Data Protection

Who processes your personal data?

Your personal data is processed by us – the company

• Gamid s. r. o.
• Beniakova 3086/3
• 841 05 Bratislava
• Mobile: 0903 916 943
• Company ID: 52246230
• VAT ID: 2120993754
• info@taxi-bratislava-city.sk

Your personal data is also handled by: Google LLC, Facebook Inc., but only if you have given us consent to process personal data through the services provided by these companies on our website.

I. Introductory Provisions

For the purposes of these Principles, the following definitions apply:

• Personal Data: name and surname, email address, phone number, IP address, cookies.
• Gamid s.r.o. primarily processes and archives personal data necessary for providing you with products and services, fulfilling its legal obligations, and protecting its legitimate interests.

  Regarding clients and potential clients, it primarily processes the following categories of personal data: name and surname, phone number, email.

  At the same time, it maintains a database of individuals interested in receiving information about real estate news through a web form, who wish to receive price quotes or regular business communications at their contacts (email address) sent to them via the websites.

1. The operator of www.taxi-bratislava-city.sk, as the administrator of Personal Data, hereby informs about the manner and scope of processing Personal Data, including the extent of the Participant’s rights (as defined below) related to the processing of their Personal Data.
2. The operator processes personal data in accordance with the following legal regulations:

• Act No. 18/2018 Coll. on the Protection of Personal Data
• Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the “Regulation”)

1. A Participant is an individual who purchases services from the Operator or has used a part of the website www.taxi-bratislava-city.sk that requires personal data (name and email address, e.g., contact form).
2. The purpose is to sell services and provide information (to the participant). In connection with the above, the processing of Personal Data occurs:

• To the extent that it was provided in connection with the order of the Operator’s service or during negotiations for concluding a contract with the Operator, as well as in connection with the concluded contract.
• For the purposes specified below in Article II.

II. Purpose and Duration of Processing Personal Data

The Operator processes Personal Data for the following purposes:

a) Fulfillment of Business Conditions or Other Obligations and Provision of Services:

1. Personal data will be processed during negotiations for concluding a contract between the Operator and the Participant, for the purpose of concluding the contract (purchase of a course via the payment gateway intermediary Tickpo, as well as during the duration of the contractual relationship);
2. Marketing Activities: for the purposes of fulfilling marketing activities, evaluation, completion, delivery of any prizes, etc. The duration of processing is for the duration of the marketing activity.

b) Compliance with Legal Obligations (especially accounting, tax, and archiving, cooperation with regulatory authorities, police, courts, etc.):

1. Tax documents will be kept for 10 years from the conclusion of the contract: To fulfill the legal obligation to archive accounting documents under Act No. 563/1991 Coll. on Accounting as amended, Personal Data will continue to be processed and stored for 10 years from the year following the year in which the contract was concluded between the Operator and the Participant;
2. Fulfillment of obligations related to the exercise of rights from defective performance, providing cooperation with regulatory authorities, police, courts: The Operator is entitled to process basic personal, identification, and contact data of the customer, data about goods, and data from communication with the customer for a period of 4 years from the expiration of the warranty period for the goods.

c) Legitimate Interests of the Operator, Protection of the Rights and Legally Protected Interests of the Operator:

1. Effective defense in case of a dispute. The duration of processing is set for 4 years from the expiration of the warranty period for the goods and is extended by the duration of the dispute;
2. A legitimate interest of the Operator is further sending business communications (general offers and individual offers) in accordance with § 7 (3) of Act No. 480/2004 Coll. on Certain Services of the Information Society and in accordance with point 47 of the Regulation, if the Operator has obtained electronic contact details in connection with the sale of goods and services to the Participant.

d) Marketing and Business Offers of the Operator’s Services:

1. Mass Sending of Business Offers for Products: sending general advertising announcements without targeting a specific group of recipients. The duration of personal data processing in this case is 3 years;
2. Individual Offer: sending advertising announcements after evaluating certain personal aspects related to the individual. The Operator does not perform profiling in accordance with Article 22 of the Regulation, as it is not automated processing, but manual creation of individual offers. The duration of personal data processing in this case is 3 years;
3. Cookies: short text files generated by the web server and stored on the computer via the browser. There are two types distinguished. Firstly, these are cookies necessary for ensuring the functioning and analysis of the website (carrying out the transfer of electronic communication via an electronic communication network; with these cookies, consent cannot be refused). Secondly, there are cookies that evaluate certain personal aspects related to a specific individual. With the use of the second type of cookies, the Participant must give consent. The duration of processing in this case is 3 years. For remarketing purposes, cookies are shared with other processors only if consent has been granted for this purpose, with a maximum expiration period of 500 days. If consent for advertising cookies is revoked, it is technically impossible to immediately delete cookies already shared with the processor. Cookies will be automatically deleted from the processor after the expiration period has passed. An immediate solution to prevent remarketing activities by the processor is to delete cookies from the browser.

III. Data Protection and Information on Processing

1. If the Participant does not provide their Personal Data, it will not be possible to conclude a contract with the Operator and/or provide the services arising from it, as required by Tickpo, through which the service purchase is executed. Personal Data are essential in this regard for providing the specific service of the Operator.
2. After the expiration of the periods stated in Article II, the Operator will delete or anonymize Personal Data.
3. The Participant is obliged to provide only truthful and accurate Personal Data to the Operator. The Participant is responsible for the correctness, accuracy, and truthfulness of the provided Personal Data. The Operator is not responsible for the correctness of the provided data.
4. The Operator will make every effort to prevent unauthorized processing.
5. The Operator is entitled to transfer the Participant’s Personal Data to third parties for the following purposes: completing the order process, sending business communications, evaluating customer satisfaction, customer support services, and handling complaints.
6. Personal Data are and will be processed in electronic form in a non-automated manner.

IV. Participant Rights Related to Personal Data Processing

1. The rights of the Participant in relation to data protection:
   a. to request access to their Personal Data from the Operator;
   b. to rectify provided Personal Data;
   c. to delete provided Personal Data;
   d. to restrict the processing of Personal Data;
   e. to file a complaint with the Office for Personal Data Protection;
   f. the right to transfer personal data to another controller;
   g. the right to object to the processing of personal data;
   h. the right to withdraw consent.
2. The Participant can exercise their rights under paragraph 1 of this article via the link provided in the footer of the email sent by the Operator or by sending a request to info@taxi-bratislava-city.sk.
3. The rights under paragraph 1 of this article, letters c) and d), cannot be exercised to the extent and for the purposes stated in Article II, paragraph 1, letters a), b), and c).
4. If the Participant believes that the Operator is processing their Personal Data in a manner that violates the protection of their private and personal life or violates relevant legal regulations, especially if the Personal Data are inaccurate concerning the purpose of processing, they may:

• request an explanation from the Operator by emailing info@taxi-bratislava-city.sk
• object to the processing and request via email sent to info@taxi-bratislava-city.sk that the Operator ensure the removal of the situation that has arisen (e.g., by blocking, correcting, supplementing, or deleting Personal Data). The Operator will decide on the objection without delay and inform the Participant. If the Operator does not comply with the objection, the Participant has the right to contact the Office for Personal Data Protection directly. This provision does not affect the Participant’s right to approach the Office for Personal Data Protection directly with their request.

5. If the Participant exercises their rights under this article, the Operator is obliged to respond within 30 days from the receipt of the request by the Operator.

6. The acceptance of a request to exercise the right from Article IV, Point 1 a) and f) is possible only through a data message or letter with an officially certified signature sent to the company’s registered office. The request must include the email address to which a verification email will be sent to confirm the identity of the requester.

7. If the Participant exercises any of the rights from Article IV, Paragraph 1, the Operator has the right to request proof of the Participant’s identity. The request for access to personal data must be sent from the requester’s email address. If the request is submitted in another form or from a different email address, the Operator has the right to require additional verification in the form of a response to the verification email. If the requester does not prove their identity within 14 days from sending the verification email, their request to exercise the rights from Article IV, Paragraph 1 will not be accepted.

8. The Operator is entitled to charge a reasonable fee for administrative costs associated with repeated and unjustified requests for a physical copy of the processed Personal Data.

V. Final Provisions

1. All legal relationships arising from the processing of Personal Data shall be governed by the legal order of the Slovak Republic, regardless of where access to them was made. The Slovak courts are competent to resolve any disputes arising in connection with privacy protection between the Participant and the Operator.
2. The data subject has the right to contact the Office for Personal Data Protection (https://dataprotection.gov.sk/uoou/sk).
3. These Principles come into effect on May 25, 2018.

How can I change, update, or delete my personal data?

Customers can change or update their personal data at any time by logging into their account or by making a written request to info@taxi-bratislava-city.sk. Additionally, upon your written request, personal data will be deleted from the database, and Gamid s.r.o. will no longer process them.

What are cookies and how do we use them?

A cookie is a small text file that is transmitted from a website and stored on your computer or mobile device. Gamid s.r.o. (and/or its partners such as Google, Facebook, etc.) uses cookies to improve and simplify your visit to the website www.taxi-bratislava-city.sk. We do not use them to store your personal information, nor do we provide them to third parties.

Do you have to provide us with your personal data?

You provided your personal data to us voluntarily based on your free consent, and you were not obliged to give such consent for the processing of personal data.

Will we transfer your personal data to a third country?

The provision of our services requires collaboration with the aforementioned companies. This means that your personal data may be transferred to third countries. However, such transfers will always be conducted in accordance with the legislative requirements set forth by Act No. 18/2018 Coll. on the Protection of Personal Data and amending and supplementing certain laws, as well as Regulation (EU) 2016/679 of the European Parliament and Council, ensuring the protection of your personal data in every case. Specifically, this involves servers and cloud solutions from Google LLC and Facebook Inc.

What rights do you have?

In connection with the protection of personal data, you have the following rights:

• Right of access to your personal data: You have the right to request confirmation from us as to whether we are processing personal data concerning you. If we process your data, you have the right to access this personal data and detailed information about all facts related to the processing of this personal data (Your right of access to personal data is governed by § 21 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws, and Article 15 of Regulation (EU) 2016/679 of the European Parliament and of the Council). Upon your request, we are obliged to provide you with your personal data that we process; for repeated requests for this data, we are entitled to charge you a reasonable fee corresponding to administrative costs.
• Right to rectification of personal data: You have the right to have inaccurate personal data concerning you rectified or to have incomplete personal data completed (Your right to rectify personal data is governed by § 22 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws, and Article 16 of Regulation (EU) 2016/679).
• Right to erasure of personal data: You have the right to request the erasure of personal data concerning you (Your right to erasure of personal data is governed by § 23 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws, and Article 17 of Regulation (EU) 2016/679) if:
  (a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed,
  (b) the personal data have been unlawfully processed,
  (c) you withdraw your consent to the processing of personal data and there is no other legal basis for processing your personal data,
  (d) you object to the processing of personal data and there are no overriding legitimate grounds for the processing of personal data, or you object to the processing of personal data under § 27 (2) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws,
  (e) erasure is necessary for compliance with a legal obligation under Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws, a special regulation, or an international treaty to which the Slovak Republic is bound, or
  (f) the personal data were collected in connection with the provision of information society services under § 15 (1) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws.
  You cannot exercise the right to erasure of your personal data if:
  (a) the processing of personal data is necessary for the establishment, exercise, or defense of legal claims,
  (b) it is necessary for the exercise of the right of freedom of expression or the right to information,
  (c) it is necessary to comply with a legal obligation under Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws, Regulation (EU) 2016/679, a special regulation, or an international treaty to which the Slovak Republic is bound, or to perform a task carried out in the public interest or in the exercise of official authority vested in the personal data processor,
  (d) it is for reasons of public interest in the area of public health in accordance with § 16 (2) (h) to (j) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws,
  (e) for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with § 78 (8) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Laws, if it is likely that your right would prevent or seriously hinder the achievement of the objectives of such processing.
• Right to Restrict Processing of Personal Data (Your right to restrict the processing of personal data is governed by § 24 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts and Article 16 of the Regulation of the European Parliament and Council (EU) No. 2016/679) if:
  (a) you contest the accuracy of the personal data, for a period allowing us to verify the accuracy of the personal data,
  (b) the processing of personal data is unlawful, and you oppose the deletion of personal data and instead request a restriction on its use,
  (c) we no longer need the personal data for the purpose of processing, but you need it to establish a legal claim, or
  (d) you contest the processing of personal data according to § 27 para. 1 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts and Article 21 para. 1 of the Regulation of the European Parliament and Council (EU) No. 2016/679. If the processing of personal data has been restricted, we may only process the personal data with your consent or for the purposes of establishing a legal claim, protecting individuals, or for reasons of public interest, in addition to retaining the personal data.
• Right to Object to the Processing of Personal Data (Your right to object to the processing of personal data is governed by § 27 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts and Article 21 of the Regulation of the European Parliament and Council (EU) No. 2016/679) if personal data is processed based on a legal basis according to § 13 para. 1 letter e) or letter f) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts, or Article 6 para. 1 letter e) or f) of the Regulation of the European Parliament and Council (EU) No. 2016/679. In such cases, the controller may not process personal data unless we demonstrate the necessary legitimate interests for processing personal data that override your rights or interests or reasons for establishing a legal claim.
• Right to Data Portability (Your right to data portability is governed by § 26 of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts and Article 20 of the Regulation of the European Parliament and Council (EU) No. 2016/679), in a structured, commonly used, and machine-readable format, where you have the right to transfer this personal data to another controller, if technically feasible and if the processing is carried out by automated means and is based on a legal basis under § 13 para. 1 letter a) or letter b) of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts, or Article 6 para. 1 letter a) or letter b) of the Regulation of the European Parliament and Council (EU) No. 2016/679, i.e., if we process personal data based on your consent or for the performance of a contract or contractual obligation.

Why do we need your personal data?

We need your personal data processed through Google Analytics to analyze the traffic on our website, primarily to verify whether our site remains interesting for you and other users and whether its traffic is not declining.

We need your personal data processed through Google AdWords and Facebook Pixel for advertisement personalization, specifically to ensure that the advertisements for our website are displayed mainly to users who may be interested in our content, services, and products.

We process your personal data based on your consent solely for these purposes, and we may provide them to Google LLC and Facebook Inc., which provide services through which your data is collected, to achieve the purpose of processing.

We process your personal data through automated means, and there is no automated individual decision-making or profiling during processing in accordance with § 28 para. 1 and 4 of Act No. 18/2018 Coll. on the Protection of Personal Data, or Article 22 of the Regulation of the European Parliament and Council (EU) No. 2016/679.

Who can you contact in case of a problem?

• If you believe that we have violated your rights regarding personal data protection, you can contact us at the email address: info@taxi-bratislava-city.sk
• Alternatively, you can contact the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.
• You can refuse cookies or delete them if necessary. Instructions on how to do this can be found in the “Help” section of your web browser.