1. Who is the controller of your personal data?

The data controller is the company that determines the purpose and means of the processing of personal data. For marketing purposes, the controller of your personal data is BELVE s.r.o.

2. What personal data do we process about you?

For marketing purposes, we process the following categories of personal data to help us identify product and service offerings that may appeal to you and address your needs.

• Basic identification data - name, registered office, date of birth, residential address.

• Contact details - telephone number, e-mail address.

• Sociodemographic data - statistical data on age, sex, education, occupation, number of children.

• Information about the use of products and services - what services you have had with us in the past, information about the use of the online customer area. Based on this information, we can recommend suitable products and services to you.

• Information from records of phone calls or other interactions with you, such as email, chat, SMS messages.

• Geolocation data - geolocation data from the web browser. This data can usually be used to recommend a contact to the nearest seller or branch.

3. What are the sources of the personal data?

We obtain the personal data referred to in the preceding paragraph directly from you. You provide this personal data in the client contract or on other documents.

Personal data may also come from publicly available sources, registers and records, such as the commercial register. Your personal data may also come from third parties who are authorised to handle it.

4. For what purposes have you given your consent?

You have provided your consent for marketing purposes, which include the following activities:

• offer of products and services. We may provide you with offers based on your consent in electronic form, in particular by email or messages sent to mobile devices via telephone number, via a web-based client area, in writing or by telephone call,

• automated processing of personal data in order to tailor the business offer to your individual needs,

• market surveys and customer satisfaction surveys on the products and services used.

Consent provided for marketing purposes is voluntary. However, it is necessary in order for us to be able to send you individual offers of products and services and our business partners. We cannot provide you with individual product and service offers without such consent.

5. Why is profiling and automated decision-making taking place?

Our company strives to provide you with individually tailored product and service offers. For this reason, we profile your personal data based on your consent. We use automated information systems or web applications for this purpose. Accordingly, we send you personalized messages and offers of our company's products and services.

Automatic evaluation (profiling) of personal data helps us to get to know you and your needs better, to estimate future actions and to tailor our products and services accordingly.

6. How long will we process your personal data?

You have given your consent to the Company for the duration of the contractual relationship and for a further 10 years from the termination of such contractual relationship, or until such time as you withdraw your consent.

If you are not, or do not become, a client of the Company, your consent will be valid for 10 years from the date it is given or until you withdraw it.

After the relevant time, your personal data will be deleted, but only to the extent and for the purposes for which consent is not required by law.

7. Who are our business partners?

In your consent, you have also agreed to product offers and the transfer of personal data to our selected business partners. Our business partners also adhere to our privacy policy and we have entered into a data processing agreement with them.

8. Who can have access to your personal data?

For the processing of data for marketing purposes, your data may also be accessed by other entities that process personal data as so-called intermediaries whose role is to provide services to the company. For example, these may be external companies that manage our systems or other services that ensure the proper operation of the company and the processing of personal data for marketing purposes. We have entered into a contract with these processors for the processing of personal data, whereby they are also obliged to comply with strict data protection rules.

9. What are your rights when processing personal data?

The proper processing of your personal data is important to companies in the Slovak Republic and its protection is a matter of course. You can exercise the following rights when processing your personal data:

Information about the processing of your personal data

The information includes in particular: identification and contact details of the controller, its representative and, where applicable, the responsible person, the purposes of the processing, the categories of personal data concerned, the recipient or categories of recipients of the personal data, information on the transfer of personal data to third countries, the retention period of the personal data, the authorised controllers, a list of your rights, the possibility of contacting the Data Protection Authority, the source of the personal data processed, information on whether and how automated decision-making and profiling are carried out.

Right of access to personal data

You have the right to confirm whether or not personal data are being processed and, if so, to access information about the processing, the categories of personal data concerned, the recipients or categories of recipients, the retention period of the personal data, as well as information about your rights, the right to lodge a complaint with the Data Protection Authority, information about the source of the personal data, information about whether or not automated decision-making and profiling are taking place, information and safeguards in the event of a transfer of personal data to a third country or an international organization. You have the right to be provided with copies of the personal data processed.

Right to repair

Are we processing your outdated or inaccurate personal data? For example, have you changed your home address? Please inform us and we will correct the personal data.

Right to erasure (right to be forgotten)

In certain cases provided for by law, we are obliged to delete your personal data on your instruction. However, each such request is subject to an individual assessment, as BELVE s.r.o. also has an obligation or legitimate interest to retain personal data.

Right to restriction of processing

If you wish your personal data to be processed only for the strictly necessary lawful purposes or if you wish to block personal datǎ.

Right to data portability̌

If you wish us to disclose your personal data to another company, we will transfer your personal data in the appropriate format to the entity you designate, provided that we are not prevented from doing so by any legal or other significant impediments.

Right to object and automated individual decision-making

If you become aware or believe that we are processing personal data in breach of the protection of your private and personal life or in breach of the law, please contact us and ask us to explain or rectify the inappropriate situation. You can also object directly to automated decision-making and profiling.

Right to lodge a complaint with the Data Protection Authority

You may at any time contact the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, with your complaint regarding the processing of personal data.

Where can you exercise your rights and are there fees for exercising them?

Individual rights can be exercised by calling the company on 00421 32-7763363, by sending an e-mail to [email protected], or by sending a written request to the company's registered office or to the correspondence address BELVE s.r.o. Holubyho 295, 916 01, Stará Turá, Slovakia

We provide all information and statements about the rights you exercise free of charge.

How soon can you expect a response from the company?

We will provide you with our comments and any information on the measures taken as soon as possible, but at the latest within one month. If necessary, and taking into account the complexity and number of requests, we may extend this period to two months. We will inform you of the extension, including the reasons for it.

10. How can you withdraw your consent to the processing of personal data?

Consent to the processing of personal data is based on the principle of voluntariness. This means that you can withdraw it at any time. Do you no longer wish to receive offers of products and services and our business partners? We fully respect your decision.

 

What should the withdrawal of consent contain?

• Who is appealing? Please state your name and surname, residential address and date of birth so that we can identify you.

• Who you are appealing to. You may address your appeal to all Affiliates, or, if you wish to keep sending offers to selected Affiliates, please specify only those Affiliates that you do or do not wish to allow to contact you further.

• Information that you do not want us to process your personal data. If you would like to receive only selected offers, please specify what these offers are so that we can accommodate you.

• Your handwritten signature.

 

How can I send my appeal?

• Withdrawal of consent to the processing of personal data for marketing purposes can be sent in writing so that we have a proper record of your withdrawal. Do not forget to sign the withdrawal.

• By written statement sent to the registered office or to the mailing address of the company.