Information about the processing of your personal data
If you are a visitor to our website, you entrust us with your personal data. We are responsible for their protection and security. In the following, we will introduce you to how we protect your personal data and also to the principles and rights you have in relation to the Data Protection Regulation. We process personal data under both the Data Protection Act and the EU Regulation 2016/679, tthe EU Data Protection Regulation, which is effective from 25. May 2018 and is commonly known by the acronym GDPR.
We are the controller of your personal data
JMP ASKLEPION s.r.o., a company registered in the Commercial Register of the District Court of Banská Bystrica, registered office: A. Sládkoviča 92/9 960 01 Zvolen. We operate the website www.littlebali.sk and we are in the position of a data controller with respect to your personal data. This means that we determine how the personal data will be processed, for what purpose and for how long. Where necessary, we select other processors to assist us with the processing.
Method of contact
If you wish to contact us during the processing of your data, you can contact us by email at email@example.com
We declare that, as the controller of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Data Protection Act and the GDPR. We will process your personal data on the basis of a valid legal ground, in particular a legitimate interest, the performance of a contract, a legal obligation or the consent given. Under Article 13 of the GDPR, we comply with the information obligation before we start processing personal data. We will enable you to exercise and fulfil your rights and support you in doing so in accordance with the Data Protection Act and the GDPR.
Scope of personal data and purposes of processing
We process personal data that you have freely entrusted to us. This is primarily the provision of data by completing one of the forms on our website. We do so for the following reasons:
• Provision of services and fulfilment of a contract. We need your personal data in the scope of: billing data, e-mail, telephone, or correspondence address for the fulfilment of the contract (for example, in order to arrange cooperation with you).
• Bookkeeping. If you are our customer, we necessarily need your personal (billing) data to comply with the legal obligation to issue and record tax documents.
• We keep your personal data for the duration of the limitation periods, unless the law provides for a longer period for its retention or we have indicated otherwise in specific cases.
Disclosure of personal data to third parties
Your personal data can be accessed by our employees and associates who are bound by confidentiality and trained in the security of the processing of personal data. This includes in particular data storage and software application providers as well as accounting and administrative support. For the provision of some specific processing operations that we are unable to provide in-house, we use the services and applications of processors who specialise in the specific processing and are GDPR compliant. These providers include the following platforms and services:Google – Google Analytics.
It is possible that in the future we may decide to use other applications or processors in order to facilitate and improve the quality of processing. However, we promise you that in such a case, we will have at least the same demands on the security and quality of the processing as on ourselves when choosing a processor.
Security and privacy
We protect personal data to the maximum extent possible using modern technologies that correspond to the state of the art. We have adopted and comply with all available technical and organizational measures to prevent the misuse, damage or destruction of your personal data.
Moving data outside the EU
We only process data in the European Union or in countries that provide an adequate level of protection based on decisions of the European Commission.
Your rights in relation to data protection
You have rights in relation to data protection. If you wish to exercise any of these rights, please contact us via email at firstname.lastname@example.org. You have the right to information, which we also fulfil with this information page with the principles of personal data processing.
Thanks to your right of access, you can ask us at any time and we will provide you with information within 30 days as to what personal data we are processing and why. If something changes and your data is outdated or incomplete, you have the right to have your personal data completed and amended.
You can exercise your right to restrict processing if you believe that we are processing inaccurate data about you, or that we are processing unlawfully but you do not want to delete all your data, or if you object to the processing. You can limit the scope of the personal data or the purposes of the processing.
If you would like to take your personal data and transfer it to someone else, we will follow the same procedure as for exercising your right of access. Except that we will supply the information to you in machine-readable form. Again, the 30 day time limit applies here.
Your other right is the right to erasure (to be forgotten). If you wish to exercise this right, we will delete all your personal data from the system. We need 30 days to secure the right to erasure. In some cases, we are bound by legal obligations and, for example, we must keep a record of tax documents issued for the duration specified by law. In that case, we will delete all such personal data that is not bound by another law. We will notify you by email when the deletion has been completed.
If you feel that we are not handling your data in accordance with the law, you have the right to contact the Data Protection Authority at any time with your complaint. However, we will be happy if you inform us of your suspicions first so that we can rectify any deficiency.
We assure you that our employees and associates who will be processing your personal data are required to maintain confidentiality about your personal data and about security measures, the disclosure of which would compromise the security of your personal data. This confidentiality shall continue even after the termination of the binding relationship with us. Your personal data will not be released to any other third party without your consent.