INFORMATION OBLIGATION – FOR CUSTOMERS
In this section, you will find answers to questions regarding:
For what purposes we process personal data
On what legal basis
Categories of recipients of personal data
Retention periods for personal data
Information on cross-border data transfer
Categories of data subjects
Information on automated decision-making, including profiling, broken down by individual information systems
What is the purpose of processing your personal data?
The purpose of processing personal data is the reason for which the operator processes the personal data of data subjects in information systems based on specific legal grounds. Each processing of personal data is based on a specific legal basis and for a specifically determined, legitimate, and explicitly stated purpose. In order to maintain transparency and ensure clarity of the information provided, individual legal bases and purposes of processing personal data are listed separately at the end of this privacy policy (GDPR"), broken down by individual information systems.
To ensure the maximum protection of your personal data, we, as the Operator, have implemented appropriate personnel, organizational, and technical measures. Our goal is to prevent or reduce the risk of leakage, misuse, disclosure, or other unauthorized use of your personal data to the greatest extent possible. In the event of an occurrence likely to result in a high risk to the rights and freedoms of natural persons, you, as a data subject, will be contacted immediately (Art. 34 of the Regulation).
In accordance with the principles of personal data processing established by the Regulation and the law, particularly the principle of data minimization, we require from you, as a data subject, only those personal data that are a necessary legal or contractual requirement for fulfilling the purpose of their processing. Please note that failure to provide these mandatory details necessary for concluding a contract may result in the failure to establish a contractual relationship.
ECONOMIC AND ACCOUNTING AGENDA
What is the purpose of processing your personal data?
The purpose of processing personal data is the processing of orders, incoming invoices, invoicing to customers, banking transactions, cash register management, securing cash receipts and expenditures, inventory management, and maintaining simple/double-entry bookkeeping for the organization.On what legal basis are your personal data processed?
Act No. 431/2002 Coll. on Accounting, as amended,
Act No. 222/2004 Coll. on Value Added Tax, as amended,
Act No. 18/2018 Coll. on Personal Data Protection and on amendments to certain acts,
Act No. 145/1995 Coll. on Administrative Fees, as amended,
Act No. 40/1964 Coll. Civil Code, as amended,
Act No. 152/1994 Coll. on Social Fund, as amended,
Act No. 311/2001 Coll. Labor Code, as amended,
Act No. 55/2017 Coll. on Civil Service, as amended,
Act No. 513/1991 Coll. Commercial Code, as amended,
Act No. 583/2004 Coll. on Budgetary Rules of Local Government, as amended.
What are the categories of recipients – to whom do we or may we provide your personal data?
Competent tax offices, the Financial Directorate, and other public authorities pursuant to relevant legal regulations
Accountant / Bookkeeper for processing bookkeeping
Authorized employees
Lawyer
Within what periods do we delete your personal data?
Invoices – 10 years
Internal documents – 10 years
Cash register records – 10 years
Debt collection – 5 years
Bank statements – 10 years
Financial statements – 10 years
What are the categories of data subjects?
Natural persons
Legal entities
What categories of personal data do we process about you?
Name, surname, title
Permanent address
Phone number
E-mail address
Does automated decision-making, including profiling, take place?
No.
ONLINE STORE CUSTOMERS & WEBSITE VISITORS
What is the purpose of processing your personal data?
The Operator operates an e-shop on the websites www.marianmanak.com and www.imed-sk.cz (hereinafter referred to as the "E-shop") for the purpose of providing services and selling goods to the final consumer. In accordance with the General Terms and Conditions, the basic prerequisite for concluding a purchase contract is sending an order for a service or goods via an electronic form completed in a correct and complete format. By submitting the order, the data subject confirms that they have familiarized themselves with the General Terms and Conditions and fully agree with them. After receiving the electronic form, the Operator will deliver the requested service or goods to the customer. In other words – the purpose of processing the personal data of e-shop customers is the delivery of goods or services and the execution of actions associated with the purchase (e.g., ensuring the delivery/distribution of goods, issuing an accounting document, etc.).
On what legal basis are your personal data processed?
The processing of the e-shop customer's personal data is necessary for the performance of the contractual relationship (a purchase contract concluded at a distance by submitting an order and agreeing to the general terms and conditions), to which the data subject – the customer – is a party.
What are the categories of recipients?
Processor for the economic and accounting agenda
Recipient service technician
Webmaster
Law firm
Within what periods do we delete your personal data?
Invoices, orders, claims: 5 to 10 years
What categories of personal data do we process about you?
Name, surname, title, permanent address, phone number, e-mail address.
Does automated decision-making, including profiling, take place?
When visiting our website, we may collect certain information about you, such as your IP address, date and time of access to our website, information about your internet browser, operating system, or your language settings. We may also process information about your behavior on our websites, i.e., which links on our websites you visit and which goods are displayed to you.If you access our websites from a mobile phone or similar device, or through any of our mobile applications, we may also process information about your mobile device (data about your mobile phone, potential application crash logs, etc.).
We also automatically process cookies. You can turn off personalization and targeted advertising at any time.
What are Cookies?
A cookie is a small text file created by visiting any website. It is used as a standard tool to store information on how our pages are utilized. This allows us to distinguish (but not directly identify) individual users from each other and adapt the content to specific preferences. Cookies are essential; without them, browsing the web would be much more complicated.
What are Cookies used for?
On our website, we use the following types of cookies:
Technical cookies: Necessary for the proper functioning of the website and its features. Without them, the site would not work (e.g., it would not be possible to log into your user account).
Functional cookies: These cookies allow us to remember your basic choices and improve user comfort, such as remembering your language settings or allowing you to remain permanently logged in.
Content personalization: These cookies allow us to display content and advertisements based on available data to best fit your needs.
Non-personalized advertising: These cookies allow us to display general advertising for products and services.
Personalized advertising: Thanks to these cookies, we and our partners can offer relevant products and services tailored to your purchases, behavior, and preferences.
Audience measurement: These cookies allow us to optimize our website for your comfort based on how you use it.
How you can manage which cookies we process:
You can simply use any standard internet browser (such as Internet Explorer, Safari, Firefox, Chrome) with the anonymous/incognito browsing function turned on, which prevents the storage of data about visited websites. Alternatively, you can disable cookies completely in your browser settings. However, if you disable the processing of technical and functional cookies, you will prevent certain website features from working properly to assist you.You can easily keep the processing of analytical cookies from our side under control if you use this add-on program from Google (can only be run from a computer). However, by disabling analytical cookies, you will unfortunately make it significantly more difficult for us to improve our online store.
Do we transfer your personal data outside the EU?
No.
REGISTERED CUSTOMERS & MEMBERS
What is the purpose of processing your personal data?
To facilitate your future shopping, bookings, and user experience, we provide a registration option on our website. Registered users do not have to re-enter mandatory fields in the event of a future purchase or booking because we already retain their personal details. For this purpose, we maintain a registry of registered clients and members.
What is the legal basis?
Consent of the data subject pursuant to Article 14(3) of the Regulation and the Act on Personal Data Protection. The data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
What are the categories of recipients?
-
Public authorities pursuant to relevant legal regulations
-
Processor for the economic and accounting agenda
-
Law firm
Within what periods do we delete your personal data?
5 years, or within 30 days from the day consent is withdrawn.
What are the categories of data subjects?
Registered customer, guests
What categories of personal data do we process about you?
Name, surname, title, Phone number, E-mail address,
Does automated decision-making, including profiling, take place?
When visiting our website, we may collect certain information about you, such as your IP address, date and time of access to our website, information about your internet browser, operating system, or your language settings. We may also process information about your behavior on our websites, i.e., which links on our websites you visit and which goods are displayed to you.
If you access our websites from a mobile phone or similar device, or through any of our mobile applications, we may also process information about your mobile device (data about your mobile phone, potential application crash logs, etc.).
We also automatically process cookies. You can turn off personalization and targeted advertising at any time.
Do we transfer your personal data outside the EU?
No.
OPERATOR INFORMATION
Business Name: IMED consulting, s. r. o.
Registered Office: Sudoměřická 14, Skalica, 90901
ID (IČO): 362 689 09
Registered in the Commercial Register of the District Court Trnava, Section: Sro, Insertion No. 16741/T
Contact person responsible for personal data protection supervision:
Name: Ing. Marian Maňák, Executive Director
Phone number: +421 903 239 664
Email: imed@atlas.sk
We take the protection of your personal data seriously and fully guarantee your right to information. When processing personal data, we comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as Act No. 18/2018 Coll. on Personal Data Protection of the Slovak Republic. We strictly adhere to the principles of legality, transparency, purpose limitation, data minimization, and secure storage.
We apply information security management practices designed to ensure the confidentiality, availability, and integrity of your data.
We exclusively process personal data that users voluntarily provide themselves, and solely for the specific purpose for which it was shared. Personal data will only be processed for the period necessary to fulfill the purpose of the inquiry or service required by the user. Providing personal data is entirely voluntary.
Information Security
We recognize that nowadays, appropriate protection must be extended not only to human health and life or natural resources, but also to information, which is highly valuable for any company. We understand information security as ensuring not only appropriate confidentiality, but also availability and integrity. This process requires continuous monitoring and permanent improvement, which we strive for through the development of an information security system based on international standards. We believe that compliance with all requirements of Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection is one of the most important goals of our information security management system.
We process the collected data only for the purposes for which it was provided to us. When collecting such data, we comply with information obligations, particularly regarding information on how and for how long the data will be processed and who its recipient is.
As a result, you can be sure that:
only authorized persons have access to confidential data,
the necessary information is available to the relevant persons who need it,
we care about the quality of the data used, its completeness, and correctness, which ultimately allows us to minimize the risk of errors.
In case of any questions regarding the processing of personal data, please contact: imed@atlas.sk
WHAT ARE YOUR RIGHTS?
Right of access to personal data
Right to rectification
Right to erasure ("right to be forgotten")
Right to restriction of processing
Right to data portability
Right to object
Right to lodge a complaint (initiate proceedings)
A data subject is any natural person whose personal data we process; in particular, but not exclusively, these are employees and clients. Such data subjects whose personal data are processed in our information systems for specifically defined purposes possess rights that they may exercise in writing or electronically with the contact person of the controller. The data subject is YOU.
As a data subject, you are entitled to access information regarding: the purposes of processing, the categories of personal data concerned, the scope of recipients, the processing and retention periods, as well as the procedure in any automated processing, or potential consequences of such processing (Article 15 of the GDPR Regulation [Art. 15] / § 21 of Act No. 18/2018 Coll.).
As the controller, we have the right to use all reasonable measures to verify the identity of a data subject requesting access to data, particularly in connection with online services and identifiers. Based on the request of the data subject, the controller shall issue a confirmation as to whether or not personal data concerning them are being processed. If the controller processes such data, it shall provide a copy of these personal data of the data subject upon request.
Right to Erasure ("Right to be Forgotten")
The data subject has the right to obtain from the controller the erasure of personal data concerning them without undue delay. However, due to its nature and severity, this right of the data subject is limited by the determination of additional prerequisites; i.e., the controller shall erase personal data without undue delay after the exercise of this right by the data subject if one of the following grounds is met:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based;
c) the data subject objects to the processing of personal data;
d) the personal data have been unlawfully processed;
e) the erasure is necessary for compliance with a legal obligation, a special regulation, or an international treaty by which the Slovak Republic is bound; or
f) the personal data have been collected in relation to the offer of information society services to a person under 16 years of age.
The data subject shall not have the right to erasure of personal data to the extent that processing is necessary:
a) for exercising the right of freedom of expression and information;
b) for compliance with a legal obligation under a law, a special regulation, or an international treaty by which the Slovak Republic is bound, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the area of public health;
d) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes, in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
e) for the establishment, exercise, or defense of legal claims.
The controller shall carry out the erasure of the data subjects' personal data based on a request without undue delay after evaluating that the request of the data subject is justified.
Right to Rectification
The data subject has the right to obtain from the controller the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the data subject also has the right to have incomplete personal data completed. The controller shall carry out the rectification or completion of personal data without undue delay after being requested by the data subject.
Right to Restriction of Processing
This right can be exercised if you, as a data subject, contest the accuracy of the personal data and other requirements within the meaning of Article 18 and Recital 67 of the Regulation. This is done in the form of temporarily moving selected personal data to another processing system, restricting users' access to selected personal data, or temporarily removing the processing.
Right to Data Portability
As a data subject, you have the right to receive the personal data concerning you, which you have provided to a controller, and have the right to transmit those data to another controller in a structured, commonly used, and machine-readable format, provided that the personal data were obtained based on the data subject's consent or based on a contract, and the processing is carried out by automated means.
Right to Object
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them. They may object to the processing of their personal data based on:
a) the legal title of performing tasks carried out in the public interest or in the exercise of official authority, or the legal title of the legitimate interests of the controller;
b) the processing of personal data for direct marketing purposes;
c) processing for scientific or historical research purposes or statistical purposes.
We will evaluate the received objection within a reasonable time. In this case, we may no longer process the personal data unless we demonstrate compelling legitimate grounds for the processing which override the rights or interests of the data subject, or grounds for the establishment, exercise, or defense of legal claims.
Right to Lodge a Complaint (Initiate Proceedings)
The data subject has the right to submit a proposal to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic if they believe that their rights in the field of personal data protection have been violated.
