Personal Data Protection Policy

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR“ ) and Act No 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as the “PPD Act“). The security of personal data and its lawful processing is important to us. Here you will learn how we process your personal data and how we achieve its security.

                                                                                

1. OUR DATA

Who are we?

Business name: ATISA, s.r.o.

Registered in the Commercial Register of Bratislava District Court, Section: Sro, File No. 41715/B 

Registered office: Francisciho 2, Bratislava 811 08

Reg. No.: 36 659 339

Tax No.: 2022224633

VAT No.: SK2022224633

Represented by: Ing. Miroslav Kubů, executive director

Email address: info@atisadesign.com

Phone number: +421 903 109 655

(hereinafter referred to as the „Operator”).

1. CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS AND PERIOD

What personal data do we process, for what purpose, on what legal basis and for what period?

We only process personal data that we strictly need to achieve the stated purpose. We process personal data for this purpose:

Accounting agenda

We process the personal data of passengers and their contact persons or other data subjects in the scope of name, surname, address, account number, telephone number, email and payment details for the purpose of bookkeeping and fulfilment of obligations arising from the Accountancy Act and other relevant legislation. The legal basis for the processing of personal data is the fulfilment of legal obligations. We keep accounting documents for 10 years.

Supply contracts

We process the personal data of suppliers and their contact persons, including their first name, last name, address, telephone number, email address, bank account number, order and payment details, for the purposes of concluding and performing contracts and keeping records of supply contracts. The legal basis for the processing of personal data is the performance of the contract. We store your personal data for the duration of the contractual relationship and for 5 years after its termination in case one of the contracting parties asserts their claims. We store communication within pre-contractual relationships for 6 months.

Purchase agreements

We process customers’ personal data in the scope of name, surname, company name, billing address, delivery address, subject of the agreement, bank account number, payment details, telephone number, and email address for the purpose of receiving and processing orders. The legal basis for their processing is the performance of the contract.

We store the personal data of interested parties from pre-contractual communication for the purpose of receiving inquiries and creating price offers for 6 months.

We store personal data processed for the purpose of concluding and performing a contract for 5 years.

Complaints

We process the personal data of customers in the scope of name, surname, billing address, the subject of the complaint, bank account number, telephone number, email address, and other personal data necessary for handling the complaint for the purpose of receiving and handling the complaint.  The legal basis for the processing of this personal data is the fulfilment of a legal obligation under the Consumer Protection Act.

We store personal data for 5 years from the date of processing the complaint.

Contact form

We process the personal data of interested parties in the scope of name, surname, e-mail, subject of the message for the purpose of receiving and handling your inquiry. The legal basis for the processing of this personal data is the performance of a contract or pre-contractual relations. We store personal data for 6 months.

Newsletter and direct marketing

We process the personal data of those who have subscribed to our newsletter using the designated form, including their first name, last name, and email address, on the legal basis of the consent of the data subject. We process the personal data of our customers or other people with whom we have a contractual relationship for the purpose of sending newsletters and carrying out direct marketing activities on the legal basis of legitimate interest, which is to provide information about the operator’s activities, offers, and promotions. The data subject may withdraw their consent at any time or object to the processing of personal data by sending a written notice or by unsubscribing from the newsletter. We process personal data for a period of 10 years.

Social network management

We process the personal data of fans of our official social networking sites for the purpose of managing social networks. The legal basis for the processing of personal data is a legitimate interest, which is the presentation of the Operator and its services via social networks. We process personal data for as long as you are a fan of our site.

Cookies

We process cookies to ensure the functionality and ease of use of our website and for advertising purposes. The legal basis for the processing of cookies is your consent, which you give us by clicking the appropriate button on the cookie bar. We store cookies for 14 months. For more information about what cookies are and how we process them, see our Cookie Policy.

1. CONSENT

In the above cases, we process your personal data on the legal basis of consent, i.e. only with your consent. You can revoke this consent at any time by deleting your user account, unsubscribing from the newsletter, sending a notification to our email address, or, in the case of cookies, changing your browser settings.

1. RECIPIENTS

Who do we provide your personal data to?

We only provide or disclose personal data to a third party if we are required to do so by a specific law or if it is necessary for the performance of a contract, in particular to public authorities and other authorised bodies.

We also provide your personal data to intermediaries who supply us with professional and specialized services. We have entered into a data processing agreement with each processor and have bound them to confidentiality. We have entrusted the processing of personal data to:

• accountant,
• webhosting provider,
• emailing service provider,
• external employee.

Your personal data may also be provided to other persons, such as a shipping company, for the purpose of fulfilling the contract.

1. THIRD COUNTRIES

Where do we transfer your personal data?

We transfer personal data to a third country in connection with the use of Google services and social networks, namely to the USA. That country provides adequate safeguards for the security of your personal data.

1. OBJECTION TO PROCESSING

Are you not satisfied?

If you are not satisfied with how we process your personal data, you can let us know about it by e-mail info@atisadesign.com. You also have the option of filing a complaint to the Privacy Office if you believe that we process your personal data unlawfully.

Data protection office

Hraničná 12, 820 07 Bratislava

E-mail: statny.dozor@pdp.gov.sk

1. METHOD OF PROCESSING PERSONAL DATA

How do we process your personal data?

We process personal data in electronic and paper form. We do not use any means of automated individual decision-making.

We keep records of all processing activities and have the necessary technical and organisational security measures in place to ensure the protection of personal data. These measures include, in particular, anti-virus programs, a strong password policy and encryption. We regularly back up the personal data entrusted to us so that it can be immediately restored in the event of accidental damage or loss. Those who process personal data have been instructed and are bound by confidentiality. We take a very responsible approach to the selection of processors, ensuring that the selected processor provides us with adequate guarantees for the security of your personal data.

1. RIGHTS OF DATA SUBJECTS

What are your rights?

The GDPR gives you certain rights that you can use to influence how we process your personal data. However, not all rights can be exercised in all circumstances. This must be based on the legal basis for the processing of your personal data.

1. Right to access to date

You have the right to know if we process your personal data. If we process it, you can ask for access to your data. Based on your request, we will issue a confirmation with information about processing your personal data by our company.

1. Right to correction

You have the right to ensure that your personal data we process is correct, complete and up to date. If your personal data is incorrect or out of date, you may ask us for a correction or addition.

We will carry out the repair without undue delay, taking into account the technical possibilities.

1. Right to deletion

Under certain circumstances, you have the right to delete your personal data. You can ask us to delete your data any time. We will delete your data if:

• we do not need it any more for the purpose for which you provided it,
• your revoke your consent:
• if you object against the processing of your personal data,
• we process your personal data unlawfully,
• personal data must be deleted in order to comply with the statutory duty,
• if you are a child, parent of a child who has agreed to process personal data over the Internet.

1. Right to restrict processing

You may ask us to restrict the processing of your personal data. If we accept your request, we will only retain your personal data and we will not work with it. The processing of your data will be restricted if:

• you let us know that your personal data is incorrect, until we have verified its correctness,
• we process your personal data unlawfully, but you do not agree with its deletion, and instead you ask us to only restrict the processing of your personal data,
• we no longer need your data, but you need them to prove, enforce or defend your rights,
• you object against the processing of your personal data, until we have verified that our legitimate interests prevail over your reasons.

1. Right to data portability

In the cases prescribed by law, you have the right for us to transfer your personal data to the selected company. This applies in particular to the processing of personal data with consent or for the performance of a contract, if the processing is carried out by automated means and it is technically feasible.

1. Right to object

Where we process your personal data based on a legitimate interest, you have the right to object to the processing. Unless we can prove that there is a compelling legitimate ground for processing that overrides your interests or rights, the processing of your personal data will be terminated without undue delay on the basis of your objection.

You can send us a request to exercise your rights by email or by post to the address above. We will deal with all your requests and will inform you of the outcome in the same way as you make your request.

1. FINAL PROVISIONS

This Personal data protection policy shall take effect on the date of its publication on 7.10.2025. We reserve the right to change this policy if there is a change in the processing of personal data in our company.