The operator of the website forax.sk (hereinafter referred to as the “Operator”) respects your privacy. This Personal Data Protection Statement describes your rights regarding the protection of your personal data and our obligations related to its protection. The Operator is based in the Slovak Republic and is subject to European data protection laws, including the General Data Protection Regulation (GDPR).
It is important to us that everyone understands which personal data about you we process, why we do so, and what your rights are. Therefore, we recommend that you read these Personal Data Protection Policies, which will provide you with more information about the processing of your personal data.
Scope and Acceptance
This Personal Data Protection Statement provides information about data processing carried out by the Operator, where the Operator determines the purposes and means of processing (the Operator acts as the data controller). It also provides information about data processing carried out on behalf of users based on their instructions (with the user acting as the data controller and the Operator as the data processor).
Personal data are information that identify you as an individual, such as an email address, address, or telephone number, etc. The processing of your personal data is necessary for providing services to our users. Please do not use the website or our services if you do not agree with the way we process personal data under this Personal Data Protection Statement.
What Personal Data We Process
We process only such personal data as are necessary to provide you with professional services. Where we process your personal data on the basis of consent, the list or scope of the data is specified directly in the consent itself, and only to the extent necessary to fulfill the purpose for which the personal data are processed. In particular, we process the following personal data: first name, last name, email address, address (street, postal code, city, country), and telephone contact.
Personal data you provide to us yourself:
You provide us with personal data when you choose to complete any of the contact forms or forms for receiving direct marketing communications (newsletter).
You provide us with personal data when you fill in your details in a registration form / email to create a user account and submit these details to us.
You provide us with personal data when you choose to contact us via email.
Any personal data you provide to us are provided voluntarily, and you are responsible for deciding to what extent you provide such personal data. However, without the provision of certain personal data, we may not be able to respond to your inquiry or request, or enter into a contract with you that is created by registering a user account.
You are responsible for the accuracy, completeness, and truthfulness of the personal data provided, and the Operator will rely on the accuracy, completeness, and truthfulness of such personal data. The Operator is not liable for any damages that may arise to you or to any third party in connection with the provision of incorrect, incomplete, or untrue personal data.
Personal Data We Obtain From Your Use of the Website
The Operator may also obtain data that allow your identification indirectly. These mainly include the following data:
- information and data from the devices you use to access the website, which may include general information about your device;
- log data, meaning data and information that our servers automatically store whenever you access the website (in particular IP address, access time, information about the hardware and software you use, number of clicks, pages you view or their order, time spent on pages, and other data);
- data about your use of the website;
- information obtained through cookies and other user-tracking tools, including cookies and tracking tools of our partners or social network operators;
- information obtained by monitoring user activity after clicking on an advertising banner or link, as well as information about activities on third-party websites (such as search engines and social networks);
- information obtained through social plugins operated by third parties, e.g. Facebook “Like” button and similar tools.
The above-mentioned data do not, by themselves, allow the identification of a specific living natural person. These data become personal data at the moment they are assigned to a specific identified or identifiable living natural person, for example when using the website with a logged-in user account.
Personal Data We Obtain From Third Parties
The Operator may also obtain personal data from third parties and combine such personal data with the personal data obtained from you. These mainly include the following personal data:
- data from social network operators (Google, Facebook) if you choose to create your user account through the services of these third parties. In such cases, the social network operator (Google, Facebook) will ask you to consent to the provision of personal data, and based on this consent, the relevant social network operator (Google, Facebook, LinkedIn) will provide us with these personal data.
How We Collect Your Personal Data
The Operator collects personal data, which it subsequently processes, directly from users. The minimum scope of personal data collected is the user’s email address. The user may also provide additional data that are not mandatory for sending a message via the website (first name, last name, telephone contact).
We collect and process data that you share when contacting us and data that are generated through the use of our services.
When you use our websites and communicate with us via email, we use cookies and other tracking technologies to optimize your user experience on our websites. For more information on how these technologies work and what your rights are in this context, please read the information about cookies and other tracking technologies.
In some cases, we may also collect information about you from other sources. These sources may include third-party data aggregators, our marketing partners, public sources, or third-party social networks.
How We Share Your Personal Data
Public Authorities
The police and other authorities may request your personal data from the Operator. We share such data only in cases where it is required by law and legally binding on the Operator.
Partners, Subcontractors, and Affiliated Companies
The Operator cooperates with subcontractors in the processing of personal data and may, in this context, transfer your personal data. When using the services of subcontractors, the Provider enters into a data processing agreement (DPA) with the subcontractors in order to protect your privacy rights and fulfill its obligations to users. For subcontractors located outside the EU, the Provider ensures appropriate legal grounds for such international transfers on your behalf or on behalf of its Customers, relying on the EU–US Privacy Shield or the use of EU standard contractual clauses.
We implement appropriate measures to ensure that your personal data are processed in accordance with applicable security and privacy laws. The same requirements are applied to our subcontractors.
How Are Your Personal Data Secured?
In order to ensure the confidentiality, integrity, and availability of users’ personal data, the Operator uses modern IT security systems. The Operator maintains appropriate technical and organizational security measures against unlawful or unauthorized processing of personal data and against accidental loss or damage of personal data. Access to users’ personal data is granted only to persons who need them to perform their work duties and who are bound by a statutory or contractual duty of confidentiality.
How Long Will We Retain Your Personal Data?
The Operator retains the personal data of visitors and users only for as long as necessary for the purpose for which they were collected.
Retention Period for Personal Data of Website Visitors
The Operator processes your personal data based on your visit to the website for a period of 3 years from the date of the visit.
Retention Period for Personal Data of Users of the Operator’s Website Services and Features
The Operator processes your personal data based on voluntary registration on the website for the duration of the registration for the purpose of using the website’s services, and for an additional 3 years for the Operator’s internal processes.
Consent Granted by Users of the Operator’s Website Services and Features
If the Operator processes your personal data on the basis of your consent, the processing period will be the duration of the registration for the purpose of using the website’s services and an additional 3 years for the Operator’s internal processes, or until the user withdraws their consent before the expiration of the stated period.
What Are Your Rights Regarding the Processing of Personal Data?
Legislation governing the protection of personal data, in particular the EU General Data Protection Regulation (GDPR), establishes the following rights of data subjects:
- the right to clear, transparent, and understandable information about how their personal data are used and what their rights are;
- the right to withdraw consent to the processing of personal data at any time free of charge, by post, email, or in person at our address listed below;
- the right to access personal data and to receive additional information related to their processing by the Operator and, where applicable, processors;
- the right to rectification of inaccurate and incomplete personal data;
- the right to erasure of personal data, in particular if (i) they are no longer necessary for further processing; (ii) consent to their processing has been withdrawn; (iii) the data subject has legitimately objected to their processing; (iv) they were processed unlawfully; or (v) they must be erased pursuant to legal regulations;
- the right to restriction of the processing of personal data if (i) the data subject contests the accuracy of the personal data for the period necessary for the Operator to verify their accuracy; (ii) the processing is unlawful; (iii) the Operator no longer needs the personal data, but the data subject requires them for the establishment, exercise, or defense of legal claims; or (iv) the data subject has objected to the processing, pending verification of whether the Operator’s legitimate interests override those of the data subject;
- the right to object to the processing of personal data where they are processed for the purposes of the Operator’s legitimate interests;
- the right to obtain their personal data and to transfer them to another controller, subject to the conditions laid down by law;
- the right to lodge a complaint with the Personal Data Protection Authority, with its registered office at Hraničná 12, 820 07 Bratislava 27, https://dataprotection.gov.sk/uoou/sk, if the data subject believes that the Operator is breaching obligations arising from personal data protection legislation.
- Questions for contacts
- If you are interested in detailed information about your rights in the area of personal data protection, or if you have any other questions or complaints regarding the processing of personal data, please contact us by post or email.
Amendments to This Statement
If this Personal Data Protection Statement is amended, we will publish the revised statement here with an updated revision date. We recommend that you review this Statement regularly. We may also inform you of significant changes to our Statement that substantially affect our personal data protection practices by other means, such as sending an email or publishing a notice on our corporate website or social media pages, before such changes take effect.
The last update of this Personal Data Protection Statement took place on April 8, 2021.
If you have any questions, please address them to us via the contact form.
