Dear clients,
We want to provide you with details about the processing of your personal data for marketing purposes in this information memorandum. By way of introduction, we would like to explain to you why we have asked you for your consent to the processing of personal data for marketing purposes.
The main purpose of this processing is to offer you the latest information about our current and new products and services as well as those of our business partners. Another goal is to provide you with time-limited offers and practical information in written or electronic form. We strive to create tailor-made offers based on segmentation and profiling and present you only with relevant product and service offers so that you are not flooded with offers of products that are already available to you or do not meet your needs.
Given that on 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, comes into effect, it is necessary for us to obtain your new consent corresponding to the new requirements.
Please read the below mentioned personal data processing information that we have prepared in the form of questions to make this information memorandum as clear and practical as possible in terms of searching for information. If you have any questions or comments about your granted consent, please contact us by phone on +43-650-612-4527 or by e-mail to privacy@bonard.com.
Who is the controller of your personal data?
The controller of personal data is the company that determines the purpose and means of processing your personal data. The controller of your personal data for marketing purposes is: StudentMarketing, s.r.o.
What personal data do we process?
For marketing purposes, we process the following categories of personal data that help us determine the offers of products and services that might be attractive to you and to address your needs.
Basic identification data – name, title.
Contact details – telephone number, e-mail address.
Information about the use of products and services – what services we provided to you in the past, information about using the Internet client zone. Based on such data, we can help you find the right products and services.
Information from the recordings of phone calls or other interactions with you, such as email, chat, SMS.
From which source does the personal data originate?
The personal data listed in the previous section is obtained directly from you. You have stated such personal data in the client contract or other documents.
Personal data may also come from publicly available sources, registers, and records, such as a commercial register. Your personal data may also come from third parties that are authorised to handle it.
For what purposes did you grant your consent?
You have granted your consent for marketing purposes which include the following activities:
product and service offers. Upon your consent, we may provide you offers in electronic form, particularly in the form of e-mail messages or messages sent to your mobile devices via a telephone number, through a web-based client zone, in writing or by making a phone call;
automated processing of personal data to tailor our business offering to your individual needs;
market research and surveys of customer satisfaction with the used products and services.
Consent granted for marketing purposes is voluntary. However, it is necessary for us to be able to send you our product and service offers as well as those of our business partners. Without such consent, we cannot provide you with individualised offers of products and services.
Why are there profiling and automated decision-making?
Our company tries to provide you with individualised and customised product and service offers. That is why we profile your personal data upon your consent. For this purpose, we use automated information systems, web applications or calculators. Consequently, we send you individualised messages and offers of our company’s products and services.
Automated evaluation (profiling) of your personal data will help us to better understand you and your needs, predict your future actions and adapt our products and services accordingly.
How long will we be processing your personal data?
You have granted your consent to the company for the term of the contractual relationship and for the next 10 years from the termination of such contractual relationship, or until you withdraw your granted consent.
Unless you are or become a client of the company, your consent will be valid for 10 years from granting it or until you withdraw it.
Upon expiry of the relevant term, your personal data will be erased, but only to the extent and for purposes which are not subject to consent under applicable law.
Who are our business partners?
In your consent, you have also agreed to receiving the product offers from and providing personal data to our selected business partners. Our business partners also comply with privacy policies and have entered into a personal data processing agreement with us.
Business partners are:
Accounting:
SAVET Consulting s.r.o., Podháj 30, 974 05 Banská Bystrica, Slovakia, 36640191
Administrator of information technologies:
AlfaPro s.r.o., Jamnického 10 841 05 Bratislava, Slovakia, 36659363
GDPR supplier:
Mgr. Juraj Lipka – SAFEDATA, Lachova 39 85103 Bratislava-Petržalka, Slovakia, 40767159
Mail delivery service:
INSPEKTA SLOVAKIA, a. s., Zelinárska 2 820 05 Bratislava, Slovakia, 31340911
Email & web hosting:
Websupport, s.r.o., Staré Grunty 12 841 04 Bratislava, Slovakia, 36421928
Who can access your personal data?
In respect of data processing for marketing purposes, other entities processing personal data may also access your data as the so-called processors whose role is to provide services to the company. For example, these processors may be external companies that administer our systems or other services ensuring the proper functioning of the company and the processing of personal data for marketing purposes. With these processors, we have concluded a personal data processing agreement requiring them to adhere to strict privacy policies.
What are your rights in the processing of personal data?
Proper processing of your personal data is important for companies operating in the Slovak Republic and their protection is a matter of course. In relation to personal data processing, you may exercise the following rights:
Information on the processing of your personal data
The information particularly includes: the identification and contact details of the controller, its representative and, where appropriate, the person responsible, the purposes of processing, the categories of personal data concerned, the recipient or categories of recipients of personal data, information on the transmission of personal data to third countries, the period of retention of personal data, authorised controllers, a list of your rights, the option to refer to the Office for Personal Data Protection, the source of the processed personal data, information on whether and how automated decision-making and profiling are carried out.
Right of access to personal data
You have the right to get a confirmation on whether or not your personal data is processed, and if so, you have the right to access the processing information, the categories of personal data concerned, the recipients or categories of recipients, the period of retention of personal data as well as the right to information about your rights, the right to file a complaint with the Office for Personal Data Protection, the right to information on the source of personal data, information on whether there are automated decision-making and profiling, information and guarantees for the transmission of personal data to a third country or an international organisation. You have the right to be provided with copies of the processed personal data.
Right to rectification
Do we process your outdated or inaccurate personal data? Did you change your home address, for example? Please let us know and we will rectify such personal data.
Right to erasure (“right to be forgotten”)
In some cases prescribed by law, we are required to erase your personal data upon your instructions. However, any such request is subject to an individual assessment because our company is also obliged to retain your personal data or has a legitimate interest in doing so.
Right to restriction of processing
If you want your personal data to be processed solely for the most necessary statutory purposes or make such data blocked.
Right to data portability
If you want us to provide your personal data to another company, we will transmit your personal data in the appropriate format to the entity designated by you provided that there are no legal or other significant obstacles to doing so.
Right to object and automated individual decision-making
If you find out or believe that we process your personal data contrary to the protection of your private and personal life or in violation of applicable law, please contact us and ask us to explain or remedy the inappropriate situation. You may also raise an objection directly to automated decision-making and profiling.
Right to file a complaint with the Office for Personal Data Protection
You may, at any time, refer your initiative or complaint regarding personal data processing to a supervisory body which is the Office for Personal Data Protection of the Slovak Republic residing at Hraničná 12, 820 07 Bratislava 27.
Where may you exercise your rights and are these rights subject to a charge?
You may exercise the individual rights in the company, namely by giving us a call on: +43-650-612-4527, sending an e-mail to: privacy@bonard.com or by sending a written request to the registered office of the company or the postal address: StudentMarketing, s.r.o., Jana Bottu 1, 97401 Banska Bystrica, Slovakia
We provide all information and comments on the rights you have free of charge.
When can you expect a reply from the company?
We will provide you with our comments and possible information on the measures taken as soon as possible, but within one month at the latest. If necessary, and given the complexity and number of requests, we can extend such period to two months. We will inform you about the extension, including the reasons.
How can you withdraw your consent to the processing of personal data?
The consent to the processing of personal data is based on the voluntariness principle. This means that you can withdraw it at any time. If you do not want to continue receiving offers of our products and services and those of our business partners, we are sorry to hear it, but we fully respect your decision.
What should your withdrawal contain?
State who is filing the withdrawal. Please state your first name and surname, home address and date of birth so that we can identify you.
State who you are filing the withdrawal with. You can address your withdrawal to all branches or, if you want to continue receiving offers from selected branches, specify only those who you want or do not want to allow to keep contacting you.
State the information that you do not want us to process regarding your personal data. If you would like to receive only selected offers, please indicate them so that we can accommodate your demands.
Place your handwritten signature.
How can I send my withdrawal?
You can send your withdrawal of the consent to the processing of personal data for marketing purposes in written form, thus enabling us to have a proper record of your withdrawal. Please do not forget to sign your withdrawal.
By a written declaration made at any branch. The current list of branches can be found here: http://www.bonard.com/contact