Privacy policy

Privacy policy is ensured by the operator - Mgr. Dominika Artim; place of business: Na Bikoši 14883/23, 080 01 Prešov; IČO (company registration number): 53334124, registered in the Trade Register of the District Office Prešov, Trade Register No.: 750-55951 (hereinafter referred to as the ‘operator’) – in accordance with the requirements of Regulation (EU) No 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (the general data protection regulation) (hereinafter referred to as the ‘Regulation’) and of Act No 18/2018 Coll. on personal data protection and amending and supplementing certain Acts (hereinafter referred to as the ‘Act’). We care about the protection of your personal data, thus we hereby inform you about how we process your personal data.

The valid and effective text of Regulation No 2016/679 of the European Parliament and of the Council as well as the text of Act No 18/2018 Coll. on personal data protection shall be used by us as a basic legal framework for setting the personal data protection. In addition to these regulations, amendments to standards ISO 27001, ISO 31000 and possibly other standards shall be considered for this purpose.

What data do we collect

In providing our services we collect from you, as the data subjects, personal data to the extent necessary, in order to enter into a contractual and perform the rights and duties arising from it. We collect your data for a fixed period of time limited by the relevant legislation.

Rights of the data subjects

Regardless of the legal basis for the processing of personal data, the data subject has the right to access its personal data, the right to rectify and erase them, to restrict processing and the right to file a complaint to the supervisory authority – The Office for Personal Data Protection of the Slovak Republic, or the right to bring the proceedings on personal data protection.

The right to access personal data

This right means, that you are entitled to require confirmation from us, whether personal data concerning you are being processed. Therefore, if we process such personal data related to you, you are entitled to obtain access to your personal data and information regarding:

  • why we collect your personal data (purpose of processing personal data)
  • what data we collect about you (personal data category)
  • to whom your personal data may or will be given (identification of recipients or group of recipients)
  • how long we will store your personal data (period of personal data retention)
  • that you are entitled to ask us to rectify and erase personal data as well as to restrict their processing or that you have the possibility to object to the processing of personal data
  • that you have the right to bring the proceedings on personal data protection as per the Act or
  • the right to file a complaint, in accordance with the Regulation to the supervisory authority - The Office for Personal Data Protection of the Slovak Republic
  • where your personal data come from (information on source), if you did not directly provide us with your personal data
  • whether we utilize automated individual decision-making including profiling according to sec. 28 art. 1 and 4 of the Act; particularly concerning the procedure as well as the importance and presumed consequences of such processing of personal data for you
  • adequate safeguards concerning transfer, in case that we transfer your personal data to a third country or an international organization

This right of access also means for you the possibility to obtain personal data which we process about you. We will provide you with a copy of your personal data, which we process about you.

However, if you repeatedly demand providing of your personal data, we may demand an appropriate administrative fee from you, related to your request for a copy of your personal data.

The right to rectify personal data

Within the terms and conditions of providing our services we inform you so that you provide us with correct data. If nonetheless this is the case that we process incorrect data about you, the right to rectify personal data means, that you are entitled to request the rectification of incorrect personal data related to you. Regarding the purpose of the processing of personal data you also have the right to complement your incomplete personal data.

The right to erasure of personal data (right to be forgotten)

You have the right to erase personal data related to you, if at least one of the following reasons is fulfilled at the same time:

  • your personal data are no longer needed for the purpose we obtained them for or otherwise processed them.
  • you have revoked your consent to the processing of personal data, based of which we process your personal data and at the same time there is no other legal basis for their further processing
  • you object to the processing of personal data, which is performed on the legal basis of the public interest or a legitimate interest and no legitimate grounds for their processing predominate.
  • your personal data have been processed illegally
  • your personal data must be deleted, since it is necessary to comply with the obligation under the law of the Slovak Republic or the law of the European Union
  • your personal data were being collected in connection with the offer of information society services as per sec. 15 art. 1 of the Act

However, your right to erasure of personal data may not be satisfied in a specific case regarding specific circumstances, if the processing of personal data is necessary for:

  • exercising our right to freedom of expression or the right to information
  • compliance with a legal obligation
  • the establishment of our legal claim
  • for the purpose of archiving, for historical research purposes or for statistical purposes, if it is probable, that the right to erasure would prevent us or exacerbate in a serious way the achievement of goals of such processing for us.

The right to restrict the processing of personal data

You have the right to restrict the processing of personal data concerning you and at the same time at least one of the following grounds is met:

  • you challenge the correctness of your personal data during the period allowing us the verification of your personal data
  • it is illegal processing of personal data and you object to the erasure of personal data and you request restriction of the processing of personal data instead of erasure.
  • we no longer need your personal data for any purpose of processing, or you need them for the establishment, exercise or defence of your legal claims
  • you object to the processing of personal data until the time of verification, whether our justified interests prevail over your justified interests

The right to personal data portability

If our right to process your personal data is based on your consent or on the fulfilment of obligations arising from the contract that we have concluded with you, you are entitled to request the transfer of data related to you that you have provided us with, to other personal data controller.

The right to the withdrawal of consent

If we process your personal data on a legal basis – the consent of the data subject, you have the right to revoke this consent at any time, even before the expiration of the period, for which the consent was granted. The withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal.

The right to object

If you have reasons regarding your specific situation, you are entitled to object to the processing of your personal data, if the legal basis for such processing is our legitimate interest. However, if our legitimate interest in processing outweighs your personal interest, we may continue processing your data, despite your objection to the processing. We are also entitled to continue processing your data, if it is necessary for the establishment, exercise or defence of our legal claims.

How to exercise rights

You may exercise your above-mentioned rights via e-mail to hello@barnashki.com. In your request, please state your forename, surname, e-mail address and the address of your permanent residence where applicable. If you do not provide us with the aforesaid data, it will not be possible to comply with your request. We require this information from you to verify your identity and not to provide your personal data to an unauthorized person.

If you, as the data subject, do not have full legal capacity, your rights may be exercised by your legal representative in accordance with the Regulation and the Act. The rights of the data subject, who is no longer living, may be exercised by a close person in accordance with the Regulation and the Act. If your requests as a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, we may demand a reasonable fee, taking into account the administrative costs for providing the information or to refuse to act on the request.

The provision of personal data to third parties.

In some cases, other parties we work with may access your personal data. We use the services of third parties to ensure specific processing operations that we are unable to ensure on our own. Such third parties are for instance:

  • accountant under the contract to provide accounting services
  • courier and delivery services providers
  • marketing agencies
  • IT services providers

It is possible, that in the future, the list of these third parties will be extended to other parties or, conversely, narrowed by some third parties.

If we, as the operator, will transfer the obtained personal data on natural persons to another person in the capacity of an intermediary, we are obliged to draw up a specific contract for this case between us and every such other person in the capacity of an intermediary or to incorporate the relevant provisions according to Act No 18/2018 into the framework contract or to draw up an additional agreement to this contract.

The erasure of personal data

The operator shall ensure the erasure of the provided personal data from the information system after revoking the user′s consent to the processing of personal data or after the expiration of the retention period.

The responsible person

The operator does not have a designated responsible person.

The disclosure and transfer to third countries

Your personal data are neither disclosed nor transferred to third countries.

Profiling and automated decision-making

Your personal data are not subject to automated decision-making or profiling.

Security

Achieving the highest possible protection of our clients′ personal data is a high priority for us and in addition to the existing business goals, increased attention will be paid to this field. The measures of a technical and organizational nature to be used will be carefully selected concerning the extent of the processing of personal data and our technical and human resources, but always in such a way, that these means are as effective as possible and that they comply with the valid and effective legislation in the Slovak Republic and in the European Union.

Cookies

Our website utilizes cookies to enhance functioning of our website and to improve search results.

What are cookies?

Cookies are small text files, which contain the name of the visited site, their validity and a predefined value. The are stored in your browser folder. When you revisit the website that created the file, they may be resent by the browser. The cookies we utilize do not damage your computer or other devices used to browse the internet.

What cookies do we use?

The basic ones – they allow using basic functions such as log-in of a registered user or pre-filling forms. If you disable these cookies, we cannot guarantee you full functionality of our sites.

  • Operation cookies – are used to analyse the behaviour of the website′s visitor and subsequently to improve the functionality and appearance of the website. If you disable these cookies, we cannot guarantee you full functionality of our sites.
  • Performance cookies – are used to provide services or retain settings in order to ensure maximum comfort during your visit.
  • Advertising cookies – are used to optimize the displayed ad regarding the habits of the visitor and the efficiency of marketing communication of ordering parties. Thanks to these, ads related to an area you are not interested in will not be shown unnecessarily often for example.
  • Necessary cookies – are absolutely necessary for the functioning of websites. These cookies do not collect information about you that could be used in marketing, nor do they remember where you moved on the internet.
  • Third-party cookies – are created and used by service providers such as Google Analytics, Google AdSense or Facebook. These services are integrated into our websites because we consider them useful and fully safe.

How can I disable cookies?

If you do not wish to receive cookies from our website, you can set the browser in a way that it reminds you when you receive a cookie file, therefore you can decide, whether you accept it or not. However, we would like to inform you, that if you disable ‘cookies’ in your browser, you will not be able to take full advantage of some of our sites.

How to file a complaint?

As a data subject, you have the right to make a complaint to the supervisory authority - The Office for Personal Data Protection of the Slovak Republic, with its registered seat: Hraničná 12, 820 07 Bratislava, tel. no.: 02/323 132 14, e-mail: statny.dozor@pdp.gov.sk, if you suspect that the processing of your personal data contravenes existing legislation.

These rules shall enter into force and effect as of 21 May 2021.