INFORMATION PROVIDED UNDER THE PERSONAL DATA PROTECTION ACT
Pursuant to Act No. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts, as well as Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we hereby provide you with information regarding the processing of your personal data.
WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?
The controller of your personal data is EACON, spol. s r. o., J. Murgaša 700/10, 971 01 Prievidza, Slovakia, Company ID (IČO): 51 707 152, registered in the Commercial Register of the District Court Trenčín, Section Sro, File No. 36450/R (hereinafter referred to as “EACON”).
WHAT PERSONAL DATA DO WE PROCESS?
Contact form, email or telephone communication
If you contact us via the contact form, email, or telephone, we process:
- Your contact details (e.g. name, email address, telephone number)
- The content of your message or enquiry
We use this data to process your requests or respond to your enquiries.
Legal basis: Our legitimate interest pursuant to Article 6(1)(f) GDPR.
Retention period: 3 months after your request has been processed. If the communication results in an order, the personal data will continue to be processed in accordance with the rules stated above.
Where necessary for the establishment, exercise, or defence of legal claims, we may retain personal data for a period of 3 years plus an additional 1 year, particularly if a claim is initiated at the end of the limitation period. If legal proceedings are commenced, we will retain the data for the duration of the proceedings and for the remainder of the limitation period after the proceedings have ended.
You have the right to object to processing based on our legitimate interest.
Newsletter / Email marketing
If you have given us your consent to receive marketing communications (e.g. newsletters), we process:
- Your email address
- Your first and last name (if provided during registration or when placing an order)
We process this data for the purpose of sending information about our products, promotions, news, and other marketing activities.
Legal basis: Your consent pursuant to Article 6(1)(a) GDPR.
Retention period: Until your consent is withdrawn.
You may unsubscribe from our newsletters at any time by clicking the unsubscribe link at the bottom of each email or by contacting the controller.
COOKIES
EACON uses cookies on its website (www.eacon.sk) that are necessary for the proper functioning of the website and the provision of our services.
We use the following types of cookies:
- Essential cookies – These cookies are technically necessary for the operation of the website. They are automatically deleted after you close the website and provide only non-personal statistical information about website traffic, such as the number of visitors or the duration of a visit.
- Functional cookies – These cookies enable the website to remember your login details and ensure secure authentication. They also help customize the website interface according to your preferences.
- Third-party cookies – These cookies are generated exclusively by external service providers and cannot be read or controlled by EACON. These may include, for example:
- Analytical cookies (e.g. Google Analytics) – used to measure user behaviour on the website in order to improve its functionality and content.
- Social media cookies (e.g. Facebook, Instagram, YouTube) – used to enable content sharing and display targeted advertisements.
Managing cookie consent
When you first visit our website, you have the option to accept or reject the use of certain types of cookies (except essential cookies). You may withdraw your consent or change your cookie preferences at any time through your browser settings or by using the cookie management tool available on our website.
DATA RETENTION AND SECURITY
We process your personal data only for as long as necessary to fulfil the purpose for which it was collected or until you withdraw your consent where processing is based on consent. After this period, your personal data will be deleted or anonymized unless its further retention is required by law (for example, under the Accounting Act).
We take appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, misuse, or damage.
Files containing personal data are password protected and accessible only to a limited number of employees and contractors who have been trained in personal data protection and in the proper handling and safeguarding of personal data.
WHO HAS ACCESS TO YOUR PERSONAL DATA?
Your personal data may be accessed by EACON as the data controller, its employees, and contracted data processors, particularly companies providing:
- IT services,
- software development services,
- website or e-shop administration,
- accounting services.
Your personal data may also be disclosed to third parties, such as delivery companies responsible for shipping your order.
These entities act either as independent controllers or as data processors pursuant to Article 28 of the GDPR and are contractually bound by confidentiality obligations and required to comply with applicable data protection regulations.
WHAT ARE YOUR RIGHTS?
As a data subject, you have the following rights regarding the processing of your personal data.
Right to information
You have the right to receive information about the processing of your personal data. This information includes, in particular:
- the identity and contact details of the controller, its representative, and, where applicable, the data protection officer;
- the purposes of processing;
- the categories of personal data concerned;
- the recipients or categories of recipients of the personal data;
- information about transfers of personal data to third countries;
- the retention period of the personal data;
- your rights as a data subject;
- your right to lodge a complaint with the supervisory authority;
- the source of the personal data;
- information on whether automated decision-making or profiling takes place.
This information will be provided when your personal data is collected or at any time upon your request.
Right of access
You have the right to obtain confirmation as to whether we process your personal data and to receive a copy of the personal data we hold about you, together with information on how it is used. If you submit your request electronically, the information will be provided electronically whenever technically feasible.
Right to rectification
If your personal data is inaccurate, incomplete, or outdated, you have the right to request that we correct or update it.
Right to data portability
If you wish us to transfer your personal data to another organization, we will provide your personal data in a structured, commonly used, and machine-readable format to the controller you designate, provided that the processing is based on your consent or on a contract and is carried out by automated means.
Right to erasure
In certain cases provided for by law, you have the right to request the deletion of your personal data. This right applies in particular where:
- the personal data is no longer necessary for the purposes for which it was collected;
- you withdraw your consent and there is no other legal basis for processing;
- the processing is unlawful.
Right to restriction of processing
You have the right to request that we restrict the processing of your personal data if:
- you contest the accuracy of the personal data;
- the processing is unlawful, but you oppose the deletion of the data;
- we no longer need the personal data, but you require it for the establishment, exercise, or defence of legal claims;
- you have objected to the processing and verification is pending as to whether our legitimate grounds override yours.
Right to lodge a complaint
If you believe that your personal data has been processed in violation of applicable data protection legislation, you have the right to lodge a complaint with the supervisory authority. The supervisory authority in the Slovak Republic is:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Slovakia
Telephone: +421 2 3231 324
Email: statny.dozor@pdp.gov.sk
Website: https://dataprotection.gov.sk/uoou/
If a complaint is submitted electronically, it must comply with the requirements set out in Section 19(1) of Act No. 71/1967 Coll. on Administrative Proceedings (Administrative Procedure Code).