Operator

Company WFG reality, s.r.o., ID No.: 50 659 855, registered office: Daxnerova 9, 010 01 Žilina (hereinafter also referred to as the “Operator”) is the controller of the information systems in which this company processes your personal data as personal data of the data subject.

When processing personal data, the Controller shall act in accordance with the legal regulations of the Slovak Republic, taking the utmost care of the privacy of the data subjects and the protection of the personal data it processes.

Reasons for processing personal data

The processing of the personal data collected and provided is an essential part of the activities of the Controller. Without the processing of personal data, he would not be able to provide his clients, potential clients, business partners or other data subjects with his services to the required extent and quality.

Basics for the processing of personal data

The current legislation allows the processing of personal data on several legal bases, and the processing of personal data may also take place without the data subject’s consent.

If there is no other legal basis for the processing of personal data, personal data will only be processed on the basis and to the extent of the data subject’s consent.

Provision of data

Personal data processed by the Controller may also be processed by third parties, provided that the Controller so decides or the obligation to provide personal data arises from the legal order of the Slovak Republic.

In cases where the choice of the recipient of the personal data is up to the Data Controller, the Data Controller shall always take care to ensure a high standard of protection of the data subject’s personal data when selecting these partners.

The personal data of the data subject may be processed in countries of the European Union and countries that are party to the Agreement on the European Economic Area. The transfer of personal data may only take place to third countries whose legal regime is considered by the European Commission to ensure an adequate level of protection of personal data.

The recipients of personal data processed by the Controller can be divided into the following categories:

a. Business partners providing physical and program service of the Operator’s information technologies, in particular information systems, computer b. programs and servers necessary for the performance of the Operator’s business activities,

b. business partners providing advertising and marketing services of the Operator,

c. business partners ensuring the fulfilment of the Operator’s obligations in the field of legal services, HR, tax, audit and accounting,

d. registration authorities in the performance of the Operator’s business activities,

e. public authorities, in cases where the Controller is obliged to provide personal data by a generally binding legal regulation or a decision of a public authority (in particular courts, law enforcement authorities, bailiffs).

Security of personal data

The controller processes personal data manually or using electronic information systems. The controller has taken all necessary measures, not only of a technical nature, but also of a personnel and control nature, to ensure the highest possible level of protection of personal data.

Rights of the data subject

The person concerned has the right to:

a. request access to personal data concerning the data subject from the Controller,

b. to rectify, erase or restrict the processing of personal data,

c. object to the processing of personal data,

d. the portability of personal data,

e. file a complaint or a petition to initiate proceedings with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic,

f. withdraw your consent to the processing of your personal data at any time.

Any questions related to the protection of personal data may be sent by the data subject to the following email address: info@romankruzliak.sk or directly to the address of the Controller’s registered office.

The controller is obliged to notify the data subject of a personal data breach without undue delay if such a personal data breach is likely to result in a high risk to the data subject’s rights.