Consent with Personal Data Processing
Notification of information pursuant to the provision of Section 15 of Act No. 122/2013 on Personal Data protection as amended (hereinafter only referred to as “the Act on Personal Data Processing”):
Operator’s identification data:
MEDICAL LOGISTIC s.r.o.
Starohorská 31, 974 11 Banská Bystrica
Company reg. no.: 35 925 868
Registered in the Commercial Register maintained by the District Court Banská Bystrica
Section Sro, insert no. 16885/S
Processor’s identification data:
(if the Operator is not the Processor of personal data.)
Purpose of personal data processing:
a) identification of Parties in order to produce a transportation or shipment contract;
b) keeping records on the Operator’s customers;
c) keeping records on job applicants at the Operator;
d) sending information regarding services, marketing activities and job vacancies in the Operator’s company.
Scope of personal data provided to the Operator:
(It will be necessary to list all information included in the contact form)
Consent is granted by the voluntary ticking of a box intended for this purpose (checkbox) as part of the contact form, with a relevant description and reference to this document. The field is not pre-filled and granting of the consent requires the activity of the person concerned.
By submitting the registration form and ticking the relevant field, the user agrees that its personal data will be processed by the Operator to the extent specified above in the part Scope of personal data provided to the Operator. Personal data are submitted to the information system on a voluntary basis, based on the consent of the person concerned, and the consent is valid for 10 years from the day of granting. Consent with personal data processing may be withdrawn at any time by sending an e-mail to: email@example.com
The legal basis for personal data processing is the consent of the person concerned in accordance with the provision of Section 11 of the Act on Personal Data Processing.
The Operator reserves the right to provide and disclose personal data to the processor identified above in section Processor’s identification data for the purpose described above in section “Purpose of personal data processing”.
If the person concerned requires the execution of a shipment contract, the Operator reserves the right to provide and disclose personal data to the carrier selected by the Operator in order to ensure proper transportation.
Personal data in the extent described above in the part “Scope of personal data provided to the Operator” will not be transmitted to third countries or published by the Operator.
The person concerned has the following rights pursuant to the provision of Section 28 of the Act on Personal Data Processing:
1. Upon written request, the person concerned is entitled to ask the following from the Operator:
a) confirmation whether its personal data are processed or not;
b) in a generally understandable form, information regarding personal data processing in the information system to the extent pursuant to Section 15(1) letters a) to e), second to sixth point; upon the issue of a resolution pursuant to section 5, the person concerned is entitled to become familiar with the procedure for processing and evaluation of operations;
c) in a generally understandable form exact information regarding the source from which the Operator obtained personal data of the person concerned for the purpose of processing;
d) in a generally understandable form list of its personal data which are subject to processing;
e) correction or disposal of its incorrect, incomplete or obsolete personal data which are subject to processing;
f) disposal of its personal data whose purpose of processing ended; if processing involves official documents containing personal data, the person concerned may request their return;
g) disposal of its personal data which are subject to processing, if a breach of law occurred;
h) blocking its personal data due to the withdrawal of the consent before the expiry of consent validity, if the Operator processes personal data based on consent of the person concerned.
2. Right of the person concerned pursuant to section 1(e) and (f) may be restricted if such restriction results from a special law or if the exercise of such right would affect the protection of the person concerned or the rights and freedoms of other persons.
3. Upon written request, the person concerned is entitled to make objections to the Operator on the matter of:
a) processing of its personal data in the case where it is anticipated that the personal data are or will be processed for purposes of direct marketing without the consent of the person concerned, and ask for their removal;
b) using personal data in Section 10(3) letter d) for the purposes of direct marketing in postal communication, or
c) provision of personal data in Section 10(3) letter d) for the purposes of direct marketing.
4. The person concerned is entitled, based on a written request or in person if the matter cannot be delayed, to object to the Operator at any time on the matter of processing of personal data in cases pursuant to Section 10(3) letters a), e), f) or g) of the Act on Personal Data Protection by means of expressing its substantiated reasons or submitting evidence on unauthorized infringement of its rights and interests protected by law which are or may be in the individual case harmed by such processing of personal data; if statutory reasons do no prevent it and the objection of the person concerned is proven to be substantiated, the Operator is obliged to block and dispose of the personal data the processing of which the person concerned objected to as soon as practicable.
5. The person concerned is entitled, based on a written request or in person if the matter cannot be delayed, to object to the Operator at any time with relation to any Operator’s resolution and not to obey such resolution if such resolution would have legal effects on or significant consequences for the person concerned, if such resolution is issued exclusively based on the acts of the automated processing of its personal data. The person concerned is entitled to ask the Operator for a review of such resolution using a method different from the automated form of processing, and the Operator is obliged to satisfy such request by the person concerned with a decisive role in the course of such review of the resolution to be played by the authorized person; the Operator shall inform the person concerned regarding the review method and result within the period as per Section 29(3) of the Act on Personal Data Protection. The person concerned does not hold such right only if so prescribed by a special law specifying measures for safeguarding the authorized interests of the person concerned or if as part of pre-contractual relations or in the course of contractual relations the Operator issued a resolution by means of which the Operator satisfied the request of the person concerned, or if the Operator took other appropriate measures in the form of a contract in order to ensure the legitimate interests of the person concerned.
6. If the person concerned exercises its right
a) in writing and it is obvious from the content of its request that it is exercising its right, the request is deemed delivered pursuant to this Act; requests submitted electronically or by fax shall be delivered by the person concerned in writing within three days from sending at the latest;
b) in person verbally to be included in the minutes from which it must be obvious who is exercising the right, what is such person demanding, the date of the minutes and name of the minute taker, signature of the minute taker and signature of the person concerned; the Operator is obliged to submit a copy of the minutes to the person concerned;
c) at the intermediary pursuant to letter a) or letter b), the intermediary is obliged to submit such request or minutes to the Operator without undue delay.
7. When the person concerned suspects that its personal data are processed illegitimately, it may file a proposal to the Office for the commencement of proceedings on personal data protection.
8. If the person concerned does not have full legal capacity, its rights may be exercised by a statutory representative.
9. If the person concerned is not alive, its rights pursuant to the Act on Personal Data Protection may be exercised by a near person.
The request of the person concerned pursuant to section 1 letters a) to c) and e) to h) and sections 3 to 5, shall be processed by the Operator free of charge. The request of the person concerned pursuant to section 1 letter d) shall be processed by the Operator free of charge except for a payment that may not exceed the amount of effectively spent material costs associated with the production of copies, procurement of technical carriers, and sending information to the person concerned, unless a specific law defines otherwise.
The Operator is obliged to settle a request by the person concerned pursuant to sections 1 and 2 in writing within 30 days from the delivery of such request. The Operator shall notify the person concerned and the Office without undue delay in writing of the restriction of the rights of the person concerned pursuant to section 2.