The purpose of this policy is to demonstrate that the processing of personal data by the controller is carried out in accordance with the currently applicable legislation, in particular Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter the "new Personal Data Protection Act") and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter the "GDPR"). The new legislation imposes on the controller the obligation, taking into account the nature, scope and purpose of the processing of personal data and the risks of varying likelihood and severity for the rights of a natural person, to adopt appropriate technical and organisational measures to ensure and demonstrate that the processing of personal data is carried out in accordance with the new legislation. The controller is obliged to update the measures adopted as necessary.
This document is the result of an assessment of the processing of personal data by the controller for the purposes of the legal standards governing the protection of personal data. By implementing standardised personal data protection based on the principles set out herein, the risk of a personal data breach is minimised.
The controller of your personal data is:
Wermaly s.r.o.
Registered office: Nová Ves nad Žitavou 78, 951 51 Nová Ves nad Žitavou, Slovak Republic
Company ID (IČO): 46 150 170
Company registered in the Commercial Register of the District Court Nitra, Section: Sro, Insert No. 28883/N
Statutory body: Marián Hronček – Managing Director, Mgr. Simona Hrončeková – Managing Director
E-mail: info@wermaly.sk
We always process your personal data only on a valid legal basis:
performance of a contract or pre-contractual relationship (orders, contracts, complaints),
compliance with legal obligations (accounting documents, employment relationships),
the controller's legitimate interest (protection of property, security, direct marketing offers to existing customers),
your consent (in particular for marketing activities or the use of certain cookies).
We process your data for the following purposes:
Customers and business partners – handling orders, concluding and performing contracts, delivery of goods/services, invoicing, complaints.
Employees – processing of personal data for the purposes of employment and payroll relationships in accordance with the law.
Marketing – sending offers, information about news (only on the basis of your consent or legitimate interest).
Security – operation of a CCTV system to protect persons and property.
We retain your data only for the necessary period:
for the duration of the contractual relationship and subsequently for the period stipulated by law (e.g. accounting documents – 10 years),
for the duration of the employment relationship (employee data),
for marketing, until consent is withdrawn or the right to object is exercised.
Once the retention period has elapsed or the purpose has ceased to apply, we securely delete the data.
Only authorised employees of the controller have access to your personal data. Where necessary, the data may also be processed by processors (e.g. an accounting firm, IT service providers) who have concluded a contract with us in accordance with the GDPR.
We do not make your data available outside the EU, with the exception of countries that guarantee an adequate level of protection pursuant to a decision of the European Commission.
We use cookies on our website:
Essential cookies – necessary for the functioning of the website; they cannot be disabled.
Analytical cookies – used to measure traffic and improve content.
Marketing cookies – used only on the basis of your consent.
You can refuse or change the use of cookies at any time in your browser settings.
In connection with the processing of personal data, you have the following rights:
the right to information and access to data,
the right to rectification or completion of data,
the right to erasure ("the right to be forgotten"),
the right to restriction of processing,
the right to data portability (to obtain and transfer your data to another controller),
the right to object to processing (e.g. marketing),
the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
You can exercise your rights by contacting us at the e-mail: info@wermaly.sk
We protect personal data against loss, misuse and unauthorised access by means of technical and organisational measures.
In the event of a personal data breach, we will proceed in accordance with the GDPR – we will inform the Office for Personal Data Protection and, if necessary, the data subjects concerned.
We do not carry out any automated decision-making or profiling that would have legal or similarly significant effects for the data subject.
If you have any questions or wish to exercise your rights, please contact us:
Wermaly s.r.o.
Nová Ves nad Žitavou 78, 951 51 Nová Ves nad Žitavou, Slovak Republic
E-mail: info@wermaly.sk
Only through quality service can we win over customers to whom we bring solutions at the most critical moments. For our customers we always do our utmost to ensure their satisfaction and the smooth running of their operations.
Slovenčina
English
Čeština
Deutsch
Polski
Magyar
Română