Privacy Policy

Website Terms of Use

https://www.madviso.sk/

In order for us to provide you with all of our services, you should be aware of how we handle your personal data. We will always handle your personal data and information in accordance with applicable legislation and in an ethical manner. We do not disclose, share or share your personal data with any other entities, with the exception of organisations with which cooperation is necessary for the proper functioning of the website’s functions (Google Maps, Google AdWords, Google Analytics, Facebook and Instagram).

For more information about Google Analytics, see the Google Analytics Terms and Conditions, Google Analytics Security and Privacy, and Google Privacy Policy.

Madviso, s.r.o., registered office: Leškova 8, 811 04 Bratislava – Staré Mesto, ID No.: 50545060 as the controller (hereinafter referred to as the “Controller”) guarantees the security and protection of the entrusted personal data in full compliance with the Regulation of the European Parliament and of the Council No. (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR”) and Act No. 18/2018 Coll. on the protection of personal data and on amendment and supplementation of certain acts, as amended.

What personal data we collect and why we collect it

Comments

When site visitors leave comments on the site, we collect the data that is displayed in the comment form as well as the users’ IP address and browser user-agent for spam protection.

An anonymised string created from your email address (also called a hash) may be provided to Gravatar to verify that you are using it. Gravatar’s privacy policy can be found at: https://automattic.com/privacy/. Once your comment has been approved, your profile photo will be publicly displayed along with the content of your comment.

Multimedia

When uploading images to a website, you should avoid uploading images with EXIF GPS location data. Visitors to the site can download and view any location data from the images.

Contact forms

Embedded content from other websites

Articles on this website may contain embedded content (e.g. videos, images, articles, etc.). Embedded content from other sites behaves the same as if the visitor had visited another website.

These websites may collect personal information about you, use cookies, embed third-party tracking, and monitor your interaction with embedded content, including tracking your interaction with embedded content if you have an account and are logged in to that website.

How long we keep your data

When adding a comment, the comment and its metadata are kept separate. This allows us to automatically recognize and approve any related comments without having to put them on hold for moderation.

For users who register on our website (if any), we also store the personal data they provide in their user profile. All users can view, edit or delete their personal information (except for user changes) at any time. Website administrators may also view and edit this information.

What rights you have over your data

If you have an account on this website or have posted a comment here, you can request an export of the personal data we store about you, including the data you have provided to us. You can also request the deletion of your personal data. However, this does not apply to data we need to keep about you for administrative, legal or security reasons.

Where we send your data

Visitor comments can be checked by an automated spam detection service.

Cookies

If you post a comment on our site, you may consent to the storage of your name, email address and website in cookies. This is for your convenience, so that you don’t have to refill your details again when adding another comment. These cookies are valid for one year.

If you have an account on our website and log in, we will store temporary cookies to determine whether your browser accepts cookies. These cookies do not contain any personal data and are deleted when you close your browser.

When you log in, we set a number of cookies to store your login details and display settings. Login cookies are valid for two days and display settings for one year. If you choose the “remember” option, your login will be valid for two weeks. When you log out of your account, the cookies are deleted.

When you edit or publish an article, additional cookies will be stored in your browser. These cookies do not contain any personal data and only refer to the ID of the article you have edited. Files are valid for 1 day.

The conditions for storing and processing cookies are as follows:

The user always has the possibility to agree or refuse the storage of cookies by setting his/her web browser to allow or refuse the storage of cookies.

In the case of consent (permission cookies) can be stored on the user’s electronic device:

• temporary cookies that are automatically deleted when the user’s browser is switched off,
• long-term cookies, which remain on the user’s browser even after the user has switched off the device used to access the madviso.sk website (these cookies can be deleted by the user at any time and are automatically deleted after a few weeks or months).

Website security

The Madviso.sk website uses an encrypted SSL connection for any user connection and transmission of any data, which prevents third parties from accessing the transmitted data during its transmission on the Internet and the alteration of such data by third parties. The Controller’s databases containing personal data are protected by encryption and non-public access data in accordance with state-of-the-art technical standards.

Contact details

The user may contact the controller during his/her visit and further use of the madviso.sk website and provide him/her with his/her personal data for the purpose of contacting him/her back.

The provision of personal data is voluntary. The legal basis for the processing of the data provided by the user in this case is the legitimate interest of the controller to contact the user and provide any answers or advice.

The personal data that the user may provide to the controller are:
name and surname [nevyhnutné]
e-mail address [nevyhnutné]
phone number [nevyhnutné]
the company (workplace/employer) of the user.

The purpose of processing the user’s personal data is to contact the user back.

Personal data will only be processed for the necessary period of time during communication with the user.

By voluntarily providing personal data, the user declares that the data provided is correct, true and up-to-date.

Information on the rights of the data subject

The data subject has the right to file a petition with the Office for Personal Data Protection of the Slovak Republic if he or she believes that his or her rights under the GDPR or the relevant legislation are directly affected. The user’s rights in relation to the protection of personal data are governed in particular by the provisions of Articles 12 to 22 of the GDPR, as amended from time to time.

Right of access

1. The data subject shall have the right to obtain confirmation from the controller as to whether personal data relating to him or her are being processed and, if so, to obtain access to those personal data and that information:
   (a) the purposes of the processing;
   (b) the categories of personal data concerned;
   (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
   (d) where possible, the expected period of retention of the personal data or, if that is not possible, the criteria for determining it;
   (e) the existence of the right to require the controller to rectify personal data relating to the data subject or to erase or restrict processing or to object to such processing;
   (f) the right to lodge a complaint with the supervisory authority;
   (g) where the personal data have not been obtained from the data subject, any available information as to their source;
   (h) the existence of automated decision-making, including profiling as referred to in Article 22(1) of Directive 95/46/EC 1 and 4 of the Regulation and, in those cases, at least meaningful information about the procedure used as well as the significance and foreseeable consequences of such processing for the data subject.
   2. Where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed of the appropriate safeguards under Article 46 of the Regulation relating to the transfer.
   3. The controller shall provide a copy of the personal data being processed. For any additional copies requested by the data subject, the controller may charge a reasonable fee corresponding to the administrative costs. Where the data subject has made the request by electronic means, the information shall be provided in a commonly used electronic format, unless the data subject has requested otherwise.
   4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

Right to repair

The data subject shall have the right to have inaccurate personal data concerning him or her rectified by the controller without undue delay. With regard to the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by providing a supplementary declaration.

Right to erasure (‘forgetting’)

1. The data subject shall also have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall erase the personal data without undue delay if one of the following grounds is met:
   (a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
   (b) the data subject withdraws the consent on the basis of which the processing is carried out, pursuant to Article 6(1) of Directive 95/46/EC 1 lit. (a) of the Regulation or Article 9(1)(a) of the Regulation. 2 lit. (a) of the Regulation and where there is no other legal basis for the processing;
   (c) the data subject objects to processing pursuant to Article 21(1)(a) of Directive 95/46/EC 1 and there are no overriding legitimate grounds for processing or the data subject objects to processing pursuant to Article 21(1). 2 Regulations;
   (d) the personal data have been unlawfully processed;
   (e) the personal data must be erased in order to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject;
   (f) the personal data have been collected in connection with the offer of information society services pursuant to Article 8(1) of Directive 95/46/EC 1 of the Regulation.5. Where a controller has disclosed personal data and is required under paragraph 1 to erase the personal data, the controller shall, taking into account the technology available and the cost of implementing the measures, take reasonable measures, including technical measures, to inform controllers processing the personal data that the data subject has requested them to erase all references to those personal data, or a copy or replica thereof.6. Paragraphs 1 and 2 shall not apply insofar as the processing is necessary:
   (a) to exercise the right to freedom of expression and information;
   (b) for compliance with a legal obligation which requires processing under Union law or the law of a Member State to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
   (c) for reasons of public interest in the field of public health in accordance with Article 9(1)(a) of Regulation (EC) No 178/2002 2 lit. (h) and (i) of the Regulation, as well as Article 9(1)(i) of the Regulation. 3 Regulations;
   (d) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1) of Regulation (EC) No …/… 1 of the Regulation where the right referred to in paragraph 1 is likely to render impossible or seriously impede the achievement of the purposes of such processing, or
   (e) to prove, exercise or defend legal claims.

Right to restriction of processing

1. The data subject shall have the right to have the controller restrict the processing in respect of one of the following cases:
   (a) the data subject contests the accuracy of the personal data during a period allowing the controller to verify the accuracy of the personal data;
   (b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use;c) the controller no longer needs the personal data for the purposes of the processing but the data subject needs them to establish, exercise or defend legal claims;
   (d) the data subject has objected to processing pursuant to Article 21(1)(a) of Directive 95/46/EC 1 of the Regulation, pending verification that the legitimate grounds on the part of the controller outweigh the legitimate grounds of the data subject.7. Where processing has been restricted pursuant to paragraph 1, such personal data shall, with the exception of storage, be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. 3. The controller shall inform the data subject who has obtained the restriction of processing pursuant to paragraph 1 before the restriction of processing is lifted.

Right to portability

1. The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without being prevented by the controller to whom the personal data have been provided if:
   (a) the processing is based on consent pursuant to Article 6(1) of Directive 95/46/EC 1 lit. (a) of the Regulation or Article 9(1)(a) of the Regulation. 2 lit. (a) of the Regulation, or on a contract pursuant to Article 6(1)(a) of the Regulation, or on a contract pursuant to Article 6(1)(a) of the Regulation. 1 lit. (b) Regulations, and
   (b) where the processing is carried out by automated means.8. In exercising his or her right to data portability pursuant to paragraph
   1 the right to transfer personal data directly from one controller to another controller, insofar as this is technically feasible.9. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17 of the Regulation. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.10. The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

Right to object

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of personal data concerning him or her which is carried out on the basis of Article 6(1) of Directive 95/46/EC. 1 lit. (e) or (f) of the Regulation, including objections to profiling based on those provisions. The controller may no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

2. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for the purposes of such marketing, including profiling to the extent that it is related to such direct marketing.

3. If the data subject objects to processing for direct marketing purposes, the personal data may no longer be processed for such purposes.

4. The person concerned shall be expressly informed of the right referred to in par. 1 and 2 at the latest at the first communication with her, presenting this right clearly and separately from any other information.

5. In the context of the use of information society services and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.

6. Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Art. 89 para. 1 of the Regulation, the data subject shall have the right to object, on grounds relating to his or her particular situation, to processing of personal data concerning him or her, except where the processing is necessary for the performance of a task carried out for reasons of public interest.

Privacy policy is subject to change.

Updated 10.10.2018