PRIVACY STATEMENT

I process your personal data in a lawful manner, in accordance with applicable legislation, the Data Protection Act and EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

IDENTIFICATION AND CONTACT DETAILS
COMPANY: WFG Consulting s. r. o.
ID: 53844602
Address: Tolstého 5
Bratislava - Staré Mesto 811 06

Responsible person and personal data controller:

Email: wfgroup@wfgroup.sk

This document describes how the operator WFG Consulting s. r. o., Tolstého 5, Bratislava - Staré Mesto 811 06, ID No.: 53844602, registered in the Commercial Register of the Municipal Court of Bratislava III, Section: Sro, File No.: 153401/B (hereinafter referred to as the "Operator") processes personal data. We process your personal data in accordance with the requirements of the GDPR, Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Additions to Certain Acts, as amended, and other generally binding legal regulations.

PERSONAL DATA CONTROLLER
The personal data controller is:
Controller:
WFG Consulting s. r. o.

Legal form:
Limited liability company

Registered office:
Tolstého 5, Bratislava - Old Town 811 06

E-mail:
wfgroup@wfgroup.sk

Phone number:
+421 918 564 322

Personal data is any information about an identified or identifiable natural person; an identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to a particular identifier, such as the name, identification number, address, birth number, telephone, e-mail consisting of first or last name, location data, network identifier, etc. of that natural person.

RECIPIENTS OF PERSONAL DATA
Recipients or categories of recipients to whom the data may be disclosed/communicated:
Public authorities, health insurers and others where relevant legislation exists, external contractors in accordance with §11 BDSG, external service providers, affiliated companies and internal departments for the fulfilment of the purpose referred to in point 5.

WebSupport s.r.o., Karadžičova 12, Bratislava 821 08
MI:SU Design, s.r.o., Prostějovská 115, 080 01 Prešov

SOURCES AND CATEGORIES OF PERSONAL DATA PROCESSED
The controller processes personal data that you have provided to the controller or personal data that the controller has obtained on the basis of the fulfilment of your order.
The controller processes your identification and contact data and the data necessary for the performance of the contract.
In particular, the Controller is entitled to process the following personal data of the Data Subject:

- Address and identification data serving to uniquely and unmistakably identify the Data Subject (e.g. name, surname, title, permanent address, business address, delivery address, ID number, VAT number) and contact data with the Data Subject (e.g. contact address, telephone number, e-mail address, etc.),
- descriptive data (e.g. bank account, order history),
- photographs, preview images, banners and videos,
- data provided in excess of the relevant laws processed within the scope of the consent granted by the Data Subject (e.g. use of personal data for the purpose of personnel management, use of personal data for the purpose of promotion, etc.),
- personal settings (preferences), including marketing settings and the use of cookies by the Data Subject,
- other data necessary for the performance of the contract,
- other personal data provided by the Data Subject to the Data Controller.
THE PURPOSES OF THE PROCESSING OF PERSONAL DATA
GDPR agenda
Article 6(1)(c) GDPR - compliance with a legal obligation
Contact form
Article 6(1)(f) GDPR - legitimate interest
Website (cookies)
Article 6(1)(a) GDPR - consent

The Controller processes the Data Subject's personal data for the purposes of:

A) the performance of a contract, on the basis of Article 6(1)(b) GDPR,
B) compliance with a legal obligation of the Data Controller established by a generally binding legal regulation, on the basis of Article 6(1)(c) GDPR (e.g. the obligation of the Data Controller to keep accounting and tax documents),
C) the establishment, exercise or defence of legal claims of the Controller, on the basis of Article 6(1)(f) GDPR,
D) sending commercial communications, on the basis of Article 6(1)(f) of the GDPR, due to the existence of a legitimate interest of the Data Controller in direct marketing,
E) other marketing purposes of the Data Controller related to the offer of products and services; sending information about news (products, technologies, showrooms), company presentations (fairs, exhibitions), services, etc. (e.g. by sending newsletters, telemarketing); contacting for the purpose of market research and marketing surveys; contacting for the purpose of wishing important public holidays and sending gift vouchers, etc., on the basis of Article 6(1)(a) of the GDPR.

RETENTION PERIOD OF PERSONAL DATA

WFG Consulting s. r. o. will destroy the stored data after the expiration of the period specified by law, the consent granted or if it is no longer needed. Personal data will be processed only for the time necessary for the purpose of processing. With regard to the above:
- for the purpose under (A) above, personal data will be processed until the termination of the contractual obligations (without prejudice to the possibility of the Data Controller to further process the personal data subsequently - to the extent necessary),
- for the purpose under B), C), D) and/or E) above,
- for the purpose under B) above, the personal data will be processed for the duration of the relevant legal obligation of the Controller,
- for the purpose under (C) above, the personal data will be processed until the expiry of the 4th calendar year following the end of the guarantee period under the contract (if a guarantee of quality has been agreed in the contract), but at least until the expiry of the 5th calendar year following the termination of the obligations under the contract,
- in the event of the commencement and duration of judicial, administrative or other proceedings in which the rights or obligations of the Data Controller in relation to the Data Subject concerned are at issue, the period of processing of the personal data shall not expire
- for the purpose referred to in subparagraph (C) above before the end of such proceedings,
- for the purpose of sending commercial communications under D) above, the personal data shall be processed until the Data Subject has expressed his or her opposition to such processing,
- for the purposes under E) above, personal data will be processed for the period for which the Data Subject has given consent to the Data Controller pursuant to a separately agreed consent to the processing of personal data. In this case, the Data Subject acknowledges that before the expiry of this period, the Data Controller may contact him/her to renew his/her consent.

USING LINKS TO SOCIAL NETWORKS

Our website may contain social networking features such as Facebook and Instagram. The related services are provided by Facebook Inc. and Instagram ("Providers").

Facebook is operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. An overview of Facebook buttons and their appearance can be found at: https://developers.facebook.com/docs/plugins

Instagram is operated by Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. An overview of Instagram plugins and their appearance can be found at: https://developers.facebook.com/docs/instagram/embed-button

The link provider reveals which of our websites you have visited. If you are logged into your Facebook or Instagram user account while browsing our website, the provider can obtain information about your interests, i.e. information that you have access to via your user account. Use of any of the linking features (e.g. by clicking
"Like" button, by leaving a link), this information will also be transferred by the browser directly to the provider for storage.

For more information on the collection and use of data by Facebook or Instagram about the rights and options available to protect your privacy in these cases, please refer to the provider's data protection/privacy notice:
Facebook Provider Data Protection/Privacy Notice:
http://www.facebook.com/policy.php
Instagram provider's data protection/privacy notice:
https://privacycenter.instagram.com/policy/?section_id=18-LegalBasisInformationConsent
To prevent Facebook or Instagram from linking your visit to our site to your user account, you must log out of the respective user account before accessing our site.

YOUR RIGHTS

Under the conditions set out in the Act, you have:
- The right to access your personal data under Section 21 of the Act,
- the right to rectification of your personal data pursuant to Section 22 of the Act, or restriction of processing pursuant to Section 24 of the Act,
- the right to erasure of personal data pursuant to Section 23 of the Act,
- the right to object to processing pursuant to Section 27 of the Act,
- the right to data portability pursuant to § 26 of the Act,
- the right to withdraw consent to processing in writing or electronically to the address or email of the Data Controller.
You have the right to withdraw your consent to the processing or use of your personal data at any time with effect for the future. Send an e-mail to info.glamident@gmail.com or a letter to Masarykova 25/A, Prešov 080 01.
You also have the right to lodge a complaint with the Office for Personal Data Protection if you believe that your right to personal data protection has been violated.

CONCLUSION

You agree to these terms and conditions by checking the consent box via the online form. By ticking the consent box, you confirm that you are aware of the privacy policy and that you accept it in its entirety.
This policy shall apply in relation to Data Subjects, provided that no other agreement has been reached between the third party and the Data Controller. The Data Controller reserves the right to change these terms and conditions for the protection and processing of personal data at any time and at any time, and the current status will always be placed on the wfgroup.sk. website.