Privacy policy

INFORMATION FOR THE PERSON CONCERNED IN CONNECTION WITH THE COLLECTION AND PROCESSING OF PERSONAL DATA

 

provided by the controller to the data subject when obtaining personal data from the data subject

 

The operator hereby, in accordance with Article 13 (2), 1. and 2. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 May 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) ) (hereinafter referred to as the “Regulation”) provides the Affected Person from whom the Operator obtains personal data concerning him with the following information:

 

Identity and contact details of the Operator:

The operator is Erik Kniš - OSRS trade, with place of business Janovce 108, postal code: 086 41, Slovak Republic, entered in the trade register of the Bardejov District Office, trade register number: 760-22111, VAT number: 51389193, VAT number: SK51389193, email: info@osrsbestprice.com, phone number: +421 949 312 412.

 

Contact details of the responsible person:

The responsible person is not appointed.

 

Personal data processed:

The operator processes the following personal data: name, surname, residence, telephone number, email address, IP address, cookies, account number, bank name, signature, username in the internet game where the ordered product is to be sent.

 

Purposes of the processing of personal data of the Affected person:

The purposes of processing the personal data of the Affected person are:

 

accounting documents

 

Legal basis for the processing of personal data of the Affected person:

The legal basis for the processing of personal data of the Affected person will, depending on the specific personal data and the purpose of their processing, the data subject's consent to the processing of personal data, fulfillment of the controller's legal obligation or performance of the contract to which the data subject is a party.

 

Specification of legitimate interests pursued by the Operator or a third party: Not applicable.

 

Recipients or categories of recipients of personal data:

The recipients of the Affected person may be the contractual partners of the operator, in particular: an accounting company, a company providing legal services to the operator, a company providing services related to software creation and maintenance, a company providing payment gateway services to the operator (......... ........).

The recipients of personal data will also be the tax office and other state bodies and bodies active in criminal proceedings, in cases stipulated by law.

 

Information on the intended transfer of personal data to a third country: The personal data of the data subjects may be provided to entities in the United States of America as well as to entities in the country of residence of the specific data subjects.

 

Retention period of personal data:

Personal data will be kept in accordance with the law for the necessary time, which will be necessary for the purposes of performance of the contract and their subsequent archiving.

 

Instruction on the existence of relevant rights of the Affected Person:

The Affected person has, inter alia, the following rights:

 

a)      Affected person's right of access to data pursuant to Article 15 of the Regulation, the content of which is:

 

  1. the right to obtain from the Operator a confirmation as to whether personal data relating to the Affected Person are being processed;
  2. in the event that the personal data of the Affected person are processed, the right to access the processed personal data and the right to obtain the following information:

               -        information on the purposes of processing;

                               -         information on the categories of personal data concerned;

-         information on the recipients or categories of recipients to whom the personal data have been or will be provided, in particular in the case of recipients in third countries or international organizations;

-         if possible, information on the expected retention period of personal data or, if this is not possible, information on the criteria for determining it;

-        information on the existence of the right to request from the Operator the correction of personal data concerning the Affected Person or their deletion or restriction of processing and on the existence of the right to object to such                  processing;

-         information on the right to complain to the supervisory authority;

-         if personal data have not been obtained from the Affected person, any available information as to their source;

-        information on the existence of automated decision-making, including the profiling referred to in Article 22 (2). 1. and 4. Regulations and, in such cases, at least meaningful information on the procedure used, as well as the meaning              and expected consequences of such processing of personal data for the Affected person;

 

  1. the right to be informed of the adequate safeguards under Article 46 of the Regulation concerning the transfer of personal data where personal data are transferred to a third country or to an international organization;
  2. the right to provide a copy of the personal data being processed, provided, however, that the right to provide a copy of the personal data processed must not adversely affect the rights and freedoms of others;

 

(b) the right of the Affected person to rectification under Article 16 of the Regulation, which contains:

 

  1. the right for the Operator to correct incorrect personal data concerning the Affected Person without undue delay;
  2. the right to supplement the data subject's incomplete personal data, including by providing a supplementary statement from the data subject;

 

c) the data subject's right to erase personal data (the so-called "forgetfulness" right) under Article 17 Regulation, which contains:

         i. the right to obtain from the Operator without undue delay the deletion of personal data concerning the Affected Person if any of the following reasons is met:

-     personal data are no longer needed for the purposes for which they were obtained or otherwise processed;

      -     The Affected person withdraws the consent on the basis of which the processing is carried out, provided that there is no other legal basis for the processing of personal data;

                    -  The Affected person objects to the processing of personal data pursuant to Article 21 (2). 1. Regulations and no legitimate grounds for processing personal data prevail, or the data subject objects to the processing of personal data                          pursuant                  to Article 21 (1). 2. Regulation;

- personal data were processed illegally;

- personal data must be deleted in order to comply with a legal obligation under European Union law or the law of the Member State to which the Controller is subject;

- personal data were obtained in connection with the offer of information society services pursuant to Article 8 (1). 1. Regulations;

(ii)   the right for the Operator who disclosed the data subject's personal data, taking into account the available technology and the cost of implementing the measures, to take appropriate measures, including technical measures, to inform other data processing operators that the Affected person requests them to: delete any references to such personal data, a copy or replicas thereof;

in this case, the right to delete personal data containing the rights under Article 17 para. 1. and 2. Regulation [i.e. with the content of the rights under (i) and (ii) of this letter. c) point J. of this document] does not arise if the processing of personal data is necessary:

  1. to exercise the right to freedom of expression and information;
  2. to fulfill a legal obligation requiring processing under European Union law or the law of the Member State to which the Operator is subject, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the Operator;
  3. on grounds of public interest in the field of public health in accordance with Article 9 (2). 2. (h) and (i) of the Regulation, as well as Article 9 (1) 3. Regulation;
  4. for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 (2). 1. Regulation, in so far as it is probable that the right referred to in Article 17 (1) 1. Regulation shall make it impossible or seriously difficult to achieve the objectives of such processing of personal data; or
  5. to prove, assert or defend legal claims;

 

d) the right of the Affected person to restrict the processing of personal data pursuant to Article 18 of the Regulation, whose content is:

(i)          the right to have the Controller restrict the processing of personal data in one of the following cases:

 

- The Affected person will challenge the accuracy of personal data during the period allowing the Operator to verify the accuracy of personal data;

- the processing of personal data is illegal and the Affected person object to the deletion of personal data and calls instead for restrictions on their use;

- The controller no longer needs personal data for processing purposes, but the Affected person needs them to prove, assert or defend legal claims;

- The Affected person objected to the processing under Article 21 (1). 1. Regulations, until it is verified whether the justified reasons on the part of the Operator outweigh the justified reasons of the Affected Person;

 

  1. the right, in the event that the processing of personal data is restricted under point (i) of this point. (d) point J. of this document, such limited personal data, with the exception of storage, shall be processed only with the consent of the Affected person or to prove, assert or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of overriding public interest. Union or a Member State;

(iii) the right to be informed in advance of the lifting of the restriction on the processing of personal data;

e) the right of the Affected person to fulfill the notification obligation towards the recipients pursuant to Article 19 of the Regulation, the content of which is:

 

  1. the right for the Controller to notify each recipient to whom personal data have been provided of any rectification or erasure of personal data or restrictions on processing carried out pursuant to Article 16, Article 17 (2). 1. and Article 18 of the Regulation, unless this proves impossible or involves a disproportionate effort;

(ii)   the right for the Operator to inform the Affected person about these recipients, if the Affected person so requests;

(f) Affected person's right to data portability pursuant to Article 20 of the Regulation, which contains:

(i) the right to obtain personal data concerning the Affected person which he has provided to the Operator in a structured, commonly used and machine-readable format and the right to transfer such data to another operator without the Operator's obstruction, provided that:

- the processing is based on the consent of the Affected person pursuant to Article 6 (1). 1. letter (a) Regulation or Article 9 (1) 2. a) Regulation, or on a contract pursuant to Article 6 para. 1. letter b) Regulation, and at the same time

- the processing is carried out by automated means, and at the same time

- the right to obtain personal data in a structured, commonly used and machine-readable format and the right to transfer such data to another controller without the Operator's defense preventing it will not adversely affect the rights and freedoms of others;

(ii) the right to transfer personal data directly from one controller to another, if technically possible;

(g) the right of the Affected person to object pursuant to Article 21 of the Regulation, which contains:

  1. the right to object at any time, on grounds relating to the specific situation of the Affected person, to the processing of personal data concerning him or her carried out pursuant to Article 6 (1). 1. letter e) or f) Regulations, including objections to profiling based on these provisions of the Regulation;
  2. [in the event of the exercise of the right to object at any time on grounds relating to the specific situation of the Affected person against the processing of personal data concerning him or her carried out pursuant to Article 6 para. 1. letter e) or f) Regulation, including objections to profiling based on these provisions of the Regulation] the right not to further process the personal data of the Affected person, unless he proves the necessary legitimate processing reasons which outweigh the interests, rights and freedoms of the Affected person, or proving, asserting or defending legal claims
  3. the right at any time to object to the processing of personal data concerning the Affected person for the purposes of direct marketing, including profiling to the extent that it relates to direct marketing; however, if the Affected person objects to the processing of personal data for direct marketing purposes, the personal data may no longer be processed for such purposes;
  4. (in connection with the use of information society services) the right to exercise the right to object to the processing of personal data by automated means using technical specifications;

(v)           the right to object, on grounds relating to the specific situation of the Affected person, to the processing of personal data concerning the Affected person if the personal data are processed for scientific or historical research or for statistical purposes pursuant to Article 89 (2). 1. Regulations, except where processing is necessary for the performance of a task for reasons of public interest;

(h) the right of the Affected person in relation to automated individual decision-making under Article 22 of the Regulation, which contains:

(i) the right not to be subject to a decision based solely on the automated processing of personal data, including profiling, which has legal effects affecting or similarly affecting him, except in cases under Article 22 (2); 2. Regulation [i.e. unless the decision: (a) is necessary for the conclusion or performance of a contract between the Person concerned and the Operator, (b) is permitted by European Union law or by the law of the Member State to which the Operator is subject and lays down appropriate safeguards; freedoms and legitimate interests of the Person concerned; or (c) based on the express consent of the Person concerned].

Instruction on the right of the Affected person to revoke the consent to the processing of personal data:

The Affected person shall be entitled to revoke his or her consent to the processing of personal data at any time, without prejudice to the lawfulness of the processing of personal data based on the consent given prior to the revoke.

The Affected person is at any time entitled to revoke his consent to the processing of personal data - in whole or in part. The partial revoke of consent to the processing of personal data may concern a certain type of processing operation (s), while the lawfulness of the processing of personal data to the extent of the remaining processing operations remains unaffected. The partial revoke of consent to the processing of personal data may relate to a specific purpose of the processing of personal data / certain specific purposes of the processing of personal data, while the lawfulness of the processing of personal data for other purposes remains unaffected.

The Affected person may exercise the right to revoke the consent to the processing of personal data in paper form to the Operator's address registered as its registered office in the Commercial Register at the time of revoking the consent to the processing of personal data or in electronic form by electronic means (by sending an e-mail to the Operator's e-mail address stated when identifying the Operator in this document or by filling in the electronic form published on the Operator's website).

Instruction on the right of the Affected person to lodge a complaint to the supervisory authority:

The Affected person shall have the right to lodge a complaint with the supervisory authority, in particular in his Member State of habitual residence, place of work or alleged infringement, if he considers that the processing of personal data concerning him is contrary to the Regulation, namely: all without prejudice to any other administrative or judicial remedy. The supervisory body in the Slovak Republic is the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hrani─Źná 12, 820 07 Bratislava, ID number: 36 064 220, email: statny.dozor@pdp.gov.sk, telephone: 02/3231 3214.

Information on the existence / non-existence of the Affected person's obligation to provide personal data:

The Operator informs the Affected Person that the provision of personal data of the Affected Person is necessary for the conclusion of the contract and for its performance. The Operator informs the Affected Person that the Affected Person is not obliged to provide personal data or is not obliged to give consent to their processing. Failure to provide personal data and / or failure to give consent to the processing of personal data will result in the Operator not being able to conclude and fulfill the contract.

 

Information related to automatic decision making, including profiling: Not applicable