Home / Protection and Processing of Personal Data

Protection and Processing of Personal Data

What are personal data?

Personal data refers to any information relating to an identified or identifiable data subject. A data subject is considered identifiable if they can be directly or indirectly identified, particularly based on a number, code, or one or more elements specific to their physical, physiological, psychological, economic, cultural, or social identity. Personal data includes, but is not limited to, the name, surname, address of a natural person, email, IP address, and information about the use of services or activities and preferences of a natural person. The protection of personal data is governed by Act No. 18/2018 Coll. on Personal Data Protection and the amendment of certain laws, as amended (the "Personal Data Protection Act").

What is the processing of personal data?

Processing of personal data means any operation or set of operations systematically performed with personal data by the controller or processor, whether automated or by other means, particularly collecting, storing on information carriers, making available, modifying or altering, retrieving, using, transferring, disseminating, publishing, keeping, exchanging, sorting or combining, blocking, and destroying.

Who is the controller and processor of personal data?

We are the company PetronGroup s.r.o., ID No.53106377, with registered office at Pod hájom 1097/96, 018 41 Dubnica nad Váhom, registered at the District Office Trenčín, Trade Register Number: 40252/R.

We process your personal data as a controller, i.e., we determine how the personal data will be processed and for what purpose, for how long, and select any further processors who will help us with the processing.

Contact details for the responsible person

If you want to contact us during the data processing, you can reach us at phone number +421 907 558 252 or via email at info@petrongroup.com.

Scope of personal data and purposes of processing

We process the personal data you provide us for the following reasons (to fulfill these purposes):

  • Providing services, fulfilling a contract: We need your personal data in the following scope: email, xxxxx, to fulfill the contract (e.g., sending access to the application, delivering goods).
  • Accounting: If you are a customer, we need your personal data (billing information) to comply with the legal obligation to issue and record tax documents.
  • Marketing - sending newsletters: We use your personal data (email and name) for direct marketing - sending commercial communications. If you are our customer, we do so out of legitimate interest, as we reasonably assume that you are interested in our news, for a period of 10 years from your last order. If you are not our customer, we send you newsletters only based on your consent, for a period of 10 years from the date of consent. In both cases, you can withdraw your consent using the unsubscribe link in each sent email.
  • Advanced marketing based on consent: Only with your consent, we may send inspiring offers from third parties or use your email address, e.g., for remarketing and targeting ads on Facebook, for a period of X years from the date of consent. This consent can be withdrawn at any time via our contact details or using the unsubscribe link in each sent email.

We retain your personal data for the duration of the limitation periods unless the law prescribes a longer retention period or we have specified otherwise in specific cases.

Cookies

When browsing our website, we record your IP address, the duration of your visit, and the website you came from. We consider the use of cookies to measure website traffic and customize the display of web pages as our legitimate interest, as we believe that thanks to this we can offer you better services. Cookies for targeting ads will be processed only based on your consent. You can browse our website in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.

Security and protection of personal data

We will handle your personal data responsibly and in accordance with applicable legislation. We use both automated and non-automated means for processing personal data. All data is stored on secure servers located exclusively in the European Union. We protect personal data to the maximum possible extent using modern technologies that correspond to the level of technical development. We have adopted and maintain all possible (currently known) technical and organizational measures to prevent misuse, damage, or destruction of your data.

Providing personal data to third parties

Our employees and collaborators have access to your personal data. To ensure specific processing operations that we cannot provide ourselves, we use the services and applications of processors who can protect data and specialize in data processing. These processors include Facebook, Google, delivery, and payment services. It is possible that we may decide to use other applications or processors in the future to facilitate and improve processing. However, we promise that in such a case, we will impose at least the same data protection and processing quality requirements on the processor as required by law.

Providing personal data outside the EU

Any processing of personal data will take place exclusively within the EU.

Your rights related to the processing and protection of personal data

In connection with the protection of personal data, you have the following rights. If you want to exercise any of these rights, please contact us via email: info@petrongroup.com.

  • Right to information: This is fulfilled by this information page with the principles of personal data processing.
  • Right of access: You can request at any time to confirm what personal data we process and why. We will provide this information within 14 days.
  • Right to rectification: If your personal data changes or you consider any of your personal data to be outdated or incomplete, you have the right to have the data updated.
  • Right to restrict processing: You can exercise this right if you believe we are processing inaccurate data, think we are processing unlawfully, but do not want to delete all data, or if you have objected to the processing. You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from newsletters, you limit the purpose of processing for sending commercial communications.)
  • Right to data portability: If you want to take your personal data and transfer it to someone else, we will proceed in the same way as for the right of access, with the difference that we will provide/send the information in a machine-readable format. This will take at least 14 days.
  • Right to erasure (to be forgotten): You have the right to have all your personal data erased from our systems as well as from the systems of all partial processors and backups. To ensure the right to erasure, we need 7 days. In some cases, we are bound by a legal obligation, e.g., we must keep issued tax documents for the period stipulated by law. In this case, we will delete all personal data that is not bound by another law. We will inform you by email about the completion of the erasure.
  • Complaint to the Data Protection Authority: If you believe that we do not handle your data in accordance with the law, you have the right to lodge a complaint at any time with the Data Protection Authority. We will be very pleased if you first inform us of this suspicion so that we can do something about it and correct any mistakes.

Unsubscribing from newsletters and commercial communications

Emails with inspiration, articles, product information, and services are sent to you as our customer based on our legitimate interest. If you are not yet a customer, we send you emails only based on your consent. In both cases, you can stop receiving our emails by clicking on the unsubscribe link in each sent email.

Confidentiality

We assure you that our employees and collaborators who will process your personal data are obliged to maintain confidentiality about personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the end of our contractual relationships. Without your consent, your personal data will not be disclosed to any other third party. These personal data processing principles are effective from 25.5.2018.