Zdravie v hrsti, n.o.

1. Identity and contact details of the controller

Controller: 

Zdravie v hrsti, n.o.

Klenová 3019/1, 833 10 Bratislava-Nové Mesto

Company ID (IČO): 56111096
Registration number: OVVS-337468/614/2024-NO
Registration authority: District Office Bratislava

The controller processes personal data of data subjects in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as the “GDPR”), as well as in accordance with Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”).

2. Nature and scope of processed personal data

The controller processes only such personal data as are necessary to achieve the purpose of the processing and observes the principle of data minimisation. The data subject will be informed of the specific scope of personal data required by the controller no later than at the time the personal data are obtained.

3. Consequences of failure to provide personal data

The requirement to provide personal data arises from the purposes of processing described in Section 1. If personal data are not provided, they will not be processed for the purpose for which they are required. As a result, the requested service or other requested action by the controller may be refused.

4. Processing of personal data not obtained directly from the data subject

In certain cases, the controller also processes personal data of data subjects that were provided by a third party acting on behalf of the data subject, in their interest, or on their instructions.

The controller may also receive contact details of a data subject from their employer acting as a business partner or customer of the controller, in the exercise of its rights under a specific situation of lawful processing pursuant to Article 88 of the GDPR in conjunction with Section 78(3) of the Personal Data Protection Act (Slovak Republic).

The controller will always inform the data subject if their personal data are obtained in a different manner or from sources other than those stated in this written information.

5. Automated processing and profiling

The controller does not carry out automated processing of personal data or profiling.

6. Rights of the data subject

The data subject may exercise the following rights in relation to the controller at any time during the processing of their personal data:

  • the right of access to personal data,
  • the right to rectification of personal data,
  • the right to erasure of personal data,
  • the right to restriction of processing,
  • the right to object to processing,
  • the right to data portability,
  • the right to withdraw consent, where personal data are processed on the basis of consent.

7. Right to withdraw consent

Where personal data are processed on the basis of consent given by the data subject to the controller, the data subject has the right to withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal. The data subject may exercise this right in the manner described in Section 8.

8. Exercising rights with the controller

Written requests to exercise the rights of the data subject or requests for information regarding personal data may be submitted by email to gdpr@zdravievhrsti.sk or by post to the controller’s registered address specified in Section 1.

9. Continuation of processing on another legal basis

The controller may continue processing personal data even after the expiry of the processing period or after the data subject has exercised their rights, on another legal basis, in particular for the purpose of complying with legal obligations (where the controller is required by law to continue such processing) or on the basis of legitimate interests (for example, for the establishment, exercise, or defence of legal claims, for the retention of evidence during limitation periods, during inspections by supervisory authorities, or due to ongoing administrative, judicial, or other proceedings before public authorities).

10. Right to lodge a complaint with a supervisory authority

If the data subject believes that their rights have been infringed by the controller’s processing of personal data, they have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27. The authority’s website is available at www.dataprotection.gov.sk