Data protection of natural personsenshrined in Article 19 par. 3 of the Constitution of the Slovak Republic, in the sense of which everyone has the right to protection against unauthorized collection, publication or other misuse of personal data.
Rules for the protection of natural persons when processing their personal data and rules regarding the free movement of personal dataare established by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR Regulation") in connection with Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws as amended (hereinafter referred to as the "Act on the Protection of Personal Data").
In the sense of the GDPR regulation:
- the person concernedis an identified or identifiable natural person, i.e. a person who can be identified directly or indirectly, in particular by reference to an identifier such as name, identification number, location data, online identifier, or by reference to one or more elements that are specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person,
- personal datais any information relating to the data subject.
SocietyTP real estate s.r.o., registered office: Ulica 1. mája 98/13, 031 01 Liptovský Mikuláš, Slovak Republic, ID number: 50 184 482, the company is registered in the Commercial Register of the Žilina District Court, section: Sro, insert number: 65115/L as the operator hereby in related to the processing of personal data in the sense of the GDPR regulation and the Personal Data Protection Act provides the following information on the processing and protection of personal data:
Operator and contact details of the operator:
TP real estate s.r.o., registered office: Ulica 1. mája 98/13, 031 01 Liptovský Mikuláš, Slovak Republic, ID number: 50 184 482, the company is registered in the Commercial Register of the District Court of Žilina, section: Sro, insert number: 65115/L
email: info@residence-real.sk
telephone contact:+421 901 705 701
Responsible person:
The operator does not designate a responsible person.
Protection of personal data
The operator processes and keeps the personal data of the affected persons only for the time necessary to fulfill the purpose of their processing, and this through authorized persons who process them according to the operator's instructions and in compliance with the operator's security policy and applicable legal regulations in the area of personal data protection.
In order to protect personal data processed in documentary form, as well as in electronic form in the operator's information systems, the operator uses appropriate technical, organizational and personnel security measures aimed mainly at preventing unauthorized access to personal data, unauthorized or illegal processing of personal data and their protection against misuse, damage, destruction, impairment, loss, change, theft, or unauthorized provision, and ensuring the security of the operator's information systems, including data recovery in the case of a security incident.
Purpose of personal data processing:
The operator processes personal data for the following purposes:
- provision of real estate services and other services related to the sale, rental and purchase of real estate in agreement and according to the conditions stipulated in the contract concluded with the client;
- fulfillment of obligations, rights and obligations arising from contracts concluded, including pre-contractual relationships, records of contracts
- inclusion of clients in the operator's database for sending informational newsletters
- fulfillment of the operator's obligations arising from special laws in related to the performance of the operator's business activity
- management of accounting and personnel agenda (including pre-contractual relations); fulfillment of the employer's obligations related to the employment relationship or a similar employment relationship (e.g. based on agreements on work performed outside the employment relationship)
Legal basis for personal data processing:
The legal basis for the processing of personal data by the operator is:
- fulfillment of the contract concluded between the operator and the client when processing personal data for the purpose stated in points A, B;
- the consent of the person concerned when processing personal data for the purpose specified in point C; a
- fulfillment of the obligation established by a special law when processing personal data for the purpose stated in items D and E.
Categories of affected personal data:
During the performance of its business activity, the operator processes the personal data of the affected persons of the following categories:
- the operator's clients included in the operator's database;
- clients of the operator with whom he concluded a contract, the subject of which is the provision of real estate services;
- employees of the operator and their family members
Beneficiaries / Beneficiary categories:
The recipients of personal data processed by the operator are the following entities:
- recipients of personal data processed for the purpose stated in points A, B:
- real estate brokers of the operator who have concluded an intermediary contract with the operator in accordance with the GDPR regulation and the Personal Data Protection Act
- bodies of state administration and public power
- authorities active in criminal proceedings
- courts, executors, lawyers
- financial advisors, financial institutions
- experts from real estate valuation department
- providers of services associated with property ownership
- apartment building manager
- recipients of personal data processed for the purpose specified in point C:
- real estate brokers of the operator who have concluded an intermediary contract with the operator in accordance with the GDPR regulation and the Personal Data Protection Act
- recipients of personal data processed for the purpose stated in points D and E:
- bodies of state administration and public power
- authorities active in criminal proceedings
- courts, bailiffs
Recipients of personal data processed by the operator may also be entities providing services to the operator, e.g. IT services, bookkeeping and payroll services, postal services (hereinafter referred to as "External entities"). External entities selected by the operator are entities that, due to their professional, technical, organizational and personal competence, guarantee the safety and protection of processed personal data in accordance with internal regulations of the operator and conditions established by applicable legal regulations in the area of personal data protection.
Transfer of personal data to a third country and/or international organization:
The transfer of personal data processed by the operator to a third country and/or international organization does not take place.
Period of storage of personal data:
The operator processes and stores the personal data of the affected persons in paper form, as well as in electronic form in information systems used by the operator in the performance of its business activities.
Personal data processed by the operator based on the legal basis:
- the consent of the person concerned,i.e. personal data processed by the operator for the purpose specified in point C, the operator is entitled to store only during the period of validity of the consent to the processing of personal data granted to the operator by the person concerned, i.e. from the date of granting consent to the processing of personal data until the expiration of the period for which the consent was granted, or until the withdrawal of consent to the processing of personal data, whichever event occurs first;
- fulfillment of the contract,i.e. personal data processed by the operator for the purpose specified in point A and B, the operator is entitled to store only during the duration of the contractual relationship concluded between the operator and the affected person and ten years after the termination of the contractual relationship;
- fulfillment of a legal obligation,i.e. personal data processed by the operator for the purpose specified in point D a E, the operator is authorized to store only during the period defined by a special law, on the basis of which the operator processes personal data in connection with Act no. 395/2002 Coll. on archives and registries and on the addition of certain laws as amended
Automated decision making, including profiling
The operator does not carry out automatic decision-making or profiling in the sense of the GDPR regulation and the Personal Data Protection Act.
Source from from which personal data originates:
Personal data obtained by the operator come from the following sources:
- directly from natural persons with whom the operator has concluded a contract,
- directly from natural persons who provided the operator with their personal data and granted the operator consent to their processing
- directly from natural persons who have an employment-legal relationship with operator
Rights of the data subject
As a data subject, you have the right to:
- request from the operator access to personal data concerning the person concerned
As a data subject, you have the right to obtain confirmation from the operator as to whether personal data concerning you is being processed, and if so, you have the right to obtain access to this personal data and the following information:
- purposes of personal data processing,
- categories of processed personal data,
- recipients or categories of recipients to whom personal data have been or will be provided, especially recipients in third countries or international organizations,
- period of storage of personal data; if this is not possible, information on the criteria for its determination,
- the existence of the right to request from the operator the correction of personal data relating to the person concerned or its deletion or restriction of the processing of personal data or the right to object to such processing of personal data,
- the right to file a complaint with a supervisory authority, i.e. Office for the Protection of Personal Data of the Slovak Republic in the sense of Article 34 of the GDPR regulation,
- the right to file a motion to initiate proceedings pursuant to § 100 of the Personal Data Protection Act,
- any available information about the source of personal data, if the personal data was not obtained from the data subject,
- in if there is automatic decision-making, including profiling, at least meaningful information about the procedure used, as well as the meaning and anticipated consequences of such processing for the person concerned,
- if personal data is transferred to a third country or an international organization, the right to information about adequate guarantees according to Article 46 of the GDPR regulation regarding the transfer.
Upon request, the operator will provide you with a copy of the personal data that is being processed about you. For any additional copies requested by you as a data subject, the operator may charge a reasonable fee corresponding to administrative costs. If you have submitted a request by electronic means, the information will be provided in a commonly used electronic form, unless you have requested another method. The right to obtain a copy must not adversely affect the rights and liberties of others.
- to correct personal data
As a data subject, you have the right to have the operator correct incorrect personal data concerning you without undue delay. With regard to the purposes of processing, you have the right to supplement incomplete personal data, including by providing a supplementary statement.
- to delete personal data
As a data subject, you have the right to obtain from the operator the deletion of personal data concerning you without undue delay, and the operator is obliged to delete personal data without undue delay if any of the following reasons are met:
- personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;
- as a data subject, you revoke the consent on the basis of which the processing is carried out, and if there is no other legal basis for the processing;
- as a data subject, you object to the processing according to Article 21 par. 1 of the GDPR regulation and there are no legitimate reasons for processing or you object to processing according to Article 21 par. 2 of the GDPR regulation;
- personal data was processed illegally;
- personal data must be deleted in order to fulfill a legal obligation under the law of the Union or the law of the Slovak Republic;
- personal data were obtained in connection with the offer of information society services according to Article 8, paragraph 1 of the GDPR regulation.
As a data subject, you cannot exercise the right to delete personal data in the event that the processing of personal data is necessary for the purposes specified in Article 17, paragraph 3 of the GDPR regulation.
- to limit the processing of personal data
As a data subject, you have the right to have the controller restrict the processing of personal data in one of the following cases:
- as a data subject, you contest the correctness of personal data during the period allowing the operator to verify the correctness of personal data;
- the processing of personal data is against the law and as a data subject you object to the deletion of personal data and request a restriction of their use instead;
- the operator no longer needs personal data for the purposes of processing, but you need them to prove, exercise or defend legal claims;
- as a data subject, you have objected to the processing according to Article 21 par. 1 of the GDPR regulation, until it is verified whether the legitimate reasons on the part of the operator outweigh the legitimate reasons of you as the person concerned.
If the processing of personal data has been limited according to the previous paragraph, the operator is entitled to process such personal data, with the exception of storage, only with your consent or to demonstrate, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or the Slovak Republic.
The operator is obliged to inform in advance the person concerned, who has achieved the limitation of personal data processing, about the fact that the limitation of personal data processing will be cancelled.
- to object to the processing of personal data
As a data subject, you have the right to object at any time, for reasons related to your specific situation, to the processing of personal data concerning you, which is carried out on the basis of public interest or legitimate interest in the sense of Article 6 par. 1 letter e) or f) of the GDPR regulation, including objection to profiling based on the said provisions. The operator may not further process personal data, unless it demonstrates the necessary legitimate reasons for processing that outweigh your interests, rights and freedoms, or reasons for proving, exercising or defending legal claims.
If personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such marketing, including profiling to the extent that it is related to such direct marketing. If you object to processing for direct marketing purposes, personal data may no longer be processed for such purposes.
- on portability of personal data
If the processing of personal data is based on consent to the processing of personal data or on the fulfillment of a contract to which you are a party, and if the processing of personal data is carried out by automated means, you have the right to obtain personal data relating to you that you have provided to the operator in a structured, commonly used and machine-readable format, and you have the right to transfer this data to another operator without the operator to whom you have given these personal data provided, defended.
When exercising your right to data portability, you have the right to transfer personal data directly from one operator to another operator, as long as this is technically possible. The exercise of the right to portability of personal data does not affect Article 17 of the GDPR regulation governing the right to erasure of personal data. The right to portability of personal data must not have adverse consequences on the rights and freedoms of others.
- file a complaint with the supervisory authority, i.e. Office for the Protection of Personal Data of the Slovak Republic
Without prejudice to any other administrative or judicial remedies, you have the right to file a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or in the place of the alleged violation, if you believe that the processing of personal data concerning you is contrary to the Regulation and/or Act on Personal Data Protection.
The supervisory authority in the Slovak Republic is:
Personal Data Protection Office of the Slovak Republic
seat: Hraničná 12, 820 07 Bratislava, Slovak Republic
tel.: +421 /2/ 3231 3214
website:www.dataprotection.gov.sk
e-mail:statny.dozor@pdp.gov.sk.