Privacy Policy

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46 / EC (General Data Protection Regulation) (Nariadenie the Regulation ’or GDP GDPR’) provides for an obligation on the controller to provide the data subject with all the information referred to in Articles 13 and 14 and all , in a transparent, comprehensible and easily accessible form, worded clearly and simply, especially in the case of information specifically for the child. If the person concerned so requests, the information may also be provided orally, provided that the person concerned has proved his or her identity.

As the operation of the www.pornann.com website also involves the processing of personal data, in accordance with applicable law Of the Slovak Republic and with the legislation of the European Union, the controller fulfills its information obligation and through this document informs the data subject about the conditions of personal data processing.

1. Basic concepts

Operator

Website operator www.pornann.com (the "Website").

The controller proceeds with the processing of personal data in accordance with the Regulation and Act no. 18/2018 Coll. on the protection of personal data and on the amendment of certain regulations (hereinafter referred to as the “Act”).
Given the scope and subject matter of its activities, the operator is not obliged to appoint a responsible person in accordance with Section 44 of the Act. If you, as the person concerned, have any questions regarding the processing of your personal data, please write to the operator at the following e-mail address: info@pornann.com.

Affected person

The data subject is any identified or identifiable natural person whom the operator allegedly processes. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier:

  • First name, last name, date of birth,
  • Identification number - birth number, ID card number, location data (address),
  • Genetic data related to inherited or acquired genetic traits of a natural person
  • data relating to the state of health of the data subject which provide information on the past, current or future physical or mental health of the data subject,
  • data specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person,
  • Online Identifier - Individuals can be assigned online identifiers that provide their devices, applications, tools, and protocols (IP address, cookies, or other identifiers).

For the purposes of this document, the data subject shall be a natural person - a visitor to the operator's website, or another natural person who has provided his personal data to the operator.

Personal information

Personal data is any information relating to an identified or identifiable natural person.

Processing of personal data

Personal data processing is the operation or set of operations involving personal data or personal data files, such as the acquisition, recording, organization, structuring, storage, processing or alteration, search, browsing, exploitation, transmission, dissemination or otherwise, regrouping or combining, limiting, erasing or disposing of it, whether by automated or non-automated means.

Legal basis

The controller is only entitled to process personal data if one of the legal bases established by the GDPR allows it. The controller shall process personal data on one or more of the following legal bases:

  • the data subject has consented to the processing of his or her personal data for one or more specific purposes,
  • Processing is necessary for the performance of a contract to which the data subject is a party.
  • Processing is necessary to fulfill the legal obligation of the controller,
  • Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority conferred on the controller.
  • Processing is necessary for the purposes of legitimate interests pursued by the controller or a third party.

Retention period

In general, the controller shall store the personal data of the persons concerned only:

  • for the period necessary for the purpose in question,
  • to the extent reasonably necessary to comply with any applicable law or as appropriate in connection with the relevant limitation provisions.

2. Personal data and the purpose of their processing

Processing of personal data for contact form purposes:

  1. Purposes of processing personal data:  
      - send any questions or suggestions.
  2. Scope of personal data processed:
      - name, email address.
  3. Legal basis for the processing of personal data:  
    Article 6 1 letter a) GDPR - the data subject has consented to the processing of his or her personal data for one or more specific purposes.
    The data subject has the right to withdraw his / her consent to the processing of personal data for the purpose of filling in the contact form at any time, in writing to the address of the operator's registered office or to the e-mail address info@pornann.com. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal.
  4. Retention period:
    - lasts for 1 year.
  5. Recipients of personal data:
      - the operator provides personal data to a public authority that processes personal data on the basis of a special regulation or international agreement by which the Slovak Republic is bound.

3. Cookies

We process cookies on a legal basis under Article 6 para. 1 letter a) GDPR - the data subject has consented to the processing of his or her personal data for one or more specific purposes.
The data subject has the right to withdraw his / her consent to the processing of personal data via cookies at any time by clicking on the "Cookie settings" link at the bottom of the website. Withdrawal of consent shall not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal.

The operator's website uses cookies to ensure the necessary functionality, as well as to make the operator's website more attractive, to remember user settings and to collect statistical information about users.

Google Analytics

The operator also uses Google Analytics in connection with cookies, through which it analyzes user behavior in order to optimize the functionality of the website. The operator uses Google Analytics with the "IP anonymization" function activated.

For more information on all cookies used by the operator, see the Cookie Processing Information section, which is an integral part of this document.

4. Rights of the data subject

The person concerned has the right to request from the operator:

upon written request

  • Confirm whether or not personal information about you is being processed.
  • in a generally comprehensible form, information on the processing of personal data in the information system to the extent identified by the controller and the intermediary (if any); the purpose of the processing of personal data; a list or scope of the personal data processed; an indication of the voluntary nature or obligation to provide the requested personal data, the period of validity of the consent or the notification which the law imposes on the obligation to provide personal data; third parties if personal data are to be provided to them; the circle of recipients if personal data are to be made available to them; the form of disclosure of personal data if personal data are to be disclosed; third countries if personal data are to be transferred to those countries,
  • Accurate information in a generally comprehensible form on the source from which the controller obtained personal data for processing.
  • A list of personal data that is processed in a generally comprehensible form
  • correction or destruction of its incorrect, incomplete or out-of-date personal data which is the subject of processing,
  • Disposal of personal data whose processing has ended; if official documents containing personal data are processed, it may request their return,
  • Disposal of personal data that is processed if the law is violated
  • Blocking of personal data due to withdrawal of consent before its expiry date, if the controller processes personal data on the basis of consent.

The person concerned may address the request or information on the leakage of personal data or other serious facts concerning the processing of personal data by the controller to the controller at the following e-mail address: info@pornann.com.

Right of access to personal information

The data subject has the right to have the controller confirm whether he or she processes personal data concerning him or her. If the controller processes personal data, the data subject shall have the right to obtain access to them and other information on the purpose of their processing, the category of personal data processed, to whom they were or are to be provided, in particular the recipient in a third country or an international organization. possible; if personal data are transferred to a third country or international organization, the data subject has the right to be informed of the reasonable guarantees required by law, the retention period of personal data; if this is not possible, information on the criteria for its determination, the right to request the correction of personal data, their deletion or restriction of their processing, or the right to object to the processing of personal data, the right to initiate proceedings on personal data protection, sources of personal data if did not obtain personal data from you, the existence of automated individual decision-making, including profiling. Profiling is any form of automated processing of personal data which consists in the use of such personal data to evaluate certain personal aspects relating to a person, in particular performance, job conditions, health, personal preferences, interests, reliability, behavior, location or movement. In such cases, the controller shall provide the data subject with particular information on the procedure used as well as on the significance and expected consequences of such processing of personal data for the data subject. The operator is obliged to provide personal data that it processes. The controller may charge a reasonable fee for the repeated provision of personal data, corresponding to the administrative costs. The operator is obliged to provide you with personal data in the manner required by you. The right to obtain personal data must not adversely affect the rights of other natural persons.

Right to correct personal information

The data subject has the right to have the controller correct incorrect personal data concerning him without undue delay. Depending on the purpose of the processing of personal data, he has the right to supplement incomplete personal data.

The right to object to the processing of personal data

The data subject has the right to object to the processing of his or her personal data on grounds relating to a specific situation if the controller carries out profiling or processes personal data on the following legal grounds:

  • the processing of personal data is necessary for the performance of a task carried out in the public interest or in the exercise of official authority conferred on the controller,
  • The processing of personal data is necessary for the legitimate interests of the controller or a third party.

The controller may not further process the personal data of the data subject unless he or she demonstrates the necessary legitimate interests for the processing of personal data which outweigh his or her rights or interests or the grounds for exercising a legal claim. The data subject has the right to object to the processing of personal data concerning him / her for the purposes of direct marketing, including profiling, to the extent that they relate to direct marketing. If the data subject objects to the processing of personal data for direct marketing purposes, the controller may not further process personal data for direct marketing purposes. The data subject has the right to object to the processing of personal data concerning him or her on grounds relating to his or her specific situation, if his or her personal data are processed for scientific, historical research or statistical purposes, except where the processing of personal data is necessary. for reasons of public interest.

Right to erase personal information (right to "forget")
The data subject has the right to have the controller delete personal data concerning him without undue delay. If you request the controller to delete personal data, the controller is obliged to delete them in the following cases:

  • Personal data is no longer needed for the purpose for which it was obtained or otherwise processed.
  • the person concerned withdraws the consent under which the controller processes his personal data and there is no other legal basis for the processing of personal data,
  • concerned objects to the processing of personal data and does not outweigh any legitimate reasons for the processing of personal data or will object to the processing of personal data for direct marketing purposes, including profiling to the extent that it relates to direct marketing,
  • Personal information is being processed illegally.
  • The reason for the deletion is compliance with a legal obligation,
  • personal data were obtained in connection with the offer of information society services according to § 15 par. 1. The law.

If the controller has disclosed the personal data of the data subject and is obliged to delete them in accordance with the above conditions, he is also obliged to inform other controllers processing personal data, taking into account the available technology and costs, so that those controllers delete the personal data references and their copies. or depreciation.

The operator is not obliged to delete personal data if necessary

  • to exercise the right to freedom of expression or the right to information,
  • to fulfill an obligation under a law or an international treaty or to perform a task carried out in the public interest or in the exercise of official authority vested in the operator,
  • for reasons of public interest in the field of public health,
  • for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes, where erasure is likely to make it impossible or seriously difficult to achieve the objectives of such processing, or
  • to assert a legal claim.

Right to restrict the processing of personal data

The data subject has the right to have the controller restrict the processing of his or her personal data if

  • disputes the accuracy of your personal information; the controller limits the processing of his personal data to the period of verification of their accuracy,
  • The processing of his or her personal data is illegal and, instead of being erased, the data subject will request that their use be restricted.
  • the controller no longer needs personal data for the purpose of processing personal data, but the data subject needs them in order to exercise a legal claim, or
  • You object to the processing of personal data;
  • The controller shall restrict the processing of personal data until it is verified that the legitimate reasons on the part of the controller outweigh the legitimate reasons of the data subject.

If the processing of personal data is restricted, in addition to storage, the controller may only process personal data with the consent of the data subject or for the purpose of asserting a legal claim, for the protection of persons or for reasons of public interest. The controller is obliged to inform the data subject before the restriction on the processing of personal data is lifted.

Reporting obligation to correct, delete or restrict the processing of personal data

The controller is obliged to notify the recipient (anyone to whom the personal data of the data subject have been provided) of the correction of personal data, erasure of personal data or restrictions on the processing of personal data, unless this proves impossible or requires a disproportionate effort. If the person concerned so requests, the operator shall inform him of those recipients.

Right to transfer personal data

Personal data concerning the data subject, which he / she has provided to the controller, he / she has the right to obtain in a structured, commonly used and machine-readable format. At the same time, he has the right to transfer this personal data to another controller, if technically possible and if the processing of your personal data is carried out by automated means (i.e. electronically), while the personal data are processed either

  • By consent.
  • if processing is performed by automated means,
  • or are necessary for the performance of a contract to which the person concerned is a party or for the performance of a pre-contractual measure upon request.

This right must not adversely affect the rights of others. The exercise of the right of portability does not affect the right to delete personal data. The right of portability shall not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

The right to initiate privacy proceedings

In the event that the data subject would be directly affected by his / her rights stipulated by the Personal Data Protection Act pursuant to Section 100 of the Act, he / she has the right to submit a proposal to initiate proceedings on personal data protection. The purpose of the proceedings is to determine whether the rights of natural persons have been violated in the processing of their personal data or the law has been violated and, if deficiencies are found, if necessary and expedient, to impose remedial measures or fines for violating the law. The Office shall publish a model of the proposal on its website. The request to initiate proceedings must contain evidence in support of the allegations made in the proposal and a copy of the document or other evidence proving the right of the controller (right of access to personal data, right to request correction of personal data, right to delete or restrict processing personal data, the right to the transfer of personal data), if such a right has been exercised by the data subject, or a The above rights (in addition to the right to initiate personal data protection proceedings) may be exercised by e-mail or in writing by the controller supervising the processing of personal data. The controller may also be notified of any personal data leakage or other serious facts concerning the processing of personal data by the controller.

If the data subject suspects that his or her personal data are being processed unlawfully, he or she may submit a request for personal data protection proceedings to:

Office for Personal Data Protection of the Slovak Republic
with its registered office at Hraničná 12, 820 07 Bratislava 27

or contact the office through its website http://www.dataprotection.gov.sk .

If the person concerned does not have full legal capacity, his or her rights may be exercised by a legal representative. If the person concerned is not alive, his or her rights under this law may be exercised by a close person.
The controller shall process the data subject's request pursuant to the Personal Data Protection Act free of charge, except for payment in an amount which may not exceed the amount of expediently incurred material costs associated with making copies, supplying technical media and sending information to the data subject, unless a special law provides otherwise. The operator is obliged to process the request of the person concerned in writing no later than 30 days from the date of delivery of the request. The controller shall notify the data subject and the Office for Personal Data Protection of the Slovak Republic in writing without undue delay of any restrictions on the rights of the data subject pursuant to the Personal Data Protection Act.

5. Transfer of personal data to a third country or international organization

The operator does not provide any personal data to third countries or international organizations.

6. Automated individual decision making, including profiling

As the person concerned, you have the right not to be subject to a decision which is based solely on automated processing, including profiling, and which has legal effects affecting or similarly affecting him or her.
The controller does not use automated individual decision-making or profiling when processing personal data for any of the above purposes.

7. Retention and protection of personal data

The website operator takes the protection of personal data responsibly and seriously. It treats personal data as confidential in accordance with the relevant data protection legislation and this document.

The operator processes personal data either manually or using electronic systems. The controller has taken all necessary and necessary organizational, technical and administrative measures to ensure the accuracy and timeliness of personal data, as well as to protect personal data from unauthorized or illegal processing and accidental loss, destruction or damage and to maximize the level of personal data protection. br /> This privacy statement may change over time. It shall publish any changes concerning this document on the website and inform the persons whose personal data it processes before making any changes. If required by law, seek the consent of the person concerned before making any changes to this document.