we would like to inform you about the ground principles and procedures in cases of processing of your personal data obtained by using of the website [www.GAMETUSY.com] (the “Site”) in accordance with Art. 13 and fol. of Regulation (EU) 2016/679 of European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).
I. FUNDAMENTAL INFORMATION
1.1 Who we are?
1.2 Who is the DPO (Data protection officer)?
Pursuant to Article 37 of GDPR the Data protection officer was not determined.
1.3 Do we perform the transfer of the personal data to the third country and/or international organisation?
We do not perform the transfer of the personal data to any third country of international organisation.
1.4 How long we store your personal Data?
The personal data of the Data subjects are processed during the contractual relationship and then for necessary time period. We declare, that our legitimate interest does not override the interests and rights of these persons.
1.5 Do we perform the automated individual decision-making, including profiling?
We do not perform the automated individual decision-making including profiling.
1.6 Who represents the supervisory authority?
The supervisory authority is the Office for personal data protection of the Slovak Republic, with registered seat at Hraničná 12, 820 07, Bratislava 27, Id. Nr.: 36 064 220, Phone Nr.: 02/3231 3220, E-mail: firstname.lastname@example.org.
II. WHO ARE THE DATA SUBJECTS?
2.1 The personal data from the Data subjects directly, concretely:
2.1.1 by the visitors of the Site; _________________
2.1.2 by the members (customers);
III. WHAT IS THE LEGAL BASIS OF THE PROCESSING?
3.1 The personal data of the Data subject are processed based on following legal bases:
– consent of data subject;
– processing for the performance of a contract;
IV. WHAT IS THE PURPOSE AND SCALE OF PROCESSING?
4.1 For the purpose and on the basis of performance of the contracts, we will process following data: name, surname, nickname, date of birth, address, phone number, e-mail, credit card number, evidence of member´s (customer´s) history.
4.2 For the purpose marketing and on the basis of granting the consent we will process following data: name, surname, e-mail.
4.3 In case, we will intend to process another personal data as specified in this article or for other purposes, it may do so only on the basis of the consent granted to the processing of personal data by the Data subject. The consent to the processing of personal data will be granted by the Data subject a separate document.
4.4 We do not process the special category of personal data, i.e. sensitive data of Data subjects.
V. WHO WE SHARE YOUR PERSONAL DATA WITH?
5.1 We do not transfer the personal data to any third subject, except following processors (for example: accountants, marketing providers, etc). Such personal data transfer is necessary for the purpose of increase of effectiveness of provided services by ourself.
5.2 The personal data processing should be performed by the processors on the basis of agreements of personal data processing, with guarantees of organizational and technical security of these data, while respecting the relevant GDPR provisions. The processors are aware that the personal data of the Data subject should be not used for other purposes.
VI. WHAT ABOUT PERSONAL DATA BREACH?
6.1 We are will notify the personal data breach without delay to the Data subject if is probable, that the concretely case of personal data breach would result in a high risk for the rights and freedoms of this subject.
6.2 In the case of a personal data breach, we shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the Office for personal data protection of the Slovak republic unless the personal data breach is unlikely to result in a risk to the rights and freedoms of Data subjects pursuant to above mentioned Article 6.1.
VI. DATA SUBJECTS´ RIGHTS
7.1 Every Data subject has following rights:
a) right of access to the personal data: The data subject shall have the right to obtain the confirmation as to whether or not personal data concerning him or her are being processed, access to the personal data and the following subsidiary information: (i) purposes of the processing; (ii) which personal data are processed; (iii) who receives the personal data; (iv) time period of personal data retention; (v) source of personal data processing (source information, if the personal data was not provided by data subject); (vi) reasonable safeguards to personal data protection in case of personal data transfer to the third country or international organisation. The data subject is also obligated to obtain the first and one copy of processed personal data for free.
b) right to rectification of the personal data: The data subject shall have the right to obtain without undue delay the rectification of inaccurate personal data, respectively completing of incomplete personal data concerning him or her.
c) Right to erasure of the personal data: Data subject shall have the right to obtain the erasure of personal data concerning him or her without undue delay, when: (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed by ourself; (ii) the data subject withdraws consent on which the processing is based and there is no legal basis of their processing; (iii) the data subject objects to the processing carried out for the performance of a public-service task or the exercise of public authority entrusted to the Operator or the processing carried out for the purposes of the legitimate interests of the Operator or third parties and does not prejudge any legitimate reason for their processing; (iv) the data have been obtained for purpose of directly marketing; (v) the personal data have been unlawfully processed; (vi) the reason for erasure of personal data is the fulfilling of the obligation based on GDPR, special legislation or international agreement legally blindly for SR (vii) the personal data have been obtained in connection with the information society services. The right to erasure shall not apply if is the processing necessary for: (a) the exercise of the right to freedom of expression or the right to information; (b) the fulfilment of a legal obligation which requires the processing under EU law or the law of the Member State to which we belong, the international agreement, legal blindly for SR or the fulfilment of a public service task; in the exercise of public authority entrusted to us c) on grounds of public interest in the field of public health d) for the purpose of archiving, for scientific purposes or for the purpose of historical research or for statistical purposes, i. e. for privileged purposes, where it is likely that the right for erasure will prevent or seriously impair the attainment of the objectives of such processing; (e) for identification, application or defence of legal claims;
d) Right to restriction of processing: The data subject shall have the right to obtain the restriction of processing where one of the following applies: (i) the accuracy of the personal data is contested by the data subject, for a period enabling to verify the accuracy of the personal data; (ii) the processing is unlawful and the Data subject opposes the erasure of the personal data and requests the restriction of their use instead; (iii) we do no longer need the personal data for the purposes of the processing, but they are required by the Data subject for the establishment, exercise or defence of legal claims; (iv) the processing is necessary for public interest or in the exercise of public authority entrusted to us or necessary for the purposes of the legitimate interests pursued by us or a third party (except where such interests prevail over the interests or fundamental rights and freedoms of the data subject concerned that require the protection of personal data, and the person concerned has objected to the processing in the cases referred to in this article, has the right to limit the processing until the verification of the legitimate reasons on the part of us over the legitimate reasons of the data subject concerned.
e) Right to data portability The data subject shall have the right to a) obtain the personal data relating to him/her and which was provided to us; b) transfer personal data without restriction to another controller; c) ask the transfer of his/her personal data to the other controller, if it is technical possible; d) continue to use our “services”. In particular, the following types of data are included: (i) data actively and knowingly provided by the data subject; (ii) observable data provided by the data subject and concerned on the basis of the using of the service or device. However, the data subject is not obligated to personal data transfer in unlimited extent.
f) Right to object the personal data processing: The data subject shall have the right to object the processing of his/her personal data, processed on the following legal bases: (i) processing is necessary to fulfil the task carried out in the public interest or in the exercise of public authority entrusted to us (ii) processing is necessary for the purpose of our legitimate interests or third party (iii) for the purposes of direct marketing, including profiling and in range, in which it relates with direct marketing. If the data subject objects the processing of personal data for the purpose of direct marketing, we shall not process the data for this purpose anymore. The data subject is obligated to submit the Office for Personal Data Protection of the Slovak Republic, which he/she must be inform about the status of his/her application by this Office. It shall not object the personal data processing, when is the personal data processing of a data subject necessary for the performance of a task on grounds of public interest and when the data are processed for scientific purposes, for the purpose of historical research or for statistical purposes.
g) Right to ineffectiveness of Automated individual decision-making, including profiling: Pursuant to Art. 22 of GDPR; Data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him / her. Because this processing activity we do not perform, any eventual objections are irrelevant.
Please note, the cookie is a simple text file that is stored on your device by a website’s server, which will be able to search and/or read the contents of that cookie. Each cookie contains some anonymous information such as a unique identifier and the site name and some digits and numbers.
• Necessary cookies; Cookies that are necessary to enable you to move around the Site and use its features.
• Functionality cookies; Functionality cookies record your choices you have made and allow us to tailor the website to you.
• Performance cookies; Performance cookies are used for internal purposes to help to provide to the Data subjects with a better user experience. Information supplied by these cookies helps understand how our visitors use the Site so that we can improve our content.