1. Introduction

1.1 We are committed to protecting the privacy of our website visitors and users of our services.

1.2 These rules apply wherever we are administrators of the personal data of visitors to our websites and users of our services, in other words, where we determine the purpose and meaning of the processing of this personal data.

1.3 When visiting our website for the first time, we ask for your consent to the use of cookies in accordance with the terms of these rules.

2. How we use personal data

2.1 In this section we have stipulated:
(a) general categories of personal data that we process;
(b) the source and category of data, in the case of data that we did not receive directly from you;
(c) the purpose for which we process personal data;
(d) the legal basis of their processing.

2.2 We may process data about the use of our websites and services (usage data). Usage Data may include your IP address, geographic location, web browser and version, operating system, referral source, length of visit, page views, and page navigation paths, as well as information about the timing, frequency, and patterns of use of our Service. The source of the usage data is Google Analytics. This usage data may be processed for the purpose of analyzing the use of websites and services. The legal basis for this processing is consent and our legitimate interests, i.e. j. monitoring and improving our website and services.

2.3 We may process the information you post on our website or through the data you use when using our services. Published data may be processed for the purpose of publishing and managing our website and services. The legal basis for this processing is consent.

2.4 We may process the information contained in any questionnaire (inquiry data) regarding data regarding goods and/or services. The legal basis for this processing is consent.

2.5 We may process the information you provide to us for the purpose of subscribing to our e-mail offers and/or newsletter (notification data). Notification data may be processed to send relevant notifications and/or newsletters. The legal basis for this processing is consent.

2.6 We may process information (contact details) contained in or related to any communication in which you send us contact details. Correspondence data may contain communication content and metadata associated with the communication. Our website will generate metadata related to communications through website contact forms. Correspondence data may be processed for the purposes of communicating with you and keeping records. The legal basis for this processing is our legitimate interests, namely the proper administration of our website and business and communication with users and / or the performance of a contract between you and us and / or steps leading to the conclusion of a contract.

2.7 We may process any of your personal data referred to in these policies if this is necessary for the establishment, exercise or defense of legal claims, whether in legal proceedings or in administrative or out-of-court proceedings. The legal basis for this processing is our legitimate interests, namely the protection and enforcement of our legal rights, your legal rights and the legal rights of others.

2.8 In addition to the specific purposes for which we may process your personal data set out in this section 2, we may also process any of your personal data if such processing is necessary to comply with a legal obligation to which we are subject or to protect our vital interests or the vital interests of another natural person .

3. Provision of your personal data to other persons

3.1 In addition to the specific disclosures of personal data set out in this section, we may disclose your personal data if such disclosure is necessary to comply with a legal obligation to which we are subject or to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data if such disclosure is necessary for the establishment, exercise or defense of legal claims, whether in legal proceedings or in administrative or out-of-court proceedings.

4. International transfers of your personal data

4.1 You acknowledge that personal information that you submit for publication through our websites or services may be accessible via the Internet worldwide. We cannot prevent the use (or misuse) of such personal data by other persons.

5. Storage and deletion of personal data

5.1 This section sets out our data retention policies and procedures, which are designed to help ensure compliance with our legal obligations in relation to the retention and deletion of personal data.

5.2 Personal data that we process for any purpose or purposes shall not be retained for longer than is necessary for that purpose or purposes.

5.3 We will store personal data as follows:
(a) usage data, disclosure data, inquiry data, notification data and correspondence data are retained for a maximum period of 10 years.

5.4 Notwithstanding the other provisions of this section, we may retain your personal data if such retention is necessary to comply with a legal obligation to which we are subject or to protect your vital interests or the vital interests of another natural person.

6. Changes

6.1 We may update these rules from time to time by posting a new version on our website.

6.2 You should check this page from time to time to ensure that you are satisfied with any changes to these rules.

6.3 We may notify you of changes to these rules by email.

7. Your Rights

7.1 In this section we have summarized the rights you have under the Data Protection Act. Some rights are complex and not all details have been included in our summaries. Therefore, you should read the relevant laws and regulatory authorities’ guidance for a full explanation of these rights.

7.2 Your basic rights under the Data Protection Act are:
(a) right of access;
(b) right to rectification;
(c) the right to erasure;
(d) right to restriction of processing;
(e) the right to object to processing;
(f) the right to transfer data;
(g) the right to complain to a supervisory authority; a
(h) the right to withdraw consent.

7.3 You have the right to confirm whether we can process your personal data and where we access it together with other information. This additional information includes details about the purposes of the processing, the categories of personal data concerned and the persons who are the recipients of the personal data. The provision of rights and freedoms of others is not affected, we will provide you with a copy of your personal data. The first copy will be provided free of charge, but additional copies may be subject to a reasonable charge.

7.4 You have the right to correct any inaccurate personal data and with regard to the purposes of the processing if you have provided us with inaccurate or erroneous data.

7.5 In certain circumstances, you have the right to have your personal data deleted without undue delay. These circumstances include: personal data are no longer necessary for the purpose for which they were collected or otherwise processed; you withdraw consent to processing based on consent; you object to processing under certain rules of applicable data protection law; processing is intended for direct marketing purposes; and personal data were processed illegally. However, there are exceptions to the right to erasure. General exceptions apply where processing is necessary: ​​to exercise the right to freedom of expression and information; compliance with a legal obligation; or for the establishment, exercise or defense of legal claims.

7.6 In certain circumstances, you have the right to restrict the processing of your personal data. These circumstances are: you dispute the accuracy of personal data; the processing is unlawful, but you exclude deletion; we no longer need the personal data for the purposes of our processing, but you require the personal data to establish, exercise or defend legal claims; and you have objected to the processing, pending verification of this objection. If processing is limited on this basis, we may continue to store your personal data. However, we will process them differently: with your consent; for the establishment, exercise or defense of legal claims; to protect the rights of another natural or legal person; or for reasons of important public interest.

7.7 You have the right to object to the processing of your personal data due to your particular situation, but only to the extent permitted by the legal basis. The processing is necessary for: the performance of a task performed in the public interest or in the performance of any official body entrusted to us; or for the purposes of legitimate interests pursued by us or a third party. If you make such an objection and we cannot demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims, we will stop processing personal information.

7.8 You have the right to object to the processing of your personal data for direct marketing purposes (including profiling). If you make such an objection, we will stop processing your personal data for this purpose.

7.9 You have the right to object to the processing of your personal data for scientific or historical research purposes or for statistical purposes for reasons relating to your particular situation, unless the processing is necessary for tasks carried out for reasons of public interest.

7.10 The legal basis for processing your personal data is:
(a) consent; or
(b) if the processing is necessary for the performance of a contract to which you are a party, or to take steps based on your request before concluding a contract,
(c) and such processing is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format. However, this right does not apply if it would adversely affect the rights and freedoms of others.

7.11 If you believe that our processing of your personal data violates data protection laws, you have a legal right to lodge a complaint with a supervisory authority responsible for data protection. You can do so in the EU member state of your habitual residence, place of work or place of the alleged infringement.

7.12 To the extent that the legal basis for the processing of your personal data is consented to, you have the right to withdraw this consent at any time.

7.13 You may exercise any of your rights in relation to your personal data by written notice.

If you have any questions regarding the protection of your personal data, you can contact us in writing at the address of the company headquarters or by e-mail at   gdprdpo@commander.sk