for individuals in the European Economic Area (EEA), United Kingdom (UK) and Switzerland
pursuant to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter as „GDPR“) and the UK and Swiss equivalents:
Controller: FEDEVEL s.r.o., residing at Inovecká 1131/1, 911 01 Trenčín, Slovakia, ID No.: 40 604 634
Contact information: tel.: +421 908608092, e-mail: email@example.com
and its affiliate : FEDEVEL, Inc., residing at 1900 Camden Ave, San Jose, CA 951 24, USA
Contact information: tel. +1 (408) 512-3926, e-mail: firstname.lastname@example.org
Data Subject: any natural person whose personal information is processed
Data Retention: We retain personal information for as long as the information is needed for the purposes set forth above and for any additional period that may be required or permitted by law. If there’s no legal basis for retaining your personal information, we will delete it as required by applicable law.
Recipients of personal information:
· Employees of the company or your Instructor: to fulfill their work duties;
· Processors: our business partners (suppliers, service providers, agents) are contractually obligated to follow appropriate data protection legislation and privacy policies. We only disclose personal information that is necessary for our business partners to provide their services;
· Public authorities: government bodies or other public authorities, and courts of justice may receive personal information only in limited scope set forth by legislation.
International transfers: Your personal information may be transferred to, stored at or processed outside of EEA, UK or Switzerland, the United States and other countries that may not have equivalent privacy or data protection laws. To assure that personal information is adequately protected when it is transferred out of the EEA, the UK, or Switzerland to countries without an adequate level of data protection, we use standard contractual clauses, or use only recipients with approved binding corporate rules or certified companies.
Data protection in our company: We use various technical and organizational safeguards to help protect your personal information from unauthorized access.
You can exercise the following rights to protect your personal information:
a) Right of access: You have the right to obtain a confirmation from us as to whether or not your personal information is being processed, and, where that is the case, access to the personal information and the following information: information about processing, categories of personal information concerned, the recipients or categories of recipients, period for which the personal data will be stored, the right to get more detailed information about your rights, the right to lodge a complaint with a supervisory authority, the right to know the source of personal information, the existence of automated decision-making or profiling, information and safeguards in case international transfer of personal information may occur. You have the right to receive copies of processed personal information, unless it may adversely affect the rights and freedoms of others;
b) Right to rectification: You have the right to obtain without undue delay rectification of your inaccurate personal information;
c) Right to be forgotten: You have the right to request for your personal information to be erased without undue delay (under GDPR, you have the right to erasure especially when your personal information is no longer necessary in relation to the purposes for which it was collected or the personal information have been unlawfully processed; You cannot exercise this right where processing of personal data is necessary for the establishment, exercise or defense of legal claims of the controller or third parties.);
d) Right to restriction of processing: In certain cases under GDPR you may request that we restrict the way we process your personal information (e.g. you can request that we don‘t erase your personal information when we no longer need it for processing, or you can request that we no longer process your personal information until we verify it’s accuracy or that your complaint objecting processing is legitimate);
e) Right to data portability: You have the right to transmit your personal information to another controller if it’s technically possible, the processing is carried out by automated means and it won’t adversely affect the rights and freedoms of others;
f) Right to object: You may object processing of your personal information if it’s based on the following grounds: public interest or legitimate interest of the controller or a third party (GDPR Article 6 (1) e), f). We may no longer process your personal information unless we provide compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims;
g) Right to lodge a complaint: with a supervisory authority, especially if you suspect that we breached our legal obligations when processing personal information
After you contact us: When you contact us (via telephone, e-mail, or regular mail), we will store the information you’ve provided us with (your e-mail address, or your name and phone number) for our company to be able to answer your questions or to process your request. Your personal information will be erased after we no longer need it for the selected purpose or we will restrict it’s processing in case we are legally obligated to keep it. We will provide you with any relevant information without undue delay and at latest within 1 month from receiving your request. However, that period may be extended by two further months where necessary, taking into account the complexity and number of the requests. We will inform you of any such extension together with the reasons for the delay.
Notice: If we have any reasonable doubts about your identity as a data subject who has exercised its rights, we are allowed to conduct a verification of your identity by requesting additional information or by other suitable means.