EN 
SK 
DE Privacy Policy
Personal data processing principles and data protection system under the GDPR
The controller of your personal data pursuant to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as GDPR) is BIOM-R s.r.o., Nad lúčkami 41, 841 05 Bratislava, ID No.: 36 666 092.
The contact details of the administrator are:
Email: kubes@biom-r.com
Phone: 0903 282 734
What is personal data?
means any information relating to an identified or identifiable natural person ('data subject'); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
What is personal data processing?
Processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The Controller (Administrator) is not obliged to appoint/designate a Responsible Person.
Sources and categories of personal data:
The controller processes personal data (directly from you) that you have provided to it or personal data that it has obtained on the basis of the fulfilment of your order.
Your identification and contact details and data necessary for the performance of the contract.
Lawful basis and purpose of processing:
The lawful reason for the processing is:
Performance of the contract between you and the controller pursuant to Article 6(1)(b) GDPR
The legitimate interest of the controller in providing direct marketing pursuant to Article 6(1)(f) of the GDPR.
Your consent to the processing of your personal data for the purpose of providing direct marketing pursuant to Article 6(1)(a) of the GDPR.
The purpose of processing personal data is:
Handling your order and exercising the rights and obligations arising from the contractual relationship. When placing an order, personal data is required for the successful processing of the order pursuant to Article 6(1)(b) of the Regulation (this includes the subsequent payment, delivery of the service, handling of a complaint, etc.); the processing of the customer's personal data takes place without the customer's consent, since the legal basis for the processing of their personal data for the purposes of the performance of the contract is the specific contract concluded between the customer and the controller. The provision of personal data is a necessary requirement for the conclusion and performance of the contract; without the provision of personal data, it is not possible to conclude the contract or for the controller to fulfil its terms and conditions.
Marketing offers: if you have agreed to receive our newsletter by email ("Newsletters"), we use your contacts to send you advertising or commercial communications.
Social networks: Promotion of the company through Facebook, Instagram, YouTube, LinkedIn
Retention period:
The controller shall store the personal data:
For as long as necessary to exercise the rights and obligations arising from the contractual relationship between you and the controller and to assert a claim arising from that contractual relationship.
For as long as consent to the processing of personal data for marketing purposes is withdrawn
After the expiration of the period of storage of personal data resulting from Act No. 395/2002 Coll., the Act on Archives and Registers and on the Amendment of Certain Acts, the operator shall delete the personal data.
Recipients of personal data
Who is the recipient?
The recipient is anyone to whom the personal data is disclosed, regardless of whether they are a third party. A public authority which processes personal data based on a specific regulation shall not be considered a recipient.
They are persons who are involved in the delivery of goods, services, making payments under a contract.
The controller does not provide, disclose or make available personal data to third countries.
Terms and conditions for the security of personal data
The controller declares that it has taken appropriate personal, technical, and organizational measures to ensure the protection of personal data.
The controller has taken technical measures to secure the data storage and storage of personal data in file form.
The controller declares that the personal data can only be accessed by persons authorized by the controller.
Your rights:
Under the conditions set out in the GDPR you have:
Right of access to your personal data under Article 15 GDPR
Right to rectification of personal data under Article 16 GDPR
Right to restriction of processing
Right to erasure under Article 17 GDPR
Right to object under Article 21 GDPR
The right to the transfer of personal data under Article 21 of the GDPR
The right to withdraw consent (electronically or to a mailing address)
The right to lodge a complaint with the Data Protection Authority if you believe that your data protection rights have been violated.
You also have the right to lodge a complaint with the Data Protection Authority if you believe that your data protection rights have been violated.
How can you exercise your rights?
Right of access to data
You have the right to know whether we are processing your personal data. If we are processing it, you can ask us for access to it. Upon your request, we will issue a confirmation with information about the processing of your personal data. You can submit your request electronically, to the following email address kubes@biom-r.com or by post to: BIOM-R s.r.o., Nad lúčkami 41, 841 05 Bratislava, ID No.: 36 666 092
Right to repair
You have the right to have your personal data processed by us to be correct, complete and up to date. If your personal data is incorrect or outdated, you can ask us to correct or complete it electronically at the email address kubes@biom-r.com or by mail to BIOM-R s.r.o., Nad lúčkami 41, 841 05 Bratislava, ID No.: 36 666 092
Right to erasure
In certain circumstances, you have the right to have your personal data erased by us. You can ask us to delete your data at any time. We will delete your personal data if:
we no longer need your personal data for the purpose for which you provided it to us,
you withdraw your consent,
you object to the processing of your personal data,
we process your personal data unlawfully,
personal data must be erased in order to comply with a legal obligation,
if you are a child, or the parent of a child, who has consented to the processing of personal data via the internet.
Right to restriction of processing
You can ask us to restrict the processing of your personal data. If we comply with your request, we will only store your personal data and will not process it further. Restriction of the processing of your data will occur if
notify us that your personal data is incorrect until we have verified its accuracy,
we are processing your personal data unlawfully, but you do not consent to its erasure and instead request that we only restrict the processing of your personal data,
we no longer need your data, but you need it to establish,
exercise or defend your rights you object to the processing of your personal data until we have verified that our legitimate interests outweigh your reasons.
Right to data portability
You have the right to request that we provide you with your personal data in an electronic format (e.g. an XML or CSV file) that allows you to easily transfer your data to another company. You can also ask us to transfer your personal data directly to the company of your choice. We will comply with your request if you have provided us with the personal data directly and have given us your consent to process it.
Right to object
You have the right to object to us processing your personal data. If we process your personal data in the following cases:
because of our legitimate interest,
creating a customer profile,
you can object to their processing if you have personal grounds for doing so.
How can you exercise these rights?
You can contact us with your request in any of the following ways:
by email : kubes@biom-r.com by post to BIOM-R s.r.o., Nad lúčkami 41, 841 05 Bratislava, ID No.: 36 666 092
If you believe that your personal data protection rights have been violated, you have the right to file a complaint with the supervisory authority, the Office for Personal Data Protection, at the following address
Hraničná 12
820 07 Bratislava 27
Slovak Republic
ID:
ID: 36064220
TAX ID: 2021685985
Secretariat of the Authority:
+421 /2 3231 3214
E-mail: statny.dozor@pdp.gov.sk
Registry: Monday - Thursday: 8:00 - 15:00
Friday: 8:00 - 14:00
In view of the epidemiological situation in the Slovak Republic, the Office recommends making submissions by mail or electronic services (www.slovensko.sk). Personal submissions can be made, where necessary, during normal working hours at the Registry.
