Notice: This document is an unofficial English translation provided for informational purposes only. In the event of any discrepancy or conflict between this translation and the original Slovak-language version, the Slovak version shall prevail and be deemed the legally binding and authoritative text.
PRIVACY STATEMENT – Debtors TatraLab s. r. o., Tvarožnianska 1359/6, Kežmarok 06001, Company ID (IČO): 54072646, Commercial Register of the District Court Prešov, Section: Sro, Insert No.: 42856/P, (hereinafter referred to as 'TatraLab s. r. o.')

PRIVACY STATEMENT
Debtors

At TatraLab s. r. o., we respect the privacy of all data subjects with whom we are in contact, regardless of whether we process personal data ourselves or through other entities. It is important to us that you know which personal data we process about you, why we do so, and what your rights are. We therefore invite you to read this Statement, which will provide you with further information about the processing of your personal data.

Categories of Personal Data – Controller

Area Activity Types of Personal Data
Legal Affairs Legal disputes data such as title, first name, surname, address, telephone number, email address, business partner data, billing data, delivery data, amount of claim, and similar.
Correspondence Management System Correspondence general personal data such as title, first name, surname, date of birth, address, email address, telephone number, business partner data and contact persons.

Purposes of Data Processing – Controller

TatraLab s. r. o. will process your personal data for the following purposes:

Activity Purpose Legal Basis
Legal disputes Establishment, exercise or defence of legal claims (legal affairs) - Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
Correspondence Sending and receiving postal and electronic documentation - Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

Where we process your personal data on the legal basis of compliance with a legal obligation, the relevant statutory instruments may include the following:

Name of Legal Instrument
EU Regulation No. 2016/679 – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
Act No. 160/2015 Coll. – Code of Civil Procedure
Act No. 563/2009 Coll. – Act on Tax Administration (Tax Code) and on amendment of certain acts
Act No. 71/1967 Coll. – Act on Administrative Proceedings (Administrative Procedure Code)
Act No. 301/2005 Coll. – Code of Criminal Procedure
Act No. 513/1991 Coll. – Commercial Code
Act No. 162/2015 Coll. – Administrative Court Procedure Code
Act No. 161/2015 Coll. – Non-Contentious Civil Procedure Code
Act No. 483/2001 Coll. – Act on Banks and on amendment of certain acts
Act No. 297/2008 Coll. – Act on the Prevention of Legalisation of Proceeds of Criminal Activity and Terrorist Financing and on amendment of certain acts
Act No. 423/2015 Coll. – Act on Statutory Audit and on amendment of Act No. 431/2002 Coll. on Accounting, as amended
Act No. 431/2002 Coll. – Act on Accounting
Act No. 18/2018 Coll. – Act on Personal Data Protection and on amendment of certain acts
Act No. 595/2003 Coll. – Act on Income Tax
Act No. 233/1995 Coll. – Act of the National Council of the Slovak Republic on Judicial Enforcement Officers and Enforcement Activity (Enforcement Code) and on amendment of further acts
Act No. 222/2004 Coll. – Act on Value Added Tax

Parties Who May Have Access to Your Data

TatraLab s. r. o., acting as controller, may share your personal data with third parties in the following cases:

Activity Purpose Recipients
Legal disputes Establishment, exercise or defence of legal claims (legal affairs) - Law firm
- Slovak Police Force
- Courts of the Slovak Republic
- Office of the Prosecutor General of the Slovak Republic
- Websupport s. r. o.
Correspondence Sending and receiving postal and electronic documentation - Tax Authority
- Pension Insurance Company
- Enforcement Officer's Office
- Social Insurance Agency
- Health Insurance Company
- Slovenská pošta (Slovak Post)
- Statistical Office
- Other state administration bodies
- Websupport s. r. o.

In such cases, those third parties may process your personal data only for the stated purposes and solely in accordance with our instructions or applicable legislation. Our employees may also have access to your personal data. In such cases, access shall be granted only where necessary for the stated purposes and only to employees bound by a duty of confidentiality.

Location of Your Personal Data

Your personal data will be accessed by authorised employees of TatraLab s. r. o. in the Slovak Republic, within the European Union and the European Economic Area. No processing of personal data outside the EU takes place.

Retention of Personal Data – Controller

We retain your personal data only for a limited period of time and will erase it when it is no longer necessary for the processing purposes set out in this Statement.

Activity Retention Period
Legal disputes For the duration of the litigation or out-of-court settlement, but no longer than until the extinction of the relevant claim by prescription or preclusion.
Correspondence For a period of 2 years.

We may process your personal data for a longer period in the event of an ongoing legal dispute, or where you have granted us your consent.

Your Rights

Under data protection legislation, you have certain rights in relation to the processing of your personal data. The following sets out those rights and what they mean for you.



Right of Access You may request information about how we process your personal data, including information about:
  • Why we process your personal data
  • What categories of personal data we process
  • With whom we share your personal data
  • How long we retain your personal data, or the criteria used to determine the retention period
  • What rights you have
  • Where we obtained your personal data (if not directly from you)
  • Whether the processing involves automated decision-making (profiling)
  • If your personal data has been transferred to a country outside the EEA, how we ensure the protection of your data
All of the above information is available in this Privacy Statement.
You may also request a copy of the personal data we process about you. However, additional copies may be subject to a fee.
Right to Rectification It is important that we hold accurate information about you, and we ask that you notify us if any of your personal data is incorrect — for example, if you have changed your name or moved address.
Right to Erasure Where we are processing your personal data unlawfully — for example, where we are retaining it for longer than necessary or without justification — you may request that we erase such data.
Right to Restriction From the moment you have requested rectification of your personal data, or have objected to our processing, and until we are able to investigate the matter or confirm the accuracy of your data (or amend it in accordance with your instructions), you are entitled to restricted processing. This means that we may (subject to the exception of storage) process your personal data only with your consent, where necessary in connection with legal claims, to protect the rights of another person, or where there is a significant public interest in the processing.
You may also request restriction of processing where the processing is unlawful but you do not wish us to erase the data.
Right to Object Where you believe that we do not have the right to process your personal data, you may object to our processing. In such cases, we may continue processing only where we are able to demonstrate compelling legitimate grounds which override your interests, rights and freedoms. We may, however, always process your personal data where necessary for the establishment, exercise or defence of legal claims.
Right to Data Portability You may request that personal data which you have provided to us and which we process on the basis of your consent or for the performance of a contract be provided to you in a structured, commonly used and machine-readable format. You also have the right to request that such data be transmitted directly to another controller.
Withdrawal of Consent You have the right to withdraw your consent at any time, whereupon we will cease our processing activities based on that legal ground.


We will also inform any other parties to whom we have disclosed your personal data of your request or requests.

In the event of doubt, you have the right to initiate proceedings pursuant to § 100 of the Act on Personal Data Protection before the competent supervisory authority, for example via www.dataprotection.gov.sk.

How Do I Raise a Complaint or Exercise My Rights?

If you wish to raise a complaint about how we process your personal data, including in relation to the rights set out above, you may contact our Data Protection Officer ("DPO"), and your submissions and requests will be reviewed.

Contact details for the Data Protection Officer: info@tatralab.com.

If you are dissatisfied with our response, or believe that we are processing your data unfairly or unlawfully, you may lodge a complaint with the competent supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic (ÚOOÚ). Further information about the ÚOOÚ and the complaints procedure can be found at: www.dataprotection.gov.sk.

Contact Details

If you have any further questions regarding the processing of your personal data, you may contact our Data Protection Officer (DPO) by email at info@tatralab.com.