Data protection policy

1. Personal data operator:

   The data operator is IOPS, s.r.o., with its registered office at Miletičová 5A, 821 08 Bratislava, IČO: 50 332 449, entered in the Commercial Register of the District Court Bratislava I, section: Sro, insert number: 111225 / B (hereinafter "Operator").

   The Operator proceeds with the processing of personal data in accordance with Act 122/2013 Coll. on the Protection of Personal Data, as amended by later regulations and other legal regulations (hereinafter "Act No. 122/2013 Coll."). From May 25, 2018, the Operator will be instead of Act No. 122/2013 Coll. govern by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) and law number 18/2018 Coll., on the protection of personal data and on the amendment of certain laws.

2. Purpose and legal basis of the processing of personal data:

   1. In the event of the contractual relationship of the person concerned with the Operator, the Operator shall process the personal data of the persons concerned on the basis of the legal title of the contract, only to the extent necessary for the fulfillment of the purposes of this contract.

   2. The Operator processes the personal data of the persons concerned, to inform about the news and the newsletter on the basis of the legal title of a legitimate interest or the consent of the person concerned, to the extent of the name, surname and e-mail whose processing is necessary to achieve the said purpose.

   3. In the event that the person concerned voluntarily informs the Operator of his personal data without prior authorization, the personal data will be processed by the Operator to the extent necessary under the legal title of a legitimate interest (in particular to assess the request of the person concerned and provide the response to the person concerned).

3. Personal data retention:

   All personal data are processed only to the extent necessary for the fulfillment of the purposes set out in point 2 of these terms and only for the time necessary to achieve the stated purposes, but at the most for the period specified by or in accordance with the relevant legislation.

   Personal data processed by the Operator from the legal title of the consent concerned person are processed into the withdrawal of consent; However, the Operator may also process some of these data if he has another legitimate reason (for example, to prove the correctness and legality of the processing of personal data or the ability to defend against legal claims) even after withdrawal of consent.

4. Identification of recipients of personal data:

   The Operator may only make available the personal data of the persons concerned to third parties in cases where it is imposed by the law or with the consent of the person concerned. The Operator only makes available personal data to the usual extent to the processors or other recipients:

   1. providers of external services to the Operator (in particular, programmers or other support technical services, email distribution, services related to the measurement of the traffic of our site and customization of their content to the preferences of the users),

   2. to the extent necessary, to the legal, economic and tax advisors of the Operator and the auditor of the Operator who process them for the purpose of providing advisory services to the Operator.

5. Rights of the persons concerned:

   1. (Right of access to personal data), the person concerned has the right to request from the Operator, upon request, a confirmation of whether or not the personal data of the person concerned are processed and, in the event of a request, to provide information on the processing of personal data relating to the person concerned.

   2. the person concerned has the right to correct the personal data relating to him and to the purpose of the processing of personal data and the addition of incomplete personal data.

   3. In the case of processing of personal data from the legal title of the contract or from the legal title of consent of the person concerned, the person concerned has the right to transfer the personal data relating to him and which he has provided to the Operator in a structured, commonly used and machine readable format, if the data of the person concerned is processed in an automated form and before the expiry of the retention period of personal data. The exercise of this right must not have an adverse effect on the rights of others.

   4. The person concerned has the right to liquidate personal data (right to delete personal data) that are subject to processing if:

      • personal data are processed in violation of law or
      • on the basis of the withdrawal of the consent of the data subject (in the case of the processing of personal data from the legal title of consent of the person concerned), or
      • the person concerned objects to the processing of personal data processed from the legal title of the Operator's legitimate interest and does not override the legitimate reasons of the Operator for the processing of personal data or
      • personal data are no longer necessary for the purpose for which they were acquired or for which they were otherwise processed or
      • after the retention of personal data.

      The right to liquidate personal data under point 5 (d) shall not apply if the processing of personal data is required by the Operator at:

      • exercise of the right to freedom of expression; or
      • the right to information,
      • fulfillment of obligations under Act no. 18/2018 on the protection of personal data and on the amendment of other acts (effective 25.5.2018) or a special regulation,
      • the exercise of a legal claim,
      • for the purpose of archiving, for scientific purposes, for the purpose of historical research or for statistical purposes pursuant to § 78 section 8, where it is likely that the law referred to in section 1 will prevent or seriously prejudice the attainment of the objectives of such processing.

   5. The right to limit the processing of personal data if:

      • the person concerned objects to the accuracy of the personal data during a period allowing the Operator to verify the accuracy of the personal data and the possible updating of the personal data,
      • the processing of personal data is unlawful and the person concerned objects to the deletion of personal data and requests instead the restriction of their use,
      • the Operator no longer requires personal data for the purpose of processing personal data but is required by the person concerned to claim a legal claim, or
      • the person concerned objects to the processing of personal data pursuant to § 27 par. 1 of Act no. 18/2018 on the protection of personal data and on the amendment of other acts (effective 25.5.2018), until the legitimate reasons on the part of the Operator prevail over the legitimate reasons of the person concerned.

   6. Right to object to the processing of personal data:

      The person concerned has the right to object to the processing of personal data concerning him / her in all cases where the legal title of processing of personal data is a legitimate interest of the Operator.

      The person concerned has the right to object to the processing of personal data concerning him / her even if such personal data are processed for direct marketing, including profiling, insofar as it relates to direct marketing.

   7. When suspecting that personal data are being unduly processed, the person concerned has the right to file a personal data protection request with the Office for Personal Data Protection.

   8. If the consent of the person concerned is the legal reason for processing the person's personal data, the person concerned may withdraw such consent at any time, free of charge, at the email address below. Revocation of consent is without prejudice to the lawfulness of processing based on consent given prior to its revocation. The person concerned has the right to revoke the consent at any time by email at g1d2p3r4@iops.sk or in writing to the address of the Operator's headquarters, namely Miletičová 5A, 821 08 Bratislava.

Bratislava, 25.05.2018

IOPS, s.r.o.