Under Article 13 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”), the following is intended for the controller’s customers and other data subjects.

The controller and its contact details:

Business name: GreMi KLIMA, s.r.o.
Registered office: Kragujevská 9, 010 01 Žilina
Org. ID: 36424676

Purpose of personal data processing, legal basis of processing and category of affected personal data:

The controller processes the personal data of its customers as this data is required to enter into contractual arrangements involved in the sale of the controller’s goods and services. The controller processes personal data without the approval of customers for the purposes of fulfilling its obligations under purchase agreements and in further communication with them. Within such data, the controller would be unable to fulfil its agreement with a customer and be unable to conclude such agreement with a customer. Such personal data is also processed for the purposes of maintaining accounting records and the business agenda the controller fulfils its legal obligations under specific legislation, such as the Accounting Act, the VAT Act, etc. via their processing and therefore such processing is necessary. For such purposes, the controller processes regular categories of personal data, including academic title, given name and surname, signature, permanent residence, mailing address, account number, phone number, email address and other necessary personal data.

The controller processes the personal data of data subjects who enter its premises via its CCTV monitoring system in order to protect its legitimate interests, which primarily include the need to protect the controller’s property and other valuable assets, and therefore the processing of such personal data is for necessary purposes and this personal data is processed without the approval of the data subjects.

Recipients:

The controller provides personal data to processors, who the controller has authorised in writing to process such personal data, for instance the providers of information systems and cloud platforms, and the like. The controller may also provide personal data to public authorities, companies working to collect on receivables and other entities for the purposes of satisfying its legal entitlements. The controller declares that it does not provide personal data to any entities in third countries that do not provide an adequate level of personal data protection.

Archiving of personal data:

The controller processes the personal data of data subjects for the period necessary to accomplish its obligations under their contractual arrangement and until such purpose for which the data is processed is accomplished, and to fulfil obligations under legislation concerning the maintenance of accounting, registries, etc. (accounting records are archived for 10 years, orders for 3 years). CCTV system recordings are archived for a period of 5 days and if any incidents involving damage to property or other security incidents are recorded, such recording is archived for the period until resolved pursuant to valid legislation.

The controller shall then secure the immediate deletion of a data subject’s personal data once the purpose of such processing has been accomplished and upon the expiration on the archiving period for this data; the above does not apply if such personal data is part of a registry record.

Data subject rights:

A data subject has the following rights with respect to the controller in connection with the processing of their personal data.

a) The right to confirmation of the processing of their personal data, and if so, the right to access such personal data, together with the information specified herein.

b) The right to correction of any inaccuracies in their personal data to be performed by the controller, and the right to amend any incomplete personal data.

c) The right to deletion of their personal data (to be forgotten) if such data is not necessary for the purposes for which they were obtained or otherwise processed and upon the expiration of their archiving period.

d) The right to restriction of the processing of their personal data if:

• the data subject calls into question the correctness of their personal data during the period in which the accuracy of such data is verified, 
• processing is unlawful and the data subject objects to the deletion of such personal data and instead requests restriction of its processing, 
• the controller no longer needs such personal data for the purpose of processing, but the data subject needs such data to demonstrate, exercise and defend legal entitlements.

e) The right to obtain their personal data that was provided to the controller and the right to transfer such data to another controller if processing is conducted using automated means based on an agreement or other form of consent and if technically feasible.

f) The right to object to processing of their personal data by the controller, including that data that is processed based on the controller’s legitimate interests. If the controller fails to demonstrate that there is a serious legitimate interest for the processing of such personal data that outweighs the rights and freedoms of the data subject, the controller shall terminate the processing of this personal data without any undue delay.

g) The right to file a complaint with the Data Protection Authority if they believe that the controller’s processing of its personal data is in violation with personal data protection legislation.

h) The right to object and not to comply with its decision which would have legal effects or significant impact on it if such a decision is issued solely on the basis of the acts of automated processing of personal data. The controller declares that it does not conduct automated decision-making processes with legal effects for data subjects without the impact of human judgement.

i) If personal data was not obtained from the data subject, a data subject has the right to obtain such information as to the source of their personal data or information as if the data is from publicly available sources.

Who has access to your data

The controller cooperates with carriers and certain other entities who may use the provided data to ship consignments or to improve the quality and range of our services. If your consent is required for such processing, we only provide this data to processors if you have provided this consent. We only provide the processor with that data necessary to accomplish their services.

Cookies

a) Our website uses cookies to improve our services.

b) Cookies are small files that leave store specific information in your browser. These files identify specific information from previous visits to our website. A user cannot be identified based exclusively on such information. Cookies help for instance:

• to ensure the smooth operation of our website, 
• to identify those individual pages and functions that are most commonly used, based on which we are best able to adapt their contents to your needs, 
• to remember login details, which no longer need to be entered repeatedly.

c) We divide the cookies used on our website into two types:

• short-term, which are only used temporarily and remain saved in your device until you close your browser, 
• long-term, which remain saved on your device for a longer period of time.

d) Certain third-party cookies may aggregate information that is then used by third parties, for instance to directly support our advertising activities. There is no way to identify you based on this information or data.

e) Within efforts to improve our services to our customers and to ensure the full functionality of our website, specific data and other information (such does not constitute personal data) is aggregated and recorded. Such data and additional information is used to assess the activities of users on our website for statistical purposes. All personal data is processed in an anonymised format.

f) You may modify how cookies are handled in your web browser’s settings. Most browsers automatically receive cookies by default. You may completely prohibit or only permit the use of certain cookies using your web browser’s settings.