Personal data protection policy

This information on personal data protection and privacy applies to you and your personal data because you are our customer. Our company acts as the controller when processing your personal data.

We want to explain to you how we will use personal data that we obtain from you or from third parties during the duration of our contractual relationship or after its termination.

With this document, we also want to fulfill our obligation to provide information under Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 Coll. of November 29, 2017 on the protection of personal data and on the amendment of certain laws

Controller identification data:
Meander invest s.r.o.
M. R. Štefánika 1821
026 01 Dolný Kubín
IČO: 44 820 313
IČ DPH: SK2022842404
www.meanderoravice.sk

We process the following data:

• Personal contact details. For example, your name, surname, permanent address, address for sending documents, e-mail address, contact phone number, date of birth.
• Business contact details. For example, the address of the company you represent, work email address and phone number.
• Contract details. For example, the content of the contract concluded with our company along with all its annexes, the scope of services provided, the type of vehicle, its designation.
• Payment data.
• Correspondence and communication data. For example, e-mail correspondence, Internet data transmissions and IP address.
• Access rights. Your access rights to various applications within the IT infrastructure.
• Registration data, including access password.
• Security information.
• Camera system recordings.

We will process your data for the following purposes:

• Provision of contractual services. We must ensure that our customers are registered according to special regulations. The legal basis is the fulfillment of the controller's legal obligation.
• Loyalty program. Customer records and sending messages about the latest offers and services related to membership in our program. The legal basis is the contract concluded between us and the legitimate interest of the controller.
• Direct marketing. We deal with how to improve the development of our services and create tailor-made offers. The legal basis is the legitimate interest of the controller.
• Taxes and accounting. In order to fulfill the obligations arising from the provisions of the tax law and other regulations related to the fulfillment of financial obligations, we are obliged to process certain personal data. The legal basis is compliance with legal obligations.
• Security and threats to operations and networks. We check the functionality, security and stability of our network, of which you are a participant. The legal basis is the fulfillment of legal obligations and the legitimate interest of the controller.
• At the same time, we have a camera system installed in our operation to protect you. The legal basis is the controller's legitimate interest.
• Dispute resolution and misconduct investigation. We may process personal data to resolve disputes, complaints or legal proceedings, or if we suspect a crime that we would like to investigate further. The legal basis is the fulfillment of legal obligations and the legitimate interest of the controller.
• Legal compliance. We may have to process your personal data to comply with the law (e.g. matching your name and surname against the names on the so-called lists of designated parties and compliance with anti-money laundering legislation) or to comply with a court order.
• Marketing consents. Other data may also be used, but only on the basis of special consents that we will ask you for in advance. The legal basis is the consent we have obtained from you.
• Customer administration. We keep records of all our customers and their services. Based on the analysis of our documentation, we also make strategic decisions regarding offers for our clients. The legal basis is the contract concluded between us and the legitimate interest of the controller.

The controller may share your data with third parties in the following circumstances:

We may share your personal data with other third parties acting on our behalf, for example with a service provider. In such cases, these third parties may use your personal data only for the purposes described above and only in accordance with our instructions. We have contractually obliged them to comply with the security instructions regulated by law.

Our employees will have access to personal data. Only those who need it in their work for the above-mentioned purposes have access, and only if the employee is bound by an obligation of confidentiality.

If required by law or court order, we may share your personal information with, for example, our suppliers or clients, tax authorities, social security authorities, law enforcement agencies or other government authorities.

Your personal data will be located exclusively within the European Union and the European Economic Area. We protect your data in our systems to the highest possible extent.

We store your personal data for a limited period of time and the data will be deleted when it is no longer needed for the purposes of processing. In most cases, this means that we will keep your data for the duration of your relationship with us. Where possible, we will delete data in the course of your relationship with us as soon as it is no longer needed. In any case, we will delete your personal data no later than the statutory periods after the end of the contractual relationship, unless storing is required by law.

We may process your personal data for a longer period after the end of cooperation in the event of a pending legal dispute or if you have consented to the storage of your personal data for a longer period.

In most cases, we process your personal data on the basis that the processing is necessary for the purposes of a legitimate interest we pursue, on a contractual basis or based on your consent as a data subject. You can revoke your consent at any time by providing a demonstrable notice on our website. In many cases, we will also have to process your personal data based on a legal obligation in terms of a special regulation. In the case of processing based on consent, you always have the option to withdraw your consent.

It is important for you to understand that we process your personal data, and we want you to comprehend this. Even if we do not require your consent to process your personal data because we are obliged to do so by law or contractual rights, you have several rights concerning the processing of your personal data. The above text will answer most of your questions.

Your rights

Right of access

Right to rectification

It is essential that we have accurate information about you, and we ask you to inform us if any of your personal data is inaccurate, for example, if you have changed your surname or address.

Right to erasure

If we process your personal data unlawfully, for example, if we process your personal data for longer than necessary or without a valid reason, you can ask us to delete such data.

Right to restriction

From the moment you requested the rectification of your personal data or objected to the processing until we examine the issue or confirm the accuracy of your personal data (or update it according to your instructions), you have the right to restrict processing. This means that, except for storing your personal data, we will only process your personal data with your consent when necessary for legal claims, to protect the rights of another person, or when there is a significant public interest in processing. You can also request the restriction of processing your personal data if the processing is unlawful but you do not want us to delete such data.

Right to object

If you believe that we do not have the right to process your personal data, you can object to our processing. In such cases, we can continue processing only if we can demonstrate compelling legitimate reasons that outweigh your interests, rights, and freedoms. However, we can always process your personal data if it is necessary for establishing, exercising, or defending legal claims.

Right to data portability

You can request your personal data that you have provided to us based on consent or for the performance of a contract to be provided to you in a structured, commonly used, machine-readable format. You also have the right to request the transfer of this information to another data controller.

Withdrawal of consent

You have the right to withdraw your consent, and we will then cease processing data based on this legal reason.

We will also inform other entities to whom we may have disclosed your personal data about your request/claims.

If you have any doubts, you have the right to file a complaint under § 100 of the Personal Data Protection Act with the relevant supervisory authority, for example, through the website www.dataprotection.gov.sk.

How can I complain about the use of my data or exercise my rights?

If you want to complain about how we process your personal data, including regarding the above rights, you can contact us at the email address recepcia@meanderoravice.sk, and your suggestions and requests will be considered.

If you are not satisfied with our response or believe that we process your data improperly or unlawfully, you can lodge a complaint with the relevant supervisory authority, which is the Office for Personal Data Protection (ÚOOÚ). More information about ÚOOÚ and their complaint procedures can be found at: www.dataprotection.gov.sk.

If you have additional questions about the processing of your personal data, you can contact us directly at our mailing address listed on our website www.meanderoravice.sk or by mail at www.dataprotection.gov.sk