GDPR ( General Data Protection Regulation )

Information on the protection of personal data regarding consent to the processing of personal data for the company's marketing purposes

Operator: DataCall, s.r.o.

Address: Jilemnického 532/2, Trenčín 911 01

ID number: 48 123 285

Responsible person: Peter Jurák, BA, gdpr@datacall.sk

Confirmation number: 4/2015

Dear clients,

in this information memorandum we want to provide you with detailed information about the processing of your personal data for marketing purposes. At the outset, we would like to explain to you why we asked for your consent to the processing of personal data for marketing purposes.

The main goal of the aforementioned processing is to offer you the latest information about current and new products and services and our business partners. Another goal is to provide time-limited offers and practical information, in written or electronic form. We strive to create tailored offers based on segmentation and profiling and only present you with relevant product and service offers so that you are not inundated with product offers that are already available to you or that do not meet your needs.

Due to the fact that Regulation 2016/679 of the European Parliament and of the EU Council on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC, will come into effect on 25 May 2018, it is necessary that we they have obtained a new consent from you that corresponds to the new requirements.

Please read the information below on the processing of personal data, which we have prepared in the form of questions to make this information memorandum as clear and practical as possible from the point of view of searching for information. If you have any questions or comments about the consent you have given, call our line:0800 666 110, or send an email to:gdpr@datacall.sk

CONTENTS

• Who is the administrator of your personal data?
• What personal data do we process?
• What sources do personal data come from?
• For what purposes have you given your consent?
• Why does profiling and automated decision-making occur?
• How long will we process your personal data?
• Who are our business partners?
• Who can access your personal data?
• What are your rights when processing personal data?
• How can you withdraw consent to the processing of personal data?

1. WHO IS THE CONTROLLER OF YOUR PERSONAL DATA?

The administrator of personal data is the company that determines the purpose and means of processing personal data. For marketing purposes, the administrator of your personal data is the company:

2. WHAT PERSONAL DATA DO WE PROCESS?

For marketing purposes, we process the following categories of personal data to help us determine the range of products and services that you might like and address your needs.

• Basic identification data – name, address, date of birth, residential address.
• Contact details – telephone number, e-mail address.
• Sociodemographic data – statistical data on age, gender, education, employment, number of children.
• Information about the use of products and services – what services you have had with us in the past, information about the use of the Internet customer zone. Based on this data, we can recommend suitable products and services.
• Information from records of phone calls or other interactions with you, for example using e-mail, chat, SMS messages.
• Geolocation data – geolocation data from the web browser. These data can usually be used to recommend a contact to the nearest agent or branch.

3. FROM WHAT SOURCES DO PERSONAL DATA COME FROM?

We obtain the personal data mentioned in the previous point directly from you. You provide these personal data in the client contract, or you have provided them on other documents.

Personal data can also come from publicly available sources, registers and records, for example from the commercial register. Your personal data may also come from third parties who are authorized to handle them.

4. FOR WHAT PURPOSES DID YOU GIVE YOUR CONSENT?

You have given consent for marketing purposes, which include the following activities:

• offer of products and services. Based on your consent, we can provide you with offers in electronic form, especially in the form of e-mail messages or messages sent to mobile devices via a telephone number, via the web client zone, in writing or by telephone call,
• automated processing of personal data in order to adapt the business offer to your individual needs,
• market surveys and surveys of customer satisfaction with the products and services used.

Consent given for marketing purposes is voluntary. However, it is necessary for us to be able to send you individual offers of products and services and our business partners. Without such consent, we cannot provide you with individual product and service offers.

5. WHY DOES PROFILING AND AUTOMATED DECISION-MAKING OCCUR?

Our company strives to provide you with individually tailored offers of products and services. For this reason, we profile your personal data based on your consent. For this purpose, we use automatic information systems, web applications or calculators. Accordingly, we send you personalized messages and offers of our company's products and services.

Automatic evaluation (profiling) of personal data will help us get to know you and your needs better, estimate future actions and adapt our products and services accordingly.

6. HOW LONG WILL WE PROCESS YOUR PERSONAL DATA?

You have given your consent to the company for the duration of the contractual relationship and for the next 10 years from the termination of such contractual relationship or until you withdraw your consent.

If you are not, and will not become, a client of the Company, your consent will be valid for 10 years from the date of grant or until you revoke it.

After the relevant time has passed, your personal data will be deleted, but only to the extent and for the purposes for which consent is not required by law.

7. WHO ARE OUR BUSINESS PARTNERS?

In the consent, you have also agreed to the product offers and the transfer of personal data to our selected business partners. Our business partners also comply with the rules of personal data protection and we have concluded a contract with them on the processing of personal data.

Business partners are:

Union poisťovňa, a.s., Karadžičova 10, 813 60 Bratislava

Union zdravotná poisťovňa, a.s., Karadžičova 10, 814 53 Bratislava

VERY GOODIES SK s.r.o., Nová Rožňavská 134/A, 831 04 Bratislava

VERY GOODIES a.s., Mariánské náměstí 159/4, 110 00 Praha 1

DSI DATA s.r.o., Námestie A. Bernoláka 377/5, 029 01 Námestovo

NN dôchodková správcovská spoločnosť, a.s., Jesenského 4/C, 811 02 Bratislava

NN Tatry – Sympatia, d.d.s., a.s., Jesenského 4/C, 811 02 Bratislava

NN Životná poisťovňa, a.s., Jesenského 4/C, 811 02 Bratislava

OK servis, Cinobaňa 406, 985 22 Cinobaňa

StrategyConsulting s.r.o., Židovská 19, Bratislava 811 01

Sieh an! Handelsgesellschaft mbH, Georgenstraße 29, 922 19 Amberg

ČiMa Servis, Nová 386/10, 040 18 Košice

Dôvera, Einsteinova 25, 851 01 Bratislava

ELGAS, k.s., Bajkalská 19B, 821 01 Bratislava

Bratislavský samosprávny kraj, Sabinovská 16, 820 05 Bratislava

8. WHO MAY HAVE ACCESS TO YOUR PERSONAL DATA?

To process data for marketing purposes, other entities that process personal data, such as the so-called intermediaries whose task is to provide services to the company. For example, these may be external companies that manage our systems or other services that ensure the proper operation of the company and the processing of personal data for marketing purposes. We have concluded a contract with the aforementioned intermediaries on the processing of personal data, based on which they are also obliged to comply with strict rules for the protection of personal data.

9. WHAT ARE YOUR RIGHTS IN THE PROCESSING OF PERSONAL DATA?

Proper processing of your personal data is important for companies in the Slovak Republic, and their protection is a matter of course. You can exercise the following rights when processing personal data:

• Information on the processing of your personal data
• The information mainly includes: identification and contact details of the administrator, his representative and possibly also the responsible person, purposes of processing, categories of personal data concerned, recipient or categories of recipients of personal data, information on the transfer of personal data to third countries, period of storage of personal data, authorized administrators, a list of your rights, the possibility to contact the Office for Personal Data Protection, the source of processed personal data, information on whether and how automated decision-making and profiling takes place.

Right of access to personal data

You have the right to confirm whether or not personal data is being processed and, if so, you have access to information about the processing, the categories of personal data concerned, the recipients or categories of recipients, the retention period of the personal data, as well as the right to information about your rights, about just file a complaint with the Office for Personal Data Protection, information on the source of personal data, information on whether automated decision-making and profiling is taking place, information and guarantees in case of transfer of personal data to a third country or international organization. You have the right to provide copies of processed personal data.

Right to rectification

Are we processing your outdated or inaccurate personal data? Have you changed your home address, for example? Please inform us about this and we will correct the personal data.

Right to erasure (right to be forgotten)

In some cases provided by law, we are obliged to delete your personal data on your instructions. However, each such request is subject to individual evaluation, because the company DataCall, s.r.o. has the obligation or legitimate interest to retain personal data.

Right to restriction of processing

If you wish your personal data to be processed exclusively for the most necessary legal purposes or if you wish to block personal data.

The right to data portability

If you wish us to provide your personal data to another company, we will transfer your personal data in the appropriate format to the entity you designate, if there are no legal or other significant obstacles preventing us from doing so.

The right to object and automated individual decision-making

If you discover or believe that we are processing personal data in violation of the protection of your private and personal life or in violation of legal regulations, contact us and ask us for an explanation or removal of an inappropriate situation. You can also object directly to automated decision-making and profiling.

The right to file a complaint with the Office for Personal Data Protection

With your initiative or complaint regarding the processing of personal data, you can contact the supervisory authority at any time, which is the Office for the Protection of Personal Data of the Slovak Republic with its registered office at Hraničná 12, 820 07 Bratislava 27.

Where can you exercise your rights and are these rights charged?

You can exercise individual rights in the company by phone at 0903777443, by sending an e-mail to the address: gdpr@datacall.sk, or by a written request sent to the company's headquarters, or to the correspondence address Jilemnického 532/2, Trenčín 911 01.

We provide all information and statements of rights that you exercise free of charge.

How long can you expect a response from the company?

We will provide you with statements and any information about the measures taken as soon as possible, but within one month at the latest. If necessary and taking into account the complexity and number of requests, we can extend this period to two months. We will inform you about the extension, including the reasons.

10. HOW CAN YOU WITHDRAW CONSENT TO THE PROCESSING OF PERSONAL DATA?

Consent to the processing of personal data is based on the principle of voluntariness. This means that you can revoke it at any time. Do you not want to continue receiving product and service offers from our business partners? We are sorry, but we fully respect your decision.

What should the withdrawal of consent contain?

• Who files the appeal. Please include your first and last name, residential address and date of birth so that we can identify you.
• To whom you are submitting the appeal. You can opt-out from all affiliates or, if you want to keep sending offers from selected affiliates, list only those you want or don't want to allow to contact you.
• Information that you do not wish us to process your personal data. If you would like to receive only selected offers, please indicate which offers so that we can accommodate you.
• Your handwritten signature.

How can I send an appeal?

• Revocation of consent to the processing of personal data for marketing purposes can be sent in writing, so that we have a proper record of your revocation. Don't forget to sign the appeal.
• By a written statement sent to the registered office or to the company's mailing address.
• By a written statement submitted at the business address Jilemnického 532/2, Trenčín 911 01