The protection of personal data is very important to us. For this reason, we continuously analyze all personal data processing processes and ensure their compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “GDPR“) which is binding for all Member States of the European Union, as well as Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Additions to Certain Acts (hereinafter referred to as "the Act").
Your personal data is processed as the controller by our company V360coaching, s. r. o., with its registered seat at Mlynské nivy 52/B, 821 05 Bratislava – Ružinov, ID number: 53 646 720, registered in the Commercial Register of the City Court Bratislava III, Section: Sro, Section No.: 151421/B, e-mail: info@v360coaching.com.
We hereby inform you about the way and conditions of processing of your personal data, as well as about your rights that are associated therewith. We process personal data in the fields listed below. If the retention period of personal data in any field is determined by years, retention period begins on 1st of January of the calendar year following the year in which we began with processing of your personal data for that purpose.
1. Purpose, legal basis and retention period of personal data
Order
If you are interested in ordering the services offered in our portfolio, we are obliged to process your personal data for advising you in choosing services, for accepting and properly processing your order, providing ordered services, handling complaints, asserting other claims and performing other activities and acts related thereto.
We use tools of long-distance communication to communicate with you, especially electronic mail and online application services (e.g., Zoom).
Legal basis
- We may process your personal data without your consent, as this is necessary for the proper performance of the contract you have entered into with us.
- In some cases, we also need to process data about your health (e.g., diseases, treatments, psychological diagnoses, allergies, intolerances, serious health problems) in order to provide you with qualified services that you are interested in and in which we must also take such data into account, whereas we only process these sensitive personal data if you give us your explicit consent.
Retention period
- For the duration of the contract and 4 years after its termination.
- In the case of health data, for the duration of the contract and 1 year after its termination if you are interested in re-providing the services, of course only if the consent is not revoked earlier (after this period we can ask you for your consent again and you are free to decide whether or not to grant it).
Direct marketing
If you have already purchased services from us in the past, we are also interested in offering you the option of purchasing other similar services that are in our portfolio. For this reason, we will send you an offer of such similar services that you might be interested in. This is the so-called direct marketing.
Legal basis
- We may process your personal data without your consent, as our legitimate interest allows us to increase the sales and demand for our services, in relation to clients who have already purchased services from us and who, in our opinion, can reasonably expect that we will offer (send) such additional information about similar services from our portfolio. You always have the right to object to direct marketing processing (as stated in point 3)
Retention period
- For the duration of the contractual relationship with us and 2 years after its termination.
Suppliers and contractual partners
If you are our supplier or contractual partner, we need to process your personal data, which are necessary for the performance of the contract we have concluded with you, especially for communication with you about the terms of the contract, concluding and then properly performing it and, where appropriate, enforcing performance if necessary.
Legal basis
- We may process your personal data without your consent, as this is necessary for the proper performance of the concluded contract.
Retention period
- For the duration of the contract and 4 years after its termination.
Contact persons
If you are only the contact person of our contractual partner (e.g., its statutory body, employee or external worker), we process your personal data, which are necessary for the performance of the contract we have concluded.
Legal basis
- In this case, we do not need your consent, as it is necessary to process your personal data for the contract under which you were listed as a contact person to be properly performed, and thus our legitimate interest and the legitimate interest of our contractual partner of which you are the contact person, is to ensure the proper and timely performance of such a contract.
Retention period
- For the duration of the contract and 4 years after its termination.
Accounting
As an accounting entity, we keep accounts in accordance with the relevant generally binding legal regulations, and for this reason we must also process some of your personal data, which are stated in the accounting records (e.g., incoming and outgoing invoices, cash register entries).
Legal basis
- We process your personal data for this purpose without your consent, as this is necessary for us to fulfill our legal obligation to keep accounts properly and to fulfil the obligations associated with it.
Retention period
- For a period of 10 years from the preparation of the accounting document.
Taxes
We also have obligations in the field of tax regulations, especially according to the Income Tax Act and the Value Added Tax Act, therefore we must process your personal data if the tax regulations require us to do so.
Legal basis
- We process your personal data for this purpose without your consent, as this is necessary in order to comply with our legal obligation under tax regulations.
Retention period
- According to generally binding tax legislation, usually for a period of 10 years from the preparation of the tax document.
Legal claims
As part of our activities, we monitor and control compliance with legal regulations, procure legal matters and, if necessary, assert and enforce our rights and claims, or defend against the asserted and enforced rights and claims of third parties.
Legal basis
- We may process your personal data without your consent, as this is necessary in order to exercise and enforce our rights and claims, or to properly defend against the asserted and enforced rights and claims of third parties, in accordance with applicable generally binding legal regulations. This is in our legitimate interest.
Retention period
- For as long as the rights and claims exist and are enforceable (in particular until the claim is time-barred).
Registry management
We also keep a database of received and sent mail and other records within the registry according to Act no. 395/2002 Coll., in which your personal data may be processed if you are e.g., the sender or addressee of the consignment.
Legal basis
- We process your personal data for this purpose without your consent, as this is necessary in order to comply with a legal obligation under the law in question.
Retention period
- According to the periods set by us, which are based on legal regulations or the length determined by us, which corresponds to the requirement of minimizing the retention period, in the normal correspondence, for the most part, 3 years. If it is not clear to you for how long we process your personal data, it is possible to contact us at any time for this purpose.
Cookies
In order to ensure the basic functionality of our website we use the so-called necessary cookies enabling the implementation of the basic functionalities of the website (a language cookie and a device cookie to control the number of devices which can access the content of the services in the client zone as the access is limited to a maximum of 3 devices. Without these cookies, our website would not work properly.
Legal basis
- The use of these cookies is necessary and therefore we do not ask your consent to store and access them.
Retention period
- For a period of 1 year from the last visit to the website.
Contact form
We have a contact form published on our website, through which you can contact us in case of any of your inquiries related to our services or in case of interest in providing these services. We will only process your personal data for the purpose of processing your inquiry and/or answering a question.
Legal basis
- We may process your personal data without your consent, as this is necessary to process your inquiry or answer a question. Since the purpose of the contact form is to facilitate clients’ initial communication when they are interested in our services, from our point of view it is a measure performed before the conclusion of the contract, and thus the so-called pre-contractual relationship
Retention period
- For the duration of communication with the client and 1 month after its termination.
GDPR
Our company is interested in properly fulfilling all obligations in the field of personal data protection, and therefore we also process your personal data if it is necessary to process inquiries, requests, security incidents and comply with our obligations under the GDPR and the Act.
Legal basis
- We may perform the processing of personal data without your consent, as this is necessary in order to fulfil our obligations as a data controller under the GDPR and the Act.
Retention period
- For a period of 5 years from the creation of the output.
2. Beneficiaries or categories of beneficiaries
We protect personal data and do not make them available or provide them to third parties or entities, unless otherwise stated in this section. We only provide personal data to our contractual partners. These are mainly providers of accounting, cloud, marketing and IT services. For communication with clients, we mainly use the Zoom application, which has its own conditions of personal data protection, which are available HERE.
If we use the legal services of auditors, lawyers, registered postal companies or other regulated professions, then these are considered to be independent data controllers and are therefore obliged to ensure the protection of your personal data according to their own terms and conditions. If such an obligation arises from a law or a decision of a public authority, your personal data will also be disclosed to a public authority or other entity.
3. The rights of the data subject
As a data subject, you have several rights under GDPR as follows:
Right of access to personal data
You have the right to ask us to confirm whether we process personal data that concerns you, and if so, you have the right to access this personal data, as well as the right to basic information about the processing of your personal data. The first provision of the above personal data is free of charge. Repeated provision of personal data requested by the data subject will be charged with an administrative fee of EUR 5.
The right to rectify and/or supplement personal data
You have the right to request that we rectify inaccurate personal data concerning you without undue delay, as well as the right to supplement incomplete personal data.
The right to erasure of personal data
You have the right to request the immediate erasure of your personal data only if:
For this purpose, you can contact us at any time, and we will then assess whether there are exceptions in your case where it is not necessary to erase your personal data even if one of the above conditions is met (e.g., it is necessary for the exercise of legal claims).
The right to restrict the processing of personal data
You have the right to restrict the processing of your data (i.e., only to store your data, but not to process it in any other way), if:
For this purpose, you can contact us at any time, and we will then assess whether there are exceptions in your case, when it is possible to process your personal data in other ways, not only by storage.
The right to object to the processing of personal data
You have the right to claim to the processing of your personal data if the processing is necessary for the purposes of legitimate interests pursued by us or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of your person requiring personal data protection. We may only process your personal data if we demonstrate the necessary legitimate reasons for the processing, which would override the interests, rights and freedoms, or the reasons for proving, asserting or defending legal claims.
Right to portability of personal data
If the processing of your personal data is carried out by automated means, with your consent or for the purposes of performing the contract, you have the right to obtain personal data concerning you and which you have provided to us, in a structured, commonly used and machine-readable format; you have the right to transfer this data to another person (controller), but only if it is technically possible.
The right to withdraw consent to the processing of personal data
Last but not least, you have the right to withdraw your consent to the processing of personal data concerning you at any time, if you have given such consent, by sending the withdrawal to the contact details of the controller mentioned above. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal.
The right to lodge a complaint to the supervisory authority
In this way, we also inform you that if you believe that the rights of natural persons have been violated in the processing of your personal data or the GDPR, you can lodge a complaint to initiate proceedings on personal data protection, namely to the Office for Personal Data Protection of the Slovak Republic (an application form of the complaint is published on the website of the Office for Personal Data Protection of the Slovak Republic www.dataprotection.gov.sk).
4. Request for the provision of personal data
The provision of your personal data, which we process on the basis of your consent, is voluntary and is not a legal or contractual requirement, as a result of which their non-providing has no negative consequences for you. If the processing of personal data is done on the legal basis of the performance of the contract or the fulfillment of legal obligations, then their non-provision may result in the impossibility of fulfilling such a contract or breach of a legal obligation. In other cases, failure to provide personal data has no adverse effect on you.
5. Transfer to third countries
Your personal data is not transferred to third countries and/or international organizations.
6. Facebook
Our website enables a connection to the Facebook account Veronika Pokorna V360coaching. The social network Facebook is operated by Facebook Ireland Limited, located at 4 Grand Canal Square, Grand Canal Harbor, Dublin 2 Ireland ("Facebook"), which can be identified by the Facebook logo placed on the website.
More detailed information about how your personal data is processed by the social network Facebook can be found in Facebook's Privacy Policy here: https://www.facebook.com/privacy/policy
When managing our Facebook page (profile), we collect personal as part of the Facebook Insight function. When you visit our page (profile), this function collects personal data and subsequently uses them for statistical purposes about your use of Facebook. When processing such data, we consider ourselves to be joint operators with Facebook – the terms and conditions can be found here:
https://www.facebook.com/legal/terms/page_controller_addendum_archived
You can find the terms of use for this feature here: