Information about the processing of personal data

Information about the processing of data subject's personal data under Paragraph 19 and Paragraph 20 of the Act No. 18/2018 Coll. on Personal Data Protection and on the amendment of certain other Acts (hereinafter referred to as the "Act") and Article 13 and 14 Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation")

This information aims to provide knowledge about what personal data we process, how we deal with it, for which purposes we use it, whom we can provide, where you can obtain information about your personal data, and exercise your rights in the processing of personal data.

Identity and contact data:

The Controller who is processing your personal data is VIDRA a spol. s.r.o., Štrková 8, 011 96 Žilina, IČO: 31589561,info@vidra.sk (hereinafter referred to as the "Controller “)

Contact details of the data protection officer supervising of the personal data processing:

Email: dpo3@proenergy.sk

1. Purpose of the personal data processing, legal basis and storage period

The purpose of the personal data processing is evidence of data subjects of business partners / potential business partners of the Controller.

Personal data are processed pursuant to point (f) of Paragraph 13 (1) of the Act, point (f) of Article 6 (1) of the Regulation if the data subject is an employee of business partner / potential business partner.

Personal data are processed pursuant to point (b) of Paragraph 13 (1) of the Act, point (b) of Article 6 (1) of the Regulation if the data subject is a statutory body or a person acting on behalf of business partner / potential business partner.

The legitimate interests of the Controller or third party

The processing of personal data for a purpose of the legitimate interests of the Controller is applied.

2. Identification of processed personal data of the data subjects

Data subjects’ about who are processed the personal data are: employees of business partners / potential business partners of the Controller or statutory body or a person acting on behalf of business partner / potential business partner.

The scope of processed personal data: title, name, surname, job, service or administrative position, department, place of work, telephone number, fax number or electronic address of workplace, identification of employer.

3. Identification of recipients or categories of recipients

The Controller may provide the personal data to authorized entities (institutions/organizations) under specific legislation or to contractors (mainly data processors), who have undertaken to accept reasonable safeguards for the protection of processed personal data, as follows:

Other authorized entities

general binding rule pursuant to point (c) of Paragraph 13 (1) of the Act, point (c) of Article 6 (1) of the Regulation

With the consent of the data subject or his / her order, personal data may be provided to other recipients.

4. Transfer of personal data to a third country/international organization

A transfer of personal data to third countries or international organizations does not apply.

5. Identification of the source of which the data were collected

Directly from the data subject or his/her employer.

6. The retention period of personal data

The Controller shall process the personal data for the period necessary to fulfil the purpose, but for a maximum of one year after the termination of purpose.

7. Profiling

The Controller does not process the personal data by profiling, or by other similar means based on automated individual decision-making.

8. Rights of the data subject

The data subject shall have the right to request from the Controller the access to processed personal data concerning him/her, the right to rectification of personal data, the right to personal data erasure or restriction, the right to object to the processing of personal data, the right not to be subject to a decision based solely on automated processing, including profiling, the right to data portability as well as the right to initiate the proceeding to supervisory authority. When the Controller processes the personal data based on data subject's consent, the data subject shall have the right to withdraw his or her consent to processing at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. The data subject can exercise his/her rights through sending an e-mail to e-mail address: info@vidra.sk., or sending the letter to address of the Controller.

9. Obligation to provide the personal data

The provision of personal data is a contractual requirement, processing of personal data is necessary. In the case of non-disclosure of personal data, the contractual relationship with the data subject or with statutory body or a data subject acting on behalf of company he represents shall not be concluded. Data subject has the obligation to provide true personal information, in the event of non-disclosure, he/she violates the Act and the Regulation.