Privacy Policy / GDPR

Pursuant to §19 par. 1 and 2 of Act no. 18/2018 Coll. on the protection of personal data and the amendment of certain laws, if personal data concerning the person concerned is obtained from the person concerned, the provider is obliged to provide the person concerned with the following information when obtaining them:

 

Company: MAHAX Slovakia, s.r.o.

 

Registered office: Fábryho 394/46, Štitare 951 01

 

Phone: +421 905 917 308

 

e-mail: personalne@mahax.sk

 

Responsible person: Not named

 

Purpose of personal data processing: Communication with clients and potential clients of the operator

Legal basis for personal data processing: The legitimate interest of the operator, which is the effort to respond to the questions or requests of the affected persons

Recipients of obtained personal data: Personal data is not provided to recipients

Period of storage of personal data: 24 months

Reason for providing – requesting personal data: The operator requires personal data for the purpose of communication. In case of failure to provide the required personal data, it will not be possible to respond to possible questions and requests.

Intermediaries authorized by the operator: Intermediaries are not authorized

 

RIGHTS OF THE PERSON CONCERNED

Affected persons whose personal data is processed by the operator have the following rights:

Request from the operator access to personal data relating to the person concerned. The person concerned has the right to obtain confirmation from the operator as to whether personal data concerning him or her are being processed. The operator is obliged to provide the person concerned with his/her personal data, which he processes. For the repeated provision of personal data requested by the data subject, the operator may charge a reasonable fee corresponding to the administrative costs.

– The right to correct personal data. The affected person has the right to have the operator correct incorrect personal data concerning him without undue delay. Taking into account the purpose of personal data processing, the data subject has the right to supplement incomplete personal data.

– The right to portability of personal data. The person concerned has the right to obtain the personal data relating to him and provided to the operator in a structured, commonly used and readable format and has the right to transfer this personal data to another operator if this is technically possible

– The right to withdraw your consent at any time, if it has been granted

– The right to file a complaint with the Office for Personal Data Protection

– The right to object to the processing of personal data

 

If personal data are processed illegally, the reason for their processing has expired, or the data subject has withdrawn his consent to the processing of his personal data, the data subject has:

– The right to delete personal data

– The right to limit the processing of personal data

To demonstrate compliance with the Act, the operator is obliged to process personal data in accordance with the principles set out in Sections 6 to 13 of the Act and fulfill the information obligation.

Purpose limitation principle : 

The operator acquires personal data only for a specifically determined, explicitly stated and authorized purpose and does not further process them in a way that is not compatible with this purpose;

The principle of minimization of personal data :

The processed personal data are adequate, relevant and limited to the necessary scope given the purpose for which they are processed.

The principle of correctness :

The operator makes every effort to ensure that the processed personal data is correct and updated as necessary

Principle of minimization of retention :

Personal data is stored in a form that allows the identification of the person concerned no later than as long as it is necessary for the purpose for which the personal data is processed; personal data are kept longer if they are to be processed exclusively for the purpose of archiving

The principle of integrity and confidentiality :

Personal data is processed in a way that, through appropriate technical and organizational measures, guarantees adequate security of personal data, including protection against unauthorized processing of personal data, illegal processing of personal data, accidental loss of personal data, erasure of personal data or damage to personal data.

Principle of responsibility :

The operator is responsible for observing the basic principles of personal data processing, for the compliance of personal data processing with the principles of personal data processing.

The principle of legality : 

The operator processes personal data only in a legal manner, that is, on the basis of a specific legal basis and in such a way that the basic rights of the person concerned are not violated.

 

The operator fulfills the information obligation by applying §19 par. 1 and 2 of the Act by the fact that, if personal data relating to the data subject is obtained from the data subject, the operator provides the data subject with the following information when obtaining them:

– identification data and contact data of the operator and representative of the operator, if authorized,

– the purpose of processing personal data for which personal data is intended, as well as the legal basis for processing personal data,

– legitimate interests of the operator or a third party, if personal data is processed on this legal basis (according to § 13 paragraph 1 letter f)),

– beneficiary identification or beneficiary category, if any,

– the period of storage of personal data; if this is not possible, information on the criteria for its determination

– on whether the provision of personal data is a legal requirement or a contractual requirement or a requirement that is necessary for the conclusion of a contract, and on whether the person concerned is obliged to provide personal data, as well as on the possible consequences of not providing personal data

– about any authorized intermediary who processes the personal data of the person concerned on behalf of and based on the instructions of the operator



The operator also fulfills the information obligation by providing information to the affected persons about their rights.