Personal data information system:

Operator: DPP Žilina, s.r.o., Kominárska 2,4, Bratislava – mestská časť Nové Mesto, 831 04, ID: 50391348.

Joint operator: None.

Operator’s representative: None (Obligation when the operator is not established in the EU.)

Contact details of the responsible person: None. The person concerned may contact dppzilina@dppzilina.sk regarding the protection of personal data.

Purposes of processing: Processing of accounting documents. Legal basis of processing: law on Accounting, law on VAT and others. This means that the collection of personal data is (checked)
[x] a legal requirement
[x] a contractual requirement
[x] a requirement to conclude a contract.

The data subject is obliged to provide personal data. Failure to provide personal data would result in non-fulfillment of the purpose of the processing. The processing of personal data is not based on GDPR Art. 6 par. 1 letter f. Personal data is obtained directly from the data subject.
Note: The operator obtains personal data, inter alia, by copying, scanning, or otherwise recording official documents on an information carrier.

Categories of personal data: name, surname, title, permanent residence address, temporary residence address, telephone number, e-mail address, date of birth, type and number of identity document, signature, bank account number of natural persons.

Set of processing operations with personal data (ticked):
[x] acquisition
[x] recording
[x] organization
[x] structuring
[x] storage
[x] processing or modification
[x] search
[x] ] browsing
[x] use
[  ] provision (by notification, publication, otherwise)
[x] rearrangement or combination
[x] restriction
[x] deletion
[x] disposal.
Note: Whether performed by automated or non-automated means.

Beneficiaries or categories of beneficiaries: None.

Broker: Personal data is NOT provided by the broker.
Other recipients (who do not further process personal data): IT administration.
Note: For the purposes of the GDPR, a public administration body, if personal data is provided to it, is not considered to be a recipient.

Transfer of personal data to a third country: None.

Retention period of personal data: 10 years after the end of processing, unless stipulated in the registry rules of the controller.

Legal claim of the data subject: The data subject has the right to request from the controller access to his or her personal data, the right to correct or delete or restrict the processing, the right to object to the processing, as well as the right to the accuracy of personal data. The data subject has the right to object to any automated individual decision-making as well as profiling. The person concerned has the right to lodge a complaint with the supervisory authority, in particular with his Member State of residence. In Slovakia, it the Office for Personal Data Protection. In the cases referred to in the GDPR Law. 17 the person concerned has the right to erasure (right to “forget”). The controller does not use automated decision-making when processing personal data. The operator does not use profiling when processing personal data