PERSONAL DATA PROCESSING PROCEDURE

This document describes the method and purpose of personal data processing by ALADIVA s.r.o., Potočná 2A, 90201 Pezinok (hereinafter referred to as “ALADIVA” or “operator”), and also provides any other information required by law, including information about the rights of the data subject and how apply them.

Regulation (EU) 2016/679 on the protection of personal data (hereinafter referred to as the “Regulation”) constitutes a legal regulation on the protection of natural persons in the processing of personal data and on the free movement of such data and protects the fundamental rights and freedoms of natural persons, in particular in relation to the right to personal data protection.

According to Article 4 (1) of the Regulation, the term “personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”).

“Processing” is an operation or set of operations on personal data or sets of personal data, whether carried out by automated or non-automated means, such as obtaining, recording, organizing, structuring, storing, processing or changing, searching, viewing, using, providing by transmission, dissemination or otherwise providing, rearranging or combining, limiting, erasing or disposal (Article 4(2) of the Regulation).

According to Article 12 et seq. Regulations, the person concerned must also be provided with relevant information about the processing activities of the operator and about the rights of the person concerned.

1. ON WHAT BASIS CAN WE PROCESS YOUR PERSONAL DATA?
Processing is lawful only if and only to the extent that at least one of the following conditions is met:

  • the person concerned has expressed his consent to the processing of his personal data for one or more specific purposes,
  • processing is necessary for the performance of a contract to which the person concerned is a party, or to take measures prior to concluding the contract based on the request of the person concerned,
  • processing is necessary to fulfill a legal obligation,
  • processing is necessary for the purposes of legitimate interests pursued by the operator or a third party, with the exception of cases where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, especially if the data subject is a child,

2. WHAT IS THE PURPOSE OF PERSONAL DATA PROCESSING, WHAT PERSONAL DATA DO WE PROCESS, HOW LONG DO WE STORE YOUR PERSONAL DATA?
As an operator, the company processes your personal data in the following manner/for the following purposes:

  • ACCOUNTING AND BUSINESS AGENDA
    • The purpose is to fulfill the legal obligations of the operator resulting from special regulations (e.g. Accounting Act, Value Added Tax Act, Income Tax Act).
    • Legal basis (including their provision to third parties): legal obligation
    • Storage period: 10 years.
  • BUSINESS COMMUNICATION
    • The purpose of processing is the preparation and implementation of the operator’s business activities.
    • Legal basis: Legitimate interest pursued by the operator consisting in the right to do business within the scope of the activities entered in the extract from the relevant register.
  • Retention period: it is conditional on the preparation and duration of the commercial relationship, as well as the expiration of the limitation period.
  • BOOKIO-RESERVATION SYSTEM – maybe it will be implemented in the future
    • The main purpose of personal data processing is patient booking.
    • Legal basis: It is necessary for the fulfillment of the contract in accordance with Article 6, paragraph 1 of the letter. b of the general Regulation EP and R (EU) 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data).
    • Storage period: it is determined by special regulations.
  • E SHOP
    • The main purpose of personal data processing is the sale of goods to buyers, the preparation of an invoice and the shipment of goods.
    • Legal basis: Is the processing of personal data necessary for the fulfillment of the contract (for example, a purchase contract in the sense of Article 6 paragraph 1 letter b of the general Regulation EP and R (EU) 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data) and you are a party to the contract, or you have asked us to take measures before concluding the contract (for example, by registering in the e-shop).
    • Storage period: 10 years.
  • PERSONNEL AND SALARY AGENDA
    • The purpose of the processing is the preparation and conclusion of an employment contract or agreement on work outside the employment relationship, records of documents on work capacity, salary payments, levies, fulfillment of obligations to state administration bodies, records of attendance, records of education, records of issued authorizations and authorizations, records of property or equipment , concluding agreements on material liability, recording the issuance of funds in cash, providing employee benefits, recording damage caused by employees at the workplace or the operator’s (employer’s) property, catering, copying documents necessary for the purposes of employment law or a similar relationship, as well as the fulfillment of other legal and contractual obligations.
    • Legal basis: fulfillment of a legal obligation, fulfillment of a contract, granted consent or legitimate interest
    • Retention period: during the duration of the employment relationship or other similar relationship until the employee (including the former) turns seventieth.
  • ADMINISTRATION OF THE REGISTRY
    • Administration of the registry, processing of the agenda of whistleblowers of anti-social activity. The purpose of processing is the fulfillment of legal obligations and, in particular, arising from Act no. 395/2002 Coll. on archives and registries on the addition of certain laws as amended.
    • Legal basis: fulfillment of a legal obligation.
    • Storage period: it is determined by special regulations.
  • HEALTH DOCUMENTATION OF PATIENTS
    • The main purpose of personal data processing is patient records.
    • Legal basis: It is necessary to fulfill the legal obligation of the operator in accordance with Article 6 paragraph 1 of the letter. c of the general Regulation EP and R (EU) 2016/679 on the protection of natural persons in the processing of personal data and on the free movement of such data).
    • Storage period: it is determined by special regulations.
  • CONSUMER COMPETITIONS
    • The operator processes the personal data of the persons concerned based on the consent expressly granted by the person concerned.
    • Legal basis: the operator stores personal data processed on the basis of the consent of the person concerned no later than the end of the consumer competition.
    • The affected person has the right to freely withdraw consent to the processing of personal data at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
  • SENDING MESSAGES FOR DIRECT MARKETING AND CONTACTING BACK PURPOSES
    • The purpose of processing direct marketing is to offer you information about current news and products that may be relevant and interesting for you.
    • In this case, the legal basis for processing personal data is our legitimate interest.
    • Retention period: we will process your personal data for this purpose until you cancel your participation in the marketing list or unsubscribe from sending messages for direct marketing purposes (newsletter).
  • RECORD OF THE RIGHTS OF THE PERSONS AFFECTED
    • The purpose of processing as a legal basis is the fulfillment of the Company’s legal obligation.
    • Retention period: 2 years from the date of processing the request of the person concerned
  • LITIGATION
    • The purpose of the processing as well as the legitimate interest is to demonstrate, exercise and defend the Company’s legal claims.
    • Legal basis: legitimate interest of the operator in fulfilling legal claims
    • Retention period: until the lawful end of the matter in question

3. TO WHOM DOES THE COMPANY PROVIDE YOUR PERSONAL DATA?
The Company provides your personal data to the following persons: the Company’s accountant (including external), state and public administration bodies, municipalities, the Company’s website administrator, an auditor, a lawyer, companies managing and supporting information technology, information service providers, data storage providers, in justified in cases of courts and law enforcement agencies, health insurance company, supplementary pension savings banks, educational agencies, entity providing occupational health service, occupational health assessments and assessment of health capacity, entity providing postal services.

4. Disclosure of personal data
Publication of informational materials on the website of the operator.

5. AUTOMATED INDIVIDUAL DECISION-MAKING
Personal data will not be used for automated individual decision-making, including profiling.

6. Transfer of personal data outside the EUROPEAN UNION
Personal data is not transferred to a third country or international organization.

7. CONFIDENTIALITY
We would like to assure you that our employees and collaborators who will process your personal data are obliged to keep personal data confidential. This confidentiality also lasts after the end of the contractual relationship with us.

8. Rights of the affected person
Withdraw consent – in cases where we process your personal data based on your consent, you have the right to withdraw this consent at any time. You can withdraw your consent electronically, at the address of the responsible person, in writing, by sending a notice of withdrawal of consent or in person at the office. Withdrawal of consent does not affect the legality of the processing of personal data that we processed about you on the basis of it.
Right of access – you have the right to be provided with a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written document form, unless you request another way of providing them. If you have requested the provision of this information by electronic means, it will be provided to you electronically if it is technically possible.
Right to rectification – we take reasonable measures to ensure the accuracy, completeness and timeliness of the information we have about you. If you believe that the data we hold is inaccurate, incomplete or out of date, please do not hesitate to ask us to correct, update or supplement this information.
Right to deletion (to be forgotten) – you have the right to ask us to delete your personal data, for example, if the personal data we have obtained about you is no longer necessary to fulfill the original purpose of processing. However, your right must be assessed in light of all the relevant circumstances. For example, we may have certain legal and regulatory obligations which mean that we will not be able to comply with your request.
Right to restriction of processing – under certain circumstances, you are entitled to ask us to stop using your personal data. These are, for example, cases when you think that the personal data we have about you may be inaccurate or when you think that we no longer need to use your personal data.
The right to data portability – in certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to another third party of your choice. However, the right to portability only applies to personal data that we have obtained from you on the basis of consent or on the basis of a contract to which you are a party.
Right to object – you have the right to object to data processing based on our legitimate legitimate interests. In the event that we do not have a compelling legitimate reason for processing and you file an objection, we will not process your personal data further.
The right to submit a proposal to initiate proceedings on the protection of personal data – if you believe that your personal data is being processed unfairly or illegally, you can file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; tel. Number: +421 /2/ 3231 3214; mail:statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk. In the case of submission of the proposal in electronic form, it is necessary that it fulfills the requirements according to § 19 paragraph 1 of Act No. 7181967 Coll. on administrative proceedings (administrative fee).

9. INFORMATION AND EXERCISE OF THE RIGHTS OF THE PERSON CONCERNED
In order to exercise your rights, you can contact the operator at any time as follows:

  • Address: ALADIVA s.r.o., Potočná 2A, 90102 Pezinok
  • E-mail: info@aladiva.eu

We will respond to your request free of charge within 30 days. In case of complexity or a large number of requests, we are entitled to extend this period by another 60 days. If this happens, we will inform you about it and the reasons.
In the event of a repeated request, we are entitled to charge a reasonable administrative fee to cover the costs associated with providing this service.