Information about the processing of data subject's personal data under Paragraph 19 and Paragraph 20 of the Act No. 18/2018 Coll. on Personal Data Protection and on the amendment of certain other Acts (hereinafter referred to as the "Act") and Article 13 and 14 Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation")
This information aims to provide knowledge about what personal data we process, how we deal with it, for which purposes we use it, whom we can provide, where you can obtain information about your personal data, and exercise your rights in the processing of personal data.
Identity and contact data:
The Controller who is processing your personal data is Camfil s.r.o., Priemyselný park Géňa, Ul. E. Sachsa 8, 934 01 Levice, IČO: 36 650 935, email: Slovakia.Info@camfil.com (hereinafter referred to as the "Controller “)
Contact details of the data protection officer supervising of the personal data processing:
Email: dpo2@proenergy.sk
1. Purpose of the personal data processing, legal basis and storage period
The purpose of the personal data processing is evidence of data subjects of business partners/potential business partners of the Controller.
Personal data are processed pursuant to point (f) of Paragraph 13 (1) of the Act, point (f) of Article 6 (1) of the Regulation if the data subject is an employee of business partner/potential business partner.
Personal data are processed pursuant to point (b) of Paragraph 13 (1) of the Act, point (b) of Article 6 (1) of the Regulation if the data subject is a statutory body or a person acting on behalf of business partner/potential business partner.
The legitimate interests of the Controller or third party
The processing of personal data for a purpose of the legitimate interests of the Controller is applied.
2. Identification of processed personal data of the data subjects
Data subjects’ about who are processed the personal data are: employees of business partners/potential business partners of the Controller or statutory body or a person acting on behalf of business partner/potential business partner.
The scope of processed personal data: title, name, surname, job, service or administrative position, department, place of work, telephone number, fax number or electronic address of workplace, identification of employer.
3. Identification of recipients or categories of recipients
The Controller may provide the personal data to authorized entities (institutions/organizations) under specific legislation or to contractors (mainly data processors), who have undertaken to accept reasonable safeguards for the protection of processed personal data, as follows:
| Other authorized entities | general binding rule pursuant to point (c) of Paragraph 13 (1) of the Act, point (c) of Article 6 (1) of the Regulation |
With the consent of the data subject or his/her order, personal data may be provided to other recipients.
4. Transfer of personal data to a third country/international organization
A transfer of personal data to third countries or international organizations does not apply.
5. Identification of the source of which the data were collected
Directly from the data subject or his/her employer.
6. The retention period of personal data
The Controller shall process the personal data for the period necessary to fulfil the purpose, but for a maximum of one year after the termination of purpose.
7. Profiling
The Controller does not process the personal data by profiling, or by other similar means based on automated individual decision-making.
8. Rights of the data subject
The data subject shall have the right to request from the Controller the access to processed personal data concerning him/her, the right to rectification of personal data, the right to personal data erasure or restriction, the right to object to the processing of personal data, the right not to be subject to a decision based solely on automated processing, including profiling, the right to data portability as well as the right to initiate the proceeding to supervisory authority. When the Controller processes the personal data based on data subject's consent, the data subject shall have the right to withdraw his or her consent to processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The data subject can exercise his/her rights through sending an e-mail to e-mail address: Slovakia.Info@camfil.com, or sending the letter to address of the Controller.
9. Obligation to provide the personal data
The provision of personal data is a contractual requirement, processing of personal data is necessary. In the case of non-disclosure of personal data, the contractual relationship with the data subject or with statutory body or a data subject acting on behalf of company he represents shall not be concluded. Data subject has the obligation to provide true personal information, in the event of non-disclosure, he/she violates the Act and the Regulation.
1. Purpose of personal data processing and legal basis for processing
The purpose of the personal data processing is: marketing purposes (information about news, discounts and other marketing offers).Personal data are processed based on legitimate interest of the Controller pursuant to: Paragraph 13 point 1(f) of the Act and Article 6 point 1(f) of the Regulation.
The legitimate interest of the Controller or third party
The processing of personal data for a purpose of the legitimate interests of the Controller is applied.
2. Identification of processed personal data of the data subjects
Data subjects, whose personal data are processed are: clients/customers/potential customers. The extent of processed personal data: title, name, surname, email address, telephone number.
3. Identification of recipients, categories of recipients
The Controller may provide personal data to the authorized entities, such as institutions and organizations, under specific legal regulation or to the contractors (especially the data Processors) who have undertaken to accept reasonable safeguards for the protection of the processed personal data, as follows:
| Other authorized entity | general binding rule pursuant to point (c ) of Paragraph 13 (1) of the Ac t, point (c ) of Article 6 (1) of the Regulation |
Personal data may be provided to other recipients if the data subject consents or orders to provide his/ her personal data to them.
4. Transfer of personal data to third country/international organization
Transfer of personal data to third countries or international organizations does not apply.
5. Identification of the source of which the data were collected
Directly from the data subject (in person, by an email, by a phone call).
6. The retention period of personal data
The Controller shall process the personal data for the period necessary to fulfill the purpose, but for a maximum of 5 years from the date of the last request from the data subject.
7. Profiling
The Controller does not process the personal data by profiling, or by other similar means based on automated individual decision-making.
8. Rights of the data subject
The data subject shall have the right to request from the Controller the access to processed personal data concerning him/her, the right to rectification of personal data, the right to personal data erasure or restriction, the right to object to the processing of personal data, the right not to be subject to a decision based solely on automated processing, including profiling, the right to data portability as well as the right to initiate the proceeding to supervisory authority. When the Controller processes the personal data based on data subject's consent, the data subject shall have the right to withdraw his or her consent to processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The data subject can exercise his/her rights by sending an e-mail to e-mail address: Slovakia.Info@camfil.com or by sending the letter to the address of the Controller.
9. Obligation to provide personal data
The data subject provides his/her personal data voluntarily, and in future. The data subject provides his/her personal data voluntarily, and in future expectations he/she will be informed about various expectations he/she will be informed about various marketing activities (information marketing activities (information about news, discounts and other marketing offers) related to the purchased or about news, discounts and other marketing offers) related to the purchased or procured service or goods. If they are not provided, the data subject will not be procured service or goods. If they are not provided, the data subject will not be informed about news, discounts or other marketing offers, but informed about news, discounts or other marketing offers, but at the same time at the same time he/she will not be provided with the service or goods he/she procures.he/she will not be provided with the service or goods he/she procures.
Slovakia