Personal data protection

PRIVACY POLICY

I. General provisions

1.1 The controller of personal data pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “GDPR”) and Act No. 18/2018 Coll. on Personal Data Protection (hereinafter referred to as the “Act”) is brainit.sk, s. r. o., Company ID: 52577465, Tax ID: 2121068763, with its registered office at Budova VÚD, Veľký diel 3323, 010 08 Žilina
(hereinafter referred to as the “Controller”).

1.2 Contact details of the Controller:

Address: Budova VÚD, Veľký diel 3323, 010 08 Žilina
Email: info@brainit.sk 
Phone: +421 918 022 030

1.3 Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

II. Sources and Categories of Processed Personal Data

2.1 The Controller processes personal data that you have provided or personal data obtained based on completing a contact form on the website operated under the domain brainit.sk and in connection with the fulfillment of your order.

2.2 The Controller processes your identification and contact data and data necessary for contract performance.

III. Legal Basis and Purpose of Processing Personal Data

3.1 The legal basis for processing personal data is:

• performance of a contract between you and the Controller pursuant to Section 13(1)(b) of the Act,

• the legitimate interest of the Controller in providing direct marketing (especially for sending commercial communications and newsletters) pursuant to Section 13(1)(f) of the Act,

• your consent to processing for the purposes of direct marketing (especially for sending commercial communications and newsletters) pursuant to Section 13(1)(a) of the Act, if no order of goods or services has been made.

3.2 The purpose of processing personal data is:

• processing your order and exercising rights and obligations arising from the contractual relationship between you and the Controller; personal data required for successful order processing include (name, surname, title, address, personal identification number, nationality, contact details); providing personal data is a necessary requirement for concluding and fulfilling a contract; without providing personal data, it is not possible to conclude or perform the contract,

• sending commercial communications and carrying out other marketing activities, organizing courses, certification exams, and issuing tax documents.

3.3 The Controller performs automated individual decision-making pursuant to Section 28 of the Act. You have given your explicit consent to such processing.

IV. Data Retention Period

4.1 The Controller stores personal data until the consent of the data subject is withdrawn.

4.2 After withdrawal of consent, the Controller deletes personal data.

V. Recipients of Personal Data (Controller’s Subcontractors)

5.1 Recipients of personal data are persons:

• involved in the delivery of services and payment processing under a contract,

• providing marketing services.

5.2 The Controller intends to transfer personal data to a third country (a country outside the EU) or an international organization. Recipients of personal data in third countries are providers of mailing services / cloud services.

VI. Your Rights

6.1 Under the conditions set out in the Act, you have:

• the right of access to your personal data pursuant to Section 21 of the Act,

• the right to rectification of personal data pursuant to Section 22 of the Act, or restriction of processing pursuant to Section 24 of the Act,

• the right to erasure of personal data pursuant to Section 23 of the Act,

• the right to object to processing pursuant to Section 27 of the Act,

• the right to data portability pursuant to Section 26 of the Act,

• the right to withdraw consent to processing in writing or electronically to the address or email of the Controller specified above.

6.2 You also have the right to lodge a complaint with the Data Protection Authority if you believe that your right to personal data protection has been violated.

VII. Conditions for Securing Personal Data

7.1 The Controller declares that it has taken all appropriate technical and organizational measures to secure personal data.

7.2 The Controller declares that only authorized persons have access to personal data.

VIII. Final Provisions

8.1 By submitting an order, you confirm that you have read the privacy policy and that you accept it in its entirety.

8.2 You also agree to these terms by checking the consent box via the online form. By doing so, you confirm that you have read and fully accept the privacy policy.

8.3 The Controller is entitled to amend these terms. The new version of the privacy policy will be published on its website and also sent to your email address provided to the Controller.

These terms take effect on 1 July 2022.