Personal data processing principles and personal data protection system according to the GDPR regulation
The operator (administrator) of your personal data according to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in connection with the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR) is the company: AUTO PEPE, s.r.o., Drevárska 278/14, 052 01 Spišská Nová Ves, ID: 53 080 157 The operator’s contact details are: Tel. no.: 0903 132 777 e-mail: info@autopepe.sk (hereinafter referred to as “Operator”)
What is personal data?
Personal data are data relating to an identified natural person or an identifiable natural person who can be identified directly or indirectly, especially on the basis of a generally applicable identifier, another identifier such as a name, surname, identification number, location data, or an online identifier, or on based on one or more characteristics or signs that make up its physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.
What is personal data processing?
The processing of personal data is a processing operation or a set of processing operations with personal data or sets of personal data, in particular obtaining, recording, organizing, structuring, storing, changing, searching, browsing, using, providing by transmission, dissemination or in another way, rearranging or combining, limiting , erasure, whether by automated means or non-automated means. The Operator (Administrator) has no obligation to appoint/designate a Responsible Person.
Sources and categories of personal data:
The operator processes personal data (directly from you) that you have provided to him, or personal data that he obtained based on the fulfillment of your order. Your identification and contact data and data necessary for the performance of the contract.
Legal reason and purpose of processing: The legal reason for processing is:
Fulfillment of the contract between you and the operator according to Article 6 paragraph 1 letter b) of the GDPR The legitimate interest of the operator in providing direct marketing according to Article 6 paragraph 1 letter f) of the GDPR Your consent to the processing of personal data for the purpose of providing direct marketing according to Article 6 paragraph 1 letter a) GDPR
The purpose of personal data processing is:
Processing your order and exercising the rights and obligations arising from the contractual relationship between you and the operator. When placing an order, the required personal data are necessary for the successful completion of the order (name, address – place of work, contact), according to Art. 6 par. 1 letter b) Regulations (subsequent payment, delivery of goods or services, processing of complaints, etc. are also related to this); the processing of the customer’s personal data takes place without the customer’s consent, as the legal basis for the processing of his personal data for the purpose of fulfilling the contract is a specific contract concluded between the customer and the operator. The provision of personal data is a necessary requirement for the conclusion and fulfillment of the contract, without the provision of personal data it is not possible to conclude the contract or the operator to fulfill its conditions. Social networks: Promotion of the company through a social network
Sending marketing offers and doing other marketing activities. There is no automated individual decision-making on the part of the operator in accordance with Article 22 GDPR GPS: The operator uses the GPS system to optimize company costs for PHM, clear PHM billing, automatic generation of the driving record, reporting of business trips, tracking of the vehicle in case of theft, control of compliance with labor law obligations employees when driving a company vehicle, protection of the employer’s property – company vehicles from theft, damage The operator declares that he does not work with the records in any way and does not provide them to third parties or entities
Retention period:
The operator stores personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the operator and to exercise the claim arising from these contractual relationships. As long as the consent to the processing of personal data for marketing purposes is revoked. After the expiration of the personal data storage period which results from Act no. 395/2002 Coll. The Act on Archives and Registries and on Supplementing Certain Acts, the operator deletes personal data.
Recipients of personal data Who is the recipient? The recipient is anyone to whom personal data is provided, regardless of whether it is a third party. A public authority that processes personal data on the basis of a special regulation is not considered a recipient. There are persons who participate in the delivery of goods, services, and the execution of payments based on the contract. The operator does not provide, publish or make available personal data to third countries. Conditions for securing personal data. The operator declares that he has taken appropriate personnel, technical and organizational measures to ensure the protection of personal data. The operator has taken technical measures to secure data storage and storage of personal data in file form. The operator declares that only persons authorized by him have access to personal data.
Your rights:
Under the conditions set out in the GDPR, you have: The right to access your personal data according to Art. 15 GDPR Right to rectification of personal data according to Article 16 GDPR Right to restriction of processing Right to erasure according to Article 17 GDPR Right to object according to Article 21 GDPR Right to transfer personal data according to Article 21 GDPR Right to withdraw consent (electronically or to a correspondence address) The right to file a complaint with the Office for the Protection of Personal Data if you believe that your rights to the protection of personal data have been violated. Furthermore, you have the right to file a complaint with the Office for the Protection of Personal Data if you believe that your rights to the protection of personal data have been violated. How can you fulfill your rights? a. Right to access data You have the right to know whether we are processing your personal data. If we process them, you can ask us to access them. Based on your request, we will issue a confirmation with information about the processing of your personal data. You can submit the application electronically, to the email address info@autopepe.sk, or by mail to the correspondence address: AUTO PEPE, s.r.o., Drevárska 278/14, 052 01 Spišská Nová Ves
Right to rectification You have the right to have your personal data that we process correct, complete and up-to-date. If your personal data is incorrect or out of date, you can ask us to correct or supplement it electronically to the email address info@autopepe.sk, or by mail to the correspondence address: AUTO PEPE, s.r.o., Drevárska 278/14, 052 01 Spišská Nová Ves Right to deletion In certain circumstances, you have the right to have your personal data deleted. You can ask us to delete your data at any time. We will delete your personal data if: – we no longer need your personal data for the purpose for which you provided them, – you revoke your consent, – you object to the processing of your personal data, – we process your personal data illegally, – the personal data must be deleted, in order to fulfill a legal obligation, – if you are a child, or the parent of a child who agreed to the processing of personal data via the Internet.
Right to restriction of processing You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not work with them further. The processing of your data will be restricted if – you inform us that your personal data are incorrect until we verify their correctness, – we process your personal data illegally, but you do not agree to their deletion and instead request that we process your they only limited personal data, – We no longer need your data, but you need it to demonstrate, exercise or defend your rights – you object to the processing of your personal data, until we verify whether our legitimate interests outweigh your reasons.
The right to data portability You have the right to request that we provide you with your personal data in electronic form (e.g. XML or CSV file), which will allow you to easily transfer your data to another company. You can also ask us to transfer your personal data directly to the selected company. We will comply with your request if you have provided us with personal data directly and have given us your consent to process it.
Right to object You have the right to object that we process your personal data. If we process your personal data in the following cases: – due to our legitimate interest, – creating a customer profile, – you can object to their processing if you have personal reasons for doing so.