Privacy Policy
Personal Data Processing Terms
1. Personal Data Controller:
The personal data controller, i.e., the entity processing the personal data of the data subject, is MATMAR s.r.o., Company ID: 53 922 298, Zamatová ulica 11630/1, Nové Zámky 940 02, registered in the Commercial Register of the District Court Nitra, section: sro, file number: 54855/N (hereinafter referred to as the “Controller”).
We value the privacy of all individuals and respect their right to personal data protection. The Controller processes personal data in accordance with Act No. 18/2018 Coll. on the protection of personal data and on amendments to certain laws of data subjects and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation), (hereinafter referred to as the “Act”).
In connection with our activities, we process personal data for various purposes. In most cases, the processing of personal data is necessary according to a special regulation or an international agreement by which the Slovak Republic is bound.
The Controller processes personal data only on legal bases: – fulfillment of a contract or pre-contractual measures, – fulfillment of our legal obligation under a special regulation; – fulfillment of a task carried out in the public interest, – fulfillment of our legitimate authorized interests unless the legitimate interests of the data subject prevail over these interests, – if it is necessary to protect the life, health or property of the data subject or another natural person. In other cases, we process personal data of data subjects only with the consent of the data subject, which the data subject may withdraw at any time.
2. Purposes and legal basis for personal data processing:
In case of an existing contractual relationship between the data subject and the Controller, the Controller processes personal data of data subjects based on the legal title of the contract, exclusively to the extent necessary for fulfilling the purposes of this contract.
The Controller processes personal data of data subjects for the purpose of resolving complaints, handling deficiencies and surveys based on the legal title of legitimate interest or consent of the data subject, exclusively to the extent of name, surname, address, e-mail, telephone number, the processing of which is necessary to achieve the stated purpose.
If the data subject voluntarily, without prior action by the Controller, provides their personal data to the Controller, this personal data will be processed by the Controller to the necessary extent based on the legal title of legitimate interest (especially for the purpose of assessing the data subject’s request and providing a response to the data subject).
Personal data is processed by MATMAR s.r.o., Company ID: 53 922 298, Zamatová ulica 11630/1, Nové Zámky 940 02 for the purpose of
• invoicing supplied goods and services
• sending email offers of products from MATMAR s.r.o., Company ID: 53 922 298, Zamatová ulica 11630/1, Nové Zámky 940 02
MATMAR s.r.o., Company ID: 53 922 298, Zamatová ulica 11630/1, Nové Zámky 940 02 will not provide personal data to third parties, except for:
• Packeta Slovakia s. r. o., Company ID: 48136999, Kopčianska 3338/82A 851 01 Bratislava
• Slovenská pošta, a. s., Company ID: 36631124, Partizánska cesta 9 975 99 Banská Bystrica
Contests taking place on social networks:
Some contests may take place in the form of sharing data, especially comments, through the profiles of data subjects on social networks (e.g., the data subject’s reaction on the Controller’s fun page through their profile on Facebook or Instagram). In such a case, for the purpose of the data subject’s participation in the contest and possible announcement/publication of the contest winner (on the Controller’s profile page on the social network) and contacting them to deliver the prize (through direct messages on the social network), the Controller will process personal data of data subjects mainly in the scope of username. The legal basis for processing personal data for these purposes is the consent of the data subject in the form of voluntary participation in the contest. The Controller may, for the purpose of delivering the prize to winners, also process other personal data in the scope of name, surname, and address, which are necessary to achieve the purpose of prize delivery, based on the legal basis of the data subject’s consent. The data subject may withdraw consent at any time using the Controller’s contact details provided below. The Controller will process this personal data for the time necessary to achieve the purpose of the contest or until the data subject withdraws their consent. After withdrawing consent, the Controller will no longer process personal data for the purpose to which the consent withdrawal relates. However, even after withdrawing consent, the Controller may continue to process the data subject’s personal data to a limited extent on the legal basis of legitimate interest, for the time necessary to demonstrate the legitimacy of personal data processing or to exercise legal claims or to fulfill obligations arising from generally binding legal regulations (usually for a period of 3 years from the withdrawal of consent to process personal data).
3. Personal data retention period:
All personal data is processed only to the extent necessary to fulfill the purposes stated in point 2 of these Terms and only for the time necessary to achieve the stated purposes, but no longer than for the period specified by the relevant legal regulations or in accordance with them.
Personal data processed by the Controller on the legal basis of the data subject’s consent is processed until the consent is withdrawn; however, even after the withdrawal of consent, the Controller may continue to process some of this data if it has another legal reason for doing so (e.g., to demonstrate the correctness and legality of the procedure in processing personal data or for the possibility of defense against legal claims).
Personal data processed by the Controller on the legal basis of legitimate interest or personal data processed by the Controller for the purpose of direct marketing is processed until the data subject objects to the processing of their personal data.
4. Identification of personal data recipients:
The Controller may disclose personal data of data subjects to third parties only in cases where required or permitted by law or with the consent of the data subject. The Controller discloses personal data only to the usual extent to processors or other recipients:
• external service providers for the Controller (especially programming or other supporting technical services, server services, email distribution, services related to measuring the traffic of our pages and customizing their content to user preferences),
• operators of backup servers or operators of technologies used by the Controller, who process them to ensure the functionality of the relevant services of the Controller,
• to the extent strictly necessary, to the Controller’s legal, economic and tax advisors and auditors, who process them for the purpose of providing advisory services to the Controller.
5. Rights of data subjects:
Right of access to personal data: the data subject has the right to request from the Controller, based on a request, confirmation of whether or not personal data concerning the data subject are being processed, and if so, to request the provision of information about the processing of personal data that concern the data subject.
The data subject has the right to rectify personal data concerning them and, taking into account the purpose of personal data processing, to complete incomplete personal data.
In the case of processing personal data on the legal basis of a contract or on the legal basis of the data subject’s consent, the data subject has the right to data portability of personal data concerning them and which they have provided to the Controller, in a structured, commonly used and machine-readable format, if the processing of personal data of the data subject is carried out by automated means and before the expiry of the personal data retention period. The exercise of this right must not have adverse effects on the rights of other persons.
The data subject has the right to erasure of personal data (right to be forgotten) which are subject to processing if:
1. the personal data are processed contrary to the law or
2. based on the withdrawal of consent by the data subject (in the case of processing personal data on the legal basis of the data subject’s consent) or
3. the data subject objects to the processing of personal data processed on the legal basis of the Controller’s legitimate interest and there are no overriding legitimate grounds for the processing of personal data by the Controller or
4. the personal data are no longer necessary for the purpose for which they were obtained or otherwise processed or
5. after the expiry of the personal data retention period.
The right to erasure of personal data according to point 5 letter d) does not apply if the processing of personal data is necessary for the Controller for:
1. exercising the right to freedom of expression or
2. exercising the right to information,
3. fulfilling obligations under Act No. 18/2018 on the protection of personal data and on amendments to certain laws (effective from 25.5.2018) or a special regulation,
4. asserting a legal claim
5. for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes pursuant to § 78 par. 8, if it is likely that the right under paragraph 1 will make it impossible or seriously impair the achievement of the objectives of such processing.
Right to restriction of processing of personal data if:
1. the data subject contests the accuracy of the personal data, for a period enabling the Controller to verify the accuracy of the personal data and possibly update the personal data,
2. the processing of personal data is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead,
3. the controller no longer needs the personal data for the purpose of processing personal data, but they are required by the data subject for the establishment, exercise or defense of legal claims, or
4. the data subject has objected to processing of personal data pursuant to § 27 par. 1 of Act No. 18/2018 on the protection of personal data and on amendments to certain laws (effective from 25.5.2018), pending the verification whether the legitimate grounds of the controller override those of the data subject.
Right to object to the processing of personal data:
The data subject has the right to object to the processing of personal data concerning them in all cases where the legal basis for processing personal data is the legitimate interest of the Controller. The data subject has the right to object to the processing of personal data concerning them also if these personal data are processed for the purposes of direct marketing including profiling, to the extent that it is related to such direct marketing.
If there is a suspicion that personal data are being processed unlawfully, the data subject has the right to file a proposal to initiate proceedings on personal data protection at the Office for Personal Data Protection.
If the legal basis for processing the personal data of the data subject is their consent, the data subject may withdraw such consent at any time free of charge at the email address below. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The data subject has the right to withdraw consent at any time by email at info@2mkhokejovekarty.sk or in writing to the address of the Controller, which is: MATMAR s.r.o., Company ID: 53 922 298, Zamatová ulica 11630/1, Nové Zámky 940 02