PERSONAL DATA PROCESSING POLICY

ARTRA s.r.o., with its registered office at Víťazná 394/44, 958 04 Partizánske, Slovak Republic, Company ID: 31 594 689 (the "Controller"), has developed this Personal Data Processing Policy (the "Policy") to inform you about how it processes your personal data. Protecting your personal data is a priority for us.

This Policy applies to the processing of personal data that occurs through our website www.artra.sk (the "Website"), when using its functionalities, as well as when using the option to contact us via the contact form or when subscribing to our newsletter.

In the Policy below, we answer questions regarding the processing of your personal data in accordance with Article 13 of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) ("GDPR").

The purpose of the processing of personal data, the legal basis for the processing and the category of personal data processed:

1. Purpose of processing: handling requests sent via the contact form

   • Legal basis: legitimate interest under Article 6(1)(f) of the GDPR.
   • Legitimate interest: The Controller has a legitimate interest in processing the personal data of the person concerned who has voluntarily filled in the contact form, in order to process his/her request.
   • Legal basis: performance of a contract or, at the request of the person concerned, the performance of pre-contractual measures pursuant to Article 6(1)(b) of the GDPR.
   • Personal data category: common.

2. Purpose of processing: sending marketing messages and news via newsletter

   • Legal basis: consent pursuant to Article 6(1)(a) of the GDPR.
   • Personal data category: common.

3. Purpose of processing: analysis of website visitor behaviour via analytical cookies

   • Legal basis: consent pursuant to Article 6(1)(a) of the GDPR.
   • Personal data category: common.

4. Purpose of processing: to ensure the proper functioning of the Website through the use of necessary cookies

   • Legal basis: legitimate interest under Article 6(1)(f) of the GDPR.
   • Legitimate interest: The Controller has a legitimate interest in processing the personal data of visitors to the Website by means of the necessary cookies to ensure the proper operation of the Website in accordance with their expectations.

Recipients of personal data:

We only disclose your personal data to the extent necessary to our employees, our Google Analytics provider (Google), the Website administrator and our IT infrastructure provider.
In certain statutory cases, we are obliged to disclose your personal data to public and private parties whose right of access to your personal data is recognised by the applicable laws.

Information that the Controller intends to transfer the personal data to a third country or an international organisation:

The transfer of your personal data can only take place if cookies are used through the use of Google Analytics, as the provider of this solution, Google, is based outside the European Economic Area.
Your data may thus be transferred to the United States of America. However, the transmission of your data is secure. Adequate safeguards for the transfer of data by Google consist of standard contractual clauses.
Standard contractual clauses for the transfer of personal data to third countries have been adopted by the decision of the European Commission. You can find out more about the decision at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en

Personal data retention period:

The personal data provided via the contact form available on the Website is stored for no longer than the time necessary to process your request and/or for the duration of the contractual relationship.
The personal data provided by subscribing to the newsletter will be stored for the duration of the consent or until it is revoked.
The retention period for personal data collected through cookies varies according to the type of cookie, but the maximum retention period is 2 years. You can find out more about how we use cookies in our  Cookie Policy.

Rights of the person concerned:

You have the following rights in relation to the processing of your personal data under Articles 12 to 22 of the GDPR:

• right of access to personal data: if you want to know whether we are processing your personal data, you have the right to be informed about this as well as the right of access to this personal data;
• right to rectification and completion of personal data: if we process incorrect or incomplete personal data about you, you have the right to request its rectification or completion;
• right to erasure of your personal data: where (i) the personal data is no longer necessary for the purposes for which it was collected, (ii) you withdraw the consent on the basis of which we processed your personal data, (iii) you have objected to the processing and there are no overriding legitimate interests of ours, (iv) we have processed the personal data unlawfully, (v) the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which we are subject, (vi) the personal data was collected in connection with the offering of information society services under the GDPR;
• right to restrict the processing of personal data: if you exercise the right to the restriction of processing, we will make your personal data inaccessible, temporarily delete, store or otherwise process them in order to ensure the proper exercise of the requested right;
• right to data portability: if we process your personal data on the basis of your consent, you have the right to request the transfer of your personal data to another controller;
• right to object to the processing of personal data: in the case of personal data that you have provided to us via the contact form, you have the right to object to their processing. Unless we can demonstrate our legitimate interest, we will no longer be able to process your personal data;
• right to withdraw consent at any time: if you consented to the use of cookies when you visited our Website, you have the right to withdraw your consent at any time. You can do this in the cookie settings. If you have subscribed to the newsletter, you can withdraw your consent to receive it at any time by sending an email to artra@artra.sk. The withdrawal of the consent shall not affect the lawfulness of processing based on the consent prior to its withdrawal;
• right to lodge a complaint with the supervisory authority – the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 4826/12, 820 07 Bratislava, Slovak Republic; www.dataprotection.gov.sk/uoou/. You can also do so via email: statny.dozor@pdp.gov.sk.

Voluntary disclosure of your personal data

Providing your personal data is voluntary; if you are interested in contacting us and expect our response or want us to send you news via newsletter, you need to provide us with your e-mail address and other necessary data. As a consequence of not providing the necessary data, we will not be able to contact you or send you news via newsletter; there are no other consequences.

Automatic individual decision-making

No automated individual decision-making is involved in the processing of your personal data by us.

Contact details

If you have any further questions regarding the processing of your personal data, please do not hesitate to contact us. You can do so by sending an email to artra@artra.sk. If you wish to exercise your rights, you may contact us in writing at ARTRA s.r.o., with its registered office at Víťazná 394/44, 958 04 Partizánske, Slovak Republic or by email at artra@artra.sk.
This Policy may change from time to time, but the security of your personal data remains a priority for us, so we will notify you of any changes to the Policy here. This version of the Policy shall apply from January 1, 2022.

ARTRA s.r.o.