in accordance with Article 13 et seq. of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the "Regulation").
This information is intended for the customers of the Data Controller and all other data subjects.
Company Name: TRUCK TATRY, s.r.o.
Registered Office: Železničná 1083/7, 058 01 Poprad
Company ID (IČO): 47706031
Phone: 0905857592
Email: trucktatry@trucktatry.sk
The Data Controller processes the personal data of its customers, clients, suppliers, and business partners where necessary for the establishment and performance of contractual relationships. Personal data are processed without the data subject's consent where processing is necessary for: entering into and performing contracts, including pre-contractual relationships; providing warranty and post-warranty services; debt collection; communication with customers and business partners. Without the required personal data, the Data Controller cannot properly perform its contractual obligations, and therefore the contractual relationship cannot be established. Personal data are also processed to comply with legal obligations, including: accounting and financial record keeping; business administration; document and archive management; compliance with applicable legislation, including accounting, VAT, archive, and record management regulations. For these purposes, the Data Controller processes standard categories of personal data, including but not limited to: Title First name and surname Signature Permanent address Contact address Bank account details Telephone number Email address Professional qualifications Other personal data necessary for fulfilling contractual or legal obligations
The Data Controller may disclose personal data to authorized processors who have been contractually appointed to process personal data on its behalf, including providers of: delivery and logistics services; installation, maintenance, warranty and after-sales services; IT systems and cloud services; other services necessary for business operations. Personal data may also be disclosed to: public authorities where required by law; debt collection agencies; legal representatives; other parties where necessary for the establishment, exercise, or defence of legal claims. The Data Controller confirms that personal data are not transferred to third countries that do not provide an adequate level of personal data protection.
Personal data are processed only for the period necessary to fulfil the purposes for which they were collected and to perform contractual obligations. Personal data are retained for a maximum period of 10 years after the completion of the relevant purpose (such as completion of a contract, warranty service, complaint handling, post-warranty services, or debt collection), unless a longer retention period is required by law. Once the purpose has been fulfilled and the retention period has expired, personal data will be securely deleted or destroyed without undue delay.
Data subjects have the following rights regarding the processing of their personal data. Requests may be submitted: in person; by post to the registered office of the Data Controller; electronically via the email address listed above.
a)Right of Access
The right to obtain confirmation as to whether personal data concerning the data subject are being processed and, where that is the case, access to those personal data together with the information contained in this Privacy Policy.
b)Right to Rectification
The right to have inaccurate personal data corrected without undue delay and to have incomplete personal data completed.
c)Right to Erasure ("Right to Be Forgotten")
The right to request the deletion of personal data where they are no longer necessary for the purposes for which they were collected or processed and the applicable retention period has expired.
d)Right to Restriction of Processing
The data subject has the right to request restriction of processing where:
e) Right to Data Portability
The right to receive personal data provided to the Data Controller in a structured, commonly used, machine-readable format and to transmit those data to another controller where processing is based on a contract or consent and carried out by automated means, where technically feasible.
f) Right to Object
The right to object at any time to the processing of personal data based on the legitimate interests of the Data Controller.
Unless the Data Controller demonstrates compelling legitimate grounds overriding the interests, rights, and freedoms of the data subject, processing will cease without undue delay.
g) Right to Lodge a Complaint
If the data subject believes that the processing of personal data violates applicable data protection legislation, they have the right to lodge a complaint with the supervisory authority.
Supervisory Authority:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Phone: +421 2 3231 3214
Email: statny.dozor@pdp.gov.sk
Website: https://dataprotection.gov.sk
h) Right Not to Be Subject to Automated Decision-Making
The data subject has the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
The Data Controller confirms that it does not carry out automated decision-making or profiling producing legal effects without meaningful human involvement.
i) Right to Information About the Source of Personal Data
Where personal data have not been obtained directly from the data subject, the data subject has the right to obtain information regarding the source of those personal data, including whether they originated from publicly available sources.
The Data Controller will respond to requests relating to personal data without undue delay and no later than one month after receipt of the request.
Where necessary, this period may be extended by an additional two months, taking into account the complexity and number of requests. The data subject will be informed of any extension within one month of receiving the request.
Before processing a request, the Data Controller may verify the identity of the applicant using appropriate methods. Information regarding the verification process will be provided when responding to the request.
Information is provided free of charge. However, where requests are manifestly unfounded, excessive, or repetitive, the Data Controller may charge a reasonable administrative fee or refuse to act on the request, as permitted by applicable data protection legislation.
