Terms and Information on the Processing of Personal Data – Cookies

JOVAKO s.r.o., Horná streda 57, 916 24 Horná Streda, Company ID No.: 50 480 154 (hereinafter referred to as “JOVAKO”), as the controller, collects and processes the personal data of data subjects and hereby provides them with information pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, on the free movement of such data and repealing Directive 95/46/EC (“GDPR”), and with regard to Act No. 18/2018 Coll. on the Protection of Personal Data and on the Amendment of Certain Acts (“Personal Data Protection Act”).

Cookies are small text files that your internet browser stores or reads on the hard drive of your end device, such as a computer, laptop or smartphone, through the websites you visit, for the purpose of storing certain information or image files, such as pixels. When you next visit our website using the same device, the information about your cookies will already be stored. Cookies are either transmitted to our website (“first-party cookies”) or to another website to which the cookies belong (“external cookies” or “third-party cookies”). If you visit our website using a different device from the one on which you have already set cookies, or if there is a change in the cookie-processing process, such as a change in the storage period, you will be asked again to set your cookie preferences on our website, for example to provide your consent and/or set your preferences. JOVAKO currently uses only first-party cookies.

We process cookies for various purposes. Primarily, however, we use them to display our website to you in the optimal manner and to ensure the proper functionality of our website in accordance with your preferences.

For purposes other than those stated above, your cookies will only be stored with your consent or, where applicable, on the basis of statutory provisions.

You can also block or delete cookies through your internet browser.

With regard to the protection of personal data, it is important to assess what data is contained in a particular cookie file. If the data recorded in a cookie file includes an identifier that, either alone or in combination with other data, is capable of directly or indirectly identifying a natural person—the user of the web browser—such a cookie must be considered personal data within the meaning of Article 4(1) of the GDPR.

The table below sets out, according to the type of contractual relationship with the controller, the purposes of processing personal data (hereinafter referred to as “personal data”). It also indicates the categories of data subjects, the legal basis for processing, the categories of personal data processed and the period for which the controller will process such personal data.

 

Purpose of processing personal data	Legal basis for processing personal data	Category of data subjects	Personal data processing period	Recipients or categories of recipients
NECESSARY COOKIES The purpose of processing is to transmit or facilitate the transmission of a message over a network or, insofar as this is strictly necessary for the controller, as a provider of information society services, to provide an information society service explicitly requested by the website user.	Article 6(1)(c) of the Regulation – legal obligation under Act No. 351/2011 Coll.	Website visitors/users	The period is specified for each individual cookie.	Entities to which the controller provides personal data on the basis of law; professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality; the company responsible for managing the website
Exercise of the rights of the data subject	Processing is necessary pursuant to Article 6(1)(c) of the Regulation for compliance with a legal obligation of the controller arising from the Regulation and Act No. 18/2018 Coll.	Natural persons exercising their rights as data subjects	5 years following the year in which the request was processed	Entities to which the controller provides personal data on the basis of law

 

For example, we use the following necessary cookies:

 

NAME OF COOKIE FILE	DOMAIN ID	STORAGE PERIOD (from the date of visiting the website)	PURPOSE OF USE
PHPSESSID	jovako.sk	Only while browsing the website	Enables the basic functions of the website

 

JOVAKO does not disclose personal data to any third parties, except for entities to which disclosure is required by law or as provided for in these terms of personal data processing. JOVAKO does not itself transfer personal data to third countries outside the European Union or the European Economic Area. JOVAKO does not process personal data for the purposes of automated decision-making, including profiling.

If, for any of the processing purposes, a contract constitutes the legal basis for processing personal data, the provision of such data constitutes a contractual requirement for the performance of the relevant contract. If such data is not provided, it is not possible to enter into the contractual relationship or subsequently perform the contract. If a law constitutes the legal basis for processing personal data, the provision of such data is a legal requirement. If such data is not provided, JOVAKO cannot properly fulfil its obligations arising from the applicable generally binding legal regulations.

In connection with the processing of personal data, the data subject has, in particular, the following rights:

• 1. To request JOVAKO, upon request, to confirm whether or not personal data concerning the data subject is being processed, including information about the conditions, scope, purpose and duration of such processing, as well as information about the source from which the relevant personal data was obtained;
• 2. To request JOVAKO to rectify inaccurate or outdated personal data or to complete incomplete personal data;
• 3. To request JOVAKO to erase or delete personal data if:
• a. the personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• b. the personal data was processed on the basis of consent and that consent has been withdrawn, provided that there is no other legal basis for processing or another statutory exception;
• c. the data subject objects to the processing of personal data on the basis of legitimate interests and there are no overriding legitimate grounds for the processing, or the data subject objects to processing for direct marketing purposes;
• d. the personal data is processed unlawfully;
• e. the personal data must be erased in order to comply with a legal obligation;
• 4. To request JOVAKO to restrict the processing of personal data if:
• a. the data subject contests the accuracy of the personal data, for the period enabling JOVAKO to verify the accuracy of the personal data;
• b. the processing of personal data is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead;
• c. JOVAKO no longer needs the personal data for the purposes of processing, but the data subject requires it for the establishment, exercise or defence of legal claims;
• 5. Where the processing of personal data is based on consent, to withdraw that consent;
• 6. On grounds relating to the data subject’s particular situation, to object to the processing of personal data concerning the data subject where such processing is carried out either (A) because it is necessary for the performance of a task carried out in the public interest or (B) on the basis of the legitimate interest of JOVAKO as the controller, including objecting to profiling based on those legal grounds, if JOVAKO were to carry out automated decision-making, including profiling;
• 7. To lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

Requests relating to the above rights may be submitted by the data subject by email to jovako@jovako.sk, in person or by post to the controller’s address. The subject line of the email or letter must state “Personal Data Protection – Cookies”.

Responses to the above requests of the data subject, or measures taken on the basis of such requests, shall be provided free of charge. If the data subject’s request is manifestly unfounded or excessive, in particular because of its repetitive nature, JOVAKO is entitled to charge a fee reflecting its administrative costs for providing the information or a reasonable fee reflecting its administrative costs for notifying or carrying out the requested action. Alternatively, JOVAKO is entitled to refuse to act on the basis of such a request.

If you have any doubts about compliance with obligations relating to the processing of personal data, you may contact JOVAKO directly. You also have the option of lodging a complaint with the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27, Slovak Republic. Email: statny.dozor@pdp.gov.sk, website: https://dataprotection.gov.sk/.

The current version of this document is available on the controller’s website and in person at the registered office of JOVAKO.