Privacy Policy

Preamble

The protection of the privacy of natural persons is one of the foundations of human rights and freedoms, to which ASGARD home s. r. o. pays due attention, ensuring its protection and security when processing personal data.

The Controller provides you with all information on how it handles your personal data; how to contact us and other important information can be found on the website asgardhome.sk.

When processing personal data, the Controller acts in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the “Regulation”) and Act No. 18/2018 Coll. on Personal Data Protection and on Amendments to Certain Acts, as well as other applicable legislation (hereinafter the “Act”).

In connection with the processing of your personal data, the Controller has prepared for you, as a natural person whose personal data it processes (hereinafter the “data subject”), information on the protection of personal data pursuant to Articles 13 and 14 of the Regulation.

Your personal data are processed by both manual and automated means within information systems that are protected and secured in accordance with the relevant security standards and data protection legislation.

Within the Controller’s organisation, only authorised persons who have been duly and professionally trained and instructed on the permissible ways of processing personal data for individual purposes are entitled to handle personal data.

The Controller declares that it complies with the principle of data minimisation and processes only such personal data as are necessary to achieve the purpose of processing. It declares that it processes personal data solely for the specified purposes and that such personal data are not used or processed for any other undefined purposes.

When processing personal data, the Controller follows its internal policy governing personal data protection and the security of information systems. It also assesses and evaluates whether a given processing of personal data would pose a significant risk to you and thus interfere with your privacy in a disproportionate manner. On the basis of this assessment it carries out a detailed analysis, the results of which are taken into account when designing and implementing the relevant processes and procedures.

In order to secure personal data against unauthorised or accidental disclosure, it uses appropriate and adequate technical and organisational security measures. The technical measures consist in the application of technology that prevents unauthorised third-party access to personal data. For maximum protection it uses encryption of personal data, in particular of passwords used to log in to the Controller’s internal systems and of all personal data stored on the Controller’s servers. The organisational measures consist of a set of rules of conduct for our employees, which are laid down in internal regulations.

The Controller reserves the right to update this privacy information at any time in line with legislative changes. The current version will always be available on the website. In the event of a material change to the protection of personal data, namely in the manner in which personal data are processed, the Controller will provide information by publishing a visible notice before such changes are implemented.

With this statement we assure you that the Controller treats personal data with the utmost care and respect, in compliance with the applicable legislation and using the available level of technical protection.

Identification and contact details of the controller

The controller of the personal data processed is:

Business name:

ASGARD home s. r. o.

Registered office:

Bulharská 2476/42, 917 01 Trnava

Company ID (IČO):

55 649 441

Tax ID (DIČ):

2122050216

Registered:

in the Commercial Register of the District Court Trnava, Section: Sro, Insert No.: 54736/T

E-mail:

info@asgardhome.sk

Telephone:

+421 948 391 828

(hereinafter the “Controller”)

The Controller obtains personal data from you, collects and otherwise processes them, and is responsible for the accuracy and lawfulness of such processing.

As a data subject, you may exercise the rights set out below against the Controller.

Data Protection Officer

The Controller is not obliged to designate a data protection officer within the meaning of the Regulation; however, it hereby designates a contact person who will be responsible for the data protection agenda.

The Controller’s data protection contact person will answer any questions you may have regarding the processing of your personal data.

You can reach the data protection contact person using the following contact details:

• e-mail address: info@asgardhome.sk,
• postal address: Bulharská 2476/42, 917 01 Trnava.

If you send a written request to the address of the Controller’s registered office, please mark the envelope “GDPR – zodpovedná osoba” (GDPR – data protection officer).

Principles of personal data processing

The Controller is obliged to process personal data in accordance with the data processing principles laid down in the Regulation, which are:

1. Lawfulness, fairness and transparency Art. 5(1)(a) of the Regulation

   Processing of personal data is lawful only if at least one of the following conditions is met and personal data are processed only to a specified extent:

   1. the data subject has given consent to the processing of personal data for one or more purposes,
   2. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract,
   3. processing is necessary for compliance with a legal obligation to which the controller is subject,
   4. processing is necessary in order to protect the vital interests of the data subjects or of another natural person,
   5. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller,
   6. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subjects which require protection of personal data, in particular where the data subject is a child.

2. Purpose limitation Art. 5(1)(b) of the Regulation

   Processing is only possible for a specific purpose. Personal data may be collected for specified, explicit and legitimate purposes and must not be further processed in a manner that is incompatible with those purposes. Further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall, in accordance with Article 89(1) of the Regulation, not be considered to be incompatible with the initial purposes.

3. Data minimisation Art. 5(1)(c) of the Regulation

   The processing of personal data by the controller is adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

4. Accuracy Art. 5(1)(d) of the Regulation

   Personal data must be accurate and, where necessary, kept up to date. Every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.

5. Storage limitation Art. 5(1)(e) of the Regulation

   Personal data are kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. An exception applies to personal data that may be stored for longer periods insofar as they will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the Regulation, subject to the implementation of appropriate technical and organisational measures to safeguard the rights and freedoms of data subjects.

6. Integrity and confidentiality Art. 5(1)(f) of the Regulation

   Personal data are processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

7. Accountability Art. 5(2) of the Regulation

   The controller is responsible for compliance and must be able to demonstrate such compliance.

Exercise of data subjects’ rights

Rights of data subjects

As a data subject, you have the following rights:

Right of access Art. 15 of the Regulation

You have the right to obtain information from the Controller as to whether we process your personal data. If we process your personal data, you have the right to access those personal data, namely:

• the purpose of processing,
• the categories of personal data,
• the recipients of personal data,
• the period of processing of personal data,
• and information on the source from which we obtained your personal data.

You also have the right to be provided with a copy of these personal data; however, you must expressly request this in your application. If you request further copies, we are entitled to charge a reasonable fee for issuing the additional copies. The rights of third parties, including other persons who have provided personal data to the Controller, may not be limited thereby, and the Controller cannot disclose other persons’ personal data to you in this way.

Right to rectification or completion Art. 16 of the Regulation

You have the right, upon request, to have your inaccurate personal data rectified or your incomplete personal data that we hold about you completed. By exercising this right correctly, you help us keep your personal data accurate and up to date.

Right to erasure (right “to be forgotten”) Art. 17 of the Regulation

You have the right, upon request, to ask for the erasure, without undue delay, of your own personal data where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
• the data subject withdraws the consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) of the Regulation, and there is no other legal ground for the processing;
• the data subject objects to the processing pursuant to Article 21(1) of the Regulation (i.e. objection to a legitimate or public interest pursued by the Controller) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2) of the Regulation (i.e. direct marketing);
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation under Union or Member State law to which the Controller is subject;
• the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the Regulation (i.e. a child’s consent).

The Controller is not obliged to erase your personal data in the following cases:

• for exercising the right of freedom of expression and information;
• for compliance with a legal obligation which requires processing by Union or Member State law to which the Controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;
• for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) as well as Article 9(3) of the Regulation;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Article 89(1) of the Regulation, in so far as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
• for the establishment, exercise or defence of legal claims.

Right to restriction of processing Art. 18 of the Regulation

You have the right, upon request, to have your personal data blocked (i.e. to restrict the processing of your personal data to mere storage; we may not carry out any other operations with them while they are blocked), but only in the following cases:

• restriction of the processing of your personal data while their accuracy is being verified;
• if your personal data are processed unlawfully and you request the restriction of their processing (storage only) instead of erasure;
• you need your personal data for the establishment, exercise or defence of legal claims;
• you have objected to the processing pursuant to Article 21(1) of the Regulation (i.e. legitimate or public interest), pending the verification of whether the legitimate grounds of the Controller override your legitimate grounds.

Where the processing of personal data has been restricted, the Controller may, apart from storage, only process them:

• for the establishment, exercise or defence of legal claims,
• for the protection of the rights of another natural or legal person,
• for reasons of important public interest of the Union or of a Member State,
• only with the consent of the data subject.

Should a situation arise leading to the lifting of the restriction of processing, the Controller will inform the data subject in advance.

Right to data portability Art. 20 of the Regulation

You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format. You have the right to ask us to transmit your personal data from the Controller to another controller named in your request, provided that this is technically feasible.

The right to data portability applies where:

• the processing is based on consent or on a contract,
• the processing is carried out by automated means (i.e. electronically).

Right to object Art. 21 of the Regulation

You have the right to object at any time to the processing of your personal data where the legal basis for the processing is a legitimate interest (Article 6(1)(f) of the Regulation), by sending a written request electronically to the e-mail address info@asgardhome.sk, by post, or by delivering a written request in person at the Controller’s registered office.

Upon receipt of your objection we will destroy your personal data, except in the following situations:

• we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or
• we demonstrate that we need your personal data for the establishment, exercise or defence of legal claims;
• if we also use your personal data for other purposes of which we have informed you separately, subject to statutory exceptions, against which you have raised your objection.

Your objection does not affect the processing of your personal data carried out before your objection was received.

Automated individual decision-making, including profiling Art. 22 of the Regulation

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

The above does not apply if the decision:

• is necessary for entering into, or performance of, a contract between the data subject and the Controller,
• is authorised by Union or Member State law to which the Controller is subject and which also lays down suitable measures to safeguard the data subject’s rights and freedoms and legitimate interests, or
• is based on the data subject’s explicit consent.

Right to withdraw consent Art. 7 of the Regulation

If the processing of your personal data is based on your consent, you have the right to withdraw that consent at any time. Consent may be withdrawn under the same conditions under which it was given. The data subject may also withdraw consent in the following ways:

• by e-mail to info@asgardhome.sk,
• by sending a written request to the address of the Controller’s registered office with the envelope marked “GDPR – odvolanie súhlasu” (GDPR – withdrawal of consent).

The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint with a supervisory authority Art. 77 of the Regulation

If you believe that your rights in relation to personal data have been infringed or that your data have been processed in breach of the law, you have the right to lodge a complaint with the supervisory authority, which is:

Exercising your rights Art. 12 of the Regulation

The Controller will provide information on the processing of personal data only on the basis of a request by the data subject exercising their rights, provided that it is demonstrably able to identify the data subject. Without successful verification of your identity, the Controller is not obliged to provide any information on the processing of personal data. In this way the Controller prevents unauthorised access to your personal data and the infringement of your rights by an unauthorised person.

You may exercise your rights in relation to personal data in the following ways:

• by e-mail to info@asgardhome.sk,
• in person at the Controller’s registered office (Bulharská 2476/42, 917 01 Trnava),
• by post to the address of the Controller’s registered office.

The request must contain all the information and attachments necessary to handle your request and to assess your claims regarding the processing of personal data. If your request is incomplete, we will contact you to complete it.

The Controller has one month from the date of receipt of your request to handle it. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests. The Controller will inform the applicant of any such extension within one month of receipt of the request, together with the reasons for the delay. In such a case the applicant will be informed of the extension in the form they chose for the delivery of the response to their request.

Information obligations

The Controller fulfils its information obligation under Articles 13 and 14 of the Regulation towards the individual categories of data subjects through the following documents:

• Information notice – clients (real estate activities)Information on the processing of personal data pursuant to Art. 13 of the Regulation for clients and other data subjects in connection with real estate activities.
• Website terms of use – “COOKIES”Which cookies this website uses and for what purpose.

Personal data you provide through the contact or enquiry form and when subscribing to our newsletter on this website are processed by the Controller in accordance with the principles set out above and with the information on the processing of personal data for real estate activities. The use of cookies is governed by the website terms of use “COOKIES”.