GDPR – REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the “Regulation”), and Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (the “Act”) entered into force on 25 May 2018. In accordance with this new legislation, we would like to inform you of the purposes and conditions under which we collect and process your personal data, and of your rights in this regard.

CONTROLLER AND CONTACT DETAILS

The controller of this website and the processor of your personal data is TATRY PARTNER s.r.o., Štúrova 40, 060 01 Kežmarok (hereinafter the “controller”).

PURPOSE AND REASON FOR DATA COLLECTION AND PROCESSING

Your data is collected and processed in accordance with binding legal regulations. We process only data that is necessary to provide our services properly, to fulfil our contractual and legal obligations, and to pursue the legitimate interests of the controller and third parties. We also process data for which you have given us your consent. These data are kept for the duration of the business relationship, but no longer than 10 years. After that period, they are deleted by the controller.

• Contact data – personal data used to contact you, such as full name, company name, contact address, phone number, email address, etc.
• Communication data – information exchanged between you and the controller, e.g. emails, SMS messages, notes, etc.

LEGAL BASES

Pursuant to the legal requirements on personal data protection (Article 6(1) of the Regulation; §13(1) of the Act), we must inform you of the legal bases for processing your personal data, which include:

• Fulfilment of our contractual obligations
• Fulfilment of our legal obligations
• Our legitimate interest
• Consent of the data subject

SECURITY AND SHARING OF YOUR DATA WITH THIRD PARTIES

We take the protection of your data seriously and have implemented appropriate organizational and technical measures to secure the information we collect in the course of providing our services. In line with applicable legislation, we perform all necessary security, technical and organizational steps to protect your personal data from intentional or accidental deletion, accidental loss, alteration, unlawful disclosure, misuse, or unauthorized access. Your personal data may be disclosed to recipients authorized to receive it by law or based on your consent. These may include:

• Third parties such as accountants, website administrators, auditors, tax advisors, legal advisors, etc.
• Government authorities and public administration bodies that may be entitled to access personal data under certain conditions and in accordance with the applicable legislation.

YOUR RIGHTS REGARDING PERSONAL DATA

Under the Regulation and the Act, you have the following rights with respect to the processing of your personal data:

• To access the personal data collected about you
• To request correction or updates to personal data
• To request the deletion of personal data (“right to be forgotten”)
• To restrict the processing of your data
• To withdraw your consent at any time
• To data portability
• To object to the processing
• To file a complaint with the Slovak Data Protection Authority

You may exercise these rights at any time by contacting us via the contact form or by email at info@ebike-tatry.sk. We will not retain your personal data longer than necessary for the purpose for which it was collected, as described in the section “PURPOSE AND REASON FOR DATA COLLECTION AND PROCESSING.” Data is stored, archived, and deleted in accordance with the law.