The provided information governs the conditions for the protection of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (hereinafter referred to as the "General Data Protection Regulation"), and Act No. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws (hereinafter referred to as the "Personal Data Protection Act"), effective from May 25, 2018, in connection with the personal data provided by data subjects to the operator on its website.
Operator: be-points s.r.o., Cesta pod Hradovou 798/37, Košice-Sever 040 01, Company ID: 47 586 303, registered in the Commercial Register of the District Court Košice, section Sro, file number: 34681/V, represented by Tomáš Čerevka.
Phone: +421 918 696 186
Email: info@bepoints.sk
Web: www.bepoints.sk
Personal data means data relating to an identified or identifiable natural person who can be identified directly or indirectly, in particular by reference to a generally applicable identifier, another identifier such as a name, surname, identification number, location data, or online identifier, or by reference to one or more characteristics or traits that constitute their physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity, or social identity.
Processing of personal data means a processing operation or a set of processing operations with personal data or sets of personal data, in particular obtaining, recording, organizing, structuring, storing, modifying, retrieving, browsing, using, providing by transmission, dissemination, or otherwise making available, rearranging or combining, restricting, deleting, regardless of whether it is carried out by automated or non-automated means.
Data subject means any natural person whose personal data is processed.
Operator means anyone who, alone or jointly with others, determines the purpose and means of processing personal data and processes personal data on their own behalf.
Processor means anyone who processes personal data on behalf of the operator.
Restriction of personal data processing means the marking of stored personal data with the aim of limiting their processing in the future, based on the request of the data subject under the conditions set out in this information.
Personal data is processed by the operator in a lawful manner in accordance with the General Data Protection Regulation and the Personal Data Protection Act, ensuring that the fundamental rights of the data subject are not violated.
The operator collects personal data for a specific, legitimate, and explicitly stated purpose, and personal data is not further processed in a manner incompatible with this purpose.
The processing of personal data for the purpose of archiving, scientific research, historical research, or statistical purposes is in accordance with a special regulation, and appropriate safeguards for the protection of the data subject's rights are observed.
Processed personal data is adequate, relevant, and limited to what is necessary for the purpose for which it is processed.
Processed personal data must be accurate and, where necessary, updated. Personal data that is inaccurate in terms of the purposes for which it is processed must be deleted or corrected by the operator without undue delay.
The operator stores personal data in a form that allows the identification of the data subject no longer than is necessary for the purpose for which the personal data is processed. Personal data may be stored longer if it is to be processed solely for the purpose of archiving, scientific research, historical research, or statistical purposes based on a special regulation, provided that appropriate safeguards for the protection of the data subject's rights are observed.
Personal data is processed by the operator in a manner that ensures adequate security of personal data through appropriate technical and organizational measures, including protection against unauthorized processing, unlawful processing, accidental loss, deletion, or damage of personal data.
The data subject has the following rights in connection with the processing of their personal data:
The right to request access to personal data from the operator:
The data subject has the right to request information from the operator about whether personal data concerning them is being processed.
The operator is obliged to provide the data subject with their personal data that is being processed. For repeated provision of personal data requested by the data subject, the operator charges a fee corresponding to the administrative costs associated with processing the request.
The operator is obliged to provide personal data to the data subject in the manner requested by the data subject.
In addition to providing the personal data of the data subject being processed, the operator also provides the data subject with information about the purpose of processing personal data, the category of processed personal data, the identification of the recipient or category of recipient to whom the personal data has been or will be provided, if such a recipient exists, the retention period of personal data, and if this is not possible, information about the criteria for determining it, the right to request the operator to correct personal data concerning the data subject, delete or restrict the processing of their personal data, or the right to object to the processing of personal data, the right to submit a proposal to initiate proceedings on the protection of personal data under § 100 of the Personal Data Protection Act, the source of personal data if the personal data was not obtained from the data subject, the existence of automated individual decision-making, including profiling.