Privacy policy
What is this document for?
In this document, you will learn:
- how we process personal data,
- which data we need to meet our legal obligations and where it is up to you to give us consent to the processing of personal data,
- what your rights are and how you can exercise them.
Who processes your personal data?
Your personal data will be processed by:
krasnybyt.sk s.r.o.,
Registered office: Priekopy 73, 821 08 Bratislava
Company ID: 44565143
Our contact details are:
Correspondence address: Priekopy 73, 821 08 Bratislava
Phone number: 0918 323 111
Email address: info@krasnybyt.sk
What happens when you visit our website?
When you visit our website, you are under no obligation to provide us with your personal data. Of course, you can do so voluntarily if you fill out one of the contact forms. Our website also uses a variety of tools to make it work reliably and to give us the information we need to continuously improve the portal. We use the following tools:
Cookies
Cookies are small text files that are stored on your device (computer, tablet, smartphone) when you visit our website and contain information necessary for your device to communicate with our website. These files are stored on your device temporarily or permanently. Most internet browsers are initially set to automatically accept cookies. Cookies do not damage your device.
Temporary (session) cookies are stored on your device only for the duration of your visit to our website. Permanent cookies are stored on your device until they expire or until you decide to delete them and are most often used to let our website know that you have already visited it.
We process cookies based on your consent, except for the necessary cookies, which we may process without your consent, based on the Electronic Communications Act. Giving consent is voluntary and you are under no obligation to give consent. The browsing of our website is not conditional on the provision of consent to cookies. Providing cookies, especially marketing and analytics cookies, is not a legal or contractual requirement.
When processing cookies, we do not use automated decision-making or profiling.
Why do we process personal data?
Inquiry about our services
Why do we need the data? (purpose of processing)
We need the data to record and process your inquiry on our services, in particular to contact you regarding the inquiry sent and the interest shown in our services, to prepare the offer of services and to perform other necessary pre-contractual actions.
On what basis do we process the data? (legal basis for processing)
We process the data on the basis of your consent provided when sending your inquiry.
Is the provision of data necessary?
Yes, it is. Without providing the necessary data, we are unable to process your request. However, it is up to you to contact us with the request and give us consent to the processing of your data.
How long do we keep the data? (retention period)
We will store the data for the duration of the offer, generally for 90 days. However, if we conclude a contract, personal data will continue to be processed, but not on the basis of consent, but on the basis of a concluded contract.
To whom can the data be transferred? (categories of recipients)
Your personal data may be transferred to our contractual partner (real estate agent) for the purpose of processing the inquiry.
Contract concluded with the client
Why do we need the data? (purpose of processing)
In order to perform the contract in which we have committed ourselves to mediate the purchase, sale or lease of the client’s property.
On what basis do we process the data? (legal basis for processing)
We process the data on the basis of a concluded contract.
Is the provision of data necessary?
The provision is necessary; it is not possible to fulfil our obligations under the contract without the provision of personal data.
How long do we keep the data? (retention period)
The data will be stored for the period necessary to assert liability claims, i.e. for a period of 4 years from the termination of the contract.
To whom can the data be transferred? (categories of recipients)
To an attorney for the purpose of preparing and assessing the contractual documentation (e.g. to prepare the purchase contract) or authorizing the contract, to a notary for the purpose of preparing a notarial deed or to a bank for the purpose of preparing a pledge, to an expert for the purpose of preparing an expert opinion or an energy certificate for the property, to a financial intermediary for the purpose of mediating a loan for the acquisition of property or another real estate agency that represents the interests of the other party in a business relationship, to the relevant district office (cadastral department) when submitting an application for registration in the Real Estate Register.
Prevention of money laundering
Why do we need the data? (purpose of processing)
To fulfil the obligations of the obliged person under Act No. 297/2008 Coll., on Protection Against the Legalisation of the Proceeds from Criminal Activity and Protection Against the Financing of Terrorism and on the Amendment to Certain Acts.
On what basis do we process the data? (legal basis for processing)
On the basis of Act No. 297/2008 Coll., on Protection Against the Legalisation of the Proceeds from Criminal Activity and Protection Against the Financing of Terrorism and on the Amendment to Certain Acts.
Is the provision of data necessary?
The provision of personal data is necessary for the fulfilment of our legal obligation.
How long do we keep the data? (retention period)
We are obliged to keep the data for five years from the end of the contractual relationship with the client pursuant to Section 19 of Act No. 297/2008 Coll.
To whom can the data be transferred? (categories of recipients)
NAKA Financial Intelligence Unit, real estate agent.
Accounting
Why do we need the data? (purpose of processing)
For the fulfilment of the statutory obligation to keep the accounts.
On what basis do we process the data? (legal basis for processing)
On the basis of Act No. 431/2002 Coll., on Accounting, as amended, Act No. 595/2003 Coll., on Income Tax, as amended, Act No. 222/2004 Coll., on Value Added Tax, as amended, and other acts.
Is the provision of data necessary?
The provision of personal data is necessary for the fulfilment of our legal obligation.
How long do we keep the data? (retention period)
We are obliged to keep the accounting documents for ten years.
To whom can the data be transferred? (categories of recipients)
Statistical Office of the Slovak Republic, bailiff, bankruptcy trustee, preliminary administrator, auditor, tax office, health insurance company, Sociálna poisťovňa (social insurance company), accountant, tax advisor.
Enforcement of legal claims
Why do we need the data? (purpose of processing)
To assert our legal claims and to protect ourselves against third-party claims.
On what basis do we process the data? (legal basis for processing)
On the basis of a legitimate interest pursuant to Article 6(1)(f) of the General Data Protection Regulation (processing is necessary for the purposes of legitimate interests pursued by the controller).
Is data processing necessary?
The processing of personal data of the data subject is necessary for achieving the purpose of the processing. Without the processing of personal data, we would not be able to assert a legal claim.
How long do we keep the data? (retention period)
Until the end of enforcing a claim or until the expiry of the limitation period for the claim.
To whom can the data be transferred? (categories of recipients)
Slovak Trade Inspection, court, lawyer or other legal representative, law enforcement authorities.
Complaints
Why do we need the data? (purpose of processing)
We need the data to fulfil our legal obligation, i.e. to record and process received complaints.
On what basis do we process the data? (legal basis for processing)
Compliance with our legal obligations under Act No. 250/2007 Coll., on Consumer Protection.
Is the provision of data necessary?
Providing data relating to your case is necessary to enable us to handle your complaint in accordance with the law.
How long do we keep the data? (retention period)
We will keep the data concerning the complaint and its handling until the expiry of the period for imposing a fine by the Slovak Trade Inspection, i.e. within three years from the handling of the complaint or after the expiry of the period for exercising the right in court.
To whom can the data be transferred? (categories of recipients)
Slovak Trade Inspection, court, attorney or other legal representative, mediator, alternative dispute resolution entity, real estate agent.
Complaints from data subjects
Why do we need the data? (purpose of processing)
For the purposes of handling the complaints of data subjects who have exercised their rights with us under the General Data Protection Regulation (GDPR) and Act No. 18/2018 Coll., on the Protection of Personal Data.
On what basis do we process the data? (legal basis for processing)
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 Coll., on the Protection of Personal Data and on Amendments to Certain Acts.
Is the provision of data necessary?
Providing data is essential to handle the complaint.
How long do we keep the data? (retention period)
For the period for the imposition of a sanction by the Office for Personal Data Protection of the Slovak Republic, i.e. for a period of 5 years from the exercise of the right of the data subject.
To whom can the data be transferred? (categories of recipients)
Office for Personal Data Protection of the Slovak Republic, court, attorney or other legal representative, real estate agent.
Is there profiling?
Automated decision-making and profiling are not used in the processing of personal data.
Is there a transfer of personal data to third countries?
No, we do not intend to transfer your personal data to third countries. Your personal data are not processed outside the territory where the common rules set out in the General Data Protection Regulation apply. The free movement of data within the Member States of the European Union is guaranteed by this Regulation.
What are your rights?
The General Data Protection Regulation (GDPR) gives you wide possibilities to exercise your rights related to the protection of your personal data and control over how they are processed.
We will make efforts to process your request as soon as possible, generally within one month of receipt of your request. If your request is complicated and time-consuming, we may (in accordance with the General Data Protection Regulation) extend this period by two months if necessary. We will inform you about the extension of the deadline within one month of receipt of the request and provide you with the reasons justifying the extension of the deadline.
If we have doubts about your identity, we may ask you to provide additional information necessary to confirm your identity, such as proof of the request with an officially verified signature or presentation of an identity document, for security reasons.
In accordance with the General Data Protection Regulation, we have the possibility to reject manifestly unfounded or unreasonable requests (in particular because of their recurring nature) or to charge a reasonable fee taking into account the administrative costs of providing the information or of notifying or taking the action required.
Right of access to personal data
You have the right to access information about the extent to which your personal data are processed. If you ask us to do so, we will provide you with information whether and to what extent we process your personal data. You also have the right to ask us for a copy of the data being processed. We may charge a reasonable fee in line with our administrative costs for any additional copies you request from us. If you submit a request by electronic means, we will normally provide you with the information in a commonly used electronic form, unless you explicitly ask us for another way to provide it.
Right to rectification
We strive to ensure that all personal data we process are up-to-date, accurate and complete. However, if you find deficiencies in our data, you should request the rectification of personal data (if you find that they are not correct) or the completion of incomplete data (if you find that they are incomplete).
Right to data transfer
You have the right to obtain your personal data that you have provided to us in a commonly used electronic format and to transfer them to another entity. However, this right applies only to data that we process based on your consent or based on a contract between you and us. The right to data transfer does not apply to the data we process to comply with our legal obligations.
The right to data portability applies only to the extent that we process your data by automated means.
The right to data portability applies only to the data you have provided to us. It does not affect data that we have obtained by further observing or developing the original data that you have provided to us.
Right to withdraw consent
If we process your personal data based on your consent, you can withdraw your consent at any time. You can withdraw your consent in writing to our correspondence address or by sending an email to our e-mail address stating that you withdraw your consent to the processing of personal data.
The withdrawal of consent does not affect the lawfulness of the processing we carried out before the withdrawal of consent, but it prevents us from further processing your data for the purposes for which we needed your consent to the processing of personal data.
Right to object to processing
You have the right to object to the processing of personal data that takes place on the basis of our legitimate interest (e.g. asserting legal claims or sending information to current and past clients). In the case of marketing activities, we will stop processing your personal data; in other cases, we will do so unless we have compelling legitimate reasons to continue such processing.
Right to restrict processing
You have the right to request restriction of the processing of your personal data:
- if you also challenge the accuracy of your personal data (during a period that allows us to verify the accuracy of your personal data); or
- if the processing is unlawful and you do not request its erasure; or
- if we no longer need them, but you need them to assert your claims; or
- if you have objected to the processing of data on the basis of a legitimate interest.
Restriction of processing means that such personal data, with the exception of storage, are processed only with your consent or only to the extent necessary to prove, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
If we restrict the processing of your data and the reasons for which the processing has been limited later cease to exist, we will inform you before the restriction of processing is lifted.
Right to be forgotten (right to erasure)
You have the right to request the erasure of your personal data if any of the following reasons are met:
- you have withdrawn your consent on the basis of which we have processed your personal data and there is no other legal basis for the processing of your personal data (e.g. compliance with our legal obligations),
- you objected to the processing of your personal data on the basis of a legitimate interest,
- personal data are no longer needed for the purposes for which they were acquired or processed,
- we have processed personal data unlawfully or they must be deleted in order to comply with a legal obligation.
However, we are unable to comply with your request to erase data under the applicable rules if we still need personal data to comply with our legal obligations or if further processing is necessary to prove, assert or defend legal claims.
Right to lodge a complaint
If you believe that your rights regarding personal data have been violated, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27 (www.dataprotection.gov.sk).