Familiarization with the processing and protection of personal data

THE PERSONS CONCERNED HAVE THE FOLLOWING RIGHTS WITH REGARD TO THE PROCESSING OF THEIR OPERATORS:

1. RIGHT TO REQUEST THE OPERATOR TO ACCESS ITS OU:

• The right to request confirmation from the operator whether OUs concerning him are being processed,
  if the operator processes such PPEs, the data subject shall have the right to access those PPAs and information on:
  a) the purposes of processing the OU,
  b) the categories of OUs processed, c) the beneficiaries or categories of beneficiaries,
  d) the period of their storage, resp. criteria for its determination,
  e) the existence of the right to request the operator to correct, delete or limit the processing of the CA, the right to object to such processing,
  f) the right to submit a complaint / motion to initiate proceedings to the supervisory body – the Office for Personal Data Protection of the Slovak Republic,
  (g) if the CAs have not been obtained from the person concerned, any available information as to their source;
  h) the existence of automated decision-making, including profiling in accordance with the Regulation and / or the Act.

2. RIGHT TO REPAIR THE OWN, UNDER WHICH THE PERSON CONCERNED HAS THE RIGHT:

• request the operator to correct the incorrect OUs concerning the person concerned without delay;
  ask the operator to complete incomplete CAs.

3. RIGHT TO CLEAR WITH WHICH THE PERSON CONCERNED HAS THE RIGHT:

• to achieve the immediate erasure of the CAs concerned; the operator is obliged to delete the CA without undue delay only if one of the following reasons is met:
  a) CAs are no longer needed for the purposes for which they were obtained or otherwise processed,
  (b) the person concerned withdraws the consent on the basis of which the processing is carried out and, if there is no other legal basis for the processing,
  c) the data subject objects to processing under the Regulation and / or the Act and no legitimate grounds for processing prevail or the data subject objects to processing under the Regulation and / or the Act,
  d) OUs were processed illegally,
  e) CAs must be deleted in order to comply with a legal obligation under Union law, applicable legislation in force in the territory of the Slovak Republic or an international agreement by which the Slovak Republic is bound,
  f) The CAs were obtained in connection with the offer of information society services pursuant to the Regulation and / or the Act.
  
  THE RIGHT OF DELIVERY CANNOT BE APPLIED IF IT IS PROCESSING:

(a) the exercise of the right to freedom of expression and information;
b) to fulfill a legal obligation requiring processing under Union law, legislation valid in the territory of the Slovak Republic or an international agreement by which the Slovak Republic is bound, or to fulfill a task performed in the public interest or in the exercise of public power entrusted to the operator;
c) for reasons of public interest in the field of public health in accordance with the Regulation and / or the Act;
d) for the purposes of archiving in the public interest, scientific or historical research or for statistical purposes of the Regulation and / or the Act, if the right to delete the OU is likely to make it impossible or seriously difficult to achieve the objectives of such processing, or
(e) to establish, assert or defend legal claims.

4. RIGHT TO RESTRICT THE PROCESSING OF OU, UNDER WHICH THE PERSON CONCERNED HAS THE RIGHT:

• to limit the processing of OU by the operator in one of the following cases:
  (a) the person concerned challenges / objects the accuracy of the CAs during a period allowing the operator to verify their accuracy;
  (b) the processing is unlawful and the person concerned objects to the deletion of the CA and calls instead for a restriction on their use;
  (c) the controller no longer needs the CA for processing purposes, but the person concerned needs them to prove, assert or defend legal claims;
  d) the data subject has objected to the processing under the Regulation and / or the Act, until it is verified that the legitimate reasons on the part of the operator outweigh the legitimate reasons of the data subject.

5. THE RIGHT OF TRANSFER OF THE OWN, UNDER WHICH THE PERSON CONCERNED HAS THE RIGHT:

(a) obtain the CAs which concern it and which it has provided to the operator, in a structured, commonly used and machine-readable format; and
(b) to transfer such data to another controller without the controller to whom the personal data have been provided preventing him if:
– the processing is based on the consent of the data subject under the Regulation and / or the Law or is necessary for the performance of a contract to which the data subject is a party or for pre-contractual measures to be taken at the request of the data subject, and
– if the processing is carried out by automated means.

In exercising his right to data portability, the data subject shall have the right to transfer IPOs directly from one controller to another, as far as technically possible. The exercise of the right to data accuracy by the data subject must not adversely affect the rights and freedoms of others.

6. RIGHT TO OBJECT OC PROCESSING AND AUTOMATED INDIVIDUAL DECISION-MAKING, UNDER WHICH THE PERSON CONCERNED HAS THE RIGHT TO:

(a) to object at any time, on grounds relating to its specific situation, to the processing of the DPO concerning it which is performed as necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the operator or necessary for legitimate interests pursued by the controller; or a third party, including objections to profiling based on these legal bases.
(b) object at any time to the processing of OUs processed for direct marketing purposes, including profiling, to the extent that they relate to such direct marketing; The person concerned may exercise his right to object by automated means using technical specifications;
(c) it is not covered by a decision which is based exclusively on automated processing, including profiling, and which has legal effects affecting or similarly affecting it;

This right shall not apply if the decision:
1) necessary for the conclusion or performance of the contract between the person concerned and the operator;
2) permitted by Union law, legal regulations valid in the territory of the Slovak Republic or an international agreement by which the Slovak Republic is bound, which also stipulates appropriate measures guaranteeing the protection of the rights and freedoms and legitimate interests of the person concerned; or
3) based on the express consent of the person concerned.

THIS NOTICE TO THE PERSONS CONCERNED IS PUBLISHED AND AVAILABLE FOR VIEWING AT THE OPERATOR’S HEADQUARTERS AND ON THE WEBSITE www.splashbrush.sk.