Personal data protection policy

1. Who are we?

The controller of your personal data is the Purpose-built facility FAMILY, registered office: Súľovská 2670/2, 821 05 Bratislava, ID No.: 53465156 (hereinafter referred to as "Controller" or "we").

When processing your personal data, we are governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as "GDPR", and the relevant provisions of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (hereinafter referred to as "PDPA"), which apply to us.

2. How can you contact us?

You can exercise your rights by email or by post:
- E-mail: info@dobrodina.sk
- postal address: the purpose-built facility RODINA, Sulovská 2670/2, 821 05 Bratislava.

If you have any questions, you can contact us by phone at +421 903 311 822.

3. Why do we process personal data (i.e. for what purposes) and on what legal basis?

We process your personal data for the purpose of sending you a newsletter (i.e. notifications about news and interesting events within our activities) after you have subscribed to it. The legal basis for the processing of your personal data is Article 6(1)(a) GDPR, i.e. the data subject has consented to the processing of his or her personal data for one or more specific purposes.

Subsequently, we process your personal data for the purpose of registry management in accordance with Act No. 395/2002 Coll. on archives and registers and on the amendment of certain acts and Act No. 452/2021 Coll. on electronic communications. The legal basis for the processing of your personal data is Article 6(1)(c) GDPR, i.e. the processing is necessary for the fulfilment of a legal obligation of the controller.

4. What categories of personal data do we process?

When sending the newsletter, we only process the usual personal data, namely your first name, surname and email address.

5. From whom do we collect personal data?

We only collect your personal data from you when you subscribe to our newsletter.

6. Do you have to provide us with personal data?

The provision of your personal data is voluntary. You are not obliged to provide us with personal data, but in this case we will not be able to inform you via our newsletter about our activities.

7. Who do we provide your personal data to?

We provide your personal data only to our processor who processes personal data on our behalf - ECOMAIL.CZ, s.r.o., registered office: Na Zderaze 1275/15, 120 00 Praha 2, Czech Republic, ID No.: 02762943, represented by: Ing. Jakub Stupka, Managing Director, registered in the Commercial Register maintained by the Municipal Court in Prague, file no. C 223183.

8. Do we transfer personal data to a third country or international organisation?

Personal data is transferred to recipients outside the European Union and the European Economic Area, namely to the United States of America or the United Kingdom, as the case may be. The processing of personal data is carried out in accordance with decisions of the European Commission that an adequate level of protection of personal data is ensured in a particular third country or international organisation, i.e:
- EU-US Privacy Shield Framework - Commission Decision 2023/1795
- United Kingdom - Commission Decision 2021/1772.

9. How long do we keep personal data?

Consent to the processing of personal data is granted for a period of 5 years from the date of its granting or until the consent is withdrawn. Thereafter, we store it for the purpose of registry management:
- in the event of expiry of the period for which consent was granted - your consent for a period of four years from the date of consent,
- in case of withdrawal of consent - your consent and confirmation of withdrawal of consent for a period of four years from the date of withdrawal of consent.

10. Do we carry out automated decision-making, including profiling?

We do not carry out automated decision-making or profiling.

11. What rights do you have in relation to the processing of your personal data?

You have rights in relation to the processing of your personal data that you should be aware of. Your rights depend on the purpose for which we process your personal data.

(a) Right of access to personal data:

You have the right to obtain confirmation from us as to whether we are processing your personal data and, if we are processing your personal data, you have the right to access it under the terms of the GDPR. We will provide you with a copy of the personal data we are processing about you provided that this does not adversely affect the rights and freedoms of others. We may charge a reasonable fee for any further copies you request, commensurate with the administrative costs. If you make a request electronically, we will provide the information to you in a commonly used electronic format unless you request a different method of provision.

(b) Right to rectification:

You have the right to have us correct incorrect personal data concerning you without undue delay. With regard to the purposes of the processing, you have the right to have incomplete personal data completed, including by providing a supplementary declaration.

(c) Right to erasure (right to be forgotten):

In certain circumstances, you have the right to have us delete your personal data without undue delay if:
- the personal data is no longer necessary for the purposes for which it was collected or otherwise processed,
- you withdraw your consent to the processing of your personal data and there is no other legal basis for the processing,
- you object to the processing of personal data for direct marketing purposes,
- personal data have been unlawfully processed,
- personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State (Slovak Republic, Czech Republic),
- the personal data were collected in connection with the offer of information society services to the child (i.e. where the personal data were processed on the basis of the child's consent in connection with the information society services).

The right to erasure does not apply under the conditions set out in the GDPR if the processing of personal data is necessary, for example, to comply with our legal obligation under European Union law or the law of a Member State (Slovak Republic, Czech Republic) or to prove, exercise or defend legal claims.

(d) Right to restriction of processing:

You have the right to have us restrict the processing of your personal data in one of the following cases:
- during the period when we verify the accuracy of the personal data, if you have contested the accuracy of the personal data,
- the processing is unlawful and you request a restriction on the use of your personal data instead of its erasure,
- if we no longer need the personal data for the purposes of processing, but you need it to establish, exercise or defend your legal claims,

If the processing of personal data has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State (Slovak Republic, Czech Republic).

(e) Right to data portability:

You have the right to obtain your personal data in a structured, commonly used and machine-readable format and to have it transferred to another controller. The right to portability must not adversely affect the rights and freedoms of others.

(f) Right to object:

If personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing, including profiling to the extent that it is related to such direct marketing. If you object to the processing of personal data for direct marketing purposes, we may no longer process the personal data for such purposes.

In the context of the use of information society services and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

g) Right to withdraw consent to the processing of personal data:

You have the right to withdraw your consent at any time without affecting the lawfulness of processing based on consent given prior to its withdrawal.

(h) The right to lodge a complaint with the supervisory authority:

You have the right to lodge a complaint at any time with a supervisory authority (the Office for Personal Data Protection of the Slovak Republic or a supervisory authority in the relevant Member State).

12. Changes to the Information Obligation

Data protection is not a one-off issue for us. The information we are required to provide you with in respect of our processing of your personal data may change or cease to be up-to-date. For this reason, we reserve the right to modify and change the information about the processing of personal data at any time. In the event that we change this information in a material way, we will bring this change to your attention, e.g. by means of a general notice on our website or a special notice via email.