Processing of personal data

I. INFORMATION ON THE PROCESSING OF PERSONAL DATA
This document contains information regarding the protection of personal data provided by visitors to the website http://markoregrut.sk, as well as by my clients and those interested in my services.
The purpose of this document is to provide clear information on how personal data will be handled.
I value the trust you place in me by providing your personal data; therefore, I process personal data with care and comply with all applicable standards, particularly Regulation (EU) 2016/679—the General Data Protection Regulation, commonly known as GDPR. Clicking on the regulation number in the previous sentence will take you directly to the text of the regulation, where you can also find the exact wording of the legal provisions referenced later in this document.
What this document covers: Content and purpose of the document
Personal data controller – who am I and how can you contact me?
What personal data do I process and how do I obtain it?
For what purposes do I process personal data, for how long, and what is the legal basis for doing so?
Disclosure of personal data to other parties
Information regarding your data protection rights
Further important information on exercising your rights
Personal data processing agreement
II. Personal data controller – who am I and how can you contact me?
TopHome Real Estate s. r. o.
St. 29. augusta 2B, 811 07 Bratislava – Old Town (Staré Mesto) district
(hereinafter referred to as the "Controller")

Contact e-mail: [email protected]

III. What personal data do I process and how do I obtain it?
I process data that you provide to me yourself. In specific cases, this primarily involves data provided by filling out forms on the website, entering data into a user account created on my website, providing data during the preparation of contracts and related documents and in connection with the performance of contracts (i.e., in connection with the provision of services), or providing data during personal contact, by telephone, in writing, via e-mail, or through other means of communication (SMS messages, messages in apps such as Facebook Messenger).

I also process data that you make public on the Internet—particularly on social networks (e.g., Facebook, Instagram, LinkedIn)—and data from public registers (primarily for the purpose of including or verifying your identification details in contracts).

If I require your consent to process certain personal data for specific purposes, I will process such data for the given purpose only with your consent.

As a general rule, you provide data to me voluntarily; however, in certain cases, I would be unable to provide specific services without the data, and I will always inform you of this in advance. You are required to provide data to me only in cases where the law explicitly mandates it. Personal data may fall into the category of "ordinary personal data" or constitute a special category of data—i.e., sensitive data—for which legal regulations prescribe stricter processing conditions.

A. ORDINARY PERSONAL DATA I PROCESS:
First name, surname, academic title, address, date of birth, age, personal identification number (birth number), Company ID number (IČO), telephone number, e-mail, education, IP address, cookies, information about ordered services, and information regarding the services I have provided to you.

B. SPECIAL CATEGORY OF PERSONAL DATA ("SENSITIVE" PERSONAL DATA) I PROCESS:
I do not process sensitive personal data; should the need to process such data arise, I will inform you in advance.

IV. For what purposes do I process personal data, for how long, and what is the legal basis for doing so?
A. PROCESSING OF PERSONAL DATA FOR THE PURPOSE OF CONCLUDING A CONTRACT AND FULFILLING CONTRACTUAL OBLIGATIONS.
To conclude a contract with you, deliver the services you have ordered, and conduct related communication with you, I process the following ordinary personal data: first name, surname, academic title, address, Company ID number (IČO), telephone number, and e-mail.

The legal basis (authorization) for processing this data is the performance of contractual obligations arising from the contract concluded between us. Such an obligation might involve the provision of services, the sending of specific instructions prior to a course, etc. The contract in question need not necessarily be a traditional printed document signed by hand; it could, for instance, be concluded orally, by telephone, or by filling out and submitting an online order form followed by my confirmation of that order.

For this purpose, I process personal data for the duration of the contractual relationship between us. Following the termination of the contractual relationship, certain data are retained to fulfill legal obligations or to pursue legitimate interests, as detailed in the subsequent sections of this document.

B. PROCESSING OF PERSONAL DATA TO FULFILL OBLIGATIONS UNDER ACCOUNTING, TAX, AND OTHER LEGAL REGULATIONS.
To comply with obligations arising from applicable legal regulations, particularly in the areas of accounting, tax law, and record-keeping.

The data processing period is determined directly by the relevant legal regulations that impose these processing obligations upon me.

C. PROCESSING OF PERSONAL DATA FOR PURPOSES BASED ON OUR LEGITIMATE INTERESTS OR THOSE OF A THIRD PARTY.
A legitimate interest can encompass a wide range of situations. Therefore, I am informing you of the legitimate interests for which I process personal data:

A legitimate interest involves the protection and substantiation of our rights and legal claims, particularly those arising from concluded contracts or instances of harm caused. For these purposes, I process personal data for a period of 10 years following the termination of our contractual cooperation or our last contact (if no contract was concluded). This timeframe is established with regard to statutory limitation periods for claims, taking into account that I might not become aware of a claim asserted in court by the other party immediately at the moment it is filed. Data from contracts and our mutual communication are retained for these purposes.
Direct marketing also constitutes a legitimate interest. To send commercial communications, I will process the following personal data of my clients: first name, surname, address, telephone number, and e-mail address. You can easily opt out of receiving commercial communications via e-mail at any time by clicking the link provided in the e-mail. Should I use traditional print media, telephone calls, or communication apps (such as WhatsApp or Messenger) to send offers or news updates, I will also respect your wishes if you inform me that you do not desire further contact. To offer you tailored products and services—and to send you only those offers and pieces of information that are genuinely useful rather than overwhelming—I organize our database of contacts and personal data into several lists. For example, if you wish to receive updates on our latest news, your email address is automatically added to the "news updates" database. Similarly, if you submit an order via the website, your contact details are assigned to the "ordered" category; once payment is made, they move to the "paid" list, at which point the system automatically delivers the ordered electronic product or service. Part of this automated processing serves directly to fulfill our contractual obligations, while another part is used for standard marketing purposes (falling under the category of "legitimate interest"). If this data "sorting" were to be conducted on a large scale or in a highly "specialized" manner, we would only be able to do so with your consent (which you may withdraw at any time, as described later in this document).

D. PROCESSING OF PERSONAL DATA BASED ON YOUR CONSENT
If you grant your consent, I will process your personal data for the purpose of sending you offers regarding my services. I require your consent for this processing if you are not currently a client of mine. Before you grant your consent, I will inform you exactly which data will be processed and for what specific purpose. You may withdraw your consent at any time. However, if I process some of your personal data based on another legal ground (see points A through C above), I will continue to process the personal data for those purposes even after the withdrawal of your consent, as consent is not required for such specific purposes.

V. Disclosure of personal data to other parties
Other parties acting as data processors assist me in fulfilling certain contractual or statutory obligations. Primarily, this involves TopHome Real Estate s.r.o. (located at Ul. 29. augusta 2B, 811 07 Bratislava – Staré Mesto district), which provides data storage and software applications. I have entered into written agreements with these processors stipulating the fulfillment of personal data protection obligations to ensure your data remains secure.

Personal data will also be disclosed to relevant administrative authorities if required by law (i.e., primarily in the event of an inspection where the authority is entitled to demand the submission of certain personal data).

VI. Information regarding your other rights concerning personal data protection
A. RIGHT OF ACCESS TO PERSONAL DATA
This is the right to obtain confirmation as to whether we are processing your personal data and, if so, to access that data and information regarding its processing. B. RIGHT TO RECTIFICATION OF PERSONAL DATA
This is the right to have inaccurate personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement (in which you provide the complete data).

C. RIGHT TO ERASURE OF PERSONAL DATA (RIGHT TO BE FORGOTTEN)
In cases stipulated by law or the GDPR, you have the right to request that I erase your personal data without undue delay (the grounds are set out in Article 17 of the GDPR, including exceptions where erasure does not apply).

D. RIGHT TO RESTRICTION OF PROCESSING
In cases stipulated in Article 18 of the GDPR, you have the right to request that I restrict the processing of your personal data.

E. RIGHT TO DATA PORTABILITY
Under the conditions set out in Article 20 of the GDPR, you have the right to obtain your personal data and transfer it to another controller. Where technically feasible, you have the right to request direct transmission to another controller.

F. RIGHT TO OBJECT
In cases where per

...personal data are processed for the purposes of legitimate interests, you have the right to object to such processing; in that case, we will cease processing the data unless our legitimate interest overrides your interests, rights, or freedoms. If the legitimate interest is direct marketing, an objection always results in the termination of further processing for direct marketing purposes.

G. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe that your personal data protection rights are being violated, you have the right to lodge a complaint with the Office for Personal Data Protection. Further information about the Office and personal data protection can be found directly on the Office's website: www.uoou.sk.

VII. Additional important information regarding the exercise of your rights
If you have further questions regarding the processing of your personal data, you may contact me via email at [email protected]. By sending a message to this email address or a written request to the address listed in the introductory section of this document, you may also directly exercise the rights described in Article VI. Please note, however, that to verify that the request is indeed being made by you, I may subsequently contact you to verify your identity and the request in an appropriate manner. The same applies to any telephone or similar communication.