Information on the processing of personal data of the data subject
provided in accordance with the provisions of Articles 12 and 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the “GDPR”).
This document contains information on the processing of personal data of data subjects who are clients of the company IS Agency s.r.o. or other persons who use the company’s website (hereinafter referred to as the “Data Subject”).
1. Controller
1.1 The controller is the company IS AGENCY s.r.o., with its registered office at Prostějovská 9324/95, 08001 Prešov, Company ID: 55708307, registered in the Commercial Register of the Municipal Court of Prešov, section Sro, file no. 46527/P (hereinafter referred to as “IS Agency”). The contact person of IS Agency is Ivan Sopko, tel. no.: +421 949 021 863, e-mail: sopko@is-agency.sk.
2. Purpose of processing personal data
2.1 The purpose of processing the personal data of the Data Subject is:
2.1.1 subscription to news (newsletter) – informing the Data Subject about new products/services or changes to products/services. The newsletter may also include direct marketing of products and services provided by IS Agency, such as opening a training course or job position (hereinafter referred to as “Newsletter”).
2.1.2 contact form – communication of the request that the Data Subject addressed to IS Agency (hereinafter referred to as “Contact Form”).
2.1.3 Registration in the applicant database – the applicant consents to be included in the registration of job applicants at IS Agency for a period of 3 months or 2 years
3. Scope of processed personal data
3.1 The scope of the personal data of the Data Subject processed by IS Agency is specific depending on the specific purpose of processing personal data specified in Article 2 of this document.
3.2 For the purpose of processing the Newsletter, IS Agency processes the personal data of the Data Subject in the following scope: e-mail address.
3.3 For the purpose of processing the Contact Form, IS Agency processes the personal data of the Data Subject in the following scope: name, e-mail address, or telephone number and information about the business name of the company on behalf of which the Data Subject contacts IS Agency.
4. Legal basis for processing personal data
4.1 The legal basis for processing personal data of the Data Subject by IS Agency is specific depending on the specific purpose of processing personal data specified in Article 2 of this document.
4.2 For the purpose of processing the Newsletter, IS Agency processes the personal data of the Data Subject on the legal basis – the consent of the Data Subject in accordance with Article 6, point 1, letter a) of the GDPR. The Data Subject expressed his/her consent to the processing of his/her personal data by entering and sending his/her e-mail address in the reserved area on the IS Agency website.
4.3 For the purpose of processing the Contact Form, IS Agency processes the personal data of the Data Subject on the legal basis – the consent of the Data Subject in accordance with Article 6, point 1, letter a) of the GDPR. The Data Subject expressed his/her consent to the processing of his/her personal data by entering and sending his/her personal data in the reserved area on the IS Agency website.
5. Recipients or categories of recipients of personal data
5.1 When processing personal data, IS Agency uses the services of other companies (processors) that process personal data on behalf of IS Agency. IS Agency does so in compliance with the conditions under Art. 28 GDPR, only on the basis of a written contract and after thoroughly ensuring that the processor meets all technical and organizational requirements for the processing of personal data.
5.2 IS Agency processes e-mail addresses through the tool of Rocket Science Group LLC d/b/a Mailchimp, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, Georgia 30308.
5.3 IS Agency does not provide or make available the personal data of the Data Subject to any other third parties.
5.4 IS Agency does not disclose the personal data of the Data Subject
6. Transfer of personal data to third countries
6.1 As part of the processing of personal data by IS Agency’s intermediaries, the transfer of the Data Subject’s personal data to third countries may take place, but always only in compliance with the conditions for the secure transfer of personal data to third countries under the GDPR, in such a way as not to jeopardize the level of protection of the Data Subject’s personal data.
7. Duration of processing personal data
7.1 The duration of processing the Data Subject’s personal data by IS Agency is specific depending on the specific purpose of processing personal data specified in Article 2 of this document.
7.2 For the purpose of processing the Newsletter, IS Agency processes the Data Subject’s personal data for the period until the Data Subject unsubscribes from the Newsletter.
7.3 For the purpose of processing the Contact Form, IS Agency processes the Data Subject’s personal data for the period of resolving the Data Subject’s request.
8. Automated processing of personal data
8.1 The personal data of the Data Subject are not subject to automated decision-making, including profiling.
9. Further information on the processing of personal data
9.1 IS Agency processes personal data of the data subjects in accordance with the GDPR, in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, as amended, as well as with other relevant legal regulations on the protection of personal data.
9.2 IS Agency processes the personal data of the Data Subject while complying with a high standard of personal data protection. For this purpose, IS Agency has adopted technical, organizational, personnel and other security measures in accordance with Art. 32 GDPR.
10. Rights of the Data Subject
10.1 The Data Subject has the following rights pursuant to the provisions of Art. 15 to Art. 21 and Art. 34 GDPR:
10.1.1 Right to access personal data: The Data Subject has the right to obtain from IS Agency confirmation as to whether personal data concerning him or her are being processed. The Data Subject has the right to access these personal data. The data subject has in particular the right to information about the purpose of the processing, the period of processing, to whom the data were provided, whether they were transferred to another country, etc.
10.1.2 Right to rectification of personal data: The data subject has the right to have IS Agency correct incorrect personal data concerning him or her without undue delay. Taking into account the purpose of the processing of personal data, the data subject has the right to have incomplete personal data completed.
10.1.3 Right to erasure (right to be forgotten): The data subject also has the right to obtain from IS Agency the erasure of personal data concerning him or her without undue delay, and the latter is obliged to erase personal data without undue delay if one of the following reasons is met:
- the personal data is no longer necessary for the purpose for which it was collected or otherwise processed;
- The data subject withdraws the consent on the basis of which the personal data are processed and there is no other legal basis for the processing of the personal data;
- The data subject objects to the processing of the personal data and there are no overriding legitimate grounds for the processing of the personal data or The data subject objects to the processing of the personal data for the purpose of direct marketing;
- The personal data are processed unlawfully;
- The personal data must be erased in order to comply with a legal obligation under a law or an international agreement to which the Slovak Republic is bound; or
- and the personal data were obtained in connection with the offer of information society services.
10.1.4 Right to restriction of processing: The data subject has the right to obtain from IS Agency restriction of processing of personal data if:
- The data subject objects to the accuracy of the personal data, for a period enabling IS Agency to verify the accuracy of the processed personal data;
- the processing of personal data is unlawful and the Data Subject objects to the erasure of personal data and requests the restriction of their use instead;
- IS Agency no longer needs the personal data for the purpose of processing the personal data, but the Data Subject needs them for the exercise of legal claims; or
- The Data Subject objects to the processing of personal data, pending verification of whether the legitimate grounds of IS Agency override those of the Data Subject.
- IS Agency is obliged to inform the Data Subject whose processing of personal data is restricted before the restriction of processing of personal data is lifted.
10.1.5 Notification obligation in connection with the correction or erasure of personal data or the restriction of processing: Based on the provisions of Art. 19 GDPR, IS Agency is obliged to inform the Data Subject of the recipients to whom IS Agency has notified the correction or erasure of personal data or the restriction of processing of personal data, if requested by the Data Subject.
10.1.6 Right to data portability: The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to IS Agency, in a structured, commonly used and machine-readable format and shall have the right to transmit those personal data to another controller.
10.1.7 Right to object to processing of personal data: The data subject shall have the right to object to processing of personal data concerning him or her, on grounds relating to his or her particular situation, on the grounds that the processing of personal data is necessary for the performance of a task carried out in the public interest or on the grounds that the processing is necessary for the purposes of the legitimate interests pursued by IS Agency or a third party, including profiling based on these provisions. IS Agency shall not further process the personal data unless it demonstrates compelling legitimate interests in the processing of personal data which override the rights or interests of the data subject or the exercise of legal claims. The data subject has the right to object to the processing of personal data concerning him or her for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing.
10.1.8 Right to object and automated individual decision-making: The data subject has the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
10.1.9 Right to communication of a data protection breach personal data: In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons, IS Agency shall notify the personal data breach to the Data Subject without undue delay.
10.1.10 Right to lodge a complaint: The Data Subject has the right to lodge a complaint or a motion to initiate proceedings with the supervisory authority, which is the Office for Personal Data Protection, if the person’s rights are directly affected.
10.2 Provision of information to the Data Subject:
– IS Agency shall provide the Data Subject, upon request, with information pursuant to Art. 13, Art. 15 to Art. 21 and Art. 34 of the GDPR, which relate to the processing of his or her personal data. The information shall be provided in paper or electronic form, generally in the same form in which the request was submitted. If requested by the Data Subject, IS Agency may also provide the information orally, if the Data Subject proves his or her identity in another way. IS Agency shall provide the Data Subject with cooperation in exercising the rights under Art. 15 to Art. 21 GDPR.
– IS Agency shall provide the Data Subject with information within one month of receipt of the request. In justified cases, IS Agency may extend the said period by another two months, including repeatedly, taking into account the complexity and number of requests. IS Agency shall inform the Data Subject of any such extension within one month of receipt of the request, together with the reasons for the extension of the period.
– IS Agency shall provide the information free of charge.
– If the request of the Data Subject is manifestly unfounded or disproportionate, in particular due to its repetitive nature, IS Agency may request a reasonable fee taking into account the administrative costs of providing the information or a reasonable fee taking into account the administrative costs of notification or a reasonable fee taking into account the administrative costs of taking the requested action, or refuse to act on the request.
10.3 In case of exercising their rights or requesting any other information, the Data Subject has the option of contacting the IS Agency contact person specified in point 1.1 of this document.
Cookies
In order to ensure the proper functioning of our website, we sometimes store small data files, so-called cookies, on your device. This is a common practice for most websites.
What are cookies?
A cookie is a small text file that a website stores on your computer or mobile device when you browse it. Thanks to this file, the website stores information about your actions and preferences (such as login name, language, font size and other display settings) for a certain period of time, so that you do not have to re-enter them the next time you visit the site or browse its individual pages. Cookies do not contain harmful computer programs, malware or spyware.
How do we use cookies?
We use cookies to collect anonymous statistical information about visitors, remember user settings, better tailor advertisements to visitors’ interests and for the necessary functionality of websites.
The website also uses persistent cookies, which are stored on the end device in order to provide information necessary for web analysis and statistics (which pages were visited, how much time was spent on them, the date of individual visits to the portal, the number of visits to the Internet portal, the time interval of use, etc.).
We provide cookies to third parties (Facebook, Google) for the purpose of web analysis and statistics and creating specific audiences for remarketing and personalized advertising.
Cookies are processed on the legal basis of the consent of the Data Subject in accordance with Art. 6, point 1, letter a) GDPR. The Data Subject expressed their consent to the processing of their personal data by clicking on the consent in the IS Agency pop-up window, or other customized cookie settings on the IS Agency website.
The data subject may withdraw his/her consent to the processing of other cookies by changing the cookie settings on the IS Agency website.
IS Agency uses information obtained from cookies through other companies (processors): Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and Google Ireland Ltd. Gordon House, Barrow Street, Dublin, D04 E5W5, Dublin, Ireland. As part of the processing of personal data by IS Agency processors, the personal data of the Data Subject may be transferred to third countries, but always only in compliance with the conditions for the secure transfer of personal data to third countries under the GDPR, so as not to jeopardize the level of protection of the Data Subject’s personal data.
The Data Subject can find further information on the processing of personal data in point 9 of this document. The Data Subject can find information on the rights of the Data Subject in point 10 of this document.
How to control cookies
You can control and/or delete cookies at your discretion – see aboutcookies.org for details. You can delete all cookies stored on your computer and you can set most browsers to prevent them from storing them. However, in this case you will probably have to manually adjust some settings each time you visit the website and some services and features will not work
Prešov, on 21.1.2024