Information Obligation for
Personal Data Provision
FITBOOK, s.r.o.,
headquarters: Dunajská 8, Bratislava – district of Staré Mesto
811 08, Business ID No.: 47 999 390, registered in the Commercial
Register maintained by the District Court in Bratislava I, section
Sro, file number: 108482/B,
represented by Dominik Győri - manager, contact details: email
go2gym@go2gym.today (hereinafter
referred to as the "Operator") informs the person concerned
regarding the fulfilment of information obligations pursuant to
Article 13 of the European Parliament Regulation and Council
Regulation (EU) 2016/679 dated 27 April 2016 on the protection of
individuals with regard to personal data processing and on the free
movement of such data, repealing Directive 95/46/EC (hereinafter
referred to as "the Regulation") and Article 19 of Act
18/2018 Coll. on the Personal Data Protection (also referred to as
the "PDP Act") by deleting the information below.
The person concerned
is within the meaning of § 19 Article 2 letter e) of the PDP Act
obliged to provide personal data for the purpose mentioned below,
otherwise it is not possible to conclude an agreement which the
person concerned is interested in.
Operator’s
identification data and contact details:
Operator:
Business
Name:
FITBOOK, s.r.o.
Registered office:
Dunajská 8, Bratislava – district of Staré Mesto 811 08
Business ID
No.:
47 999 390
Legal form:
Limited Liability Company
Entry:
Slovak R
epublic Commercial Register,
kept by the District Court Bratislava I, Section Sro,
File
No: 108482/B
Represented
by: Dominik Győri - Managing Director
Contact
details:
email
go2gym@go2gym.today
The
purpose of personal data processing for which personal data is
intended and the legal basis for personal data processing:
Purpose:
the conclusion of the agreement and the pre-contractual
relationship
Legal
basis:
Article
6 par. 1) letter b) of the Regulation and § 13 par. 1 letter b) of
the Personal Data Protection Act: personal data processing is
necessary for the performance of an agreement to which the person
concerned is a party or for the implementation of a pre-contractual
measure at the request of the person concerned,
Article
6 par. 1 letter c) of the Regulation and § 13 par. 1 letter c) of
the Personal Data Protection Act: personal data processing is
necessary according to a special regulation - the operator is obliged
under the special regulations to provide the personal data of the
person concerned to state institutions
The operator hereby
notifies the client as the data subject to process the personal data
without the consent of the data subject in the process personal data
processing as personal data processing will be performed by the
pre-contractual relationships and personal data processing is
necessary for the conclusion of the agreement, obliged to provide the
personal data of the person concerned to the state institutions.
Purpose:
sending
notices, news and more.
Legal
basis
§
13 par. 1 letter f) of the Personal Data Protection Act: personal
data processing is necessary for the purpose of the Operator’s or a
third party’s legitimate interests, except in cases where the
interests or rights of the data subject require personal data
protection as well as marketing communication from customers, and
also to provide benefits (in the case of a contractual relationship)
within the meaning of Article 6 par. 1 letter f) of the GDPR
Regulation. In line with the principle of proportionality, the
Operator concludes to inform customers through notifications of new
and service innovations or to keep marketing communication with them
(in the service segment of which the client has shown interest) and
overrides the interest in protecting the privacy of the person
concerned, namely processing the email address of the person
concerned. In order to process the email address, the Operator has
taken appropriate technical and organisational measures to protect
them.
The Operator
declares that personal data will be processed in accordance with good
morals and will act in a way that does not conflict with the PDP Act
and the Regulation.
Purpose:
to record a user's photo on a webpage www.go2gym.today
Legal
basis
§
13 par. 1 letter a) of the Personal Data Protection Act: the person
concerned has consented to their personal data being processed for at
least one specific purpose. The affected person publish the photos
themselves on the Operator's website. Given that the persons
concerned publish the photographs themselves, such proceedings may be
regarded as a statement of consent within the meaning of Article 13
par. 1 letter a).
Identification
of the beneficiary or beneficiary category, if there are any
Beneficiaries or the
categories of beneficiaries processing personal data are:
IT support, server
administrator and government institutions to meet the Operator's
obligations:
Governmental
authority and public authorities to perform inspection and
supervision (e.g. Slovak Business Inspection, Personal Data
Protection Office), court, law enforcement, etc.)
Personal
data retention period
Personal data
retention period: specific time - a time determined by the laws for
the exercise of the rights and obligations arising from the concluded
agreement, if the rights and obligations cannot be exercised within
the limitation period stipulated by the law; longer personal data
processing is possible solely for the purpose of archiving, for the
scientific purpose, for the purpose of historical research or for
statistical purposes under a special regulation.
Rights of
the person concerned
The
person concerned is entitled to:
require
access to personal data relating to the person concerned,
As a person
concerned, you have the right to provide us with a list of personal
data that we have at our disposal as well as information about how we
process your personal data.
repair the
personal data,
We have taken action
to preserve your accurate, complete and up-to-date personal
information. If you believe that your personal information we hold is
not accurate, complete and up-to-date, please let us know.
As a person
concerned, you may also ask us to delete your personal data if the
reasons stated above are met, for example, if the purpose of
processing has already ended.
limit
personal data processing,
As a person
concerned, you may be required to comply with the legal requirements
to discontinue using your personal data, e.g. in situations when you
think that the personal data that we hold is inaccurate etc.
object to
personal data processing,
As a person
concerned, you have the right to object to the processing of your
data, if you believe that we have no legal reason to process your
personal data; e.g. if our legitimate interests in personal data
processing do not outweigh the rights or interests of the person
concerned.
the
portability of personal data,
As a person
concerned, in certain circumstances, you have the right to ask us to
transfer the personal data you have provided to us. However, the
right of portability applies only to personal data you have provided
to us under your consent or under a contract of which you are one of
the parties.
As a person
concerned, you have the right to withdraw your consent at any time in
cases where we process your personal data based on your consent.
file a
petition to initiate proceedings or a complaint to the supervisory
authority,
As a person
concerned, you have the right to submit your proposal or complaint to
the Office for Personal Data Protection of the Slovak Republic,
https://dataprotection.gov.sk
, Hraničná 12, 820 07 Bratislava 27; telephone No.: +421 /2/ 3231
3214; E-mail: statny.dozor@pdp.gov.sk.
The person concerned
may request the exercise of the above rights at any time by emailing
go2gym@go2gym.today or in writing
to the post office address of the operator. An Operator shall process
the data subject’s request in respect of the aforementioned rights
within the statutory time limits.
Transmission
of personal data to a third country
For
the purpose of sending notifications, news, etc., the operator
processes an email address through a company in a third country that
has a European Commission decision on the adequacy of the level of
personal data protection.
This
company is a company titled: The Rocket Science Group, LLC, 675 Ponce
de Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, United States
(MailChimp.com operator)
The
Personal Data Protection Office has stated that a third country
guaranteeing an adequate level of personal data protection is the
country that the European Commission has designated as such in its
decision. Such a country is the United States of America (companies
certified in Privacy Shield mode):
https://dataprotection.gov.sk/uoou/sk/content/prenos-do-krajin-zarucujuc...
The
Rocket Science Group, LLC is a company certified in Privacy Shield
mode:
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG
The
rights of the person concerned are not compromised by transmission of
The Rocket Science Group, LLC email address to a third country.
go2gym.today