pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation") in accordance with Article 19 of Act No. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the "Act").

Basic provisions

Operator:

FGS Slovakia sro

Aluminum above the Váhom River 428

014 01 Bytca

ID: 36 388 980

(hereinafter referred to as the "Operator")

Data subjects may address their comments and requests regarding the processing of personal data to Alica Malíková, in writing or in person at the following address: FGS Slovakia sro, Hliník nad Váhom 428, 014 01 Bytča, contact: 041/41 321 2503, e-mail: alica.malikova@gmail.com

(hereinafter referred to as the " Responsible Person ")

Personal data are data relating to an identified natural person or an identifiable natural person who can be identified, directly or indirectly, in particular by reference to a generally applicable identifier, another identifier such as a name, surname, identification number, location data or an online identifier, or to one or more characteristics or factors specific to his or her physical, physiological, genetic, psychological, mental, economic, cultural or social identity.

When processing personal data, the operator proceeds in accordance with the Regulation, the law and other generally binding regulations, while paying maximum attention to the privacy of the data subjects and the protection of the personal data it processes.

Categories of personal data, purpose and legal basis for processing personal data

The Operator processes only the personal data that you have provided to it or the personal data that the Operator has obtained based on the fulfillment of your order/contract, so that it can provide you with the requested services. The processing of the data obtained and provided is an essential part of the Operator's activities. Without the processing of personal data, it would not be able to provide its services to its clients, potential clients, business partners, or other data subjects in the required scope and quality. We handle your personal data exclusively to the extent necessary and for the fulfillment of the relevant purpose.

The Operator primarily processes your identification data (e.g. name, surname), contact data (e.g. permanent/temporary residence address, e-mail address, telephone number), accounting data (e.g. account number, data on transactions made in favor of our accounts) and other data necessary, e.g. for preparing business offers, concluding contracts, issuing tax documents, invoices, etc., which are related to the provision of the Operator's services.

The lawful reason for processing personal data is:

- consent of the data subject to the processing of personal data pursuant to Section 13(1)(a) of the Act;

- performance of the contract pursuant to Section 13(1)(b) of the Act;

- processing of personal data is necessary pursuant to a special regulation pursuant to Section 13(1)(c) of the Act;

- the Operator's legitimate interest in providing direct marketing (in particular for sending commercial announcements, offers and news) pursuant to Section 13(1)(f) of the Act.

The lawful purpose of processing personal data is:

- processing your order, e-mail communication, exercise of rights and obligations arising from the contractual relationship between you and the Operator;

- provision of personal data is a necessary requirement for the conclusion and performance of the contract;

- sending commercial communications and performing other marketing activities in connection with the sale of products and the provision of services.

III. Retention period of personal data

The Operator will retain personal data for the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the Operator and to assert claims from these contractual relationships (for a period of 10 years after the termination of the contractual relationship).

After the expiry of the retention period for personal data, the Operator will ensure their destruction without undue delay, unless a special law requires otherwise.

Recipients of personal data and conditions for ensuring the protection of personal data

The Operator declares that the provided personal data may be processed only by authorized and instructed employees and third parties (agents) who participate in the delivery of goods/services/payments under the contract or by persons providing marketing services, only to the extent necessary and always while maintaining confidentiality. Before any transfer of your personal data to a third party, we will always conclude a written contract with this person, which contains the same guarantees for the processing of personal data as the Operator complies with in accordance with its legal obligations.

We do not intend to transfer your personal data across borders to third countries outside the European Economic Area (EU, Iceland, Norway and Liechtenstein).

The Operator declares that it has taken all appropriate technical and organizational measures to protect your personal data. The Operator's employees, as well as third parties (agents) who process personal data on behalf of the Operator, are bound by a confidentiality obligation that continues even after the termination of the contractual relationship.

Rights of the data subject

The data subject has the right to access his/her data. Upon request from the data subject, the Controller shall issue a confirmation as to whether personal data concerning the data subject are being processed. If the Controller processes such data, it shall issue a copy of such personal data to the data subject upon request.

The issuance of the first copy pursuant to paragraph 1 of this Article shall be free of charge. For any further copies requested by the person, the Operator shall charge a fee corresponding to the administrative costs incurred by the person in issuing the copy. If the person requests information by electronic means, it shall be provided to him in a commonly used electronic form, namely by e-mail, unless he requests otherwise.

The data subject has the right to have personal data corrected if the Controller records incorrect personal data about him/her. At the same time, the data subject has the right to have incomplete personal data completed. The Controller will correct or complete the personal data without undue delay after the data subject requests it.

The data subject has the right to have personal data concerning him or her erased, provided that:

- the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

- the data subject withdraws the consent on the basis of which the processing is carried out,

- the data subject objects to the processing of personal data pursuant to paragraph 11 of this Article,

- personal data was processed unlawfully,

- the reason for deletion is the fulfillment of an obligation under a law, special regulation or international treaty by which the Slovak Republic is bound, or

- personal data were collected in connection with the offer of information society services to a person under the age of 16.

The data subject will not have the right to erasure of personal data provided that their processing is necessary:

- to exercise the right to freedom of expression and information;

- to fulfill an obligation under a law, special regulation or international treaty by which the Slovak Republic is bound, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the Operator,

- for reasons of public interest in the field of public health,

- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, where the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of such processing, or

- to establish, exercise or defend legal claims.

The operator will delete the personal data of the data subjects upon request, without undue delay after assessing that the data subject's request is justified.

The data subject has the right to restrict the processing of personal data where:

- challenges the accuracy of personal data by objecting pursuant to paragraph 11 of this Article, within a period allowing the Operator to verify the accuracy of personal data;

- the processing is unlawful and the data subject requests the restriction of the use of personal data instead of erasure;

- The controller no longer needs the personal data for the purposes of the processing, but the data subject needs them to establish, exercise or defend legal claims;

- the data subject has objected to the processing of personal data based on the legitimate claim of the Operator, pending verification of whether the legitimate reasons on the part of the Operator outweigh the legitimate reasons of the data subject.

If the data subject requests restriction of the processing of their personal data, the Operator will not perform any processing operations with the data concerned, except for storage, without the consent of the data subject.

The data subject will be informed by the Operator if the restriction on the processing of this data is lifted.

The data subject has the right to data portability, which means obtaining the personal data that he or she has provided to the Controller, and having the right to transfer these data to another Controller in a commonly used and machine-readable format , provided that the personal data were obtained with the consent of the data subject or on the basis of a contract and their processing is carried out by automated means.

The data subject has the right to object to the processing of his or her personal data at any time.

The operator shall assess the received objection within a reasonable time. The operator may not further process personal data unless it can demonstrate compelling legitimate interests in the processing of personal data that override the rights or interests of the data subject or grounds for exercising a legal claim.

The data subject has the right to withdraw his or her consent to the processing of personal data at any time, if the processing of personal data was based on this legal basis.

The data subject may withdraw their consent by contacting the responsible person with their request in any chosen manner.

However, the lawfulness of the processing of personal data based on the consent granted is not affected by its withdrawal.

The data subject has the right to file a petition to initiate proceedings with the Personal Data Protection Office of the Slovak Republic if he or she believes that his or her rights in the area of personal data protection have been violated.

Final provisions

The operator is entitled to change these terms and conditions. Any new version of the terms and conditions for the protection of personal data will be published on its website.