Information on the Processing of Personal Data

In the course of our activities, we process your personal data. For our company, DMG, s.r.o., in accordance with our policies on quality, impartiality, and confidentiality of provided information, the proper processing and protection of your personal data is of utmost importance. Therefore, to individuals whose personal data is processed by DMG, s.r.o., we provide information related to the processing of personal data on our website (www.dmg.sk) in compliance with Regulation (EU) No 2016/679 (GDPR) of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) and Act No. 18/2018 Coll. on the Protection of Personal Data, as amended (hereinafter referred to as the “Act”).

Who Processes Your Personal Data?

Data Controller:

DMG, s.r.o.
Školská 470,
956 12 Preseľany
IČO: 34104038
Contact Information for the Data Controller: info@dmg.sk

Who is the Data Subject?

The data subject refers to the individual whose personal data is being processed. This includes personal data of natural persons such as employees, authorized persons, representatives, website visitors, and other individuals. In carrying out the tasks and obligations of DMG, s.r.o., we obtain your personal data directly from you or through fulfilling our obligations from third parties. When DMG, s.r.o. processes your personal data, you are the data subject, meaning you are the individual whose personal data is being processed. We have a legal obligation to provide your personal data during inspections, supervisory activities, or at the request of authorized state authorities or institutions, if required by specific regulations. Your personal data will be stored securely, in compliance with DMG, s.r.o.'s security policy, and only for the time necessary to fulfill the purpose of processing, and only in the form of essential personal data. Access to your personal data will be granted exclusively to individuals authorized by the controller to process personal data, who process it based on the controller's instructions and in accordance with the controller's security policy.

What Personal Data Do We Process?

The information we collect about you and how it is used depends on the specific service you use with us as the data controller. The data controller may process the following personal data about you, which you provide to us, either in paper or electronic form: name, surname, title, permanent residence or temporary residence address, email, and phone contact.

For what purpose and on what legal basis does the data controller process your personal data?

a) For the purpose of fulfilling contractual obligations - in the areas of provided services, conducted training, and auditing activities. Identifying and contact details: first name and surname, title, address, signature, place of business, company identification number (IČO), tax identification number (DIČ), VAT identification number (IČ DPH), phone number, email address, billing address, and your position in the organization if you represent a legal entity. We process this data based on Act No. 431/2002 Coll. on Accounting as amended, Act No. 250/2007 Coll. on Consumer Protection as amended, Act No. 513/1991 Coll. Commercial Code, Act No. 222/2004 Coll. on Value Added Tax as amended, and other relevant regulations. The data is processed by the controller for the duration of the contractual relationship and is retained for 10 years after the end of the contractual relationship.

b) Handling requests for access to information and processing appeals filed under Act No. 211/2000 Coll. on Free Access to Information (Freedom of Information Act) in its current wording

c) Handling complaints under Act No. 9/2010 Coll. on Complaints in its current wording.

d) Contacting data subjects through a selected communication channel (email, phone), based on the legitimate interests of the controller, in relation to information you have requested via the contact details published on the DMG website.

e) Supplier contracts (contact details) - processing is necessary for the purposes of the legitimate interests of the controller

f) Based on the data subject’s consent – for marketing purposes, company promotion, product promotion, assessing satisfaction with the company's products, references, sending offers, and direct communication with potential clients.

The consent provided for these purposes is entirely voluntary; however, it is necessary for you to be contacted with service offers. Any consent you freely give, which you explicitly confirm with your signature, can be withdrawn at any time in writing sent to the operator’s address or by email to info@dmg.sk. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Who are the recipients of your personal data?

We use the services of other processors who handle personal data only according to our instructions and for the purposes we specify. We have also entered into data processing agreements with these processors or have ensured that they have committed in writing to process personal data in accordance with GDPR. Categories of recipients:

  • Accounting service providers
  • Providers of IT and security technologies, website administrators, administrators of email contact and consent databases
  • Government authorities and public bodies, courts, law enforcement agencies, bailiffs, notaries
  • Tax advisors, auditors
  • Other entities to whom the provision of personal data is required by law

Do we transfer your personal data to third countries (outside the EU)?

The data controller does not intend to transfer your personal data to a third country or international organization.

Will your data be used for automated individual decision-making?

Your personal data is not used for automated individual decision-making, including profiling.

How long will your personal data be processed?

The data controller retains personal data for the duration of the specific processing purposes and subsequently for the period defined in the records plan in accordance with Act No. 395/2002 Coll. on Archives and Records Management and on Amendments to Certain Acts, as amended.

The data controller retains your personal data for at least the duration of the contractual relationship and, after its termination, until all obligations arising from or related to it are settled, or until the legitimate interest in processing the data ceases. If the data controller processes your personal data based on consent, your personal data will be processed for the specified purpose for the duration of that consent or until you withdraw the consent.

What are your rights as a data subject?

Withdraw consent – In cases where we process your personal data based on your consent, you have the right to withdraw this consent at any time. You can withdraw your consent electronically, to the address of the responsible person, or in writing by notifying us of the withdrawal of consent. The withdrawal of consent does not affect the lawfulness of the processing of personal data that we processed based on your consent.

Right of access – You have the right to obtain confirmation as to whether your personal data are being processed. If so, you have the right to access these personal data and to information about how we use your personal data. Your personal data will be provided to you in electronic form unless you request another method of delivery.

Right of Access – You have the right to confirmation as to whether your personal data are being processed. If so, you have the right to access these personal data and to information about how we use your personal data. Your personal data will be provided to you in electronic form unless you request a different method of delivery.

Right to Erasure (Right to be Forgotten) – You have the right to request the deletion of your personal data, for example, if the personal data we have collected about you are no longer necessary for the original purpose of processing. However, your right must be evaluated in light of all relevant circumstances. For instance, we may have certain legal and regulatory obligations, which means we may not be able to comply with your request.

Right to Restrict Processing – Under certain circumstances, you are entitled to request that we stop using your personal data. This includes situations where you believe the personal data we hold about you may be inaccurate or when you believe we no longer need to process your personal data.

Right to Data Portability – Under certain circumstances, you have the right to request that we transfer the personal data you provided to us to another third party of your choice. However, the right to data portability applies only to personal data that we have obtained from you based on your consent or as part of a contract to which you are a party.

Right to Object – You have the right to object to the processing of your data. If we do not have compelling legitimate grounds for processing and you file an objection, we will cease processing your personal data

Right to Lodge a Complaint – If you believe that your personal data is being processed unfairly or unlawfully, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava, Slovak Republic, phone: +421 /2/ 3231 3214, website: www.dataprotection.gov.sk, email: statny.dozor@pdp.gov.sk.