Data Protection
The protection of personal data at the data controller INGMETAL s.r.o., with its registered office at Vysielač 586, Petrovany 082 53, Company ID: 31 666 949, registered in the Commercial Register of the District Court Prešov, Section: Sro, Insert No. 929/P (hereinafter referred to as the "controller"), is ensured in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the "Regulation") and Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (hereinafter referred to as the "Act"). We care about the protection of your personal data, therefore we inform you about how we process your personal data.
As the basic legal framework for setting up data protection, the applicable and effective wording of the Regulation (EU) 2016/679 and Act No. 18/2018 Coll. on the Protection of Personal Data will be used. In addition to these regulations, the provisions of ISO 27001, ISO 27000, ISO 31000, and possibly other standards will be taken into account for this purpose.
The contact details of the controller are:
Address: INGMETAL s.r.o., Vysielač 586, Petrovany 082 53, Company ID: 31 666 949
Email: rusinkod@ingmetal.sk
Phone: +421 51 77 34 336
What Data We Collect
When providing our services and selling goods, we collect personal data from you, as the data subject, to the extent necessary for the purpose of concluding a contractual relationship and fulfilling the rights and obligations arising from it. We collect your data for a limited period in accordance with the applicable legal regulations.
The controller processes the personal data you have provided or the personal data obtained by the controller based on fulfilling your order.
The controller processes your identification and contact data, as well as data necessary for the performance of the contract.
The Legal Basis for Processing Personal Data Is:
- The performance of the contract between you and the controller pursuant to Article 6(1)(b) of the GDPR,
- The processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract.
Rights of Data Subjects
The data subject, regardless of the legal basis for processing personal data, has the right to access personal data, the right to rectification, erasure, restriction of processing, and the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, or the right to submit a proposal to initiate proceedings on the protection of personal data.
Right to Access Personal Data
This right means that you are entitled to request confirmation from us as to whether or not personal data concerning you is being processed. If we do process such personal data, you have the right to access your personal data and information about:
- Why we process your personal data (the purpose of processing),
- What data we process about you (the category of personal data),
- To whom your personal data may or will be disclosed (identification of recipients or categories of recipients),
- How long we will retain your personal data (the retention period),
- That you have the right to request rectification, erasure, or restriction of processing of your personal data, or that you may object to the processing of personal data,
- That you have the right to submit a proposal to initiate proceedings on the protection of personal data under the Act, or
- The right to file a complaint with the supervisory authority under the Regulation, which is the Office for Personal Data Protection of the Slovak Republic,
- The source of your personal data, if you did not provide it directly to us,
- Whether we use automated decision-making, including profiling, according to Section 28(1) and (4) of the Act; in particular, information on the logic involved, as well as the significance and potential consequences of such processing for you,
- The appropriate safeguards relating to the transfer, in case your personal data is transferred to a third country or international organization.
This right of access also allows you to obtain a copy of your personal data that we process about you. We will provide you with a copy of your personal data that we process. However, if you request repeated copies of your personal data, we may charge a reasonable administrative fee related to your request for a copy of your personal data.
Right to Rectification of Personal Data
As part of our service provision conditions, we inform you to provide us with correct data. However, if it happens that we process incorrect data about you, the right to rectification means that you are entitled to request that we correct inaccurate personal data concerning you. Also, considering the purpose of the processing, you have the right to have your incomplete personal data completed.
Right to Erasure of Personal Data (Right to be Forgotten)
You have the right to have personal data concerning you erased if at least one of the following reasons applies:
- Your personal data is no longer necessary for the purpose for which we obtained or otherwise processed it,
- You have withdrawn your consent to the processing of personal data based on which we process your personal data, and there is no other legal basis for further processing,
- You object to the processing of personal data carried out on the basis of public interest or legitimate interest, and no overriding legitimate grounds for processing exist,
- Your personal data was processed unlawfully,
- Your personal data must be erased to comply with an obligation under Slovak or European Union law,
- Your personal data was collected in connection with the offer of information society services according to Section 15(1) of the Act.
Your right to erasure of personal data may not be fulfilled in a specific case, depending on the particular circumstances, if the processing of personal data is necessary for:
- The exercise of our right to freedom of expression or the right to information,
- Compliance with a legal obligation,
- The establishment, exercise, or defense of legal claims,
- Archiving purposes, historical research, or statistical purposes, where it is likely that the right to erasure would render impossible or seriously impair the achievement of the objectives of such processing.
Right to Restriction of Processing of Personal Data
You have the right to request that we restrict the processing of personal data concerning you if at least one of the following conditions is met:
- During the period enabling us to verify the accuracy of your personal data, you challenge the accuracy of the personal data,
- The processing is unlawful, and you oppose the erasure of the personal data and request the restriction of its use instead,
- We no longer need your personal data for any of the processing purposes, but you require them to establish, exercise, or defend legal claims,
- You have objected to the processing of personal data until the verification whether our legitimate grounds override your legitimate grounds.
Right to Data Portability
If our right to process your personal data is based on your consent or on the performance of contractual obligations arising from the contract we concluded with you, you have the right to request the transfer of the data concerning you that you provided to us to another data controller.
Right to Withdraw Consent
If we process your personal data on the legal basis of consent from the data subject, you have the right to withdraw this consent at any time, even before the expiration of the period for which the consent was granted. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to Object
If you have reasons related to your specific situation, you have the right to object to the processing of your personal data if the legal basis for such processing is our legitimate interest. However, if our legitimate interest in processing outweighs your personal interest, we may continue to process your data, despite your objection to the processing. We are also entitled to continue processing your data if it is necessary to establish, exercise, or defend our legal claims.
Retention Period of Personal Data
The controller retains personal data:
- For the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to enforce claims from these contractual relationships (for 10 years from the termination of the contractual relationship).
After the expiration of the personal data retention period, the controller will erase the personal data.
How to Exercise Your Rights
You can exercise your aforementioned rights by email at rusinkod@ingmetal.sk.
Please include your name, surname, email address, and, if applicable, your permanent address in your request. If you do not provide this information, we will not be able to fulfill your request. We require this information from you to verify your identity and to ensure that your personal data is not disclosed to unauthorized persons.
If, as a data subject, you do not have full legal capacity, your rights under the Regulation and the Act may be exercised by your legal representative. The rights of a deceased data subject may be exercised by a close person under the Regulation and the Act. If your requests as a data subject are manifestly unfounded or excessive, especially due to their repetitive nature, we may charge a reasonable fee considering the administrative costs of providing information or refuse to act on the request.
Providing Personal Data to Third Parties
In certain cases, other persons with whom we cooperate may have access to your personal data. To ensure specific processing operations that we cannot handle on our own, we use third-party services. These third parties include, for example:
daren & curtis, s.r.o., Company ID 36755311
It is possible that in the future, the list of these third parties will expand or contract to include or exclude certain third parties.
If we, as the controller, transfer the obtained personal data of natural persons to another person acting as a processor, we are obliged to conclude a special contract with each such person acting as a processor or incorporate the relevant provisions under Act No. 18/2018 into a framework contract, or to prepare an addendum to this contract.
Erasure of Personal Data
The controller will ensure the erasure of the provided personal data from the information system upon withdrawal of the user's consent to the processing of personal data or after the expiration of the retention period.
Data Protection Officer
The controller has not appointed a data protection officer.
Disclosure and Transfer to Third Countries
Your personal data is not disclosed or transferred to third countries.
Profiling and Automated Decision-Making
Your personal data is not subject to automated decision-making or profiling.
Security
Achieving the highest possible protection of our clients' personal data is a high priority for us, and in addition to our existing business objectives, increased attention will be paid to this area. Technical and organizational measures that will be used will be carefully selected considering the scope of personal data processing and our technical and personnel capabilities, but always in such a way that these measures are maximally effective and comply with the applicable and effective legal regulations in the Slovak Republic and the EU.
Cookies
Our website uses cookies to improve the functioning of our website and to enhance search results. Some sections of our website use cookies to better understand you and to offer you better individual search options.
What Are Cookies?
Cookies are small text files containing the name of the visited site, their validity, and a predefined value. They are stored in your browser folder. When you revisit the website that created the cookie, it can be sent back by the browser. The cookies we use do not harm your computer or other devices used to browse the internet.
What Cookies Do We Use?
- Essential – They allow the use of essential functions such as logging in as a registered user or pre-filling forms. If you disable these cookies, we cannot guarantee the full functionality of our website.
- Operational and Functional – Necessary for providing services or remembering settings to ensure maximum comfort during your visit and subsequently improving its functionality and appearance. These cookies do not collect information that could be used for marketing purposes, nor do they remember where you have been on the internet. If you disable these cookies, we cannot guarantee the full functionality of our website.
How Can I Disable Cookies?
If you do not wish to receive cookies from our website, you can set your browser to alert you when you receive a cookie, so you can decide whether to accept it or not. However, please note that if you disable cookies in your browser, you will not be able to fully utilize some of our website's features.
How to File a Complaint?
As a data subject, you have the right to file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava, phone: +421 2 323 132 14, email: statny.dozor@pdp.gov.sk, if you suspect that your personal data is being processed in violation of applicable legislation.
These rules take effect on 17.07.2024.
