Personal data processing principles and personal data protection system according to the GDPR regulation

prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data pursuant to Articles 13 and 14 of the Regulation (hereinafter referred to as the "GDPR" ) and Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as the "Act on the Protection of Personal Data" )

Operator:

Invictus Animation Ltd.

Zochova 6-8

811 03 Bratislava

ID: 56 077 441

Phone number:

E-mail: autoskola@topdrive.sk

(hereinafter referred to as the " Operator ")

What is personal data?

Personal data are data relating to an identified natural person, or an identifiable natural person who can be identified, directly or indirectly, in particular by reference to a commonly used identifier , another identifier such as a name, surname, identification number, location data, or an online identifier, or to one or more characteristics or features specific to his or her physical identity, physiological identity, genetic identity, psychological identity, mental identity, economic identity, cultural identity or social identity.

What is the processing of personal data?

Processing of personal data is any operation or set of operations which is performed on personal data or sets of personal data, in particular collection, recording, organisation, structuring, storage, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, whether or not by automated means.

The Operator (Administrator) is not obliged to appoint/designate a Responsible Person.

Sources and categories of personal data:

The operator processes personal data (directly from you) that you have provided to it, or personal data that it has obtained based on the fulfillment of your order.

Your identification and contact details and data necessary for the performance of the contract.

Legal reason and purpose of processing:

The lawful reason for processing is:

Your consent to the processing of personal data for the purpose of providing direct marketing pursuant to Article 6(1)(a) GDPR

Performance of the contract between you and the controller pursuant to Article 6(1)(b) GDPR

Processing is necessary for compliance with a legal obligation of the controller pursuant to Article 6(1)(c) GDPR

The purpose of processing personal data is:

Processing your order and exercising the rights and obligations arising from the contractual relationship between you and the operator. When ordering services, personal data is required for the successful performance of the contract for work pursuant to Art. 6, para. 1, letter b) of the Regulation (this also includes the subsequent payment, delivery of goods or services, handling of complaints, etc.); the processing of the customer's personal data takes place without the customer's consent , as the legal basis for processing their personal data for the purposes of performing the contract is a specific contract between the customer and the operator. The provision of personal data is a necessary requirement for the conclusion and performance of the contract ; without the provision of personal data, it is not possible to conclude a contract or for the operator to fulfill its terms.

Provision of an agreed service in the field of engineering activities - production of metal products.

The operator does not carry out automated individual decision-making within the meaning of Article 22 of the GDPR.

Retention period:

The operator stores personal data

For the period necessary to exercise the rights and obligations arising from the contractual relationship between you and the operator and to exercise the claim arising from these contractual relationships.

After the expiry of the personal data retention period resulting from Act No. 395/2002 Coll. Act on Archives and Registries and on Amendments to Certain Acts, the controller will delete the personal data.

Recipients of personal data

Who is the beneficiary?

A recipient is anyone to whom personal data are provided, regardless of whether they are a third party. A public authority that processes personal data on the basis of a special regulation is not considered a recipient.

They are persons who participate in the delivery of goods, services, and the execution of payments under the contract.

The operator does not provide, publish or make personal data available to third countries.

Conditions for securing personal data

The operator declares that it has taken appropriate personnel, technical and organizational measures to ensure the protection of personal data.

The operator has taken technical measures to secure data repositories and personal data repositories in file form.

The operator declares that only persons authorized by him have access to personal data.

Your rights:

– Right to access your personal data pursuant to Article 15 GDPR

– Under the conditions set out in the GDPR, you have:

Right to rectification of personal data pursuant to Article 16 GDPR

– Right to restriction of processing

– Right to erasure pursuant to Article 17 GDPR

– Right to object under Article 21 GDPR

– Right to transfer personal data under Article 21 GDPR

– Right to withdraw consent (electronically or to the correspondence address)

– The right to file a complaint with the Personal Data Protection Authority if you believe that your personal data protection rights have been violated.

You also have the right to file a complaint with the Personal Data Protection Authority if you believe that your personal data protection rights have been violated.

How can you exercise your rights?

Right to access data

You have the right to know whether we are processing your personal data. If we are processing your personal data, you can ask us for access to it. Based on your request, we will issue a confirmation with information about the processing of your personal data. You can submit your request electronically, to the email address autoskola@topdrive.sk or by post to the correspondence address : Invictus Animi sro, Zochová 6-8, 811 03 Bratislava, IČO: 56 077 441

Right to correction

You have the right to have your personal data processed by us be correct, complete and up-to-date. If your personal data is incorrect or out-of-date, you can ask us to correct or supplement it electronically to the email address autoskola@topdrive.sk or by post to the correspondence address : Invictus Animi sro, Zochová 6-8, 811 03 Bratislava, IČO: 56 077 441

Right to erasure

Under certain circumstances, you have the right to have your personal data erased. You can ask us to erase your data at any time. We will erase your personal data if:

– we no longer need your personal data for the purpose for which you provided it to us,

– you withdraw your consent,

– you object to the processing of your personal data,

– we process your personal data unlawfully,

– personal data must be deleted to comply with a legal obligation,

if you are a child or the parent of a child who has consented to the processing of personal data via the Internet.

Right to restriction of processing

You can ask us to restrict the processing of your personal data. If we grant your request, we will only store your personal data and will not process it further. The processing of your data will be restricted if

– you notify us that your personal data is incorrect, until we verify its accuracy,

– we are processing your personal data unlawfully, but you do not agree to their deletion and instead request that we only restrict the processing of your personal data,

– We no longer need your data, but you need it to establish, exercise or defend your rights

– you object to the processing of your personal data until we verify whether our legitimate interests outweigh your reasons.

Right to data portability

You have the right to request that we provide you with your personal data in an electronic format (e.g. an XML or CSV file) that allows you to easily transfer the data to another company. You can also ask us to transfer your personal data directly to the selected company. We will comply with your request if you have provided us with your personal data directly and have given us your consent to process it.

Right to object

You have the right to object to our processing of your personal data. If we process your personal data in the following cases:

– due to our legitimate interest,

– creating a customer profile,

– you can object to their processing if you have personal reasons for doing so.

How can you exercise these rights?

You can contact us with your request in any of the following ways:

in writing by email: autoskola@topdrive.sk or by post to the correspondence address : Invictus Animi sro, Zochová 6-8, 811 03 Bratislava, Company ID: 56 077 441

If you believe that your rights to personal data protection have been violated, you have the right to file a complaint with the supervisory authority, which is the Personal Data Protection Office at the address

Border 12

820 07 Bratislava 27

Slovak Republic

Identification data:

ID: 36064220

VAT number: 2021685985

Secretariat of the Office:

+421 /2 3231 3214

E-mail:  statny.dozor@pdp.gov.sk

These personal data processing principles are valid from May 25, 2018 and replace the previous Personal Data Protection.