Privacy Policy
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the ‘GDPR’) and Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as the ‘Personal Data Protection Act’). Ensuring the security of personal data and its lawful processing is our top priority. Read on to find out how we process your personal data and ensure its security.
our information
Name: Bulbo Virtual
Representative: Adam Vyšný
Address: Agátová 498/3, 03104 Liptovský Mikuláš
Mobile: +421 949 848 670
Email: info@bulbovirtual.eu
(hereinafter referred to as the “Operator”)
CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS, AND RETENTION PERIOD
What personal data do we process, for what purpose, on what legal basis, and for how long?
We process only the personal data that is strictly necessary to achieve the specified purpose. We process personal data for the following purposes:
Accounting Records
We process the personal data of customers or other individuals listed in our accounting records, including title, first name, last name, billing address, bank account number, payment details, phone number, email, and signature for the purposes of maintaining accounting records and fulfilling obligations arising from the Accounting Act and other relevant legal regulations. The legal basis for processing personal data is the fulfillment of legal obligations. We retain accounting documents for 10 years.
Contact Form
We process the personal data of interested parties, including title, first name, last name, email, phone number, and message subject, for the purpose of receiving and handling your inquiry. The legal basis for processing this personal data is the performance of a contract or pre-contractual arrangements. We retain personal data for 6 months.
Customer reviews
We process the personal data of customers who have submitted a review, including title, first name, last name, company name, and review subject, with the data subject’s consent for the purpose of publishing the review on the operator’s website and on social media. We process this personal data for the duration of the consent. The data subject may revoke their consent at any time by sending a notification via email.
Social Media Management
We process the personal data of fans of our official social media pages for the purpose of managing our social media accounts. The legal basis for processing personal data is a legitimate interest, which is the presentation of the controller and its services via social media. We process personal data for as long as you are a fan of our page.
Cookies
We process cookies to ensure the functionality of our website, to make it easier to use, and for advertising purposes. The legal basis for processing cookies is your consent, which you provide by clicking the appropriate button on the cookie banner. We store cookies for 12 months.
CONSENT
In the cases mentioned above, we process your personal data on the legal basis of consent, i.e., only with your consent. You may revoke this consent at any time by sending a notification to our email address, by clicking the link in the email footer in the case of the newsletter, or, in the case of cookies, by changing your browser settings.
RECIPIENTS
To whom do we provide your personal data?
We provide personal data to third parties only if required by a specific law or if it is necessary for the performance of a contract. This primarily involves public authorities and other authorized entities.
We may also provide your personal data to a processor who provides us with professional and specialized services. If we entrust the processing of personal data to a processor, we have a data processing agreement in place with them and have bound them to confidentiality.
METHOD OF PROCESSING PERSONAL DATA
We process personal data in both electronic and paper form. We do not use any automated individual decision-making tools.
We maintain records of all processing activities and have implemented the necessary technical and organizational security measures to ensure the protection of personal data. These measures include, in particular, antivirus software, a strong password policy, and encryption. We regularly back up the personal data entrusted to us so that we can immediately restore it in the event of accidental damage or loss. Persons who process personal data have been instructed and are bound by confidentiality. We approach the selection of processors very responsibly, ensuring that the selected processor provides us with adequate guarantees for the security of your personal data.
COMPLAINT
If you are not satisfied with how we process your personal data, you can let us know by emailing info@bulbovirtual.eu. You also have the option to file a complaint with the Office for Personal Data Protection if you believe we are processing your personal data unlawfully.
Office for Slovak Personal Data Protection
Hraničná 12, 820 07, Ružinov, Bratislava
Email: statny.dozor@pdp.gov.sk
RIGHTS OF DATA SUBJECTS
The GDPR grants you certain rights that allow you to influence how we process your personal data. However, you cannot exercise all of these rights in every circumstance. This depends on the legal basis for the processing of personal data.
Right of Access
You have the right to know whether we are processing your personal data. If we are, you may request access to the data. Upon your request, we will issue a confirmation containing information about our company’s processing of your personal data.
Right to rectification
You have the right to ensure that the personal data we process is accurate, complete, and up-to-date. If it is inaccurate or out of date, you may ask us to correct or supplement it. We will make the correction without undue delay, taking into account technical capabilities.
Right to erasure
Under certain circumstances, you have the right to have your personal data erased. You may request erasure at any time. We will erase your personal data if:
- we no longer need it for the purpose for which you provided it;
- you withdraw your consent;
- you object to the processing of your personal data;
- we are processing your personal data unlawfully;
- the personal data must be erased to comply with a legal obligation;
- you are a child, or the parent of a child, who has consented to the processing of personal data online;
Right to Restrict Processing
You may ask us to restrict the processing of your personal data. If we comply with your request, we will only store your data and will not process it further. We will restrict the processing of your data if:
- you inform us that it is inaccurate, until we verify its accuracy;
- we are processing it unlawfully, but you do not consent to its erasure and instead request that we only restrict the processing of your personal data;
- we no longer need it, but you need it to establish, exercise, or defend your legal claims;
- you object to the processing of your personal data, until we verify whether our legitimate interests override your grounds.
Right to Data Portability
In cases provided by law, you have the right to have us transfer your personal data to another controller. This applies in particular to the processing of personal data based on consent or for the performance of a contract, provided that the processing is carried out by automated means and is technically feasible.
Right to object
In cases where we process your personal data on the legal basis of a legitimate interest, you have the right to object to such processing. Unless we demonstrate that there is a compelling legitimate ground for processing that overrides your interests or rights, the processing of personal data will be terminated without undue delay upon your objection.
You may send us your request to exercise any of the above rights via email or by mail to the address listed above. We will process all your requests and notify you of the outcome using the same method you used to submit your request.
FINAL PROVISIONS
This Privacy Policy takes effect on the date of its publication, October 1, 2024. We reserve the right to amend this Policy if there are changes to the processing of personal data within our company.