Preamble
At ASGARD home s. r. o., with its registered office at Bulharská 2476/42, 917 01 Trnava, Slovak Republic (hereinafter the “Controller”), we take the protection of your personal data (hereinafter “PD”) with the utmost seriousness.
This document is addressed to you as a natural person (hereinafter the “Data Subject”) whose personal data we process in connection with the provision of real estate services and the brokerage of the sale, purchase or lease of real estate, our aim being to ensure the highest level of protection of your privacy and transparency in the handling of your personal data.
As a responsible Controller, we process your PD strictly in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter the “GDPR”).
We therefore provide you, as a Data Subject, with detailed and comprehensible information which, in accordance with Articles 13 and 14 GDPR, precisely explains how, why and to what extent we process your PD, and how you can exercise your privacy rights.
1. Identity and contact details of the controller
The controller of the personal data processed is:
- Business name:
- ASGARD home s. r. o.
- Registered office:
- Bulharská 2476/42, 917 01 Trnava, Slovak Republic
- Company ID (IČO):
- 55 649 441
- Tax ID (DIČ):
- 2122050216
- Registration:
- registered in the Commercial Register of the District Court Trnava, Section: Sro, Insert No. 54736/T
- E-mail:
- info@asgardhome.sk
- Telephone:
- +421 948 391 828
2. Contact details of the Data Protection Officer
If you have any questions or requests, or need to exercise your rights regarding the processing of your PD, you may contact our Data Protection Officer at any time.
How to contact us
| Written correspondence | ASGARD home s. r. o., Bulharská 2476/42, 917 01 Trnava, Slovak Republic, marked “Do rúk Zodpovednej osoby” (for the attention of the Data Protection Officer) |
|---|
| Electronic communication (e-mail) | info@asgardhome.sk |
|---|
| In person at the registered office | ASGARD home s. r. o., Bulharská 2476/42, 917 01 Trnava, Slovak Republic |
|---|
3. Purposes of processing, legal bases for processing PD, retention periods and categories of recipients of PD
The Controller processes your personal data solely to the extent necessary to achieve a legitimate purpose, namely the proper performance of obligations arising from the brokerage of the sale, lease or purchase of real estate, as well as the protection of the rights and legitimate interests of the parties to a real estate transaction.
Where the legal basis for processing is laid down directly by law, the provision of such data becomes a statutory requirement. If such data are not provided, the Controller cannot ensure the proper performance of the obligations imposed on it by the relevant legislation.
The specific purposes of processing PD, the legal bases for processing PD, the categories of data subjects, the retention periods of PD and the categories of recipients are clearly set out in the tables that follow.
- Real estate activities
- Provision of PD at the request of a public authority
- Brokerage of transactions
- Exercise of data subjects’ rights under the GDPR
- Accounting agenda
- Management of post, the electronic mailbox and records
- Legal agenda
- Business agenda and communication
- AML records
- Social media – management of social media profiles, including communication and discussion with users
- Database of reviews on the website
1 Real estate activities
| Purpose of PD processing | The purpose of processing PD is the performance of contractual and pre-contractual relations connected with the brokerage of the sale, lease or purchase of real estate, including the preparation of visual documentation and the advertising of properties by means of their photographic depiction, as well as keeping records of reservation agreements, purchase agreements and lease agreements. |
|---|
| Legal basis | pursuant to Art. 6(1)(b) GDPR, processing is necessary for the performance of a contract to which the data subject is party (natural persons) pursuant to Art. 6(1)(f) GDPR, processing is necessary for the purposes of the legitimate interests pursued by the Controller (legal entities) The legitimate interest of the Controller is to process personal data for the purpose of brokering the sale and purchase of real estate or brokering a lease of real estate. Processing of personal data for this purpose is necessary and beneficial for both parties, and the data subject also expects such processing. |
|---|
| Category of data subjects | clients – sellers (natural persons/legal entities), buyers (natural persons/legal entities), landlords (natural persons/legal entities), tenants (natural persons/legal entities), subtenants (natural persons/legal entities) |
|---|
| Category of personal data | Natural persons: academic title, first name and surname, birth number (personal identification number), ID card number, permanent residence address (temporary residence and nationality only in the case of foreign nationals), date of birth, bank account, citizenship, telephone number and e-mail, certified signature of the seller and other information arising from the contracts and real estate activities (e.g. photographic documentation of the property, purchase price, property specification, etc.) Legal entities: company name, registered office, Company ID (IČO), Tax ID (DIČ), VAT ID (IČ DPH), account number, managing director, bank details, e-mail contact |
|---|
| Retention period | 10 years following the year to which they relate |
|---|
| Category of recipients | - courts,
- law enforcement authorities,
- enforcement officers, attorneys,
- banks and payment institutions,
- entities cooperating with the controller on a contractual basis (e.g. real estate agents, legal services, debt collection, IT support, external auditors, professional consultants and advisers bound by a statutory or contractual duty of confidentiality, etc.),
- other entities to which the controller provides personal data under applicable legislation.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
2 Provision of PD at the request of a public authority
| Purpose of PD processing | The purpose of processing PD is the provision of PD when requested by a public authority, e.g. where law enforcement authorities request camera footage – not for the controller’s own purposes but for the investigation of an incident, e.g. theft. |
|---|
| Legal basis | pursuant to Art. 6(1)(c) GDPR, processing is necessary for compliance with a legal obligation of the Controller arising from - Act No. 171/1993 Coll. on the Police Force,
- Act No. 160/2015 Coll., the Civil Dispute Procedure Code,
- Act No. 372/1990 Coll. on Misdemeanours,
- other legislation related to this purpose.
|
|---|
| Category of data subjects | natural persons whose PD are requested by public authorities |
|---|
| Category of personal data | first name, surname, academic title, address, e-mail, telephone number and other personal data necessary to comply with the request of the public authorities |
|---|
| Retention period | 3 years following the year to which they relate |
|---|
| Category of recipients | - courts,
- law enforcement authorities,
- and other entities to which the Controller provides personal data directly by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
3 Brokerage of transactions
| Purpose of PD processing | The purpose of processing PD is the brokerage of transactions with the aim of improving the quality of the services provided, e.g. installation services. |
|---|
| Legal basis | pursuant to Art. 6(1)(f) GDPR, processing is necessary for the purposes of the legitimate interests pursued by the Controller (legal entities) The legitimate interest is the continuous improvement of the quality and comprehensiveness of the real estate services provided, which also includes recommending or arranging follow-up services such as installation or removal services. We process these activities in order to streamline the completion of the transaction and to ensure maximum comfort for you when the property is handed over. |
|---|
| Category of data subjects | clients – sellers (natural persons/legal entities), buyers (natural persons/legal entities), landlords (natural persons/legal entities), tenants (natural persons/legal entities), subtenants (natural persons/legal entities) |
|---|
| Category of personal data | academic title, first name, surname, permanent residence address, telephone number, e-mail and other personal data related to the purpose of processing |
|---|
| Retention period | 1 year following the year to which they relate |
|---|
| Category of recipients | - entities that will perform the services provided,
- entities to which the controller provides personal data by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
4 Exercise of data subjects’ rights under the GDPR
| Purpose of PD processing | The purpose of processing PD is to provide information on the processing of the Data Subject’s PD on the basis of their request and to keep clear records of the rights exercised by Data Subjects. |
|---|
| Legal basis | pursuant to Art. 6(1)(c) GDPR, processing is necessary for compliance with a legal obligation of the Controller arising from the GDPR |
|---|
| Category of data subjects | natural persons exercising the rights of Data Subjects |
|---|
| Category of personal data | identification and contact details, personal data within the scope of the request and of the response to the request |
|---|
| Retention period | 5 years following the year in which the request was handled |
|---|
| Category of recipients | - Office for Personal Data Protection of the Slovak Republic,
- and other entities to which the Controller provides personal data directly by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
5 Accounting agenda
| Purpose of PD processing | The purpose of processing PD is keeping and recording accounting and business documentation with a view to proper and correct bookkeeping (i.e. issuing invoices, keeping records of invoices, etc.). |
|---|
| Legal basis | pursuant to Art. 6(1)(c) GDPR, processing is necessary for compliance with legal obligations of the Controller arising from - Act No. 431/2002 Coll. on Accounting, as amended,
- Act No. 222/2004 Coll. on Value Added Tax, as amended,
- Act No. 40/1964 Coll., the Civil Code, as amended,
- Act No. 311/2001 Coll., the Labour Code, as amended,
- Act No. 595/2003 Coll. on Income Tax, as amended,
- Act No. 582/2004 Coll. on Local Taxes and the Local Fee for Municipal Waste and Minor Construction Waste, as amended, and
- Act No. 283/2002 Coll. on Travel Allowances, as amended,
- other legislation related to this purpose.
|
|---|
| Category of data subjects | clients, employees and the statutory body of the controller, employees and statutory bodies of business partners |
|---|
| Category of personal data | first name, surname, academic title, permanent residence address, temporary residence address, telephone number, e-mail address, date of birth, type and number of identity document, signature, bank account number of a natural person and other personal data contained in accounting and business documentation |
|---|
| Retention period | 10 years following the year to which they relate 10 years after the company ceases its activities |
|---|
| Category of recipients | - the company providing accounting and tax services,
- the company providing payroll and accounting software and its IT support,
- the company providing archiving and shredding services,
- the Social Insurance Agency,
- and other entities to which the Controller provides personal data directly by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
6 Management of post, the electronic mailbox and records
| Purpose of PD processing | The purpose of processing PD is keeping records of incoming and outgoing post, whether delivered to the electronic mailbox or in paper form, and its subsequent archiving. |
|---|
| Legal basis | pursuant to Art. 6(1)(c) GDPR, processing is necessary for compliance with a legal obligation of the controller arising from: - Act No. 395/2002 Coll. on Archives and Registries and on Amendments to Certain Acts, as amended, and related legislation,
- Act No. 305/2013 Coll. on the Electronic Form of the Exercise of Powers of Public Authorities and on Amendments to Certain Acts (the e-Government Act), as amended,
- other legislation related to this purpose.
|
|---|
| Category of data subjects | - natural persons – senders and addressees of correspondence,
- other cooperating persons and other entities appearing in the correspondence
|
|---|
| Category of personal data | first name, surname, academic title, address, signature, e-mail address, telephone number, information on enforcement proceedings and other data contained in the correspondence, which also includes the electronic mailbox, or in other parts of the records |
|---|
| Retention period | ordinary correspondence – 10 years following the year in which the record was created, important correspondence – permanent archiving period |
|---|
| Category of recipients | - entities cooperating with the controller on a contractual basis (e.g. legal services, postal services, external auditors, etc.),
- and other entities to which the Controller provides personal data directly by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
7 Legal agenda
| Purpose of PD processing | The purpose of processing PD is keeping and managing the legal agenda, which includes litigation, defence in the event of a lawsuit and other matters relating to legal affairs. |
|---|
| Legal basis | pursuant to Art. 6(1)(c) GDPR, processing is necessary for compliance with legal obligations of the Controller arising from: - Act No. 160/2015 Coll., the Civil Dispute Procedure Code,
- Act No. 420/2004 Coll. on Mediation, as amended,
- Act No. 244/2002 Coll. on Arbitration Proceedings,
- Act No. 301/2005 Coll., the Criminal Procedure Code, as amended,
- Act No. 7/2005 Coll. on Bankruptcy and Restructuring and on Amendments to Certain Acts,
- Act No. 162/2015 Coll., the Administrative Court Procedure Code,
- Act No. 233/1995 Coll. on Court Enforcement Officers and Enforcement Activities (the Enforcement Code) and on Amendments to Other Acts,
- Act No. 391/2015 Coll. on Alternative Resolution of Consumer Disputes and on Amendments to Certain Acts, as amended,
- Act No. 71/1967 Coll. on Administrative Proceedings (the Administrative Procedure Code), as amended,
- Act No. 372/1990 Coll. on Misdemeanours, as amended,
- other legislation related to this purpose.
|
|---|
| Category of data subjects | natural persons involved in proceedings |
|---|
| Category of personal data | first name, surname, birth surname and academic title, birth number (personal identification number), date and place of birth, nationality, citizenship, permanent residence, temporary residence, other PD contained in documents submitted in proceedings as evidence or requested by courts or administrative authorities for the purposes of judicial or administrative proceedings (court decisions – judgments, resolutions, decisions of other authorities and institutions) |
|---|
| Retention period | 10 years after the final conclusion of the relevant proceedings |
|---|
| Category of recipients | - courts,
- law enforcement authorities,
- and other entities to which the Controller provides personal data directly by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
8 Business agenda and communication
| Purpose of PD processing | The purpose of processing PD is the preparation and implementation of the controller’s business activities, keeping records of contracts and business contacts, as well as communication with customers and, where applicable, business partners. |
|---|
| Legal basis | pursuant to Art. 6(1)(f) GDPR, processing is necessary for the purposes of the legitimate interests pursued by the Controller The legitimate interest of the Controller is to process the personal data of natural persons acting on behalf of its contractual partners (in practice mainly suppliers and customers of goods and services and their contractual partners, and external cooperating persons) in order to ensure the valid conclusion of a contract (i.e. conclusion of a contract with persons authorised to act on behalf of the company that is its contractual partner) as well as its proper and effective performance (in practice mainly communication with the relevant staff/statutory body on the side of the Controller’s contractual partner). |
|---|
| Category of data subjects | - employees and members of the statutory bodies of the Controller,
- employees and members of the statutory bodies of the business partner,
- other cooperating persons and other entities appearing in business communication
|
|---|
| Category of personal data | academic title, first name, surname, address, date of birth, birth number (personal identification number), identity document details, bank details, telephone number, e-mail address, delivery address, data from business communication as well as data from mutual contact via the relevant points of contact, data on payments received and made |
|---|
| Retention period | for the duration of the contractual relationship, max. 5 years after the end of the business relationship |
|---|
| Category of recipients | - entities cooperating with the Controller on a contractual basis (e.g. real estate agents, legal services, IT support, external auditors, etc.),
- and other entities to which the Controller provides personal data directly by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
9 AML records
| Purpose of PD processing | The purpose of processing PD is the fulfilment of obligations in the exercise of customer due diligence and in the detection of unusual business transactions. |
|---|
| Legal basis | pursuant to Art. 6(1)(c) GDPR, processing is necessary for compliance with legal obligations of the Controller arising from: - Act No. 297/2008 Coll. on the Prevention of Legalisation of Proceeds from Criminal Activity and on the Prevention of Terrorist Financing and on Amendments to Certain Acts, as amended
|
|---|
| Category of data subjects | - natural persons – clients, their employees and representatives,
- natural persons – employees and representatives of clients,
- ultimate beneficial owners of clients
|
|---|
| Category of personal data | first name, surname, date of birth, birth number (personal identification number), address of permanent or other residence, nationality, type and number of identity document |
|---|
| Retention period | 5 years from the end of the contractual relationship or from the execution of the transaction |
|---|
| Category of recipients | - entities cooperating with the Controller on a contractual basis (e.g. real estate agents, legal services, IT support, external auditors, etc.),
- and other entities to which the Controller provides personal data directly by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
10 Social media – management of social media profiles, including communication and discussion with users
| Purpose of PD processing | The purpose of processing PD is to inform about the activities of the real estate agency on social media, to communicate with users and to provide information to the wider public. |
|---|
| Legal basis | pursuant to Art. 6(1)(f) GDPR, processing is necessary for the purposes of the legitimate interests pursued by the Controller The legitimate interest is primarily the promotion of its activities. The legitimate interest consists in building a good reputation, raising awareness and creating a community. This interest is legitimate, since communication requires an online presence, which is key to reaching target groups. Data processing in this context mainly involves the analysis of interactions with posts (e.g. number of “likes”, shares, comments), demographic data aggregated by the platform (e.g. age, gender, location of followers) and reach statistics. |
|---|
| Category of data subjects | - registered logged-in users,
- registered users who are not logged in, and
- unregistered users
|
|---|
| Category of personal data | first name, surname, nickname, photographs and other categories of personal data related to providing information on social media; any expressions of a personal nature of data subjects relevant to fulfilling the purpose |
|---|
| Retention period | The data are retained: - for as long as the controller operates an official profile on the relevant social network
- until they are no longer needed to provide the services and products of the operator of the given social network; or
- until the user deletes their account; whichever occurs first. This is a matter of the specific case and depends, for example, on the nature of the data; the reason why they are collected and processed; and the relevant legal or operational retention needs. For example, if a user searches for something on Facebook, they can view the search at any time in their search history and remove it from there, but the record of the search is deleted only after 6 months. If, for example, a user sends the operator of Facebook a copy of their government-issued identity document for account verification purposes, the copy is deleted 30 days after it was sent.
Specific retention period in the case of Instagram – until they are no longer needed to provide Facebook’s services and products, or until you delete your account – whichever occurs first – https://help.instagram.com/519522125107875; the Controller retains videos and photographs for 10 years following the year to which they relate; YouTube and Google LLC – https://policies.google.com/privacy?hl=en-US, https://support.google.com/youtube/answer/10364219?hl=en – a video is removed whenever the user removes it; the Controller retains videos and photographs for 10 years following the year to which they relate. |
|---|
| Category of recipients | |
|---|
| Transfer to a third country or international organisation | Transfers may be carried out by the operator of the particular social network, e.g. Facebook, Instagram or YouTube. Transfers may be made to the USA on the basis of standard contractual clauses or an adequacy decision. Meta, the company operating the Instagram and Facebook social networks: https://forwork.meta.com/legal/mfw-subprocessor-list/; Google, the company operating the YouTube social network: https://cloud.google.com/terms/subprocessors. Transfers in the case of the network operators – Facebook, Instagram, YouTube – are made to the USA on the basis of the adequacy decision of 10 July 2023 pursuant to Art. 45 GDPR concerning the EU-US Data Privacy Framework. The operator of the Facebook and Instagram social networks – Meta Platforms Ireland Limited – is certified under the EU-US Data Privacy Framework. The operator of the YouTube network – Google LLC – is certified under the EU-US Data Privacy Framework. This can be verified here: https://www.dataprivacyframework.gov/ |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
11 Database of reviews on the website
| Purpose of PD processing | The purpose of processing PD is to increase the credibility and transparency of the services offered by publishing customer ratings (reviews), to fulfil the controller’s legal obligations in ensuring and informing about the authenticity of the reviews provided, as well as to improve the quality of the services provided and to protect the controller’s good reputation. |
|---|
| Legal basis | pursuant to Art. 6(1)(f) GDPR, processing is necessary for the purposes of the legitimate interests pursued by the Controller The legitimate interest of the controller is the promotion of the sale of goods and services by building the credibility and transparency of the business environment. Publishing authentic customer experiences (reviews) is a legitimate marketing and feedback tool that enables other potential customers to make an informed purchasing decision. At the same time, the controller has an interest in protecting its good reputation by moderating content in order to prevent the dissemination of unlawful statements or false information. |
|---|
| Category of data subjects | customers – natural persons |
|---|
| Category of personal data | first name and surname, expressions of a personal nature on Google and other relevant personal data |
|---|
| Retention period | for as long as the given service is available (offered) on the website |
|---|
| Category of recipients | - entities cooperating with the Controller on a contractual basis (e.g. real estate agents, legal services, IT support, external auditors, etc.),
- and other entities to which the Controller provides personal data directly by law,
- professional consultants and advisers who are bound by a statutory and/or contractual duty of confidentiality.
|
|---|
| Transfer to a third country or international organisation | Not carried out. |
|---|
| Disclosure of PD | Not carried out. |
|---|
| Automated decision-making, including profiling | Not carried out. |
|---|
4. Source of personal data
The Controller obtains personal data from the following possible sources:
Directly from the data subject
The data subject provides personal data for the purpose of purchasing or selling real estate.
Indirectly from the data subject
Not carried out.
5. Rights of data subjects
As a Data Subject, you have the following rights under the GDPR in relation to the processing of PD:
| Right of the data subject | GDPR provision | Conditions of exercise | Exceptions |
|---|
| Right of access |
Art. 15 GDPR |
You have the right to obtain confirmation from the controller as to whether we process your PD and, if so, to access them. The scope of information includes: the purpose of processing, the categories of PD, the recipients, the processing period and the source of the PD. You have the right to be provided with a copy of the PD. |
For further copies the Controller may charge a reasonable fee. Access is limited to the extent that it would restrict the rights of third parties (other persons’ PD cannot be disclosed). |
| Right to rectification |
Art. 16 GDPR |
You have the right to have the controller rectify, without undue delay, inaccurate personal data concerning you. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement. |
Applies always, without limitation. |
| Right to erasure (“right to be forgotten”) |
Art. 17 GDPR |
You have the right to request the erasure of your PD without undue delay where one of the following grounds applies: - The PD are no longer necessary for the purposes for which they were collected.
- Withdrawal of consent (where this is the legal basis) and there is no other legal basis.
- Objection to processing (Art. 21(1) or (2)) and there are no overriding legitimate grounds of the Controller.
- The PD have been processed unlawfully.
- The PD must be erased for compliance with a legal obligation (EU or Slovak law).
|
The obligation to erase does not apply where processing is necessary for: - Exercising the right of freedom of expression and information.
- Compliance with a legal obligation or a task carried out in the public interest.
- Reasons of public interest in the area of public health (Art. 9(2)(h), (i) and Art. 9(3) GDPR).
- Archiving, scientific, historical or statistical purposes (Art. 89(1) GDPR), where erasure would impair the achievement of those objectives.
- The establishment, exercise or defence of legal claims.
|
| Right to restriction of processing |
Art. 18 GDPR |
You have the right to request the blocking of your PD, i.e. the restriction of their processing (generally to storage only), where one of the following grounds applies: - Verification of the accuracy of the PD (at your request).
- Unlawful processing where you request restriction of processing instead of erasure.
- You need the PD for the establishment, exercise or defence of legal claims.
- You have objected to processing (Art. 21(1) GDPR) – the restriction lasts pending verification of whether the Controller’s legitimate grounds override yours.
|
In the event of restriction, the Controller may further process the PD only: - With the consent of the data subject.
- For the establishment, exercise or defence of legal claims.
- For the protection of the rights of another natural or legal person.
- For reasons of important public interest of the EU or the Slovak Republic.
The Controller will inform you in advance before the restriction is lifted. |
| Right to object |
Art. 21 GDPR |
You have the right to object at any time to the processing of PD where the legal basis is a legitimate interest (Art. 6(1)(f) GDPR). The right is exercised by sending a written request (electronically/by post/in person) to the Controller’s contact details. |
The Controller will not accept your objection and processing will continue if it: - Demonstrates compelling legitimate grounds which override your interests, rights and freedoms.
- Needs the PD for the establishment, exercise or defence of legal claims.
The objection does not affect processing carried out before it was received. |
| Right to lodge a complaint with a supervisory authority |
Art. 77 GDPR |
If you believe that your rights have been infringed or that PD have been processed in breach of the law, you have the right to lodge a complaint with the supervisory authority: the Office for Personal Data Protection of the Slovak Republic. |
Applies always, without limitation. |
Exercising rights and handling requests
Identification of the Data Subject
The Controller will provide information and handle a request only after your identity has been demonstrably verified. This prevents unauthorised access to the PD of a third party.
Ways to exercise your rights
- in person at the Controller’s registered office (Bulharská 2476/42, 917 01 Trnava),
- by post to the address of the Controller’s registered office or of the Contact Person,
- by e-mail to info@asgardhome.sk.
The request must contain all the information and attachments necessary for its assessment. If the request is incomplete, the Controller will contact you to complete it.
Time limit for handling a request
The Controller has one (1) month from the date of receipt of the request to handle it.
Extension of the time limit
The time limit may be extended by a further two (2) months where necessary, taking into account the complexity of the request or a high number of requests. The Controller will inform you of the extension and the reasons for it within one (1) month of receipt of the request.
6. Final provisions
The Controller reserves the right to update this information notice with regard to current legislative developments and the development of case law. The current and valid version of the document will always be available from the Controller.
With this document we assure you that we treat your PD with the utmost care and respect and in accordance with the principles of integrity and confidentiality, strictly complying with the applicable legislation and using adequate technical and organisational protective measures.
This information on the processing of personal data is valid and effective as of 1 January 2026.
