Personal data processing principles
Rules for processing personal data at W rent, s. r. o.
Protecting your personal data is one important element of building the systems and procedures used in our company. This policy explains how the company W rent, s. r. o. , with registered office in Prečín 277, 018 15 Prečín, Slovakia, ID No.: 46 908 668, company registered in the Commercial Register of the District Court of Trenčín, Section Sro, Insert No. 27314/R, we process your personal data in the provision of our services.
We emphasize that our company is committed to continuously improving its data protection policy, procedures and security system and to this end to innovate and improve them accordingly. In order to ensure the effective protection of personal data, we acquire and put into practice the latest knowledge.
When processing personal data, we are primarily governed by the General Regulation Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), known as the GDPR, and the provisions of Act No. 18/2018 Coll. on the protection of personal data and other regulations.
Employees of our company and other persons involved in our business are obliged to maintain confidentiality of all information and documents on matters relating to our customers that we have obtained in the course of our business and that are not publicly available.
If you have any questions, you can contact us at any time at the address of our establishment Mládežnícka 2161/99 (in the Industrial Complex in Považské strojárny), 017 01 Považská Bystrica, GPS coordinates: 49°07′35.6″ N, 18°24′53.0″ E or via e-mail: obchod@wrent.sk.
1. What is personal data?
- Personal data means any data from which we can identify you, whether directly or indirectly. For example, personal data can be a first name, last name, address or telephone number.
- The GDPR also recognises a special category of personal data that must be treated with particular sensitivity. Special categories of personal data are data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, but also, for example, genetic data intended to identify you or data relating to your health. Our company has no interest in processing special categories of personal data of its customers when entering into contractual relationships. If you have passed such data to us, we ask you to inform us via the contacts above and we will ensure that it is deleted from our databases, unless the applicable Slovak law prevents us from removing it.
- The personal data of minor children are also subject to a special regime. Our company does not intentionally process this data except where we are required to do so by law (e.g. in certain cases in employment relationships). If you become aware that personal data of minor children has been transmitted to us, we ask you to inform us via the contacts above and we will ensure that it is deleted from our databases, unless the applicable Slovak law prevents us from removing it.
2. Why do we process personal data?
- Processing of personal data means any operation or set of operations which involves the processing of personal data, such as their acquisition, organisation, storage, retrieval, consultation, use, dissemination, erasure or destruction, whether or not by automated or non-automated means.
- We process your personal data primarily to provide you with our services and to comply with our legal obligations.
- In addition, we also process your personal data if required to do so by applicable Slovak law or if we need to protect the legitimate interests of our customers, our company or, in justified cases, other persons.
3. For what purposes and on what legal basis do we process personal data?
We need your personal data to: | We process your personal data on the basis of: | The personal data we process for this reason are mainly: |
---|---|---|
pre-contractual negotiations, i.e. answering your questions about our services | We take pre-contractual action on your request | name, surname, e-mail, telephone contact and the details you provide during pre-contractual negotiations |
provision of our services | performance of the contract | data for the conclusion of the contract and to keep you informed of the progress of the service or for administrative purposes, such as contacts for sending invoices and making payments |
preparation of quotations | fulfilment of pre-contractual obligations | Data necessary for the preparation of a non-binding offer in the inquiry basket section in the following range: name and surname, e-mail, telephone, country, company name |
ensuring that our activities comply with the law | compliance with the legal obligations arising mainly from the Accounting Act, the Act on the Protection against the Legalization of Proceeds from Crime and the Act on the Notification of Anti-Social Activity | only the data directly required by the applicable law of the Slovak Republic |
statistical purposes, archival purposes in the public interest and historical and scientific research purposes | the fulfilment of statutory obligations under the Archives and Registers Act and the Accountancy Act | data which are necessary for the purpose of compliance with a public archiving obligation, for scientific or historical research purposes or for statistical purposes |
purposes relating to the protection of the legitimate interests of our company | the legitimate interests of our company or directly of you as data subjects, in which case we always carefully consider whether the processing will constitute a disproportionate interference with your rights. If you would like more information, you can request it from us using the contact details above. You can always object to such processing of your personal data.e | e.g. email addresses for sending information about our services (marketing purposes), where our company’s legitimate interest is to inform our customers about new products and innovations we provide |
photographic images or video footage of the installation, assembly or servicing of our products by our customers, which may be used for promotional purposes of our goods and services, for example by sharing them on our website as well as on our social networks | ||
dynamic or static footage from cameras monitoring the area in front of our establishment as well as the internal areas of the establishment, which is made in order to protect property as well as to protect the property of the safety and health of employees | ||
personal data such as: company name, email and telephone contact obtained from voice recordings from our hotline, which are made for the purpose of improving the quality of service to our customers | ||
contact form at https://old.wrent.sk/sk/, within the scope of personal data: name, e-mail in order to improve the quality of service for our customers | ||
management of the personnel and payroll agenda | the performance of a legal obligation, legitimate interest or the performance of a contract in the field of labour law and social security and social protection law, for example on the basis of the Labour Code, details of which will be provided to each employee at the time of conclusion of the employment contract | title, name, surname, date of birth, permanent address, temporary address, birth number, job classification, date of commencement and date of termination of employment, data related to the training of employees and improvement of their qualifications and other information if required by the applicable Slovak law |
selection procedure for job applicants | the performance of the contract until the position is filled | title, name, surname, date of birth, permanent address, education, work experience and other information given in the CV and cover letter |
accounting and tax purposes | the fulfilment of legal obligations under accounting and tax legislation | title, name, surname of business partners who are natural persons or natural persons representing or acting for the benefit of legal persons and other information, if their disclosure for the purpose of carrying out the activity is required by the valid legal regulations of the Slovak Republic |
4. Who we disclose your personal data to
- We only disclose any personal data, regardless of whether it belongs to our employees, customers or third parties, to those persons and to the extent necessary to comply with our legal obligations and to provide our services. At the same time, we make sure that the recipients are reliable entities that comply with their legal obligations, and we enter into contracts with them containing these obligations in order to protect your personal data.
- We also disclose your personal data exclusively to the extent necessary to intermediaries with whom we have a written contract for the purpose of data protection, such as our legal representatives, our IT technician, providers of software equipment or technical and security support for our company, as well as transport companies that ensure the delivery of our goods directly to you. If we disclose your personal data to such recipients, we will provide you with a specified list of such recipients upon request, insofar as the law allows us to do so.
- At the same time, some of your personal data may be shared with the public on our website or on the social networking sites Facebook on the “W rent” page or Instagram on the “W rent” profile on LinkedIn on the “W rent” account or on YouTube. Their publication is based on our legitimate interest in promoting our goods and services or, in some special cases, on your consent.
- However, please note that if you visit:
- our “W rent” page on the social network Facebook, which is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”). For an overview of Facebook add-ons and their features, please visit: https://developers.facebook.com/docs/plugins, or
- our profile “W rent” on the social network Instagram, which is operated by Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA (“Instagram”). For an overview of Instagram plug-ins and their features, please visit: http://blog.instagram.com/post/36222022872/introducing-instagram-badges, or
- our “W rent” account on the social network LinkedIn, which is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). For an overview of the LinkedIn add-ons and their features, please visit: https://developer.linkedin.com/plugins, or
- our “W rent” account on YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For an overview of YouTube plug-ins and their features, please visit: https://www.google.de/intl/de/policies/privacy/.
- Your personal data is collected by the above companies in accordance with their personal data processing policies and your respective social network and browser settings. We do not control these circumstances. If you are interested in the information we publish on the social networks in question and at the same time do not want your personal data to be processed in this way, please contact us at any time and we will provide you with the information you are interested in in another form.
- At the same time, we draw attention to the fact that we are obliged to prevent or report the commission of a criminal offence and we are also obliged to report information in the field of prevention of money laundering and terrorist financing. In such exceptional cases, the personal data concerned may also be shared with law enforcement authorities.
5. Which countries do we transfer your personal data to?
- We do not transfer your personal data to third countries outside the European Economic Area (EU, Iceland, Norway and Liechtenstein). We use secure cloud services from a verified provider with servers located in the EU.
- However, please note that if you visit our “W rent” group on Facebook or our “W rent” group on Instagram or our “W rent” account on LinkedIn or our YouTube account, your personal data will be collected by the companies specified in points 4.4.1 – 4.4.4 of this Policy in accordance with their personal data processing rules and your preferences, and their storage sites and servers may also be located in the United States of America. We do not control these circumstances. If you are interested in the information we publish on the social networks in question and at the same time do not want your personal data to be transferred in this way outside the European Economic Area, please contact us and we will provide you with the information in another form.
6. How long do we keep your personal data?
- We retain personal data for no longer than is necessary for the purposes for which it is processed, unless we are obliged to retain it for longer under applicable Slovak law, for example, for the processing and receipt of complaints, the resolution of legal disputes, archiving, obligations arising from the fight against illegal activities or accounting obligations.
- If we process your personal data on the basis of the law, we keep it for as long as the relevant legislation requires us to do so. If we process personal data on the basis of the law and the law does not specify a retention period, we will retain your personal data for 5 years in case it is necessary to use it to clarify disputes arising.
- If we process your personal data on the basis of a contract and the applicable law of the Slovak Republic does not provide otherwise, we keep it after its termination for a period of 5 years, in case it would be necessary to use it in the event of a legal or other dispute.
- If we process your personal data only on the basis of legitimate interest, we will keep it for a maximum of 5 years after its last use, as well as in case it is needed in legal or other similar proceedings or until you successfully object to its processing.
- If we process your personal data on the basis of consent, we will stop storing it if you withdraw your consent or after the consent has expired.
- In the case of CCTV footage, this period shall be no more than 15 days from the date of the CCTV footage.
- We do not make audio recordings from the hotline.
7. How do we collect personal data about you?
- We usually obtain personal data from customers, in particular through the conclusion of a contract.
- If you have contacted us via the contact form published on our website or via the hotline, we have obtained your personal data directly from you.
- If you are our employees or other contractors, we primarily collect your data from you when you apply for a job and when you enter into an employment or other contract.
8. How do we use your data?
- As indicated in the table above, we only collect the personal data we need to provide you with a quality service in accordance with the law. We protect your personal data and ensure that it is used only for the purpose for which we obtained it. Our staff who are authorised to handle your personal data are trained to ensure your protection. Therefore, if:
- we needed your personal data for the purpose of concluding a contract or handling your pre-contractual requirements, we used it precisely for this purpose and in a legally approved manner;
- we have obtained your personal data in order to comply with legal obligations related to our business, e.g. for billing and other accounting obligations, we use and process it in the manner specified by such law;
- we process your personal data for legitimate interest, you can rely on the fact that it will be used solely in the pursuit of such legitimate interest;
- we hold your personal data because you have given us consent, we process it for the purpose and in the manner set out in that consent, but only until you withdraw such consent.
- We emphasise that our obligations also include cooperation with state institutions and if we are obliged to provide your personal data in the event of a request from them or in the event of proceedings before administrative or judicial authorities, we have the right to process your personal data for these purposes as well.
9. Website and Cookies
- The cookies used by the website do not collect any personal data. Your use of our website is therefore not only safe, but also fully respects your right to privacy and personal data protection.
- For the purpose of statistical evaluation of website traffic, we use Google Analytics, however, your IP addresses are anonymised and therefore cannot be used to identify you and are therefore not considered personal data.
- For more information on the Cookie Policy of this website, please see the separate sub-page.
10. What rights do you have as a data subject?
- Right of access to data
- You have the right to obtain confirmation from us as to whether and how we process your personal data and, if so, what data and to whom we disclose it. You can also request access to this data by making a simple request to the contact details set out at the beginning of this policy. Please be sure to identify yourself in the request and provide us with contact details to which we can send a response (e.g. an email address).
- Right to repair
- If you feel that any of the personal data we process about you is incorrect, you can request us to correct it. You may also request us to complete any data that you consider to be incomplete. In such a case, we ask you to be sure to clearly and comprehensibly state what you believe to be the incorrectness or incompleteness of the personal data, how you wish to have it corrected and, if necessary, evidence of its incorrectness.
- Right to erasure (right to be forgotten)
- You have the right to request that we erase the personal data we process about you, and we are obliged to comply with this request in certain cases specified by law. Please note, however, that in some cases the GDPR allows us to refuse your request for erasure, for example, if the processing is necessary for archiving purposes in the public interest, for scientific research or statistical purposes, or for the establishment, exercise or defence of legal claims.
- Right to restriction of processing
- You have the right to limit the extent to which we process your personal data if:
- you have contested the accuracy of the personal data until we have verified your objections;
- the processing is unlawful and you object to the erasure of the personal data and request instead that its use be restricted;
- we no longer need the personal data, but you need it to prove, exercise or defend legal claims;
- you object to the legitimacy of our interests in processing your personal data, pending verification that our legitimate grounds outweigh the legitimate grounds you have stated.
- Right to data portability
- You have the right to obtain your personal data from us in a commonly used format and to transfer this data to another controller or processor. However, this right only applies to data that you have given us your consent to process or is processed on the basis of a contractual relationship with you and is processed by automated means. Also, this right may only be exercised to the extent that it does not adversely affect the rights and freedoms of other persons.
- Right to object
- In some cases, you have the right to object to the processing of your personal data, in particular processing carried out on the legal basis of our legitimate interests, including profiling based on that legal basis, but also, for example, when processing personal data for scientific or historical research purposes or for statistical purposes.
- In practice, objections to processing will usually occur if you do not agree with the way we process your personal data for some reason, for example under this policy. In this case, you need to inform us of your objections. Please provide a clear and understandable description of the circumstances on the basis of which you believe that the processing in question unreasonably interferes with your rights and freedoms.
- Rights relating to automated individual decision-making, including profiling
- Our company does not practice automated individual decision-making, i.e. decision-making without human intervention. However, if it were to occur, you would have the right to request that such decision-making does not apply to you if such a decision would have legal effects that would affect you or similarly affect you in a significant way.
- Right to lodge a complaint
- If you have any questions or concerns regarding the processing of your personal data, please do not hesitate to contact us at any time. Our company will always endeavour to resolve any disputed matters to your satisfaction.
- However, should you be dissatisfied with our procedure, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, about which you can find more information via https://dataprotection.gov.sk/uoou/.
11. Changes to the Privacy Policy
- Data protection is not a one-off issue for us. The information we are required to provide you with in respect of our processing of your personal data may change or cease to be up-to-date. For this reason, we reserve the right to modify and change these terms and conditions to any extent at any time. If we change these terms in a material way, we will notify you of the change on this website or by email.
In Považská Bystrica 25.05.2018