TERMS OF PRIVACY PROTECTION OF BUSINESS PARTNERS
Provision of information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter „GDPR“)
1. WHO ARE WE AND WHERE CAN YOU CONTACT US?
We are the controller when processing your personal data:
Registered office: Dolná 142, 900 01 Modra
Reg. number: 31 575 391
Company registered in the Commercial Register of the City Court Bratislava III, Section: Sro, Insert number: 156025/B
E-mail: sodoma@granida.eu
2. WHAT PERSONAL DATA DO WE COLLECT AND FROM WHAT SOURCES DOES THIS INFORMATION COME FROM?
We obtain the personal data directly from you or from your employer, or from the legal entity of which you are a representative (hereinafter referred to as "business partner").
The provision of personal data that we process based on the fulfilment of a contract or legal obligations is a requirement for concluding a contract with our business partner and for ensuring our business cooperation.
Due to the existence of a business relationship with a business partner, we process the following personal data:
• identification and contact data (e.g. name, surname, academic title, ID number, entry in the trade register, business partner's address, signature, email address, telephone number, job title);
• payment and invoicing data of the business partner;
• data necessary to verify compliance with the conditions of registration on the Granida portal;
• other data provided by the business partner that are necessary to ensure business cooperation.
3. HOW DO WE USE THE PERSONAL DATA AND WHAT IS THE LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA?
We process your personal data for the purpose of exercising our rights and obligations from the business relationship, fulfilling our legal obligations and developing our business activities.
We process your personal data exclusively in the case where applicable legal regulations allow us to process personal data even without consent. In any case, we respect the principle of data minimization, which mean that we process only absolutely necessary personal data, as well as the principle of minimizing data storage, which means that we process personal data only for the necessary time.
We process your personal data only in the following cases and based on the following legal bases:
LEGAL BASE
-> Fulfilment of legal obligations and performance of contract
-> Legitimate interest of the controller and performance of the contract:
PURPOSE OF PERSONAL DATA PROCESSING
Accounting and business agenda
- bookkeeping,
- fulfilment of tax obligations,
- management of contracts and business relations (if the business partner is a natural person).
Exercising the data subject's rights under the GDPR
Business agenda and communication:
- contracts and business relations management (if the business partner is a legal entity).
Litigation and enforcement agenda.
We process personal data based on the legitimate interest of the controller only if the processing does not constitute an unreasonable interference with your rights.
4. HOW LONG DO WE KEEP YOUR DATA?
We keep your personal data for as long as it is necessary for the purposes for which the personal data is being processed. When storing personal data, we are guided by special regulations that set the retention periods and/or the basic principles of the GDPR regarding the storage and disposal of personal data.
When storing personal data based on our legitimate interest, we regularly evaluate whether our legitimate interest continues. In the event that we evaluate that our legitimate interest has ceased, or your legitimate interest exceeds our legitimate interest, we terminate the processing of your personal data.
TYPE OF PERSONAL DATA DURATION OF PERSONAL DATA PROCESSING
Personal data included in accounting, tax and financial agenda (e.g. various accounting documents, accounting books, inventory records, tax documents, etc.) 10 years following the year to which they relate
Personal data obtained within the framework of pre-contractual relations, contained in the contract with the business partner or in other business communication with the business partner, employee, or other representative of the business partner 5 years after the year in which the communication or contract was terminated
Litigation and enforcement agenda.
Depending on the nature of the dispute, usually 5 years from the date of full satisfaction of our claim or legal termination of the matter (due to the possibility of filing extraordinary remedies)
5. WHO IS THE RECIPIENT OF THE PERSONAL DATA
We provide your personal data only in justified cases and only to the necessary extent to the following categories of recipients:
• to our contractual partners, who we need for our normal business operation and implementation of contractual relationships, for example information technology suppliers, lawyers, data storage provider, external accounting firm;
• your contractual partners (or contractual partners of your employer and/or your business company), for example buyers and/or sellers of agricultural goods, transport companies, financing banks, etc.
• to other entities in cases where the right or obligation to provide us with your personal data is imposed by law, or if it is necessary to protect our legitimate interests (e.g. financial administration, commercial insurance company, courts, police, bailiff, etc.).
6. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
We do not perform cross-border transfer your personal data to third countries outside the European Economic Area (EU, Iceland, Norway and Liechtenstein) nor we intend to do so.
7. WHAT AUTOMATED INDIVIDUAL DECISION-MAKING DO WE MAKE?
We do not make any automated individual decision-making.
8. HOW WE PROTECT YOUR DATA
We do our best to keep your personal data safe and take all necessary security, technical and organizational measures to protect your personal data. We store personal data in electronic form in a secure database on a server owned by us or reserved for us.
9. WHAT RIGHTS YOU HAVE WHEN YOUR PERSONAL DATA IS PROCESSED
• Right to access - you can ask us to access the personal data we process about you. In case of your request, we will provide you with a copy of the processed personal data.
• Right to rectification – you can ask us to have the inaccurate or incomplete personal data that we process about you rectified.
• Right to erasure - you can ask us to erase your personal data if any of the following situations occur:
i. personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
ii. your personal data was processed unlawfully;
iii. you have revoked the consent on the basis of which the processing has been carried out, and there is no other legal basis for the processing of your personal data;
iv. you object to the processing of personal data, while our legitimate interest in a specific case does not prevail over your interest;
v. it is required by the EU law or the Slovak law.
• Right to restrict the processing of personal data - you can ask us to restrict the processing of your personal data if any of the following situations occur:
i. you have denied the accuracy of the personal data (processing will be limited to the time necessary for us to verify the accuracy of the personal data);
ii. the processing of your personal data is unlawful, but you refuse the erasure of this data and instead request the restriction of its use;
iii. we no longer need your personal data for the aforementioned processing purposes, but you require them to determine, exercise or defend your legal claims;
iv. you have objected to the processing of your personal data (processing will be limited until it is verified that our legitimate interests outweigh your legitimate interests.
• Right to data transmission - if we process your personal data based on your consent or because it is necessary for the performance of a contract to which you are a party, and at the same time it is processed by automated means of processing, you have the right to obtain personal data concerning you, and which you have provided to us in a structured, commonly used and machine-readable format, provided that this right must not adversely affect the rights and freedoms of others.
• Right to withdraw consent - if the processing of your personal data is based on consent, you have the right to withdraw your consent to the processing of personal data for the purpose for which you gave consent at any time.
• Right to object - you can object at any time to the processing of your personal data for the purposes of direct marketing carried out based on our legitimate interest and whenever we process your personal data on the basis of a legitimate interest or public interest, including profiling.
• Right to file a complaint - you have the right to file a complaint with the supervisory authority, which is the Personal Data Protection Office of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, www.uoou.sk
You can exercise your rights orally, in writing or electronically, via the contact details below. However, when exercising your rights, we must require proof of your identity.
10. CONTACT US
The controller of your personal data is DISY spol. s.r.o.
If you are interested in exercising your rights or have a question or suggestion regarding the personal data protection, contact us:
i. via email : sodoma@granida.eu
ii. in writing at the company's address: Dolná 142, 900 01 Modra
In the event that you exercise some of the rights in the previous section and it is not possible to verify your identity from the submitted application or we have reasonable doubts about your identity, we reserve the right to ask you for additional information necessary to verify your identity.
11. CHANGES TO THE PRIVACY PROTECTION TERMS
Protecting your personal data is not just a one-time matter for us. For this reason, the information provided in this document may change or become out of date. Therefore, we reserve the right to change these conditions in the future. If the conditions change in a significant way, we will inform you about this fact either by warning on our website or by sending an informational e-mail.
*This document is the result of the translation of the Slovak original into English. In case of any differences or discrepancies between these language versions, the Slovak version shall prevail.