Processing and protection of personal data

Information obligation Contact form

Information obligation

in accordance with Act no. 18/2018 Coll. on the protection of personal data as amended and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation ) for the purpose of processing personal data in the information system Contact form:

Identification data of the operator for the Information System Contact form: WBA, a.s., Palisády 33, 811 06, Bratislava, ID: 44 621 175, registered in OR MS Bratislava III, section: Sa, insert no. 4706/B, Ing. Marek Morgenstern – member of the board, tel. contact: 0907158648, email: info@wbaholding.eu (hereinafter referred to as “WBA” or “operator”)

The purpose of personal data processing

Obtaining personal data of affected persons for the purpose of contacting the company and providing information.

Legal basis for personal data processing

Personal data in the Contact Form Information System are processed based on the consent of the person concerned. The granted consent applies to all processing activities carried out for this purpose or related and closely related purposes (compatibility of purposes).

The original purpose of processing (contacting the client by the company and providing information about the service) is compatible with another purpose of processing, which is the promotion of the offered service in order to fully satisfy the client’s needs and wishes (marketing). Such a link between purposes is related to the purpose for which the personal data was originally obtained and logically follows on from it. The person concerned can legitimately and reasonably expect that further processing will take place.

The person concerned is not obliged to provide his personal data, but in this case it is not possible to provide him with the data or information he requests.

Instruction on the obligation or voluntariness to provide the requested personal data and the time for which the data subject provided his personal data

Personal data is provided voluntarily by the person concerned for the purpose of contacting/providing information, based on his express, voluntary consent for a period of 2 years.

The affected person has the right from the operator

request access to her personal data,

request correction of your personal data,

request deletion of your personal data,

request restriction of the processing of your personal data,

object to the processing of your personal data,

request data portability.

file a complaint with the supervisory authority.

Third countries, if it is assumed or obvious that personal data will be transferred to these countries

The transfer of personal data to third countries is not carried out, nor is the cross-border transfer of personal data to the countries of the European Union envisaged.

Form of publication

The personal data of the persons concerned are not published.

Common provisions for the purpose of contacting the operator via its website in accordance with § 21 of the Personal Data Protection Act – Instruction on the rights of the data subject

The person concerned has the right to obtain confirmation from the operator as to whether personal data concerning him or her are being processed. If the operator processes such personal data, the data subject has the right to obtain access to this personal data and information about:

the purpose of processing personal data,

categories of processed personal data,

the identification of the recipient or the category of recipient to whom the personal data has been or is to be provided, in particular the recipient in a third country or an international organization, if possible,

period of storage of personal data; if this is not possible, information on the criteria for its determination,

the right to request from the operator the correction of personal data concerning the person concerned, their deletion or restriction of their processing, or the right to object to the processing of personal data,

just submit a motion to initiate proceedings according to §100,

sources of personal data, if the personal data were not obtained from the person concerned,

the existence of automated individual decision-making, including profiling according to § 28 par. 1 and 4; in these cases, the operator will provide the data subject with information, in particular, about the procedure used, as well as the meaning and expected consequences of such processing of personal data for the data subject.

The affected person has the right to be informed about adequate guarantees regarding the transfer according to § 48 par. 2 to 4 of the Personal Data Protection Act, if personal data is transferred to a third country or international organization.

The operator is obliged to provide the affected person with his/her personal data, which he/she is processing. For the repeated provision of personal data requested by the data subject, the operator may charge a reasonable fee corresponding to administrative costs. The operator is obliged to provide personal data to the person concerned in a manner according to his request.

The right to obtain personal data according to § 21 paragraph 4 of the Personal Data Protection Act must not have adverse consequences on the rights of other natural persons.

Recipients of personal data

For the purpose of providing quality services

we cannot exist without external service providers. The personal data we obtain may be made available to an external provider of accounting services, tax, legal or other advisors, the operator’s website administrator, a company performing information technology management and support, or other providers of processing software and services. We never give, sell or exchange your data with third parties for trading purposes.

WBA a.s. as the operator undertakes to treat the personal data of the affected persons in accordance with the valid legal regulations of the Slovak Republic. The operator declares that it will acquire personal data exclusively for a defined purpose and that it will not acquire personal data for other purposes than those specified for individual information systems separately and will ensure that personal data is processed and used exclusively in a manner that corresponds to the purpose for which it was collected collected and that it will not combine them with personal data obtained for other purposes.