Processing of personal data

By clicking on consent to the processing of personal data you, as the data subject, give your voluntary and express consent for the controller to process your personal data within the meaning of Section 13(1)(a) of Act No 18/2018 on the protection of personal data and amending certain acts (hereinafter referred to as the “Act”) and Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”).

Conditions of personal data processing for marketing purposes

You may withdraw your consent at any time by emailing gdpr@horezza.sk or by sending a written request to the controller’s address. The withdrawal of consent does not prejudice the legality of personal data processing established on the basis of consent prior to the withdrawal thereof.

Additional information on the processing of your personal data in accordance with Sections 19 and 20 of the Act and Articles 13 and 14 of the Regulation

Information on the processing of data subjects’ personal data in accordance with Sections 19 and 20 of Act No 18/2018 on the protection of personal data and amending certain acts (hereinafter referred to as the “Act”) and Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”)

This information is intended to let you know how we process personal data, how we treat it, what purposes we use it for, who we may disclose it to, and where you may obtain information on your personal data and exercise your rights related to personal data processing.

Identification and contact details:

The controller processing your personal data is HOREZZA, a.s., Teplická 81, 921 01 Piešťany, registration number: 36 280 127, email: gdpr@horezza.sk

Contact details of the entity responsible for supervising personal data processing:

email: dpo2@proenergy.sk

  1. Purpose of personal data processing and legal basis of processing

Personal data is processed for marketing purposes (for providing information on innovations, discounts and other marketing offers)

Personal data is processed further to the data subject’s voluntary consent in accordance with Section 13(1)(a) of the Act and Article 6(1)(a) of the Regulation

Legitimate interests of the controller or a third party

Personal data is not processed for the purposes of the legitimate interests of the controller or any third party.

  1. Identification of data subjects’ personal data processed

The data subjects whose personal data is processed are newsletter subscribers.

Scope of personal data processed: given name, surname, email address.

  1. Identification of recipients; categories of recipients

The controller may disclose personal data to eligible entities, such as institutions and organisations permitted to engage in processing under special legislation, or to contractual partners (including but not limited to intermediaries) who have contractually undertaken to assume reasonable guarantees that the protection of the personal data processed will be maintained, as follows:

Other eligible entity legislation of general application as laid down in Section 13(1)(c) of Act No 18/2018 on the protection of personal data and amending certain acts

Personal data may be disclosed to other recipients should the data subject so consent or instruct.

  1. Transfer of personal data to a third country / international organisation

Personal data is not transferred to third countries or international organisations.

  1. Identification of the source from which personal data has been obtained

Directly from the data subject (via the controller’s website)

  1. Personal data retention period

The controller will process personal data for the period required to meet the purpose thereof, but not for longer than five years from the acquisition of such data.

  1. Profiling

The controller will not process personal data by means of profiling or any similar method based on automated individual decision-making.

  1. Data subject’s rights

The data subject has the right to demand that the controller provide access to the personal data processed about the data subject, the right to the rectification of personal data, the right to erasure, the right to the restriction of the processing of personal data, the right to object to the processing of personal data, the right to the ineffectiveness of automated individual decision-making, including profiling, the right to personal data portability, and the right to apply to the supervisory authority for the initiation of proceedings. Where the controller processes personal data further to consent given by the data subject, the data subject may withdraw consent to the processing of personal data at any time. The withdrawal of consent does not prejudice the legality of personal data processing established on the basis of consent prior to the withdrawal thereof. The data subject may exercise rights by sending an email to gdpr@horezza.sk, or by writing to the controller’s address.

  1. Obligation to provide personal data

The data subject provides personal data voluntarily on the basis of consent (there is no statutory or contractual requirement to provide such data). A data subject who does not provide personal data will not be informed of innovations, discounts or other marketing offers.