individuals regarding the processing of personal data and on the free movement of such data, as well as in accordance with the new Slovak law No. 18/2018 on the protection of personal data and on the amendment and supplementation of certain laws and international standards and norms.
PROCESSING PERSONAL DATA
SALE OF GOODS
We process personal data of customers or employees of customers to the extent necessary for the purposes of concluding purchase contracts or orders. For these purposes, the affected persons are obliged to provide data to the requested extent, as without this data we cannot fulfill our supply. This personal data is processed to ensure the fulfillment of the contract and related activities, which includes the sale of goods, delivery of goods, and handling possible complaints.
PROVISION OF SERVICES
We process personal data of customers and suppliers or their employees to the extent necessary for the purposes of concluding commercial contracts. For these purposes, the affected persons are obliged to provide data to the requested extent, as without this data we cannot fulfill our service. This personal data is processed to ensure the fulfillment of the contract and related activities.
VISITING OUR WEBSITE
We record and store the IP address of the computer to send the content of our visited web pages to your computer (e.g., texts, images, and downloadable files, etc.) in accordance with Article 6(1)(b) of the GDPR. We also process this data to identify and report any misuse. The legal basis in this case is Article 6(1)(f) of the GDPR. In this context, we are interested in ensuring the proper functioning of our website and business conducted through our website regarding personal data processing.
If we process your data as stated above for the purposes of ensuring the functionality of our website, you are contractually obliged to provide us with this data.
OTHER PURPOSES
We also process personal data that you voluntarily provide, e.g., when entering a request, online meetings, ordering information materials or newsletters, registering in our discount system. The legal basis in this case is Article 6(1)(b) of the GDPR. The data we process in this context includes data of customers, employees, and suppliers to the extent necessary for the purposes specified in this privacy policy.
If we process your data, as described above, for the purposes of receiving and processing your request, meeting, or order, you are obliged to provide this data. We cannot process your request without this data.
If you have consented to the processing of personal data in accordance with Article 6(1)(a) of the GDPR, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent until the time of withdrawal.
PROVISION OF DATA TO THIRD PARTIES
In general, we transfer your data to the relevant companies, where it is processed to ensure the requested service and support.
This means that information may also be processed by other legal entities. Such processing is, however, limited to the extent necessary for the purposes defined in this privacy policy or the guidelines issued by the controller, which is another legal entity acting as the service provider (processor) that must comply with.
In this context, we sometimes use service providers who process data on our behalf (for example, in the areas of product delivery, email marketing, software design and development, or to support the processing of customer orders). In these cases, information is transferred to third parties to enable further processing. External service providers are carefully selected and regularly monitored to ensure adequate data protection.
These service providers (processors) are bound by our instructions. Accordingly, they are subject to our requirements, which include processing your data exclusively in accordance with our instructions and in compliance with applicable data protection law. Specifically, they are contractually obligated to handle your data in a way that maintains the confidentiality of the information and are not authorized to process data for purposes other than those agreed upon.
The transfer of data to processors is carried out on the basis of Article 28(1) of the GDPR.
We will not sell your data to third parties or provide it for commercial purposes in any other way.
In addition to the aforementioned, we have the right to provide your personal data to law enforcement authorities and possibly affected third parties without your explicit consent if necessary to clarify the illegal use of our services or to assert legal claims. This transfer will, however, only occur if there is specific evidence of illegal conduct or abuse. The transfer of your data may also occur if it contributes to the enforcement of terms of use or other agreements. At the same time, we have a legal obligation to provide information to certain public authorities upon request.
The transfer of this data is based on our legitimate interest in preventing abuse, enabling the prosecution of criminal acts, and ensuring the assertion of our rights, provided our interests outweigh your interests and rights for the protection of your personal data in accordance with Article 6(1)(f) of the GDPR.
INTENDED TRANSFER OF DATA TO THIRD COUNTRIES
Currently, there is no planned transfer of data to third countries. In the case of such a transfer, we will implement the necessary measures to meet the required legal conditions. However, you will be informed in advance about the relevant recipients or categories of recipients of personal data in accordance with legal requirements.
SECURITY
KASPER SK, s.r.o. implements appropriate technical and organizational measures to protect all personal data from accidental or intentional manipulation, loss, destruction, or unauthorized access. This also applies to all purchased external services. We verify the effectiveness of our data protection measures and continuously improve them in line with technological developments. The submitted personal data is encrypted during transmission using a secure encryption process.
COOKIES
To enhance user-friendly websites and adjust the operation of our web pages to your needs, our websites may use cookies. A cookie is a small file that is stored locally on your computer when you visit web pages. When you visit a website on the same device, the cookie indicates, for example, that you are a repeat visitor. Cookies also allow us to analyze the usage of our websites. They do not contain any personal data and cannot identify you on third-party websites - including the pages of analytics providers.
ESSENTIAL / NECESSARY COOKIES
These cookies are essential for the functioning of our websites. This includes, for example, issuing anonymous session IDs to summarize multiple requests on the web.
PERFORMANCE / STATISTICS COOKIES
These cookies collect information about how you use our website (for example, which internet browser you use, how often you visit our site, which pages you open, or how long you stay on our website). These cookies do not store any information that would allow personal identification of visitors. The information collected using these cookies is aggregated and thus anonymous.
You can accept or reject cookies - including those used for website tracking - by selecting the appropriate settings for your browser. You can set your browser to alert you when you receive a new cookie or to block them completely. However, if you decide to refuse cookies, you may not be able to use all the features of our website. Your browser also offers you the option to delete cookies (for example, using the Clear browsing history feature). For more information, please refer to the Help function in the Settings section of your web browser.
GOOGLE ANALYTICS - TERMS OF USE
This website uses the Google Universal Analytics service, a web analytics service provided by Google, Inc. ("Google"). Google Universal Analytics uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.
IP anonymization is supplemented on this website. Google will truncate/anonymize the last octet of your IP address for member states of the European Union as well as for other parties to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address sent and truncated by Google servers in the USA. On behalf of the website provider, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services related to website activity and internet usage for the website provider. Google will not associate your IP address with other data held by Google. You can opt-out of the use of cookies by selecting the appropriate settings in your browser. However, please note that if you do this, you may not be able to use the full functionality of these websites. Additionally, you can prevent Google from collecting and using data (cookies and IP address) by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=sk.
You can opt-out of using Google Analytics by clicking the following link. An opt-out cookie will be set on your computer to prevent future collection of your data when visiting this website: Disable Google Analytics. - https://www.google.com/analytics/learn/privacy.html?hl=sk.
For more information on terms of use and data protection, please visit http://www.google.com/analytics/terms/gb.html or https://www.google.de/intl/en_uk/policies/. Please note that on this website, the Google Analytics code is supplemented with "anonymizeIp" to ensure anonymized collection of IP addresses (so-called IP-masking).
EMBEDDED PLUGINS
Our websites use links to the following social networks:
Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA
LinkedIn, LinkedIn Headquarters 2029 Stierlin Ct. Ste. 200 Mountain View, CA 94043, USA
The buttons display the logos of individual social networks. However, the buttons are not standard plugins provided by social networks but links with button icons. These buttons are activated only by deliberate action (clicking). If you do not click on the buttons, no data will be transferred to social networks. By clicking on the buttons, you accept communication with the social network servers, thereby activating the buttons and creating a link.
When activated, the button acts as a sharing plugin. The social network will receive information about the website you visited that you can share with your friends and contacts. If you are not logged in, you will be redirected to the login page of the social network you clicked, leaving the pages of www.vaznikykasper.sk. If you are logged in, your "like" or sharing of the corresponding article will be sent.
When you activate the button, social networks will also receive information about which page of our website you accessed and when you did so. In addition, information such as your IP address, browser details, and language settings may be sent. If you click the button, your click will be transmitted to the social network and will be used in accordance with their data policies.
When you click the button, we have no control over the collected data and processing activities. We are not responsible for this data processing, nor are we a "controller" as defined in the GDPR. We are not aware of the full extent of data collection, its legal basis, purposes, and retention periods. Accordingly, the information presented here may not necessarily be complete.
Data is sent regardless of whether you have an account with the provider or are logged in. If you are logged in, your data will be directly associated with your account. Providers may also use cookies on your computer for tracking.
As far as we know, these providers store this data in user profiles, which they use for advertising, market research, and/or demand-oriented design. This type of analysis is performed (also for users who are not logged in) to present targeted advertising and inform other social network users about your activities on our websites. You have the right to object to the creation of these user profiles. If you wish to exercise your right to object, please contact the respective provider.
Information about the purposes and extent of data collection, further processing, and use of data by the respective social network and about rights and privacy settings can be found in the information provided by these social media pages:
Facebook: http://www.facebook.com/about/privacy
LinkedIn: https://www.linkedin.com/legal/privacy-policy
If you do not wish for social networks to collect data about you, do not click on the mentioned buttons.
STANDARD DATA RETENTION PERIODS
Legislation has defined data retention periods and obligations. At the end of these periods, the relevant data will be regularly deleted. Data not subject to the specified retention periods and obligations will be removed or anonymized as soon as the purposes defined in this privacy policy no longer apply. Unless this privacy policy contains other specific provisions for data retention, we retain all data we collect as long as it is required for the purposes for which they were collected.
FURTHER USE OF DATA AND THEIR DELETION
Any further processing or use of your personal data will typically only be carried out to the extent permitted under legal regulations or if you have consented to the processing of data or use of data. In the case of further processing for purposes different from those for which the data were originally collected, we will inform you of the further use and provide you with all relevant information prior to further processing.
IDENTIFICATION AND PROSECUTION OF ABUSE
All information for identifying and prosecuting abuse, especially your IP address, will be kept for a maximum of 7 days. The legal basis in this case is Article 6(1)(f) of the GDPR. The reason for the interest in retaining your data for 7 days is to ensure the functioning of our website and the business carried out through this website and to prevent cyber attacks. If necessary, we may use anonymized information to tailor the design of our websites to the needs of users.
RIGHTS RELATED TO THE PROCESSING OF PERSONAL DATA
RIGHT OF ACCESS
Upon request, you have the right to obtain information about personal data concerning you and which we have processed to the extent defined in Article 15 of the GDPR. You can send your request by post or email to the addresses provided below.
RIGHT TO RECTIFICATION
You have the right to request that we rectify any inaccuracies in your personal data concerning you without undue delay (Article 16 of the GDPR). For this purpose, please contact the address provided below.
RIGHT TO ERASURE
If you have valid legal grounds defined in Article 17 of the GDPR, you have the right to immediate erasure ("right to be forgotten") of personal data concerning you. These legal grounds include: personal data no longer being necessary for the purposes for which they were processed, or you withdraw your consent and there are no other legal grounds for processing; the data subject objects to processing (and there are no overriding legitimate grounds for processing - this does not apply to objections to direct marketing). If you wish to exercise your right, please contact the address provided below.
RIGHT TO RESTRICT PROCESSING
If the criteria defined in Article 18 of the GDPR are met, you have the right to restrict processing as stated in the previous Article of the GDPR. Under this Article, the restriction of processing may be requested, especially if the processing is unlawful and the data subject opposes the erasure of personal data and requests instead the restriction of their use or if the data subject objects to processing under Article 21(1) of the GDPR, if it is not clear whether our legitimate interest outweighs the interest of the data subject. If you wish to exercise your right, please contact the address provided below.
RIGHT TO DATA PORTABILITY
You have the right to data portability as defined in Article 20 of the GDPR. This means that you have the right to obtain personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format and have the right to transmit that data to another controller. The condition is that the processing is based on consent or a contract and is carried out by automated means. If you wish to exercise your right, please contact the address provided below.
RIGHT TO OBJECT
Under Article 21 of the GDPR, you have the right to object at any time to the processing of personal data concerning you, which is based on Article 6(1)(e) or (f) of the GDPR, on grounds relating to your particular situation. We will cease processing your personal data as long as we cannot demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the purpose of processing is the establishment, exercise, or defense of legal claims. If you wish to exercise your right, please contact the address provided below.
RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe that the processing of personal data concerning you that we have carried out is unlawful or inadmissible, you have the right to lodge a complaint with the relevant supervisory authority. You can contact this authority at the address:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07, Bratislava 27
Slovak Republic
ID: 36064220
www.dataprotection.gov.sk
Phone consultations in the field of personal data protection: Tuesday and Thursday from 8:00 AM to 12:00 PM +421/2/3231 3220.
Any questions regarding the processing of your personal data, requests for information, and exercising the rights of data subjects or complaints should be addressed to the address of the company (controller) below.
CONTACT DETAILS OF THE CONTROLLER:
KASPER SK, s.r.o.
Pestovateľská 2 821 04 Bratislava
ID: 50 028 197
Registered in the OR OÚ Bratislava I., Section: Sro., Insert No.: 107159/B
Phone: +421 948 258 382
Email: info@vaznikykasper.sk
In Senec, 25. 5. 2018