Privacy Policy

Information provided by the controller to the data subject when collecting personal data from the data subject
prepared in accordance with Article 12 of Regulation (EU) No 2016/679 of the European Parliament and of the Council (GDPR)

Identification and contact details of the operator:
CTR Multicenter Košice a.s.
Štúrova 27
040 01 Košice

IČ: 31718132
DIČ: 2020493574

e-mail: sales@atrium-living.sk
Contact telephone number: +421 945 506 504

Purposes of processing personal data:

The operator processes the personal data that you have provided to the operator by filling out the contact form for the purpose of performing the operator’s marketing and business activities, contacting the data subject back, statistical purposes, creating and sending the operator’s offers to the data subject

Scope of recipients of personal data:

By granting consent to the processing of personal data for the purposes specified above, you agree to the provision of your personal data to the operator’s suppliers, with the proviso that for marketing and business purposes the operator provides contact details of the data subjects to IT service providers, including cloud storage or marketing agencies. In the case of using cloud storage, these are always located within the EU. The operator provides personal data to third parties when the operator is obliged to provide personal data by a general binding legal regulation. In the event that natural persons of supplier or service organizations come into contact with personal data, they are bound by confidentiality in accordance with Section 79 of Act No. 18/2018 Coll. on the Protection of Personal Data

Third countries to which personal data are expected to be transferred:

The operator does not carry out or intends to transfer personal data to a third country or international organization.

Legal basis for the processing of personal data:

Consent of the data subject to the processing of personal data pursuant to Article 6(1)(a) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

The Controller is entitled to process your contact details for marketing and commercial purposes on the basis of your consent. The provision of such consent is voluntary. This consent shall remain valid until it is withdrawn. In the absence of consent, processing shall only take place where the Controller processes the contact details of its customers on the basis of its legitimate interests for the purposes of direct marketing. In such cases, you have the right to object to such processing (further information on this right is set out below). Your consent to the provision of your email address for the purpose of receiving commercial communications shall remain valid until it is withdrawn.

Withdrawal of consent to the processing of personal data

You are entitled to withdraw the consent granted at any time by using the contact form, where you write in the “Your message” field that you withdraw the consent granted to the processing of personal data. The withdrawal of your consent to the processing of personal data will not affect the lawfulness of the processing of personal data based on the consent granted before its withdrawal.

Information on the processing of personal data

The personal data provided is a requirement necessary for the conclusion of the contract and their provision is voluntary, and you are not obliged to provide the personal data in question. If this personal data is not provided, there will be no consequences.

Automated decision-making

We hereby inform you that the personal data you provide will not be used for decision-making based on automated processing or profiling.

Information on the rights of the data subject:

– Right to access personal data
The data subject has the right to obtain from the controller confirmation as to whether personal data concerning him or her are being processed. If the controller processes such personal data, the data subject has the right to access these personal data and the information referred to in the paragraphs above.

– Right to rectification of personal data
The data subject has the right to have the controller rectify inaccurate personal data concerning him or her without undue delay. Taking into account the purpose of the processing of personal data, the data subject has the right to have incomplete personal data completed.

– Right to erasure of personal data
The data subject has the right to have the controller erase personal data concerning him or her without undue delay. The controller is obliged to erase personal data without undue delay if the data subject has exercised the right to erasure, if:
a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed
b) the data subject withdraws consent on the basis of which the personal data are processed and there is no other legal basis for the processing of the personal data
c) the data subject objects to the processing of the personal data and there are no overriding legitimate grounds for the processing of the personal data
d) the personal data are processed unlawfully

Right to processing of personal data

The data subject shall have the right to obtain from the controller restriction of processing of personal data where:
1. the data subject objects to the accuracy of the personal data, for a period enabling the controller to verify the accuracy of the personal data,
2. the processing of personal data is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use,
3. the controller no longer needs the personal data for the purposes of processing the personal data, but the data subject needs them for the exercise of his/her rights, or
4. the data subject objects to the processing of personal data, until the end of whether the legitimate reasons on the part of the controller outweigh the legitimate reasons of the data subject.

Right to data portability

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used and machine-readable format and shall have the right to transmit those personal data to another controller, where technically feasible.

Right to object to the processing of personal data

The data subject has the right to object to the processing of his or her personal data. In the case of processing of personal data for marketing purposes, the controller is obliged to stop processing the personal data of the data subject.

Right to lodge a complaint with a supervisory authority

The exercise of the above rights does not affect your right to lodge a complaint with a supervisory authority. You can exercise this right in particular if you believe that the controller is processing your personal data unlawfully or in breach of generally binding legal regulations. You can lodge a complaint against the processing of personal data by the controller with the Personal Data Protection Office, which is located at Hraničná ulica 12, 820 07 Bratislava.

Right to automated individual decision-making, including profiling

The data subject shall have the right not to be subject to a decision based solely on automated processing of personal data, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

The controller shall be obliged to notify the recipient of the rectification of personal data, erasure of personal data or restriction of processing of personal data unless this proves impossible or does not involve disproportionate effort. The controller shall inform the data subject of the recipients if the data subject so requests.

In the event of a personal data breach that is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall notify the data subject of the personal data breach without undue delay.