RULES OF PERSONAL DATA PROTECTION


INTRODUCTION

We appreciate your privacy and the protection of your personal information is one of the most important priorities of our company. This Privacy Policy ("Privacy Policy") contains information about which personal data you collect in our activities, how we use them, and how we protect them.

This Privacy Policy applies to all services offered by our company and contains information about how we process personal information for our customers. Your personal data are processed in accordance with all generally binding legal regulations in force in the Slovak Republic, in particular but not exclusively in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation) (hereinafter referred to as "the Regulation") and Act No. 18/2018 Z. z. on the Protection of Personal Data (the "Personal Data Protection Act").

We use the personal information you provide to us solely to provide you with quality service and, also to improve our service offer for you. We advise you to carefully read this Privacy Policy and so acquaint yourself with all your rights before entering to a legal relationship with our company. By entering to a legal relationship with our company and / or providing it with some of your personal information, you represent that you understand how your personal information is processed under this Privacy Policy. Otherwise, we expect you to cease immediately in any way to engage in any business done by our company, cooperate with us, and not give us or discontinue us to provide your personal information. However, please note that in some cases the failure to provide your personal information may partially or completely hinder us from providing the services we offer.

OPERATOR

 Cassovia Expres s.r.o.

 Registered office: Mlynská 27, 040 01 Košice

 Company ID: 46 554 874

 company registered in the Commercial Register of the District Court of Košice, section Sro, insert no.  29269 / V

  (hereafter referred to as "our company", "we")

CONTACT PERSON 

 Tomáš Mikita

 Mlynská 27, 040 01 Košice

 +421 915 115 555

 info@cassoviaexpres.sk

CONCERNED PERSON

  • any natural person who uses the services offered by our company,
  • any natural person who is the authorized representative of a customer of our company who uses the services offered by our company (in any legal relationship with the customer);
  • any natural person who visits our company's website,
  • any natural person who visits our company's stores in Slovakia.


PERSONAL DATA THAT WE GATHER

In this section, we provide information about personal information we receive from you when you use our company's services, as well as information about which personal data we may collect from other sources.

Purchase via e-shop, at the store (no registration)

Your name, surname, phone number, e-mail address, address of exit station in Košice, arrival, information about your purchase (such as date, time and route of transport, method of payment)

Purchase via invoice

Your name, surname; the name, address, and company name; telephone number, e-mail address, pick-up and exit addresses, arrival, departure, your purchase information (such as date, time and route of transportation, method of payment)

Subscribe to newsletter

Our company may, at your request and consent, inform you about the offer of its services, news, discounts and consumer contests without having previously registered for any services of our company or purchased any goods.

Your e-mail address

Browse our company's website

Information about your online manner while browsing our company's Web site

Information about the devices through which you have used the services of our company (including manufacturer, model and operating system, IP address, browser type and mobile device identifier, date and time of your access, website address from which you have been redirected to our website, other data transmitted via standard HTTP (s) protocols, data used for on-line session after logging in)

Visit our store

In our stores there is a camera system that can record you and this record is stored with it, along with the date and time of your visit, and the sales details of our company you visited

PURPOSE AND LEGAL BASIS OF PROCESSING PERSONAL DATA

In this section, we want to inform you about the purposes, the way and why we use your personal information, and also the legal basis for processing your personal data with our company.

The processing of personal data is primarily based on your legal relationship as the person concerned with our company, it means the processing of personal data is necessary for the performance of the contract to which the person concerned is a party or, if requested by the person concerned, to take measures prior to the conclusion of the contract Article 6 (1) (b) of the Regulation).

The processing of some personal data may be based on the legitimate interest of our company or third party (Article 6 (1) (f) of the Regulation).

In some cases, we may ask you for your consent to the processing of your personal data, in which case your personal data will only be processed if you have given us your explicit consent (Article 6 (1) (a) of the Regulation).

Performance of the contract to which you are a contracting party (Article 6 (1) (b) of the Regulation)

We use your personal information mostly to make our services available to us, such as using the e-shop as an unregistered customer, benefiting from or participating in our consumer competitions. We need your personal information to process and process your orders, including any refund, or to provide the services you order. We also need to process your personal information so that we can provide you with benefits or discounts.

Legitimate interest (Article 6 (1) (f) of the Regulation)

We also use your personal information to inform you about the offer of our services, news, discounts and consumer contests through our e-mail newsletters in connection with your e-shop purchases or participation in our consumer competitions.

We use your personal information to manage our website and improve our services and operations. We use cookies and other similar technologies on our websites to enable you to make the most of our site's features. For detailed information about cookies and how to disable cookies, please see the Website Use Policy.

We also use your personal information to improve our online service offerings, our stores, our know-how, and our customer communication. Your personal information also helps us develop and improve our IT systems (including security). All these activities enable us to provide better service to our customers.

Consent of the person concerned (Article 6 (1) (a) of the Regulation)

We use your personal information to contact you. Without having purchased any service offered by our company, you have the option to subscribe to a newsletter, which will only inform you of your offer of services, news, discounts, and consumer competitions on your explicit consent.

Eligibility (Article 6 (1) (b) of the Regulation)

We use your personal information to resolve your complaints, fulfillment of our obligations with respect to you, enforce your rights and legal claims relating to you or our company, for example, if you are not satisfied with our services or in the event of an accident our stores or when providing our services.

We use your personal data to monitor the security of our camcorder sales systems to prevent or facilitate the detection of crime and anti-social manner, protecting not only the business interests of our company, but also helping to protect the local community, our customers and our employees.

Some of the above ways of using your personal information are based on the so- legitimate interests of our company, which include:

  • to take care of the needs of our customers, including the delivery of our services;
  • promotion and sale of our services;
  • dealing with complaints and disputes, the exercise of rights and legal claims;
  • protecting and supporting our business, colleagues, customers;
  • preventing and aiding the detection of anti-social manner, crime;
  • testing and developing new products and services, as well as improving existing ones.

VIEW OF PROCESSING OF PERSONAL DATA

If you are not interested in buying any of our services, but at the same time subscribe to our newsletter, which informs you about our services, news, discounts and consumer competitions, we process your personal data solely on your express consent processing.

Before you subscribe to the newsletter, we will ask you whether you agree to the processing of your personal information for this purpose. You have the right to revoke your decision regarding newsletters to change them and consent to processing your personal information at any time via our company website or by clicking on the "Cancel subscription" link found in each e-mail newsletter. Revocation of consent does not affect the lawfulness of processing based on consent prior to its revocation.

PERSONAL DATA RECEIVERS

In this section, we state which recipients we can provide or share with your personal information.

Some of your personal information may be provided to entities that provide services to our company. We require all service providers strictly to take care of personal data protection and not use your personal data for our own marketing purposes unless you consent to it yourself. We only share the personal data that our service providers inevitably need to provide services. These are, for example, entities that our companies provide the following services:

  • technology services (e.g. IT terminal management, computing management, server infrastructure management, web hosting),
  • payment processing at our stores or within the e-shop,
  • companies that provide direct marketing and distribute electronic communications in our currency, including newsletters of our company,
  • bookkeeping services,
  • companies that operate industrial cameras in our stores or perform maintenance.

Some of the service providers we work with are running online media channels (websites, social networking sites), providing relevant online advertising on our services through these online media channels. You can, for example, advertise our products and services. to see if you visit a social networking page. Such service providers include, for example: Facebook, Google.

Some of your personal information may be provided to public authorities and other public authorities and administrations, in cases where such obligation is lawful or necessary for the determination, application or defence of the rights and legitimate interests of our company or third parties.

PROVISION OF PERSONAL DATA

You are not required to provide us with your personal information, but some of your personal information is necessary for doing business or other activities (for example, closing a sales contract). If you do not provide us with any of your personal information, we will not be able to provide you with services offered by our company. The provision of some of your personal data is therefore a requirement that is needed to conclude a contract or to perform a contract.

TIME OF STORAGE OF PERSONAL DATA

We keep your personal information to the extent allowed by applicable, generally binding legal regulations, for a maximum of 10 (ten) years. In exceptional circumstances, if circumstances so require, the retention period of personal data may be prolonged for reasons of enforcement, demonstration, defence and / or enforcement of the rights, claims, and legitimate interests of the person or company in question, or the conduct of our internal investigation. The length of such a retention period is conditioned mainly by the duration of the obligations relating, with the warranty provided for our company's products or services, as well as the necessity of storing such personal data in case of need to prove, apply or defend legal claims.

RIGHTS OF THE PERSON IN QUESTION

In relation to the processing of your personal data, you have the following rights, to the extent stipulated by generally binding legal regulations:

LAW AGAINST THE PROCESSING OF PERSONAL DATA

You have the right:

  • at any time, to object to reasons relating to your specific situation against the processing of personal data concerning you when the processing is performed to fulfillment of public service task or is necessary for the legitimate interests pursued by our company;
  • if personal data are processed for direct marketing purposes, at any time object to the processing of your personal data for the purposes of such marketing, including profiling to the extent that it relates to such direct marketing;
  • if personal data are processed for purposes of scientific or historical research or for statistical purposes, to reject, for reasons relating to your specific situation, the processing of personal data relating to you, except where processing is necessary for the performance of a task on grounds of public interest.

RIGHT TO ACCESS PERSONAL DATA

Based on your request addressed to the contact person listed in this Privacy Policy, we will provide you with a copy of the personal data we process about you by email if you do not request a different means of providing personal information.

RIGHT TO REPAIR PERSONAL DATA

You have the right to correct improperly personal information relating to you without undue delay. With due regard to the processing of personal data, you also have the right to supplement incomplete personal information.

REMEDIAL LAW (EMPLOYMENT RIGHT)

You have the right to delete your personal information without undue delay if:

  • personal data are no longer needed for the purposes for which they were acquired or otherwise processed;
  • you withdraw the consent under which the processing is carried out and there is no other legal basis for processing;
  • be directed against the processing of your personal data for the reasons stated in point XI. 1. a. of these Privacy Policy do not outweigh any legitimate reason for processing or object to the processing of your personal data for the reasons outlined in Section XI. 1. b. of this Privacy Policy;
  • your personal data has been processed unlawfully;
  • Your personal information must be erased to be fulfilled complying with a legal obligation under European Union law or the law of the Slovak Republic.

LAW ON LIMITATION OF PROCESSING OF PERSONAL DATA

You have the right to restrict the processing of your personal data if:

  • You have invaded the correctness of your personal information during the time that allows us to verify the accuracy of your personal data;
  • processing is unlawful and is against the deletion of personal data and requires instead the restriction of their use;
  • we no longer need your personal data for processing purposes, but you need them to prove, enforce or defend legal claims;
  • you have objected to the processing of your personal data for the reasons outlined in Section XV. 5. a. of this Privacy Policy, until the verification of whether the legitimate reasons on the part of the operator outweigh the legitimate reasons of the person concerned.

DATA PASSENGER RIGHT

You have the right to obtain personal information relating to you and provided to us in a structured, commonly used and machine-readable format, and you have the right to transfer this information to another operator without hindrance if:

  • processing of personal data is based on your consent or contract;
  • if the processing is carried out by automated means.

RIGHT TO UNDERTAKE THE COMPETENT AUTHORITY

If you believe that your rights have been violated in the processing of personal data or violation of generally binding privacy laws, you have the right to contact the Office for the Protection of Personal Data of the Slovak Republic with a motion to initiate proceedings for the protection of personal data pursuant to Section 99 of the Personal Data Protection Act.

APPLICATION OF THE RIGHTS OF THE PERSON IN QUESTION

The person concerned is entitled to exercise all of his rights by contacting the authorized representative of our company specified in this Privacy Policy, in writing, including by e-mail, and by law, by a procedure addressed to the Supervisory Authority, the Office for the Protection of Personal Data of the Slovak Republic, Hraničná 12, 82007 Bratislava, telephone: +421232313214 , e-mail: statny.dozor@pdp.gov.sk , web: http://www.dataprotection.gov.sk/.

The request of the person concerned may be refused in cases of leave or by law.

CHANGE OF PERSONAL DATA PROTECTION RULES

We may sometimes change or supplement these Privacy Policy. Such alteration or modification in any manner without your express consent will not affect your rights under the applicable generally applicable data protection laws. We recommend that you regularly visit our website and get familiar with the current version of this Privacy Policy, but we can alert you to major changes, possibly by email.