Information on the processing of personal data of website visitors
Provided in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
Who we are?
Our contact details as the controller are:
- Name: KPCA, SE
- Registered office: Pekárska 11, 917 01 Trnava, Slovakia
- Tel.: +421 903 238 480, e‑mail: info@kpca.sk
Purposes of processing personal data and legal bases
We process your personal data to fulfil a legal obligation or in the context of our legitimate interest.
| Purpose of processing personal data | Legal basis |
|---|---|
| Brand building and marketing communication through the company's website | Art. 6(1)(f) – legitimate interest pursued by the controller |
| Ensuring the operation and security of information systems and networks | Art. 6(1)(f) – legitimate interest pursued by the controller |
| Handling requests of data subjects in relation to the processing of personal data | Art. 6(1)(c) – legal obligation |
| Establishing, defending and exercising legal claims | Art. 6(1)(f) – legitimate interest pursued by the controller |
Categories of recipients to whom your personal data may be provided
Your personal data is processed by our employees, who are instructed and bound by confidentiality. They know that the data may only be processed to the extent and in the manner necessary to fulfil their duties.
However, we cannot do without the help of the services of other companies and professionals, namely:
- Providers of legal, advisory and educational services;
- Providers of IT services, web hosting, e‑mail hosting and application hosting;
- Public authorities, where required by applicable legislation.
Retention period of personal data
We process your personal data in an automated or partially automated manner and we mostly store it electronically. We protect it by means of physical and technological security measures so that it remains safe and its integrity and availability are preserved for the entire retention period.
| Purpose of processing personal data | Retention period |
|---|---|
| Brand building and marketing communication through the company's website | 24 months from the last visit to the website |
| Ensuring the operation and security of information systems and networks | Maximum 24 months, depending on the type of information system |
| Handling requests of data subjects in relation to the processing of personal data | During the handling of the request and 5 years after its resolution |
| Establishing, defending and exercising legal claims | 3 to 4 years, according to the limitation period for legal claims in civil‑law and commercial‑law disputes |
Rights of data subjects in the processing of personal data
Under the Regulation you have rights which we, as the controller, are obliged to honour. You may exercise them by sending a request to our address — in writing, by phone or by e‑mail. However, our obligation is to verify your identity to ensure that the data is not misused.
- You have the right to request access to your personal data, as well as to know for what purpose it is processed, who the recipients of your personal data are, and what the processing period is.
- You have the right to rectification — if your personal data is incorrect or has changed, contact us and we will correct it.
- You have the right to erasure of personal data, if it is inaccurate or processed unlawfully.
- If your personal data is processed on the basis of consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
- You have the right to restriction of processing — if you wish, we will process the data only for the most necessary legal reasons, or not at all.
- You have the right to data portability: if you wish to transfer your data to another controller, we will provide it in an appropriate format, unless other technical or legal obstacles prevent it.
Right to object
You have the right to object to the processing of your personal data if it is carried out on the basis of legitimate interest pursuant to Art. 6(1)(f) of the GDPR, including objecting to profiling.
As the controller, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms as the data subject, or grounds for the establishment, exercise or defence of legal claims.
Right to lodge a complaint with the supervisory authority
You have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, with registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, Reg. No.: 36 064 220, tel.: +421 2 3231 3220, dataprotection.gov.sk/uoou.
Additional information
Unless stated otherwise, the source of your personal data is you — as the data subject who provided us with personal data during the initial communication.
Do you have questions or need information?
For information you can contact us by e‑mail at info@kpca.sk.