Privacy Policy and Personal Data Protection System in Accordance with the GDPR Regulation
Prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, pursuant to Articles 13 and 14 of the Regulation (hereinafter referred to as “GDPR”), and Act No. 18/2018 Coll. on Personal Data Protection (hereinafter referred to as the “Personal Data Protection Act”).
Data Controller:
KOVOK PRIEVIDZA, s.r.o.
Cesta poľnohospodárov 20, 971 01 Prievidza
Company ID (IČO): 50 065 441
Ing. Martin Švidrnoch, MBA
Phone: +420 608 172 391
Email: info@kovok.eu
(hereinafter referred to as the “Controller”)
What is Personal Data?
Personal data refers to any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, particularly by reference to a generally used identifier, such as a name, surname, identification number, location data, or an online identifier. Identification can also be based on one or more specific characteristics related to their physical, physiological, genetic, mental, economic, cultural, or social identity.
What is Personal Data Processing?
Processing of personal data refers to any operation or set of operations performed on personal data, whether automated or manual. This includes activities such as:
- Collecting, recording, organizing, structuring, storing, modifying, retrieving, consulting, using, disclosing, transmitting, disseminating, aligning, or combining, restricting, erasing, or destroying data.
The Controller is not required to appoint a Data Protection Officer.
Sources and Categories of Personal Data
The Controller processes personal data:
- Directly from you – when you provide your data, or
- As a result of fulfilling your order.
The processed data includes your identification and contact details, as well as data necessary for contract fulfillment.
Legal Basis and Purpose of Processing
The legal basis for processing personal data includes:
- Your consent – for direct marketing purposes (Article 6(1)(a) GDPR).
- Performance of a contract – between you and the Controller (Article 6(1)(b) GDPR).
- Legal obligations – compliance with legal requirements (Article 6(1)(c) GDPR).
The purposes of processing include:
- Fulfilling your order and exercising rights and obligations arising from the contractual relationship. Personal data processing for fulfilling a contract does not require additional consent. Providing personal data is necessary for contract execution; without it, the contract cannot be completed.
- Operating social media profiles (Facebook, Instagram) – for raising awareness and communicating with customers. The Controller does not process personal data posted on social media for other purposes.
You have the right to object to the processing of your personal data at any time by emailing info@kovok.eu.
Social media platforms operate independently, with their own privacy policies. We recommend reviewing their privacy terms:
- Facebook: https://www.facebook.com/policy.php
- Instagram: https://help.instagram.com/519522125107875
Automatically Processed Personal Data
The Controller’s website uses cookies, scripts, and pixels for functional and analytical purposes:
- Cookies: Text files storing small amounts of data to retain user preferences (e.g., login credentials, language settings).
- Scripts: Code ensuring the interactive functionality of web pages.
- Pixels: Invisible elements used for tracking website visits.
Types of Cookies:
- Technical or Functional Cookies – Essential for the website’s functionality (used without consent).
- Statistical Cookies – Used for gathering usage statistics (requires consent).
To manage cookies, visit: https://www.aboutcookies.org
A list of cookies used by the Controller can be found at: https://www.cookieserve.com (enter www.kovok.eu).
Data Retention Period
Personal data is retained for:
- The duration necessary to fulfill contractual obligations and exercise related rights.
- The legally required period under Act No. 395/2002 Coll. on Archives and Registries, after which the data is deleted.
Recipients of Personal Data
A recipient is any entity that receives personal data, except for public authorities processing data under legal mandates. Recipients may include:
- Entities involved in delivering goods, services, and processing payments under contractual agreements.
The Controller does not share, publish, or transfer personal data to third countries.
Data Security Measures
The Controller has implemented appropriate technical, personnel, and organizational measures to secure personal data. Only authorized personnel have access to personal data.
Your Rights
You have the following rights under the GDPR:
- Right of access – To know whether your personal data is being processed (Article 15 GDPR).
- Right to rectification – To correct inaccurate or incomplete data (Article 16 GDPR).
- Right to restriction of processing – To limit how your data is used (Article 18 GDPR).
- Right to erasure (“Right to be forgotten”) – To request deletion of your data under certain conditions (Article 17 GDPR).
- Right to object – To object to data processing (Article 21 GDPR).
- Right to data portability – To obtain or transfer your data (Article 20 GDPR).
- Right to withdraw consent – To revoke previously granted consent at any time.
- Right to lodge a complaint – To report potential violations to the Data Protection Authority.
How to Exercise Your Rights
To request access, correction, restriction, or deletion of your data, contact us:
- By email: info@kovok.eu
- By post: Cesta poľnohospodárov 20, 971 01 Prievidza
If you believe your personal data rights have been violated, you may file a complaint with the Data Protection Authority:
Office for Personal Data Protection
Hraničná 12, 820 07 Bratislava 27
Slovak Republic
Company ID (IČO): 36064220
Tax ID (DIČ): 2021685985
Secretariat Contact:
Phone: +421 /2 3231 3214
Email: statny.dozor@pdp.gov.sk
Effective Date
These Privacy Policy principles have been in effect since May 25, 2018, replacing previous policies.
