Personal Data Protection
AlfaT s.r.o., M.R. Štefánika 191/41, 075 01 Trebišov, Company ID: 48002542 (hereinafter referred to as the Controller), as the operator of the website www.alfat.sk, declares that, in order to ensure the protection of the rights of data subjects, it has adopted appropriate technical and organisational measures that demonstrate the lawful processing of personal data. The Controller has also introduced a transparent system for recording security incidents and any questions from the data subject, as well as from other persons. The data subject may obtain individual information by email at: [email protected] or directly on the Controller’s website. We approach your personal data professionally and sensitively.
- Under no circumstances do we provide them to third parties (except to the extent specified in point 2).
- Personal data are stored in a secure database requiring authorised access.
- Through the website, we process only the data that you voluntarily provide to us via the contact form, which is implemented pursuant to Art. 6(1)(f) of the GDPR Regulation – legitimate interest, for the purpose of responding to your enquiry/request or question regarding the products/services provided, or preparing a price quotation.
- Your data are encrypted on the way to our server so that no one can decrypt them in transit.
- All employees who come into contact with your personal data have been duly instructed on proper and sensitive handling of them.
- You may ask us at any time to delete the message you sent or all messages sent from your email account.
Detailed information on the processing and protection of personal data pursuant to Regulation (EU) of the European Parliament and of the Council No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), and Act of the Slovak Republic No. 18/2018 Coll. on the protection of personal data and on amendments to certain acts (hereinafter: the “Personal Data Protection Act”).
1. Website operator: www.alfat.sk
We process your data for our own purposes as the Controller. This means that we determine the purposes for which we collect your personal data, determine the means of processing, and are responsible for its proper execution.
2. List of our processors who also process your personal data
When using the contact form, your data are also processed by another entity that helps us operate and modify the website and provide the web portal. The entity listed below acts as a processor with whom we have signed a contract pursuant to Art. 28(3) of the GDPR Regulation.
| Service name | Service type | Processor |
| Hosting storage | technology and cloud services provider | Webglobe, a.s., Stará Prievozská 1349/2, 821 09 Bratislava – Ružinov district, Company ID: 52486567 |
3. Purpose of processing personal data
- Responding to questions/requests submitted by you via the contact form
4. List of processed personal data
- Contact details – First and last name – for the purpose of identifying the data subject – Phone number – for the purpose of verifying relevance or handling the request – Email address – for the purpose of responding to the request
5. Disclosure of data
Our company does not disclose the data obtained under any circumstances.
6. Period of processing and retention of your personal data
We process and retain your personal data primarily for the period necessary to handle your request/enquiry, but no longer than 36 months. After this period, your personal data will be deleted.
7. Rights and obligations of the data subject
- The customer undertakes that if they provide the personal data of a third party as delivery details (first name, last name, phone number), they do so only with that person’s consent, and the data subject is familiar with the procedures, rights and obligations set out on this page.
- As our client and data subject, you have the right, within the specified scope, to decide on the handling of your personal data. You may exercise the rights listed below: by email at [email protected] or in writing to the Controller’s address: PETLUX s. r. o., Veľké Zalužice 430, 072 34 Zalužice.
We will try to respond to you as soon as possible; however, we will always respond no later than within 30 days of receiving your request. Applicable legislation and the GDPR Regulation, or the Act, ensure in particular: Right of access – You have the right to request confirmation from us as to whether your personal data are being processed, and if so, to obtain a copy of such data and additional information arising from Art. 15 of the Regulation, or Section 21 of the Act. If we obtain a large amount of data about you, we may ask you to specify your request regarding the scope of specific data we process about you.
Right to rectification – In order for us to continuously process only up-to-date personal data about you, we need you to notify us of any changes as soon as they occur. If we process incorrect data about you, you have the right to request their correction.
Right to erasure – If the conditions of Article 14 of the Regulation, or Section 23 of the Act, are met, you may request the erasure of your personal data. You may therefore request erasure, for example, if you have withdrawn your consent to the processing of personal data and there is no other legal basis for processing, or if we process your personal data unlawfully, or if the purpose for which we processed your personal data has ceased and we do not process them for another compatible purpose. However, we will not erase your data if they are necessary for the establishment, exercise or defence of legal claims.
Right to restriction of processing – If the conditions of Article 18 of the Regulation, or Section 24 of the Act, are met, you may request that we restrict the processing of your personal data. You may therefore request restriction, for example, while you contest the accuracy of the processed data, or if the processing is unlawful and you do not want the data to be erased, but you need the processing to be restricted while you exercise your rights. We will continue to process your data if there are grounds for the establishment, exercise or defence of legal claims.
Right to data portability – If the processing is based on your consent or carried out for the purpose of performing a contract concluded with you and is also carried out by automated means, you have the right to receive from us your personal data that we have obtained from you in a commonly used machine-readable format. If you are interested and it is technically possible, we will transfer your personal data directly to another controller. This right cannot be exercised for processing carried out for the performance of a task carried out in the public interest or in the exercise of official authority.
Right to object to processing – If we process your personal data for the performance of a task carried out in the public interest or in the exercise of official authority vested in us, or if the processing is carried out on the basis of our legitimate interests or the legitimate interests of a third party, you have the right to object to such processing. Based on your objection, we will restrict the processing of personal data and, unless we demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or grounds for the establishment, exercise or defence of legal claims, we will no longer process the personal data and we will erase your personal data. You have the right to object at any time to the processing of personal data for direct marketing purposes, including profiling to the extent that it is related to such direct marketing. Once an objection has been raised, we will no longer process your personal data for this purpose.
Right to lodge a complaint – If you believe that the processing of your personal data is contrary to the Regulation or the Act, you have the right to lodge a complaint with one of the competent supervisory authorities, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. For the territory of the Slovak Republic, the supervisory authority is the Office for Personal Data Protection, with its registered office at: Hraničná 4826/12, 820 07 Bratislava, Slovak Republic, website: www.dataprotection.gov.sk, tel.: +421 /2/ 3231 3220.
Right to withdraw consent – If the processing of your personal data is based on consent, you have the right to withdraw this consent at any time. Withdrawal of consent does not affect processing already carried out. If at any time later you decide that you are interested in receiving business and marketing offers from us again regarding our products and services, you may grant your withdrawn consent (or submitted objection) again at any time, using any of the contact methods listed above.