Privacy policy
What is personal data?
Personal data means any information relating to an identified or identifiable data subject.
A data subject is considered identified or identifiable if they can be identified, directly or indirectly, in particular by reference to a number, a code or one or more factors specific to their physical, physiological, mental, economic, cultural or social identity.
Personal data therefore includes in particular the name, surname and address of a natural person, e-mail and IP address, and may include information about the use of services or about a natural person's activities and preferences. The protection of personal data is governed by Slovak Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, as amended (the “Personal Data Protection Act”).
What is the processing of personal data?
Processing of personal data means any operation or set of operations which the controller or processor systematically performs on personal data, whether by automated or other means, in particular collection, storage on data carriers, disclosure, adaptation or alteration, retrieval, use, transmission, dissemination, publication, retention, exchange, sorting or combination, blocking and destruction.
Who is the controller or processor of personal data?
We are corteon s.r.o., Company ID 46945253, with its registered office at P. Pázmaňa 915/9, 927 01 Šaľa, Slovakia, registered in the Business Register of the District Court Trnava, section: Sro, file No. 30894/T.
We process your personal data as a controller, i.e. we determine how and for what purpose the personal data will be processed and for how long, and we select any other processors who will help us with the processing.
Contact details of the responsible person
If you would like to contact us with any questions during the processing of your data, you can reach us by phone at +421 902 857 159 or by e-mail at info@corteon.com
Scope of personal data and purposes of processing
We process personal data that you entrust to us yourself, for the following reasons (to fulfil the following purposes):
- provision of services, performance of a contract: we need your personal data in the scope of e-mail, phone number, your name and surname or company details to perform the contract (e.g. sending access to an application, sending an online course, etc.) or to deliver goods.
- accounting: if you are a customer, we need your personal data (billing details) to comply with the legal obligation to issue and keep records of tax documents.
- marketing – sending newsletters: we use your personal data (e-mail and name) for direct marketing – sending commercial communications. If you are our customer, we do so on the basis of legitimate interest, because we reasonably assume that you are interested in our news, for 1 year from your last order. If you are not our customer, we only send you a newsletter on the basis of your consent, for 2 years from giving consent. In both cases you can withdraw this consent using the unsubscribe link in every e-mail we send.
- advanced marketing based on consent: only on the basis of your consent may we also send you inspiring offers from third parties or use your e-mail address, for example, for remarketing and ad targeting on Facebook, for 2 years from giving consent. You can of course withdraw it at any time via our contact details or using the unsubscribe link in every e-mail we send.
We retain your personal data for the duration of the limitation periods, unless the law requires a longer retention period or we have stated otherwise in specific cases.
Cookies
We use essential cookies, without which the website does not work, on the basis of legitimate interest. We only use analytics cookies (traffic measurement) and marketing cookies (ad measurement and targeting) on the basis of your consent, which you give in the cookie banner and can change or withdraw at any time.
You can find the list of cookies and tools we use in our Cookie policy. You can also delete or block cookies in your browser settings.
Security and protection of personal data
We will handle your personal data responsibly and in accordance with applicable legislation.
We use both automated and non-automated means to process personal data. All data is stored on secure servers located exclusively in the European Union. We protect personal data to the greatest possible extent using modern technologies corresponding to the state of technical development.
We have adopted and maintain all possible (currently known) technical and organisational measures to prevent misuse, damage or destruction of your personal data.
Disclosure of personal data to third parties
Our employees and collaborators have access to your personal data. To ensure specific processing operations that we cannot carry out ourselves, we use the services and applications of processors who are able to protect data and specialise in such processing.
Your rights in relation to the processing and protection of personal data
You have rights in relation to the protection of personal data. If you wish to exercise any of these rights, please contact us by e-mail: info@corteon.com
You have the right to information, which is already fulfilled by this information page with the principles of personal data processing.
Thanks to the right of access, you can ask us at any time and we will provide you within 10 days with information about which of your personal data we process and why. If something changes for you or you consider any of your personal data to be outdated or incomplete, you have the right to have your personal data supplemented and changed.
You can exercise the right to restriction of processing if you believe that we are processing inaccurate data about you, if you think that we are processing data unlawfully but you do not want all the data to be deleted, or if you have objected to the processing. You can restrict the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter you restrict the purpose of processing for sending commercial communications.)
Right to data portability
If you wish to take your personal data and transfer it to someone else, we will proceed in the same way as with the right of access – the only difference being that we will provide the information in a machine-readable form. We need at least 30 days for this.
Right to erasure (to be forgotten)
Another of your rights is the right to erasure (to be forgotten). In that case we will delete all your personal data from our systems, from the systems of all sub-processors and from backups. We need 10 days to ensure the right to erasure.
In some cases we are bound by a legal obligation and, for example, must keep records of issued tax documents for the period prescribed by law. In this case we will delete all personal data that is not bound by another law. We will inform you by e-mail once the erasure has been completed.
Complaint to the Office for Personal Data Protection
If you feel that we are not handling your data in accordance with the law, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic at any time. We would be very glad if you first informed us of such a suspicion so that we can do something about it and remedy any mistake.
Unsubscribing from newsletters and commercial communications
If you are our customer, we send you e-mails with inspiration, articles or product information and services on the basis of our legitimate interest. If you are not yet a customer, we only send you e-mails on the basis of your consent. In both cases you can stop receiving our e-mails by clicking the unsubscribe link in every e-mail we send.
Confidentiality
We assure you that our employees and collaborators who will process your personal data are obliged to maintain confidentiality about personal data and about security measures whose disclosure would endanger the security of your personal data. This confidentiality continues even after the end of their contractual relationship with us. Your personal data will not be disclosed to any other third party without your consent.