GDPR (EN) - Branislav Rybička

Privacy Policy

Privacy is very important to us. For this reason, we continuously analyse all personal data processing processes and ensure their compliance with the GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR”), which is binding for all Member States of the European Union, as well as Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Additions to Certain Acts (hereinafter referred to as the “Act”).
We hereby inform you about the manner and conditions of processing your personal data, as well as your rights related to it.

1. Identity and contact details of the controller

The purposes and means of processing your personal data for the administration of this website are determined by the controller Branislav Rybička, registered office: Rastislavova 74, 04001 Košice, ID No.: 47389966 VAT No.: 108 632 5680, e-mail contact: branorybicka@gmail.com

2. Purpose and legal basis for processing personal data

We process your personal data only for the specific purposes set out below, ensuring that there is an appropriate legal basis for each processing and that the processing of your personal data is lawful.

3. Purpose and legal basis for the processing of personal data

AREA	PURPOSE	LEGAL BASIS	RETENTION PERIOD
Subscription to the newsletter/newsletters	Sending newsletters/newsletters	Article 6(1)(a) GDPR: the data subject has consented to the processing of personal data	For the duration of the consent, for a maximum of 3 years
Leaving a comment on a blog on the website	Posting of comments of natural persons on the website in the “Insert comment” section, indicating the username	Art. 6(1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party The legitimate interest is the interest of the controller to provide persons with the opportunity to interact with articles published on the website, to respond to these comments while minimising the requirements to provide personal data, as well as the interest in communicating with data subjects who have expressed an interest in the activities of the controller, for example by commenting or contacting the controller or Article 6(1)(b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures at the request of the data subject	For a period of three years from the publication of the comment on the article
Form – order submission	Receipt, registration and processing of an order sent to the controller via the website	Article 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is a party or to carry out pre-contractual measures at the request of the data subject	For the duration of the communication, for a maximum period of 3 years. In the case of the conclusion of a contract, during the duration of the contract and for 3 years after its termination.
Photographs and videos	Publication of photographs and videos containing the physical image of the data subject or his/her other personal data for the purpose of presenting the services or other activities of the controller	Article 6(1)(a) GDPR: the data subject has consented to the processing of personal data	For the duration of the consent, at the latest for a period of 3 years
Cookies – essential (essential cookies)	Cookies enabling the basic functionality of the website to be implemented.	Article 6(1)(f) GDPR: processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party The legitimate interest is the interest of the controller in the proper operation of the www.branislavrybicka.com website and the provision of its essential functionalities	For as long as the data subject has the settings in the web browser
Cookies – other (non-essential cookies)	Remembering user settings. Better adaptation of the website to the interests of the data subjects and the functionality of the website, generation of statistics. Use of Google Analytics, Google Adwords and Facebook Pixel	Article 6(1)(a) GDPR: the data subject has consented to the processing of personal data	For as long as the data subject has set in the web browser

4. Recipients or categories of recipients

We protect the personal data and do not disclose or share it with third parties or entities, except for those providing us with marketing and advertising services, those providing cloud services, those providing IT services. If personal data is disclosed in terms of the purpose of its processing, the recipients are all persons who have visited our website and the Operator’s social networks. In the event that such an obligation arises from the law or a decision of a public authority, your personal data will also be disclosed to public authorities or other entities.

5. Transfer to third countries or international organisations

The Data Controller does not transfer your personal data outside the European Union to third countries or international organisations, with the exception of the transfer of personal data to the US company The Rocket Science Group LLC d/b/a Mailchimp, whose technologies provide the Data Controller’s newsletter services. For this purpose, personal data must be provided to this company, whereby the data, including personal data, is stored in a data centre in the United States of America. Under the GDPR, the transfer of personal data to third countries outside the European Union may take place, inter alia, if the European Commission has determined that the third country guarantees an adequate level of protection. According to this Adequacy Decision of the European Commission, the United States of America is a country providing an adequate level of protection, within the scope of the so-called Privacy Shield framework, which was adopted on July 12, 2016

The Rocket Science Group LLC d/b/a Mailchimp confirms that when transferring personal data from the European Union to third countries, it complies with and adheres to the terms of legal frameworks that provide a level of protection equivalent to European Union law, including the Privacy Shield framework, as evidenced by the fact that The Rocket Science Group LLC d/b/a Mailchimp is listed as compliant with the Privacy Shield framework on the U.S. Department of Commerce’s Privacy Shield website:
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG&status=Active

6. Retention Period

We will only retain your personal data for as long as is necessary for the purposes for which it is processed, and these periods are set out in section 3 of this information notice. E.g. for the purpose of subscribing to the newsletter for three (3) years, or for the period of time provided for by generally applicable law, with the 3 year period starting on the first day of the calendar year following the year in which the personal data was collected; in the case of cookies, we will only retain the data for the period of time that you have set your web browser to store cookies. After the expiry of the retention period, we ensure the deletion or anonymisation of the personal data, in full compliance with the GDPR.

7. Rights of the data subject

As a data subject, you are entitled to several rights under the GDPR, which we would like to draw your attention to, namely:

The right of access to personal data

You have the right to request confirmation from us as to whether we are processing personal data relating to you and, if so, the right to access that personal data, as well as the right to basic information about the processing of your personal data.

Right to rectification and/or completion of personal data

You have the right to request that we correct incorrect personal data concerning you without undue delay, as well as the right to have incomplete personal data completed.

Right to erasure of personal data

You only have the right to request the immediate erasure of your personal data if:

the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
you withdraw the consent on the basis of which the processing is carried out and there is no other legal basis for the processing;
you object to the processing and there are no overriding legitimate grounds for processing;
the personal data have been unlawfully processed;
the personal data must be erased in order to comply with a legal obligation under European Union law or the law of a Member State to which we are subject;
the personal data was collected in connection with the offer of information society services pursuant to Article 8(1) of the GDPR.

For this purpose, you can contact us at any time and we will then assess whether there are any exceptions in your case where it is not necessary to delete your data even if one of the above conditions is met (e.g. it is necessary for the exercise of legal claims).

Right to restriction of processing of personal data

You have the right to have us restrict the processing of your data (i.e. we only store your data but do not process it in any other way) if:

you have challenged the accuracy of the personal data;
the processing is unlawful and you object to the erasure of the personal data and request instead a restriction on its use;
we no longer need your personal data for the purposes of the processing, but you need it to establish, exercise or defend legal claims;
you object to the processing.

You can contact us at any time for this purpose, after which we will assess whether there are any exceptions in your case where your personal data can be processed in a way other than storage.

Right to object to the processing of personal data

You have the right to object to the processing of your personal data where the processing is necessary for the purposes of the legitimate interests pursued by us or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of your person which require the protection of personal data, in particular where the data subject is a child. We may only process your personal data if we can demonstrate compelling legitimate grounds for processing which would override the interests, rights and freedoms or grounds for establishing, exercising or defending legal claims. You have the right to object to the processing of your personal data for direct marketing purposes at any time (!).

Right to data portability

If the processing of your personal data is carried out by automated means on the basis of your consent or for the performance of a contract, you have the right to obtain the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transfer this data to another person (the controller), provided that this is technically feasible.

Right to withdraw consent to the processing of personal data at any time

Last but not least, you have the right to withdraw your consent to the processing of personal data concerning you at any time, if you have provided such consent, by sending a withdrawal of consent to the contact details listed in point 1. Withdrawal of consent does not affect the lawfulness of the processing of personal data based on consent prior to its withdrawal.

Right to lodge a complaint with a supervisory authority

We would also like to inform you that if you believe that there has been a violation of the rights of natural persons in the processing of your personal data or a violation of the GDPR, you may submit a petition to the Office for Personal Data Protection of the Slovak Republic to initiate a procedure for the protection of personal data (a sample petition is published on the website of the Office for Personal Data Protection of the Slovak Republic www.dataprotection.gov.sk).

8. Request for the provision of personal data

The provision of your personal data is voluntary, however, if your personal data is required, for example, for the proper performance by the controller and the provision of the personal data does not take place, it will not be possible for the controller to provide the performance.

9. Cookies

In order to improve our services and the functionality of our website as much as possible, we use cookies. These are small text files that are stored on your computer or mobile device and contain information about the activities of website users, which is then made available to the website server the next time the user visits the website.

Cookies are useful for, among other things:

for the proper functionality of the website,
to find out which web pages and functions are most used by you, so that we can tailor our offer to your requirements and interests.

The cookies we use can be divided into two (2) types in terms of their duration:

short-term (session cookies), which remain in your browser only until you close the browser,
long-term cookies (“persistent cookies”), which remain stored even after you close your browser.

The duration of cookies can be customised according to your own requirements, as it depends on the setting of the cookie itself and your browser.

Cookies can also be divided into:

those that are essential for the functioning of the website ( essential), which may include cookies that help the website to load correctly and quickly, and
those that are not essential ( non-essential), where such non-essential cookies are, for example, those that are called analytical cookies and collect data for the appropriate customisation of advertisements, track the visitor’s activity on the site, etc.

Both types of cookies are placed on our website, and for non-essential cookies we require your consent to use them. You can disable the use of essential cookies either specifically for this website, or for all websites, in the settings of your internet browser. However, once you deactivate essential cookies, you will no longer be able to use certain functions.

10. Google Analytics and Google Adwords

In addition to the above, we use Google Analytics and Google Adwords, the web analytics of Google Ireland Limited (“Google”), a company incorporated and domiciled under the laws of Ireland (registration number 368047), with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics and Google Adwords use cookies, i.e. data files that are stored on your computer, in order to analyse your use of our website.

The information about your use of this website obtained via cookies is generally transmitted to a Google server and stored there. Only in exceptional cases is the full IP address transmitted to the Google server. At our request, Google will use this information to evaluate your use of the website and to compile reports for us on the activities on the portal as well as to provide services related to the use of the website. More information on how Google processes your personal data is available at: https://policies.google.com/technologies/ads?hl=sk.

Your consent is required for the use of these cookies.

11. Facebook and Instagram

Our website has integrated the social network plugins Facebook and Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland), which you will recognise by the Facebook or Instagram logo placed on the website. For an overview of all Facebook add-ons, please visit the following Facebook page: http://developers.facebook.com/docs/plugins/

During your visit to our website, this add-on establishes a direct connection between your browser and the Facebook server, through which Facebook receives the information that someone from your IP address is accessing our website. If you are logged in to your Facebook or Instagram account and click on the Facebook or Instagram logo on the website, this enables a connection to your Facebook profile. Facebook can thus associate your visit to the website with your user account. For more detailed information, please refer to Facebook’s privacy policy:

https://facebook.com/privacy/explanation.

Your consent is required for the use of these cookies. If you do not want Facebook to associate your visit to our website with your Facebook user account, please log out of your Facebook user account. brano.rybicka.1