Controller:
MARCO – SPEDITION, s.r.o., with registered office at Šenkvická cesta 12, 902 01 Pezinok, Company Identification Number: 35 681 420, registered with Bratislava I District Court Commercial Register, Section: Sro, Insert No. 10181/B, (hereinafter referred to as “Controller”)
Controller’s contact information:
Address: Šenkvická cesta 12, 902 01 Pezinok
Telephone: 00 421 33 640 7286
E-mail: transport@marcosped.sk
With regard to the processing of personal data the Controller shall act in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “Regulation”), and with Act No. 18/2018 Coll. on the Protection of Personal Data (hereinafter referred to as “Act”).
The Controller processes personal data of natural persons (hereinafter referred to as “Data Subject”) for commercial purposes, with regard to conclusion of contracts with contractors and customers.
The Controller hereby provides the following information on the processing of personal data to the Data Subject pursuant to Articles 12 and 13 of the Regulation:
1. Processed personal data
1.1. Data of customers and contractors in relation to the contractual relationship
In the event that you are the Controller’s customer or contractor or intend to conclude a contract with the Controller, and if you are a natural person, we need to process your personal data as stated in the contract for the purposes of the conclusion and performance of the contract.
Categories of personal data: first name, surname, academic title, address, citizenship, e-mail address, and telephone number.
Purpose of personal data processing: We process personal data for the purposes of order acceptance, record keeping, handling, and processing with regard to goods transport, freight, conclusion of contracts, and the issuance of a tax voucher, payment receipt, if necessary.
Legal basis for personal data processing: Personal data processing is vital for the performance of a contract which the Data Subject is a contracting party to, or for the implementation of necessary measures prior to the conclusion of a contract upon request by the Data Subject.
Period of personal data retention: Throughout the duration of an effective contract with the Controller and following the lapse thereof, if necessary for accounting purposes, payment, record keeping, and claim recovery, or fulfilment of any legal obligations up to the moment of its fulfilment, however for a maximum of 10 years.
1.2 Data of contact persons on the part of customers, contractors, and recipients of transported goods
Categories of personal data: first name, surname, work/business/operational position, department, place of work, work telephone number and e-mail address, and employer’s identification data.
Purpose of personal data processing: We process personal data for the purposes of order acceptance, record keeping, handling, and processing with regard to goods transport, freight, conclusion of contracts, and the issuance of a tax voucher, payment receipt, if necessary.
Legal basis for personal data processing: Personal data processing is necessary for legitimate purposes of the Controller or a third party – a customer, a contractor, and the recipient of transported goods. In addition, pursuant to Section 78(3) of the Act, a Controller who employs the Data Subject shall have the right to disclose its personal data to the extent of its title, first name, surname, work position, business position, operational position, department, place of work, work telephone number, fax number, e-mail address, and employer’s identification data, if necessary with regard to the performance of work related duties, business related duties, or functional duties of the Data Subject.
Period of personal data retention: Throughout the duration of an effective contract with the Controller (for as long as the Data Subject is authorised by the other contracting as the contact person) and following the lapse thereof, if necessary for accounting purposes, payment, record keeping, and claim recovery, or fulfilment of any legal obligations up to the moment of its fulfilment, however for a maximum of 10 years.
2. Rights of the Data Subject
As the Data Subject you shall have the right to demand:
Right of access
You shall have the right to demand a copy of personal data we have gathered about you, and to information on how we use your personal data. In the majority of cases your personal data will be provided to you in written form, unless you request otherwise. In the event that you have requested the provision of such information via electronic means, the information will be provided electronically, if technically feasible.
Right of revision
We adopt appropriate measures to ensure that the information we gather about you is accurate, comprehensive, and up to date. If you believe that any data we have retained is inaccurate, incomplete, or obsolete, please do not hesitate to ask us to revise, update, or amend any such data.
Right of deletion
Under certain circumstances you are entitled to request that we delete your personal data, e.g., in the event that any personal data we have gathered about you is no longer necessary for the fulfilment of the original purpose, or if you withdraw your consent with processing. However your right must be assessed from all relevant angles. E.g., we may have certain legal and regulatory obligations, meaning that we may not be able to accommodate your request.
Right of restriction of processing
Under certain circumstances you are entitled to demand that we cease to use your personal data. Such circumstances may include cases where you believe that any personal data we have gathered about you may be inaccurate, or if you believe that we no longer need to use your personal data.
Right of data accuracy
Under certain circumstances you shall have the right to request that we transfer personal data provided by you to a third party of your choosing. However the right of transfer only affects personal data we have obtained from you based on your consent or on the basis of a contract you are a party to.
Right of objection
You shall have the right to object to data processing that is based on our legitimate needs (i.e., we process personal data for the purposes of network and infrastructure security). Should we fail to present a substantial, legitimate reason for data processing, and should you raise an objection, we will cease to process your personal data.
Rights related to automated decision-making
You shall have the right to refuse automated decision-making, including profiling that may entail substantial legal implications or the like. The Controller does not use automated decision-making or profiling in the context of processing.
Right to withdraw consent
In the majority of cases we do not process your personal data based on your consent. However we may request your consent from time to time. In such case you shall have the right to withdraw your consent to the further use of your personal data.
Right to file a complaint
If you wish to file a complaint regarding the way your personal data is processed, including the exercise of the above rights, you may do so at: 00 421 33 640 7286 or via e-mail: transport@marcosped.sk or in writing at the Controller’s registered office stated above.
Should you be dissatisfied with our response, or should you believe that your personal data is being processed in an unjust manner or illegally, you may file a complaint with a supervisory authority, i.e., Office for Personal Data Protection of the Slovak Republic, dataprotection.gov.sk, Hraničná 12, 820 07 Bratislava 27, telephone number: 02 3231 3214, E-mail: statny.dozor@pdp.gov.sk.
3. Profiling and transfer to third countries and international organisations
The Controller does not process your personal data by profiling, i.e., in no manner of automated personal data processing. The Controller does not transfer any personal data to third countries or international organisations.
4. Recipients
Your personal data may be disclosed to various recipients, either on the basis of the Controller’s legal obligations (e.g., disclosure of personal data to public administration authorities, local authorities, courts or other duly authorised entities), and to recipients with whom the Controller collaborates, i.e., processors, such as accounting, translation, processing, and interpreting companies who process your personal data on behalf of the Controller. We have concluded a contract with any such partners regarding the authorisation to process personal data, and such partners provide sufficient guarantees regarding personal data processing in compliance with applicable regulations. A list of our partners providing the above services is at your disposal at our company’s registered office. In addition, if you are a recipient of transported goods or a contact person on the part of the recipient of transported goods, your personal data may be disclosed to our contractors who transport the goods.