PROTECTION OF PERSONAL DATA
is with the operator is LUMI-SK@BAU s.r.o., with registered office at Tehelná 663/7 Zborov, ID number: 53963768, registered in the OR led by the Prešov District Court, dept. Ltd., insert no. 42607/P (hereinafter referred to as the "operator") secured in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95 /46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation") and the Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws (hereinafter referred to as the "Law"). We care about the protection of your personal data, so we hereby inform you about how we process your personal data.
As the basic legal framework for personal data protection, we will use the valid and effective wording of Regulation of the EP and Council No. 2016/679 as well as the wording of Act no. 18/2018 Coll. on the protection of personal data. In addition to these regulations, amendments to ISO 27001, ISO 27000, ISO 31000 and possibly other standards will be taken into account for this purpose.
What data we collect
When providing our services from you as the affected persons, we collect personal data to the necessary extent, for the purpose of concluding a contractual relationship and fulfilling the rights and obligations arising from it. We collect your data for a limited period of time in accordance with the relevant legal regulations.
Rights of affected persons
Regardless of the legal basis for the processing of personal data, the person concerned has the right to access personal data, the right to their correction, deletion, restriction of processing and the right to file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, or the right to submit a proposal to initiate proceedings on personal data protection.
Right of access to personal data
This right means that you are entitled to request confirmation from us as to whether personal data relating to you is being processed. Therefore, if we process such personal data about you, you have the right to obtain access to your personal data and information about:
· why we process your personal data (purpose of personal data processing)
· what data we process about you (category of personal data)
· to whom they can or your personal data will be provided (identification of recipients or range of recipients)
· how long we will keep your personal data (personal data retention period)
· that you have the right to request from us the correction of personal data, their deletion as well as the limitation of their processing or that you have the possibility to object to the processing of personal data
· that you have the right to submit a proposal to initiate proceedings on the protection of personal data according to the Act or
· the right to file a complaint with the supervisory authority according to the Regulation, which is the Personal Data Protection Office of the Slovak Republic
· where your personal data comes from (source information), unless you have provided us with the personal data directly
· whether we use automated individual decision-making, including profiling according to § 28 par. 1 and 4 of the Act; especially about the procedure used, as well as about the meaning and expected consequences of such processing of personal data for you
· on adequate guarantees regarding the transfer, in case we transfer your personal data to a third country or an international organization
This right of access also means for you the possibility to obtain the personal data that we process about you. We will provide you with a copy of your personal data that we process about you. However, if you repeatedly request to provide your personal data, we may charge you a reasonable administrative fee in connection with your request for a copy of your personal data.
The right to correct personal data
As part of our terms of service, we inform you to provide us with the correct data. However, if it still happens that we process incorrect data about you, the right to correct personal data means that you are entitled to request that we correct incorrect personal data concerning you. Also, taking into account the purpose of personal data processing, you also have the right to have your incomplete personal data supplemented.
Right to erasure of personal data (right to be forgotten)
You have the right to have us delete personal data relating to you if at least one of the following reasons is met:
· your personal data is no longer necessary for the purpose for which we obtained it or otherwise processed it
· you have withdrawn your consent to the processing of personal data, on the basis of which we process your personal data and at the same time there is no other legal basis for their further processing
· you object to the processing of personal data, which is carried out on the legal basis of public interest or legitimate interest and no legitimate reasons for their processing prevail
· your personal data was processed illegally
· your personal data must be deleted, as it is necessary to fulfill an obligation under the law of the Slovak Republic or the law of the European Union
· your personal data was obtained in connection with the offer of information society services according to § 15 par. 1 of the Act
However, your right to erasure of personal data may not be granted in a specific case with regard to specific circumstances, if the processing of personal data is necessary for:
· to exercise our right to freedom of expression or right to information
· to fulfill a legal obligation
· to exercise our legal claim
· for the purpose of archiving, for the purpose of historical research or for statistical purposes, if it is likely that the right to erasure would make it impossible for us to achieve the goals of such processing or in a serious way difficult
The right to restrict the processing of personal data
You have the right for us to limit the processing of personal data concerning you and at the same time at least one of the following reasons is met:
· during the period allowing us to verify the correctness of your personal data, you challenge the correctness of your personal data
· it will be illegal processing of personal data, you will object to the deletion of personal data and will request restriction of personal data processing instead of deletion
· we will no longer need your personal data for any of the processing purposes, or you will need it to establish, exercise or assert your legal claims
· you will object to the processing of personal data until the time of verification whether our legitimate interests prevail over your legitimate interests
The right to portability of personal data
If our right to process your personal data is based on your consent or on the fulfillment of obligations arising from the contract we have concluded with you, you have the right to request the transfer of data concerning you and which you have provided to us to another personal data controller.
Right to withdraw consent
If we process your personal data on a legal basis - the consent of the person concerned, you have the right to revoke this consent at any time, even before the expiration of the period for which this consent was granted. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
The right to object
If you have reasons for doing so related to your specific situation, you have the right to object to the processing of your personal data if the legal basis for such processing is our legitimate interest. However, if our legitimate interest in the processing exceeds your personal interest, we may continue to process your data, despite your objection to the processing. We are also entitled to continue processing your data if this is necessary for proving, exercising or defending our legal claims.
How to exercise your rights
You can exercise your above-mentioned rights by sending an email to info@lumibau.com . Please include your first name, last name, e-mail address, or address of permanent residence in your application. If you do not provide us with the specified data, it will not be possible to comply with your request. We require this information from you in order to verify your identity and not provide your personal data to an unauthorized person.
If, as the person concerned, you do not have full legal capacity, your legal representative can exercise your rights in accordance with the Regulation and the Act. In accordance with the Regulation and the Act, the rights of the affected person who is not living can be exercised by a close person. If your requests as a data subject are manifestly unfounded or disproportionate, especially due to their repetitive nature, we may request a reasonable fee taking into account the administrative costs of providing the information or refuse to act on the request.
Provision of personal data to third parties
In certain cases, other persons with whom we cooperate may have access to your personal data. We use the services of third parties to ensure specific processing operations that we cannot ensure on our own. These are, for example, the following third parties:
· accounting processor based on the contract for the provision of accounting services
· courier and delivery service providers
· marketing agencies
· IT service providers
It is possible that in the future the list of these third parties will be expanded to include other persons, or on the contrary, it will be narrowed down to some third parties.
In the event that, as an operator, we pass on personal data obtained about natural persons to another person in the position of an intermediary, we are obliged to draw up a special contract for this case between us and each such other person in the position of an intermediary, or to incorporate the relevant provisions in accordance with Act No. 18/2018 to the framework contract, or to prepare an addendum to this contract.
Deletion of personal data
The operator will ensure the deletion of the provided personal data from the information system after the user's consent to the processing of personal data is revoked, or after the storage period has expired.
Responsible person
The operator does not have a designated responsible person.
Publication and transfer to third countries
Your personal data is not published or transferred to third countries.
Profiling and automated decision making
Your personal data is not subject to automated decision-making or profiling.
Security
Achieving the highest possible protection of our clients' personal data is a high priority for us, and in addition to existing business goals, increased attention will be paid to this area. The measures of a technical and organizational nature that will be used will be carefully selected with regard to the scope of personal data processing and our technical and personnel capabilities, but always in such a way that these means are maximally effective and that the valid and effective legislation in the Slovak Republic is satisfied and EU.
Cookies
Our site uses cookies to improve the functioning of our site and to improve search results. Some sections of our site also use cookies so that we can get to know you better and be able to offer you better individual search options.
What are cookies?
Cookies are small text files containing the name of the visited page, their validity and a predefined value. They are saved in your browser folder. When you revisit the website that created the file, they may be sent again by the browser. The cookies we use do not harm your computer or other devices used to browse the Internet.
What cookies do we use?
· Necessary - they are absolutely necessary for the website to function. These cookies do not collect information about you that could be used in marketing, nor do they remember where you moved on the Internet. They help us provide technically flawless websites.
· Analytical cookies – serve to analyze visitor behavior on the website and subsequently to improve its functionality and appearance. We need your consent to use them, and if you disable these cookies, we cannot guarantee the full functionality of our website. However, you don't have to enable them.
· Advertising - they serve to optimize the displayed advertisement in view of the visitor's habits and the effectiveness of the marketing communication of the contracting parties. Thanks to them, for example, you will not be shown unnecessarily often advertising from an area you are not interested in. We need your consent to use them. However, you don't have to enable them.
· Third-party cookies - created and used by service providers such as Google Analytics, Google AdSense or Facebook. These services are integrated into our site because we consider them useful and completely safe. We need your consent to use them. However, you don't have to enable them.
How can I disable cookies?
If you do not wish to receive cookies from our site, you can set your browser to notify you when you receive a cookie, so you can decide whether to accept it or not. However, we would like to warn you that if you turn off "cookies" in your browser, you will not be able to fully use some of our pages.
How to file a complaint?
As a data subject, you have the right to file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, with headquarters at Hraničná 12, 820 07 Bratislava, tel. no. 02/323 132 14, email: statny.dozor@pdp.gov.sk, if you suspect that your personal data is being processed in violation of applicable legislation.
These rules become valid and effective on 07.01.2022.