Virtuálna Adresa

Information on the Processing of Personal Data

 
1. Identification Details of the Data Controller and the Data Protection Officer

The data controller is Virtuálna-adresa.sk, s. r. o., Obchodná 39,Bratislava - mestská časť Staré Mesto 811 06, IČO: 54107555, Zapísaná v Obchodnom registri Okresného súdu Bratislava I, Oddiel:  Sro , Vložka číslo:  155597/B, IČO: 54107555 (hereinafter referred to as the “Provider”) who processes the personal data under the conditions specified below.

2. Purposes of the Processing of Personal Data

a.    Provision of Services via the Website, Supply of Services, Complaint Resolution.

The Provider processes:

I. the Customer's following personal data for the purposes of the purchase of services via the website and for the supply of the services: name, surname, telephone number, e-mail address, correspondence address, date of birth, place of birth, details of the purchased services and details connected to the payment for the services (bank account number, amount paid, date when the payment was credited to the Provider’s account).
II. for the purposes of complaint resolution: details about the service complained about and details given by the customer when submitting his complaint, besides the data specified in the above point (I). 

The lawful basis for the processing of personal data is

I. in the case of the purchase of services via the website and the supply of the services to the Customer: Article 6 Section 1 Letter b) of the Regulation on the Protection of Natural Persons with regard to the Processing of Personal Data and on the Free Movement of Such Data, and Repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”).
II. in the case of complaint resolution: Article 6 Section 1 Letter c) of the GDPR.

The processing of the personal data by the Provider is

I. necessary for the performance of the contract on the provision of the services in the case of the purchase of services via the website and the supply of the service to the customers, and
II. for the purposes of the fulfilment of the Provider’s legal obligation in the case of complaint resolution.

The recipients of the personal data are:

SmartSelling a.s., Netroufalky 797/5, 625 00 Brno, Czech Republic, reg.no.: 29210372 as the data processor, service partners, suppliers, insurance agencies, external legal representatives, other bodies in consumer procedures, shipping companies with regard to complaint resolution and insured events as data controllers or processors, financial administration bodies, tax advisers and auditors as data controllers or processors, if it is necessary for the fulfilment of the Provider's legal obligations.

The personal data are processed during the period of the performance of the contract on the provision of services.

b.    Sale of Services Beyond the Offers on the Website

The Provider processes the customer’s following personal data for the purposes of the sale of services beyond the offers on the website: name, surname, residence, correspondence address, e-mail address, telephone number, date of birth, place of birth, details of the purchase order.

The lawful basis for the processing of the personal data is Article 6 Section 1 Letter b) of the GDPR. The processing of personal data by the Provider is necessary based on the customer’s request for the purchase of services that are not included in the offers on the website. The personal data are processed during the performance of the contract on the provision of services.

c.    Non-binding Purchase Orders

The Provider processes the following personal data of potential customers for the purposes of non-binding purchase orders: name, surname, telephone number, e-mail address, date of birth, place of birth, details of the non-binding purchase order.
 
The lawful basis for the processing of the personal data is Article 6 Section 1 Letter b) of the GDPR. The processing of personal data by the Provider is necessary based on the request of the potential customer for a non-binding purchase order.

The recipients of the personal data are:
SmartSelling a.s., Netroufalky 797/5, 625 00 Brno, Czech Republic, reg.no.: 29210372 as the data processor.
The personal data are processed during the period starting from the submission of the request for a non-binding purchase order until the conclusion of a contract or cancellation of the non-binding purchase order of the goods.

d.   Provision of Customer Support by Telephone and E-mail

The Provider processes the following personal data of the customers for the purposes of providing customer support by telephone or e-mail: name, surname, telephone number, e-mail address, address, purchase orders log, recordings of calls from the call centre in the case of support by telephone.
 
The lawful basis for the processing of the personal data is Article 6 Section 1 Letter b) of the GDPR and, for recordings of telephone calls, Article 6 Section 1 Letter a) of the GDPR. The processing of the personal data by the Provider is necessary for the provision of customer support, while, in the case of audio recordings, the consent and, consequently, the processing of the personal data via the audio record is voluntary.

The recipients of the personal data are:
Mário Kovaľ with his registered office at Vysoká 12,81106 Bratislava, Slovakia, registration number 14354322, registered at the District Court of Bratislava under number 105-25770 in the Trade Register in the case of customer support by telephone or e-mail.
The personal data are processed during the validity period of the contract.

e.    Customer Complaint Resolution

The Provider processes the following personal data of the customers for the purposes of resolving customer complaints: name, surname, details stated in the complaint and, depending on the way in which the customer has submitted the complaint, the customer’s address, telephone number or e-mail address.

The lawful basis for the processing of the personal data is Article 6 Section 1 Letter b) of the GDPR. The processing of personal data by the Provider is necessary for the resolution of the customer’s complaint.

The personal data are processed until the resolution of the customer’s complaint.

f.    Competitions on Facebook

The data processor processes the following personal data for the purposes of carrying out competitions via Facebook: data stated in the participant’s profile and, in the case of the winner, the winner’s name, surname, telephone number, address, and photograph with the prize.

The lawful basis for the processing of the personal data is Article 6 Section 1 Letter b) of the GDPR. The processing of personal data by the Provider is necessary for the purposes of carrying out competitions in accordance with their conditions.

The recipient of the winner’s personal data, including his photograph which may be labelled by his name and surname, is Facebook Ireland Ltd. with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as the data controller, while this company will process the personal data in accordance with its Data Policy (https://www.facebook.com/policy.php).

The personal data are processed during the period necessary for handing over the prize.

g.    Provision of Support via Facebook

If the data subject decides to request for the provision of customer support via Facebook, the data processor will process the personal data stated in the Facebook profile of the data subject, as well as the data that the data subject provides in the course of their communication.

The purpose of the processing of personal data is the provision of customer support on the customer’s request, and the lawful basis for the processing of the personal data is Article 6 Section 1 Letter b) of the GDPR. The provision of personal data and their processing by the Provider is necessary for the provision of customer support on the customer’s request.

The recipient of the personal data is Facebook Ireland Ltd. with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland as the data controller, while this company will process the personal data in accordance with its Data Policy (https://www.facebook.com/policy.php).

The personal data are processed for a period necessary for the provision of customer support requested by the customers.

h.    Enforcement of the Provider's Claims

The Provider processes the following data for the purposes of the enforcement of the Provider’s claims: data stated in the agreements with the customers and suppliers, data stated in complaints, data necessary for bringing an action by the data processor, data stated in the legal action against the data processor, data stated in the theft records, data stated in the account books, and other data necessary for the enforcement of the claims or defence of the interests of the Provider.

The purpose of the processing of the personal data is the data controller’s legitimate interest, and the lawful basis for the processing is Article 6 Section 1 Letter f) of the GDPR. The processing of personal data by the Provider is necessary for the purposes of the Provider’s legitimate interests. The Provider’s legitimate interest is the protection of his assets as well as the protection against any unjustified enforcement of claims against him.

The recipients of the personal data are:

courts, public administration bodies, legal representatives, tax advisers and other specialist advisers as data controllers.

The personal data are processed during the period of the duration of the court proceedings and during the limitation period during which the Provider may enforce his own claims.

i.    Fulfilment of the Provider’s legal obligations

The Provider processes the personal data specified in points a) to m) for the purposes of the fulfilment of his legal obligations.

The lawful basis of the processing is Article 6 Section 1 Letter c) of the GDPR (e.g. the Act on Accounting, the Act on Value Added Tax, the Act on Income Tax, the Act on Consumer Protection, the Act on Archives and Registries). The processing of personal data by the Provider is necessary for the purposes of the fulfilment of the Provider’s legal obligations.

The recipients of the personal data are:

tax advisers, auditors, courts, and public administration bodies as data controllers.

The personal data are processed during the period required by the applicable legislation.
 

3.    The Rights of the Data Subject

The data subject has the right to initiate proceedings at the Office for Personal Data Protection of the Slovak Republic if he suspects that his rights established by the GDPR or by applicable laws are directly affected.

The data subject has the following rights against the data controller:

I. to demand access to his personal data,
II. to have his personal data corrected,
III. to have his personal data deleted,
IV. to limit the processing of his personal data,
V. to have his personal data transferred to another data controller,
VI. to object against the processing of his personal data.

The data subject may enforce these rights by contacting the Provider:

a)    in writing, by sending a letter to the registered address of the company
b)    electronically, by sending an e-mail to the e-mail address specified on the website
c)    by telephone at the telephone number specified on the website.
 
Relevant Legislation
The relevant law is mainly the GDPR, the applicable Personal Data Protection Act, as amended, and other applicable generally binding laws.