FINTAX EU s.r.o. processes personal data in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Regulation on data protection) (hereinafter referred to as the “Regulation”) and Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws (hereinafter referred to as the “Law”).

The user confirms that the operator is authorized to collect, store and process the user’s personal data to the extent necessary: name, surname, residential address, e-mail, telephone, IP address, photos, including sensitive and other personal data continuously made available to the user (hereinafter referred to as “personal data “).

FINTAX EU s.r.o., Páričková 22, 821 08 Bratislava, IČO: 45 612 447, registered in the commercial register of the District Court Bratislava I., section s.r.o., insert 66247/B processes personal data as an intermediary for clients to whom it provides accounting, payroll and HR and as an operator for marketing purposes.

RIGHTS OF THE PERSON CONCERNED

(i) Right to access personal data (Section 21 of the Act, Article 15 of the Regulation)

The person concerned has the right to obtain from the operator a confirmation as to whether personal data concerning him or her are being processed. If the operator processes such personal data, the person concerned has the right to obtain access to this personal data and information to the extent forming the content of this instruction. The affected person has the right to identify the recipient or the category of recipient to whom the personal data has been or is to be provided.

(ii) The right to correct personal data (§ 22 of the Act; Article 16 of the Regulation)

The person concerned has the right to have the operator correct incorrect personal data concerning him without undue delay. Taking into account the purpose of personal data processing, the data subject has the right to supplement incomplete personal data.

(iii) The right to erasure of personal data (the right “to be forgotten”) (§ 23 of the Act; Article 17 of the Regulation)

In connection with the processing of personal data in the information system, the affected person has the right to delete personal data.

(iv) The right to restrict the processing of personal data (§ 24 of the Act; Article 18 of the Regulation)

The affected person has the right to have the operator limit the processing of personal data if

a) the person concerned objects to the correctness of the personal data, during the period allowing the operator to verify the correctness of the personal data,

b) the processing of personal data is illegal and the data subject objects to the deletion of personal data and instead requests a limitation of their use,

c) the operator no longer needs personal data for the purpose of processing personal data, but the data subject needs them to assert a legal claim, or

d) the person concerned objects to the processing of personal data according to § 27 par. 1 of the Act; Art. 21 par. 1 of the regulation, until it is verified whether the legitimate reasons on the part of the operator prevail over the legitimate reasons of the person concerned.

(v) Right to portability of personal data (Article 26 of the Act; Article 20 of the Regulation)

In connection with the processing of personal data in the information system, the affected person has the right to portability of personal data.

(vi) The right to object to the processing of personal data (§ 27 of the Act; Article 21 of the Regulation)

The affected person in connection with the processing of personal data in the information system does not have the right to object to the processing of personal data.

The person concerned does not have the right to object to the processing of personal data concerning him, in the case when the processing of personal data is necessary for the performance of a task for reasons of public interest, if the personal data is processed for a scientific purpose, for the purpose of historical research or for a statistical purpose according to § 78 par. 8 of the Act; Art. 89 par. 1 of the regulation.

(vii) The right to the ineffectiveness of automated individual decision-making, including profiling (§ 28 of the Act; Article 22 of the Regulation)

When processing the personal data of the person concerned by the operator, no automated decision-making or profiling takes place.

(viii) The right to withdraw consent to the processing of personal data (§ 14, paragraph 3 of the Act; Article 7, paragraph 3 of the Regulation)

The person concerned has the right to withdraw consent to the processing of personal data concerning him at any time if he has given it.

(ix) The right to submit a proposal to initiate proceedings on the protection of personal data (§ 100 of the Act; Articles 77 and 79 of the Regulation)

The person concerned has the right to submit to the Office for the Protection of Personal Data, with registered office Hraničná 12, 820 07 Bratislava, Slovak Republic, ID: 36064220 (hereinafter referred to as the “Office”) or to another competent authority, especially in the Member State of his habitual residence, place of work or in at the place of the alleged violation, a proposal to initiate proceedings on the protection of personal data, if it believes that the processing of personal data concerning it is contrary to the law and the regulation.

The proposal for initiation of proceedings (hereinafter referred to as the “proposal”) must contain

a) name, surname, correspondence address and signature of the applicant,

b) designation of the person against whom the proposal is directed, indicating the name, surname, permanent residence or titles, registered office and identification number, if assigned,

c) the subject of the proposal, indicating the rights that should have been violated during the processing of personal data,

d) evidence to support the claims stated in the proposal,

e) a copy of the document or other evidence demonstrating the exercise of the right according to the second part of the second chapter of this Act or regulation, if the person concerned has exercised such a right, or a statement of reasons worthy of special attention for the non-application of the right in question, if the petition was submitted by the person concerned.

The sample proposal for initiating proceedings before the Office is published on the Office’s website.

Without prejudice to the right of the affected person to demand protection of his rights on the basis of a proposal to initiate proceedings before the Office, each affected person also has the right to demand his rights in the materially and locally competent court of the Slovak Republic if he believes that as a result of the processing of his personal data in violation of the regulation, there was a violation of her rights established in the regulation. A motion to initiate may also be submitted to the substantively and locally competent court of the Member State in which the person concerned has his or her habitual residence, unless the operator or intermediary is a public authority of a Member State acting in the exercise of public authority.

The provision of personal data by the affected person for the purpose of providing health care is a legal requirement. Failure to provide personal data may result in denial of health care.

The services provided by the operator are not addressed to children under the age of 16. A person under the age of 16 can contact us only if he or she agrees to this instruction or is approved by the holder of parental rights and responsibilities.

CONSENT TO THE PROCESSING OF PERSONAL DATA

By checking consent, the user agrees that the operator is authorized to process his personal data in the scope of contact information, name, surname, address, e-mail, telephone and to contact him for the purpose of marketing products and services, in particular by sending notifications by e-mail, telephone and / or post , when the user can receive various information about the services and products of the operator and the persons cooperating with him, depending on the user’s preferences and expressed interest in various topics and actions. The user can modify his preferences within the user account or by sending an e-mail to the address gdpr@fintax.sk. The user can revoke this consent at any time by sending an e-mail to the address gdpr@fintax.sk.

Personal data are stored by the operator for the stated purposes for a period of 10 years, unless special legal regulations stipulate otherwise or until you withdraw your consent (on the condition that we are not bound by special regulations to archive your data further). In the time period from the provision of consent until its withdrawal, the processing of your personal data is legal, even if you have withdrawn your consent after it has been given.

The operator informs the person concerned that his personal data will not be provided to any intermediary or recipient. Personal data will not be further provided or made available to third parties, only if on the basis of special regulations such as law enforcement authorities. Personal data will not be published. Personal data will not be used for automated individual decision-making, including profiling.

COOKIES

Cookies are small text files that can be sent to your browser when you visit websites and stored on your device (computer or other device with Internet access, such as a smartphone or tablet). Cookies are stored in the file folder of your browser. Cookies usually contain the name of the website from which they originate, validity and value. The next time you visit the site, the web browser reloads the cookies and sends this information back to the website that originally created the cookie. The cookies we use do not harm your computer.

The processing of personal data is carried out by the controller of personal data, but personal data may also be processed by:

Google Ads – https://privacy.google.com/businesses/processorterms/

Google Analytics – https://www.google.com/analytics/terms/dpa/dataprocessingamendment_20160909.html

Facebook (comments) – https://www.facebook.com/business/news/facebooks-commitment-to-data-protection-and-privacy-in-compliance-with-the-gdpr