EU cookie policy

EU cookie policy

This Cookie Policy was last updated on 4/1/2022 and applies to citizens and residents of the European Economic Area.

Company:

1. Introduction

Our website www.technoboxservices.sk (hereinafter referred to as the “website”) uses cookies and other related technologies (for simplicity, all technologies are referred to as “cookies”). Cookies are also inserted by third parties that we have involved. In the document below we inform you about the use of cookies on our website.

2. What are cookies?

A cookie is a small, simple file that is sent along with the pages of this site and stored by the browser on the hard drive of a computer or other device. The information stored in them may be returned by our server or the server of the relevant third parties during the re-visit.

3. What are scripts?

The script is part of the program code that is used to make our website work properly and interactively. This code runs on our server or on your device.

4. What is a web beacon?

A web beacon (or pixel tag) is a small, invisible piece of text or image on the web that is used to track web traffic. For this purpose, various data about you are stored using web beacons.

5. Cookies

5.1 Technical or functional cookies

Some cookies ensure that certain parts of the website work properly and that your user preferences remain known. By placing functional cookies, we make it easier to visit our website. This way, you don’t have to re-enter the same information when you visit our website. We may place these cookies without your consent.

5.2 Statistical cookies

We use statistical cookies to optimize websites for our users. Thanks to these statistical cookies, we gain an overview of the use of our website. We ask you for permission to store statistical cookies.

5.3 Marketing/Tracking Cookies

Marketing / tracking cookies are cookies or any other form of local storage that is used to create user profiles to display advertising or to track a user on this site or on several sites for similar marketing purposes.

6. Placement of cookies

Google Analytics

Google AdSense

Google Fonts

Google reCAPTCHA Google Maps

7. Consent

Statistics, Marketing / Tracking, Functional

When you visit our website for the first time, we will show you a pop-up window with an explanation of cookies. As soon as you click on “Save preferences”, you agree to the use of the categories of cookies and add-ons described in the pop-up window and in this Cookie Policy. You can disable the use of cookies using your browser, but keep in mind that our website may no longer function properly.

7.1 Consent Settings Management

Functional Always Active Statistics Marketing

8. Your rights regarding personal data

With respect to your personal information, you have the following rights:

• The right to know why your personal data is needed, what will happen to it and how long it will be kept.
• The right of access: You have the right to access your personal data that is known to us.
• The right to correct: You have the right to add, correct, delete or block your personal data whenever you want.
• If you give us consent to the processing of your data, you have the right to revoke this consent and have your personal data deleted.
• The right to transfer your data: You have the right to request all your personal data from the administrator and to transfer it in full to another administrator.
• The right to object: you can object to the processing of your data. We follow this unless there are legitimate reasons for processing.

Please contact us to exercise these rights. Contact details can be found at the bottom of this Cookie Policy. If you have a complaint about how we handle your data, we would like to know about it, but you also have the right to lodge a complaint with a supervisory authority (the Office for Personal Data Protection).

9. Enabling / disabling and deleting cookies

You can use your internet browser to delete cookies automatically or manually. You can also specify that some cookies do not have to be placed. Another option is to change your internet browser settings so that you receive a message each time you save a cookie. For more information on these options, see your browser’s Help. Please note that our website may not work properly if all cookies are disabled. If you delete cookies in your browser, they will be placed again after your consent when you visit our website again.

10. Contact information

If you have any questions or comments regarding our policy concerning cookies and this statement, please contact us using the following contact details:

Techno box services, s.r.o.

Business ID: 54 126 428

Partizánska cesta 3, 974 01 Banská Bystrica

The Slovak republic

Web: https://www.tbsgroup.sk

Email: info@tbsgroup.sk

Phone number: +421947933551

Information of the operator on the processing of personal data of persons affected – customers according to the provisions of Art. 13 Regulation (EU) 2016/679 of the European Parliament and of the Council EU of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation)(hereinafter referred to as “GDPR Regulation” only) and § 19 of Act no. 18/2018 Coll. on Personal Data Protection (hereinafter referred to as the “Act”)

(hereinafter referred to as the “Information”)

Company:

Business name: Techno box services, s.r.o.. Company premises registered at: Partizánska cesta 3, 974 01 Banská Bystrica

Business ID: 54 126 428

Registered in the Register of Commerce at the County Court of Banská Bystrica, Section Sro, File No. 42269 / S.

Statutory representative: Martin Kúšik, managing director. Contact information: info@tbsgroup.sk

(hereinafter referred to as the “Company” or “Operator”),

informs the affected persons (hereinafter referred to as “affected person” or “data subject”) about the protection of personal data (hereinafter referred to as “PD”) in accordance with the provisions of Art. 13 of the GDPR Regulations and § 19 of the Act as follows:

1. For the purposes of this Information, the data subject means a natural person (i) who orders from the Service Operator (hereinafter referred to as the “Customer”) or (ii) whose Operator provides services ordered by the data subject from a third party (hereinafter referred to as the “Addressee”) or (iii) which the Operator sends a newsletter or notifications concerning the order or (iv) who fills in and sends to the Operator a form on the basis of which he leaves feedback for the services provided, or a contact form on the Operator’s website www.technoboxservices.sk
2. The Operator is in the legal position of the Operator towards the data subject according to the GDPR Regulation and the Act, is a person who alone or jointly with others defines the purpose and means of the processing of the PD and processes the PD in his own name.
3. Legitimate interests of the Operator or a third party, if PDs are processed according to Art. 6 par. 1 (f) of the GDPR regulations and § 13 par. 1 (f) of the Act (Article 13 para. 1 (d)) of the GDPR Regulation and § 19 para. 1 (d) of the Act: The Operator processes the PD on the basis of a legitimate interest in the case of natural persons to whom the Operator has already provided the service and sends them advertisements about its products and information leaflets about this activity. The person concerned may at any time express his disagreement with such contact. Based on this statement, the Operator will not contact this data subject.
4. Identification of the beneficiary or category of beneficiary, if any (Article 13 (1) (e) of the GDPR Regulation and § 19 (1)(e) of the Act):
5. Provider of accounting software Pohoda – STORMWARE s.r.o., Business ID: 36244791, with its registered office at Matúšova 48, 811 04 Bratislava.
6. External collaborator.
7. External Storage Provider – Google Drive Software Provider.
8. An external provider of marketing services.
9. An external payment service provider.
10. The Operator processes the following Client’s PDs, for the purposes, on the basis of the legal basis and for the period of processing as follows (Article 13 (1) (c), (e) and (2)(e) of the GDPR regulations, and § 19 par. 1 (c), (e) and par. 2 (a) of the Act):

1. Information on whether the Operator intends to transfer personal data to a third country or international organization, identification of the third country or international organization (Article 13 (1) (f) of the GDPR Regulation and § 19 (1)(f) of the Act): The data subject has the following rights towards the Operator in relation to the District Office:

The Operator intends such a transfer only in the case of performance of the contract between the Operator and the Client in connection with the provision of services.

2. The Right of the data subject to request from the Operator access to the PD concerning the data subject, the right to rectify the PD, the right to delete the PD or the right to restrict the processing of the PD, the right to object to the processing of the PD, as well as the right to portability of the PD (Article 13 (2)(b) of the GDPR Regulation and § 19 (2)b) of the Act):

0. The right to request access to personal data concerning the data subject: The data subject has the right to obtain from the Operator a confirmation as to whether the data subject’s personal data are being processed and, if so, has the right to obtain access to such personal data and information about the data subject:

○ purposes of personal data processing,

○ category of personal data processed,

○ retention period of personal data; if this is not possible, information on the criteria for its determination,

○ the right to request from the controller the correction of personal data concerning the data subject, their deletion or restriction of their processing, or the right to object to the processing of personal data,

○ the right to file a motion to initiate proceedings pursuant to Section 100 of the Act or to file a complaint to the supervisory body pursuant to the provisions of Art. 77 of the GDPR Regulations,

○ sources of personal data, if personal data have not been obtained from the data subject,

○ the existence of automated individual decision-making, including profiling according to the provisions of Art. 22 par. 1 and 4 of the GDPR Regulation and the provisions of § 28 par. 1 and 4 of the Act (in these cases, the controller shall provide the data subject with information in particular on the procedure used, as well as on the significance and expected consequences of such processing of personal data for the data subject).

○ The operator shall provide a copy of the PDs to be processed. The Operator may charge a reasonable fee corresponding to the administrative costs for any additional copies requested by the affected person. If the data subject has submitted the request by electronic means, the information shall be provided in a commonly used electronic form, unless the data subject has requested otherwise.

○ The information must be provided immediately, at the latest within 1 month. The operator has the right to extend the processing time of the application for another 2 months if the request is complex or frequent. However, the data subject must notify about the reason for the extension of the processing time within 1 month.

○ In the event of an unjustified or too frequent requests, the Operator has the right to charge a fee commensurate with the cost or to reject the request. It must explain the reason for the refusal and the right of the data subject to lodge a complaint with the supervisory authority.

3. The right to correct personal data: The data subject has the right to have the Operator correct incorrect personal data concerning him without undue delay. With regard to the purpose of the processing of personal data, the data subject has the right to supplement incomplete personal data.

The information must be provided immediately, at the latest within 1 month. The operator has the right to extend the processing time of the application for another 2 months if the request is complex or frequent. However, the data subject must notify about the reason for the extension of the processing time within 1 month.

In the event of an unjustified or too frequent requests, the Operator has the right to charge a fee commensurate with the cost or to reject the request. It must explain the reason for the refusal and the right of the data subject to lodge a complaint with the supervisory authority.

4. The right to delete personal data or the right to restrict the processing of personal data: The data subject has the right to have the Operator delete personal data concerning him without undue delay. The Operator is obliged to delete personal data without undue delay, if the affected person has exercised the right to delete according to the previous sentence, if

• PD are no longer needed for the purpose for which they were obtained or otherwise processed,
• The data subject withdraws his consent to the processing of the PD and there is no other legal basis for the processing of the PD,
• The data subject objects to the processing of the PD and there are no legitimate reasons for processing the PD,
• PD are processed illegally,
• The reason for cancellation is the fulfillment of the obligation under the GDPR Regulation, or the Act, a special regulation or an international agreement by which the Slovak Republic is bound, or
• the PD were obtained in connection with the offer of data services company.

The previous two sentences do not apply if the processing of personal data is necessary

• to exercise the right to freedom of expression or the right to information,
• to fulfill the obligation under the GDPR Regulation, or the Act, a special regulation or an international agreement by which the Slovak Republic is bound, or to fulfill a task carried out in the public interest or in the exercise of public power entrusted to the operator,
• for reasons of public interest in the field of public health,
• for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes, where the law is likely to make it impossible or seriously difficult to achieve the objectives of such processing, or
• to assert a legal claim.

The data subject has the right to have the Operator restrict the processing of the PD if

• The data subject objects to the accuracy of the PD, during a period enabling the Operator to verify the accuracy of personal data,
• the processing of the PD is illegal and the data subject objects to the deletion of the PD and instead requests a restriction on their use,
• The Operator no longer needs the PD for the purpose of processing the PD, but the affected person needs them to exercise a legal claim, or
• The data subject objects to the processing until the legitimate reasons on the part are verified.

If the processing of personal data has been restricted, in addition to storage, the PD Operator may process only with the consent of the person concerned or for the purpose of asserting a legal claim, for the protection of persons or for reasons of public interest.

5. The right to object to the processing of personal data: If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of his personal data, including profiling. If the data subject objects to the processing for direct marketing purposes, the Operator may no longer process his personal data for these purposes.

6. Right to transfer personal data: The data subject has the right to obtain the data sheets concerning him / her provided to the Operator in a structured, commonly used and machine-readable format and has the right to transfer these data to another operator. The right to portability must not adversely affect the rights and freedoms of others. This right applies if

0. processing is based on consent or contract, and

1. processing is carried out by automated means.

The operator has a data transfer period of 1 month. It can be extended by 2 months if the transfer is difficult. The operator must inform the person concerned thereof and give reasons for the extension. In the event of extra steps being taken for the transfer by the Operator, he must inform the data subject as to why he has not done so and the right of the data subject to lodge a complaint with the supervisory authority.

7. The right of the data subject at any time to withdraw the consent to the processing of the PD (Article 13 (2) (c) of the GDPR Regulation and § 19 (2)(c) of the Act):

The data subject shall have the right to withdraw his or her consent to the processing of PD concerning him or her at any time. Withdrawal of consent does not affect the lawfulness of the consent-based processing of the PD prior to its withdrawal. The person concerned may withdraw the consent in the same way as he gave the consent.

8. The right of the data subject to file a motion to initiate proceedings pursuant to Section 100 of the Act or a complaint to the supervisory body pursuant to Art. 77 of the GDPR Regulation (Article 13 (2) (d) of the GDPR Regulation and § 19 (2)(d) of the Act):

Without prejudice to any other administrative or judicial remedy, the data subject shall have the right to lodge a complaint with the supervisory authority, in particular in his or her Member State of habitual residence, place of work of the alleged infringement, if he or she considers that the processing of personal data concerns it is contrary to the GDPR Regulation.

The data subject has the right to submit a proposal to the Office for Personal Data Protection to initiate proceedings on personal data protection. The purpose of the proceedings is to determine whether the rights of natural persons have been violated in the processing of their personal data or the GDPR Regulation, the Act, or a special regulation in the field of personal data has been violated, and to impose remedial measures if justified and appropriate, or a fine for violation of the GDPR Regulation, or the Act, or a special regulation for the protection of public authorities.

The application initiating proceedings must contain:

1. name, surname, correspondence address and signature of the proposer,
2. identification of the person against whom the application is directed, stating the name, surname, permanent residence or name, registered office and identification number, if assigned,
3. the subject matter of the proposal, indicating the rights which should have been infringed upon in the processing of personal data,
4. evidence in support of the claims made in the proposal,
5. a copy of the document or other evidence proving the exercise of a right under the Act or a special regulation, if such a right has been exercised by the data subject, or an indication of reasons worthy of special consideration for the non-exercise of the right in question, if submitted by the data subject.
6. A model application initiating proceedings shall be published on the website of the Office for Personal Data Protection.
7. Existence of automated individual decision-making, including profiling (Article 13 (2) (f) of the GDPR Regulation and Article 19 (2)(f) of the Act):

The operator does not use automated individual decision-making or profiling.

In Banská Bystrica, on April 1, 2022.

Martin Kúšik – Manager

Tel: 421 902 270 879

Email: martin.kusik@tbsgroup.sk

Martin Kúšik -CEO

Techno box services s.r.o.