VILLA PRO reporting

Dear Customer/Business Partner,

This information about personal data and privacy protection is intended for you and applies to your personal data due to the fact that you are our customer. Our company acts as the Data Controller within processing of your personal data.

We would like to explain to you how we will use the personal data that we collect from you or any third party throughout the existence of our contractual relationship and/or after its termination.

By providing this document, we want to comply with our obligation to provide information in compliance with Article 13 of the Regulation of the European Parliament and the Council (EU) No. 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 of 29 November 2017 on personal data protection and amendments to certain acts.

Identification data of the Data Controller:

VILLA PRO s.r.o.

Chrapčiakova 1, 052 01 Spišská Nová Ves

The company is registered in the Commercial Register kept by the Košice I District Court, Section: Sro, entry no.: 3980/V

Organization ID no.: 31 682 731

VAT ID no.: SK 2020503518

Company data

www.villapro.eu

The e-mail address is protected against spambot attacks. To see the address, please enable JavaScript for the page. – e-mail address for any communication concerning the GDPR

1. Personal data types

We process the following data:

Personal contact data. For instance, your name, surname, permanent residence address, mailing address, E-mail address, contact telephone number, and date of birth.
Business contact data. For instance, the address of the company that you represent, business e-mail address, and telephone number.
Contract data. For instance, the contents of a contract entered into with our Company, including all its amendments, scope of provided services, type of vehicle, its identification.
Payment information.
Data concerning correspondence and communication, for instance, e-mail correspondence, internet data transfers, and IP address.
Access rights. Your access rights in respect of various applications within the IT infrastructure.
Registration data and access password.
Security related information.

2. Purposes and objectives of personal data processing

We will process your data for the following purposes:

Provision of contractual services. We have to secure registration of our clients in compliance with special regulations. The legal basis is the fulfilment of the Controller´s legal obligation.
Royalty program. Customer registration and sending of newsletters with the latest offers and services associated with the participation in our program. The legal basis is the agreement entered by and between us and the legitimate interest of the Controller.
Direct marketing. We focus on improvement of our services and their customization. The legal basis is the Controller´s legitimate interest.
Taxes and accounting. We are obliged to process certain personal data in order to fulfil the obligations resulting from the Tax Act and other regulations related to financial transactions. The legal basis is the fulfilment of statutory obligations.
Security of and threats to operations and the network. We check functioning, security, and stability of operation of our network that you use. The legal basis is the fulfilment of statutory obligations and the Controller´s legitimate interest.
Dispute settlement and investigation into offences. We may process personal data for the purposes of settlement of disputes, complaints or legal procedures or where we suspect an offence that we would like to investigate into. The legal basis is the fulfilment of statutory obligations and the legitimate interest of the Controller.
Compliance with law. We might be forced to process your personal data in order to comply with law (e.g. your name is identical to a name stated in so called lists of determined parties and compliance with the Anti-Money Laundering Act) or for us to comply with the court´s order.
Marketing related consent. Other data may be used as well but this exclusively only based on the special consent requested from you in advance. The legal basis is the consent granted by you to us.
Customer administration. We keep records about all our customers and respective services. Based on an analysis of our records we make strategic decisions on offers for our customers. The legal basis is the agreement entered by and between us and the legitimate interest of the Controller.

3. Who may access your personal data

The Controller may disclose your personal data to third parties under the following circumstances:

We may share your personal data with the third parties acting on our behalf, e.g. service providers. In such cases, those third parties may use your personal data only for the purposes described above and only in compliance with our instructions. We have entered into contracts with them in order to secure that they will comply with the security measures stipulated by law.
Our employees will have access to personal data. Only the employees who need such access within their work and for the above purposes and are bound by the confidentiality obligation will have the access.
If the law or the court´s order requires it, your personal data may be disclosed to our suppliers or clients, tax authorities, social security authorities, law enforcement authorities or other governmental organizations.

4. Location of your personal data

Your personal data will be stored exclusively only within the European Union and the European Economic Area. We protect your data saved in our systems to the greatest possible extent.

5. Personal data retention

We store your personal data for a limited period of time and the data will be deleted when they are no longer necessary for the purposes of processing. In most cases it means that we will store your data throughout the existence of your relationship with us. Where possible, we will delete your data already during your relationship with us at the moment such data are no longer needed. In any case, we will delete your personal records before the end of statutory periods following the end of the contractual relationship unless legislation requires their retention.

We may process your personal data for a prolonged period of time even after the end of the relationship in case of a legal dispute or where you have granted us your consent to long-term retention of your personal data.

6. Legal basis for processing of your personal data

In most cases we process your personal data based on the fact that such processing is necessary for the purposes of a legitimate interest that we pursue on a contractual basis or based on your consent that you grant as the Data Subject. You may withdraw your consent at any time by a provable notice via our web site. In many cases, we will have to process your personal data based on a statutory obligation under a special regulation. As concerns processing based on your consent, you may withdraw your consent at any time.

7. Rights of data subjects

It is important that you understand that it is your personal data that we process and that we want you to be aware of it. Even where we do not need your consent to processing of your personal data because such processing is required by law or laws related to our contract, you have a number of rights as concerns processing of your personal data.

YOUR RIGHTS:

Right of access

You may request information about how we process your personal data and the following information about:

the reason why we process your personal data,
the categories of personal data we process,
recipients to whom your personal data have been disclosed,
the period for which your personal data will be stored or the criteria used to determine the period,
your rights,
the source from which your personal data are collected by us (where we do not collect such data from you),
whether the processing includes automated decision-making (so called profiling),
any transfer of your personal data to a country outside the EEA and the manner in which we secure protection of your personal data.

All the above information is provided in this document.

You may also request a copy of your personal data that we process. In such a case, copies of the data are subject to a charge.

Right to rectification

It is important that we have correct information about you and therefore we ask you to inform us if any part of your personal data is incorrect or when you change your name or move.

Right to erasure

If we process your personal data in an unlawful manner, e.g. we have been processing your personal data for a period of time longer than it is necessary or groundlessly, you may ask us to erase the data.

Right to restriction

From the moment you request rectification of personal your data or you object against processing until the moment we are able to examine the problem or confirm the accuracy of your personal data (or rectify them in compliance with your instructions), you are entitled to have your personal data processed to a limited extent. It means that we (except for personal data retention) may process your personal data only in compliance with your consent where it is necessary in connection with legal claims, to protect somebody else´s rights or where there is an important public interest in such processing. You may also request that we restrict processing of your personal data if such processing is unlawful but you do not want us to delete your personal data.

Right to object

If you believe that we are not entitled to process your personal data, you may object against the processing by us. In such cases, we may continue processing only if we are able to prove convincing eligible grounds prevailing over your interests, rights, and freedoms. We may process your personal data where it is necessary for determination, enforcement or defence of legal claims.

Right to data portability

You may request that your personal data that you have disclosed to us for processing purposes based on consent or in order to comply with a contract be provided in a structured, commonly used, and machine-readable format. You may request a transfer of such information to other data controller.

Consent withdrawal

You are entitled to withdraw your consent and we will subsequently stop our processing activities based on that legal ground.

We will inform also other parties, to whom we have disclosed your personal data, about your request(s).

In case of any doubts, you may initiate proceedings under Sec. 100 of the Personal Data Protection Act by filing a petition with the relevant supervisory body, e.g. through www.dataprotection.gov.sk.

How can I complain in respect of the use of my personal data or how can I enforce my rights?

Should you have any other questions concerning processing of your personal data, you may contact us using our mailing address available at www.villapro.eu or via e-mail: The e-mail address is protected against spambot attacks. To see the address, please enable JavaScript for the page. and your questions and requests will be examined.

If you are not satisfied with our reply or you believe that we process your personal data groundlessly or unlawfully, you may file a complaint with the relevant supervisory body, i.e. Office for Personal Data Protection (“OPDP”). For more information about the OPDP and the complaint procedure visit: www.dataprotection.gov.sk.

8. Contact data