{"id":3,"date":"2026-02-11T15:47:01","date_gmt":"2026-02-11T14:47:01","guid":{"rendered":"https:\/\/new.trivody.sk\/?page_id=3"},"modified":"2026-04-27T14:17:22","modified_gmt":"2026-04-27T12:17:22","slug":"personal-data-protection-conditions","status":"publish","type":"page","link":"https:\/\/www.stvrtavoda.sk\/en\/podmienky-ochrany-osobnych-udajov","title":{"rendered":"Privacy Policy"},"content":{"rendered":"
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Information about the rights of the data subject in the protection of their personal data<\/h1>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Information and access to personal data, rectification and erasure, and restriction of processing of personal data, right to portability, right to object and automated individual decision-making, obligations of the controller in exercising the rights of the data subject<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t
\n\t\t\t
<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

INFORMATION AND ACCESS TO PERSONAL DATA CORRECTION AND DELETION AND RESTRICTION OF PROCESSING OF PERSONAL DATA RIGHT TO PORTABILITY, RIGHT TO OBJECT AND AUTOMATED INDIVIDUAL DECISION-MAKING OBLIGATIONS OF THE CONTROLLER WHEN EXERCISING THE RIGHTS OF THE DATA SUBJECT<\/p>\n

The operator of the personal data information system is the commercial company RecAd, sro, Do doliny 590\/14, 031 01 Liptovsk\u00fd Mikul\u00e1\u0161, registered in the Commercial Register of the District Court Bansk\u00e1 Bystrica, section Sro, entry No. 9079\/S, on whose behalf acts: Ing. Roman Palaj, managing director (hereinafter referred to as the "Operator").<\/p>\n

1. The operator processes personal data from the following persons:<\/p>\n

a. clients of the Operator (current and former) \u2013 if they are natural persons; in the case of legal entities, their representatives, members of bodies or employees, or other authorized persons, if this data is necessary for the purposes of concluding and performing the contract,<\/p>\n

b. potential clients of the Operator (current and former) \u2013 if they are natural persons; in the case of legal entities, their representatives, members of bodies or employees, or other authorized persons, if this data is necessary for the purposes of concluding and fulfilling the contract and in pre-contractual relations,<\/p>\n

c. suppliers and customers of the Operator (current and former) - if they are natural persons; in the case of legal entities, their representatives, members of bodies or employees, or other authorized persons, if this data is necessary for the purposes of concluding and performing the contract,<\/p>\n

d. employees of the Operator (current and former),<\/p>\n

e. spouses of current and former employees of the Operator, their dependent children, parents of children, or close persons<\/p>\n

(hereinafter referred to as "data subjects").<\/p>\n

2. The operator processes personal data from data subjects for the following purposes:<\/p>\n

a. processing of personal data of the data subjects specified in point 2 letters a) and b) above (name and surname, date of birth, residential address, email address, telephone number, signature, ID card number (or other document), bank account number, academic title) for the purposes of concluding and performing a contract (e.g. purchase contract, service contract, etc.), as well as in pre-contractual relations;<\/p>\n

b. processing of personal data of the data subjects specified in point 2 letter c) above (name and surname, date of birth, residential address, email address, telephone number, signature, ID card number, bank account number, academic title) for the purposes of concluding and performing a contract (e.g. purchase contract, service contract, etc.), as well as in pre-contractual relations, as well as for the purpose of processing accounting documents, keeping records of customers and suppliers;<\/p>\n

c. processing of personal data of the data subjects specified in point 2 letter d) above (name and surname, date of birth, birth registration number, address of residence, academic title, email address, telephone number, signature, ID card number, nationality, gender, bank account number, education data, other data specified in the CV) for the purposes of concluding and fulfilling an employment contract, or agreements on work performed outside of an employment relationship within the meaning of the Labor Code, as well as for the purposes of managing the Operator's personnel and payroll agenda, and the Operator's payroll, contribution and tax obligations in employment relations;<\/p>\n

d. processing of personal data of the data subjects specified in point 2 letter e) above (name and surname, date of birth, social security number, residential address) for the purposes of managing the Operator's personnel and payroll agenda, and the Operator's payroll, contribution and tax obligations in employment relations,<\/p>\n

e. processing of personal data of the data subjects in point 2 letters a) to c) (name, surname, email address) for the purpose of sending information about the activities and operations of the Operator and for the purpose of promoting the activities of the Operator to the e-mail address of the data subject.<\/p>\n

3. The operator processes and protects the obtained personal data in accordance with generally binding legal regulations, including Act No. 18\/2018 Coll. on the Protection of Personal Data, as amended (hereinafter referred to as the "Privacy Act").<\/p>\n

4. Personal data are processed only for the period necessary to achieve the purpose of processing personal data.<\/p>\n

5. Legal basis for processing personal data:<\/p>\n

a. the personal data specified in point 3 letter a) above are processed for the purpose of concluding and performing a contract, i.e. their processing is necessary for concluding and performing a contract, as well as in pre-contractual relations, and therefore their processing does not require the consent of the data subject,<\/p>\n

b. personal data specified in point 3 letter b) above are processed for the purpose of concluding and performing a contract, i.e. their processing is necessary for concluding and performing a contract, as well as in pre-contractual relations, while they are also processed on the basis of the law, their processing is necessary according to special regulations, e.g. according to the Accounting Act, the Income Tax Act, etc., and therefore the consent of the data subject is not required for their processing,<\/p>\n

c. personal data specified in point 3 letter c) and d) above are processed on the basis of the law, their processing is necessary according to special regulations, e.g. according to the Labor Code, the Social Insurance Act, etc., and therefore their processing does not require the consent of the data subject, personal data specified in point 3 letter e) above are processed only on the basis of the consent of the data subject.<\/p>\n

6. Personal data are processed only when the data subjects provide them voluntarily, for example when signing a contract.<\/p>\n

7. Provision of personal data is voluntary:<\/p>\n

a. if the data subject decides not to provide the Controller with the personal data specified in point 3 letters a) and b) above, which the Controller requests to be provided, this decision will not have any consequences for the data subject; in such a case, however, it will not be possible to conclude a contract with the data subject or to perform any actions necessary in pre-contractual relations,<\/p>\n

b. if the data subject decides not to provide the Controller with the personal data specified in point 3 letters c) and d) above, which the Controller requests to be provided, this decision will not have any consequences for the data subject; in such a case, however, it will not be possible to conclude an employment contract or an agreement on work performed outside of an employment relationship with the data subject within the meaning of the Labor Code,<\/p>\n

c. if the data subject decides not to provide the Controller with consent to the processing of personal data specified in point 3(e) above for the purpose specified in point 3(e) above, this decision will not have any consequences for the data subject; in such a case, however, it will not be possible to send the data subject information about the activities and operations of the Controller to the data subject's e-mail address. However, this does not affect the formation and duration of the contract.<\/p>\n

8. Personal data are processed using automated, partially automated or non-automated means of processing, while applying appropriate technical, organizational and personnel security measures appropriate to the method of processing.<\/p>\n

9. Personal data is processed only by authorized persons who have been properly instructed.<\/p>\n

10. The data subject acknowledges that he or she is entitled to proceed in accordance with the provisions of Section 14, paragraph 3 of the Personal Data Protection Act, and therefore may revoke this consent to the processing of personal data at any time in writing, by sending a revocation of consent to the address: RecAd, sro, registered office: Do doliny 590\/14, 031 01 Liptovsk\u00fd Mikul\u00e1\u0161 or to the email address: trivody@trivody.sk. .<\/p>\n

11. The operator is entitled to provide personal data of the data subjects to the intermediary in accordance with the provisions of Section 34, paragraph 1 of the Personal Data Protection Act.<\/p>\n

12. The Operator does not disclose personal data to any third party except in cases where it is necessary to fulfill obligations arising from the law or a contract. The Operator does not intend to transfer personal data to a third country or international organization.<\/p>\n

13. The operator is not responsible for the misuse of personal data by a third party who has accessed this personal data without authorization.<\/p>\n

14. Only true personal data may be provided to the information system. The person who provided the personal data to the information system is responsible for the falsity of the personal data.<\/p>\n

15. The data subject has the right to request from the Controller access to personal data concerning the data subject. The data subject has the right to obtain from the Controller confirmation as to whether personal data concerning him or her are being processed. The Controller is obliged to provide the data subject with the personal data that he or she is processing. For repeated provision of personal data requested by the data subject, the Controller may (pursuant to the provisions of Section 21(3) of the Personal Data Protection Act) charge a reasonable fee corresponding to administrative costs. The Controller is obliged to provide personal data to the data subject in a manner consistent with his or her request. The right to obtain personal data pursuant to this point must not have adverse consequences for the rights of other natural persons.<\/p>\n

16. The data subject has the right to rectification of personal data, i.e. the data subject has the right to have the Controller correct inaccurate personal data concerning him or her without undue delay. Taking into account the purpose of the processing of personal data, the data subject has the right to have incomplete personal data completed.<\/p>\n

17. The data subject has the right to erasure of personal data, i.e. the data subject has the right to have the Controller erase personal data concerning him or her without undue delay. Details are set out in Section 23 of the Data Protection Act.<\/p>\n

18. The data subject has the right to restrict the processing of personal data if:<\/p>\n

a. the data subject objects to the accuracy of the personal data, within a period allowing the Operator to verify the accuracy of the personal data,<\/p>\n

b. the processing of personal data is unlawful and the data subject objects to the erasure of the personal data and requests the restriction of their use instead,<\/p>\n

c. The controller no longer needs the personal data for the purpose of processing the personal data, but the data subject needs them for the exercise of a legal claim, or<\/p>\n

d. the data subject objects to the processing of personal data pursuant to Section 27(1) of the Personal Data Protection Act, pending verification of whether the legitimate reasons on the part of the Controller outweigh those of the data subject.<\/p>\n

Details are set out in Section 24 of the ZOO\u00da.<\/p>\n

19. The data subject has the right to object to the processing of personal data, namely:<\/p>\n

a. the data subject has the right to object to the processing of his or her personal data on grounds relating to his or her particular situation carried out pursuant to Section 13(1)(e) or (f) of the GDPR, including profiling based on these provisions. The controller may not further process the personal data unless it demonstrates compelling legitimate interests in the processing of the personal data which override the rights or interests of the data subject or the exercise of legal claims,<\/p>\n

b. the data subject has the right to object to the processing of personal data concerning him or her for direct marketing purposes, including profiling to the extent that it is related to direct marketing. If the data subject objects to the processing of personal data for direct marketing purposes, the Controller shall not further process the personal data for direct marketing purposes.<\/p>\n

The data subject has the right to object to the processing of personal data concerning him or her on grounds relating to his or her particular situation, except where the processing of personal data is necessary for the performance of a task carried out for reasons of public interest, where the personal data are processed for scientific purposes, for historical research purposes or for statistical purposes pursuant to Section 78(8) of the Data Protection Act.<\/p>\n

20. The data subject has the right to data portability, has the right to receive the personal data concerning him or her, which he or she has provided to the Controller, in a structured, commonly used and machine-readable format and has the right to transmit those personal data to another controller, if technically feasible and if:<\/p>\n

a. personal data are processed pursuant to Section 13(1)(a), Section 16(2)(a) or Section 13(1)(b) of the Personal Data Protection Act and<\/p>\n

b. the processing of personal data is carried out by automated means.<\/p>\n

The exercise of the right referred to above shall not affect the right under Section 23 of the Data Protection Act. The right to portability shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of public authority vested in the Controller. The right under this point shall not have adverse consequences for the rights of other persons.<\/p>\n

21. The data subject has the right to file a petition for initiation of proceedings pursuant to Section 100 of the Personal Data Protection Act, i.e. a petition for initiation of proceedings on personal data protection with the Office for Personal Data Protection of the Slovak Republic, the purpose of which is to determine whether the rights of natural persons have been violated in the processing of their personal data or whether this Act or a special regulation in the field of personal data protection has been violated.<\/p>\n

22. The data subject has the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her. Details are set out in Section 28 of the GDPR.<\/p>\n

23. The controller is obliged to notify the data subject of a personal data breach without undue delay if such a personal data breach may result in a high risk to the rights of the natural person.<\/p>\n

24. The Operator shall provide assistance to the data subject in exercising his or her rights pursuant to Sections 21 to 28 of the Data Protection Act (points 16 to 24 above). In the cases referred to in Section 18(2) of the Data Protection Act, the Operator may not refuse to act upon the request of the data subject in exercising his or her rights pursuant to Sections 21 to 28 of the Data Protection Act (points 16 to 24 above), unless he or she proves that he or she is unable to identify the data subject.<\/p>\n

25. The Controller is obliged to provide the data subject with information on the measures taken on the basis of his\/her request pursuant to Sections 21 to 28 of the Personal Data Protection Act (points 16 to 24 above) within one month of receipt of the request. The Controller may, in justified cases, extend the said period by another two months, even repeatedly, taking into account the complexity and number of requests. The Controller is obliged to inform the data subject of each such extension within one month of receipt of the request, together with the reasons for the extension of the period. If the data subject has submitted the request in electronic form, the Controller shall provide the information in electronic form, unless the data subject has requested the provision of the information in another manner.<\/p>\n

26. If the Operator does not take measures based on the request of the data subject, it is obliged to inform the data subject within one month of receiving the request of the reasons for the inaction and of the possibility of submitting a proposal pursuant to Section 100 to the Office for Personal Data Protection of the Slovak Republic.<\/p>\n

27. Information pursuant to Sections 19 and 20 of the Data Protection Act and notifications and measures taken pursuant to Sections 21 to 28 and 41 of the Data Protection Act (points 16 to 24 above) shall be provided free of charge. If the request of the data subject is manifestly unfounded or disproportionate, in particular due to its repetitive nature, the Controller may:<\/p>\n

a. to charge a reasonable fee taking into account the administrative costs of providing the information or a reasonable fee taking into account the administrative costs of notification or a reasonable fee taking into account the administrative costs of taking the requested action, or to refuse to act on the request.<\/p>\n

The Operator shall prove the manifest unfoundedness or disproportionateness of the request.<\/p>\n

The controller may request the provision of additional information necessary to confirm the identity of the data subject if it has legitimate doubts about the identity of the natural person submitting the request pursuant to Sections 21 to 27 of the Data Protection Act (points 16 to 23 above); the provision of Section 18 of the Data Protection Act is not affected.<\/p>\n

28. The Operator's web server uses cookies to adapt the pages to the needs of its visitors. A cookie is a text file that the server saves on the visitor's hard drive. This file extends the functions available on the pages and allows for a more accurate analysis of their use. For example, the Operator's server may create a cookie that prevents a visitor from repeatedly entering a password during a single visit to one of our web servers. Regardless of the method of use, however, cookies will not collect personally identifiable information. The visitor can set their web browser to either accept or reject cookies. If the visitor decides to reject them, they will not be able to make good use of the interactive features that the Operator's pages contain.<\/p>\n

29. The above instructions and information are in accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.<\/p>\n

In Liptovsk\u00fd Mikul\u00e1\u0161 on September 10, 2021<\/p>\n

RecAd, sro.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

Inform\u00e1cie o pr\u00e1vach dotknutej osoby pri ochrane jej osobn\u00fdch \u00fadajov Inform\u00e1cie a pr\u00edstup k osobn\u00fdm \u00fadajom oprava a vymazanie a obmedzenie sprac\u00favania osobn\u00fdch \u00fadajov pr\u00e1vo na prenosnos\u0165, pr\u00e1vo namieta\u0165 a automatizovan\u00e9 individu\u00e1lne rozhodovanie povinnosti prev\u00e1dzkovate\u013ea pri uplat\u0148ovan\u00ed pr\u00e1v dotknutej osoby INFORM\u00c1CIE A PR\u00cdSTUP K OSOBN\u00ddM \u00daDAJOM OPRAVA A VYMAZANIE A OBMEDZENIE SPRAC\u00daVANIA OSOBN\u00ddCH \u00daDAJOV PR\u00c1VO […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.stvrtavoda.sk\/en\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stvrtavoda.sk\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.stvrtavoda.sk\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.stvrtavoda.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stvrtavoda.sk\/en\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":6,"href":"https:\/\/www.stvrtavoda.sk\/en\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":17598,"href":"https:\/\/www.stvrtavoda.sk\/en\/wp-json\/wp\/v2\/pages\/3\/revisions\/17598"}],"wp:attachment":[{"href":"https:\/\/www.stvrtavoda.sk\/en\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}