Notice of data processing
In accordance with Act No. 18/2018 Coll. on data protection and on amendments to certain Acts
Identification details of the Data Controller:
SOFIS, s.r.o., spol. s r. o. residing at Bajkalská ul. 22, 821 09 Bratislava, Company ID Number: 36 777 145 (hereinafter referred to as the “Data Controller”) that operates the www.xcost.sk website
If you need to contact us with respect to data processing, you may do so on the following phone number: +421 903 808 789, or by e-mail: firstname.lastname@example.org
Purpose of personal data processing:
Data processing for www.xcost.sk:
Cookies and Google Analytics
Personal Data Protection and Safety
We protect personal data to the fullest possible extent by using modern technology corresponding to the level of technical development. We protect the data as if it was our own. We have taken and maintain various technical measures which prevent damage or destruction of your personal data.
Disclosure of personal data to third parties, companies (hereinafter referred to as the “Intermediaries”)
Your personal data may be accessed by our employees or collaborators who are under obligation not to disclose it and who have been trained in how to process personal data safely. We undertake most of our own data processing and we do not require third parties to do this for us.
In order to secure certain specific processing operations which we are unable to perform ourselves, we use the services and applications of data processors that specialize in that particular area and comply with GDPR.
Google – Google Analytics
It is possible that in the future we may choose to use other applications or providers in order to make the processing easier and better. We promise that if this happens, we will impose the same requirements with respect to security and quality of the processing when selecting the processor as if we were doing it for ourselves.
Your rights in relation to data protection
In relation to data protection, you have the following rights. If you wish to exercise any of them, please contact us by email at the email address stipulated above as our contact email address.
You have the right to information and you have the right to know how we process your personal data, which represents this website.
Thanks to the right of access, you can contact us at any time and within 30 days we will provide you with information about which of your personal data we process and why.
If there are any changes to your personal data, you have the right to rectification or amendment of this data.
You may exercise the right to restrict processing if you feel that the data we process is inaccurate, if you feel that we perform the processing illegally but you do not wish to delete all your data or you have objected to our processing of your data.
You may restrict the extent of your personal data or the purpose of its processing (e.g. by unsubscribing from the newsletter you are restricting the purpose of processing to sending business information).
Right to erasure (right to be forgotten)
You have the right to erasure or the right to be forgotten. We do not want to forget you but if you wish, you have the right to request we do so. In such a case, we will erase your personal data from our system as well as from the system of our partial backup processors. To ensure this right to erasure, we require 30 days.
In some cases we are bound by law and we must keep records of issued tax documents (orders, invoices, contracts, etc.) for a time period stipulated by law. In such cases we will erase all personal data that no other law requires us to keep. We will inform you be email once the erasure has been completed.
Complaints to the Office for Personal Data Protection
If you feel we do not process your data in compliance with the law, you have the right to complain to the Office for Personal Data Protection. We would appreciate if you let us know about your concerns first so that we can take action to rectify any errors.
We assure you that our employees and collaborators, who are involved in processing your data, are obligated to maintain confidentiality of any personal data and security measures. This confidentiality lasts even after their contractual relationship with us ends. Your personal data will not be disclosed to any third party without your consent.
This Data Processing Policy is valid since May 25, 2018.