INFORMATION ON PERSONAL DATA PROCESSING

(effective as of 15 February 2024)

Protecting the personal data you entrust us with is important to us, and we make every effort to ensure that you feel safe when using our services.

The purpose of this Personal Data Processing Policy (hereinafter referred to as the “Policy”) is to explain how your personal data, provided when using our website www.digfin.eu (hereinafter referred to as the “Platform”), is processed and protected. We would also like to inform you about your rights related to the processing of your personal data.

This Policy provides general information regarding the processing of personal data when using the Platform and our social media accounts. Please note that the specific processing conditions may vary depending on the particular purpose of data processing, and you will always be informed in a timely manner.

1. Controller and Contact Information

The Platform is operated by DigFin, a.s., with its registered office at Raymanova 2766/9, 080 01 Prešov, Slovak Republic, Company ID: 54 486 459, registered with the Commercial Register maintained by the District Court Prešov, Section: Sa, File No.: 10622/P (hereinafter the “Controller”).

The terms “we”, “our”, or “us” refer to the Controller. The terms “you” or “your” refer to the user of the Platform.

We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation – “GDPR”) and Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (the “Data Protection Act”).

If you have any questions regarding the processing of your personal data, you may contact our Data Protection Officer (DPO) via e-mail at: eliska.dzuganova@digfin.eu, or in writing to the Controller’s address.

2. Categories of Personal Data and Purposes of Processing

We process the following categories of personal data:

• First and last name
• Company name
• Telephone number
• E-mail address
• (collectively referred to as “personal data”)

When you contact us via the e-mail address provided on our website, we process the data solely for the purpose of responding to your inquiry. Such data processing is based on your consent in accordance with Article 6(1)(a) GDPR. If you express interest in our offer, your data will be processed for the purpose of entering into a contract pursuant to Article 6(1)(b) GDPR. Without your contact information, we are unable to respond. No automated decision-making is carried out.

Your data is not shared with external third parties and is not transferred to third countries or international organizations.

3. Cookies

We use cookies on the Platform. By using the Platform, you consent to our use of cookies. For more information on how we use cookies and how you can manage them, please refer to our Cookie Policy.

4. Personal Data Protection and Access

We use secure IT systems and appropriate technical and organizational measures to ensure the protection of personal data, including against unauthorized processing, accidental loss, destruction, or damage.

As the Controller, we may transfer or grant access to your personal data to third parties in the role of processors or independent controllers. We ensure that any such parties comply with strict data protection standards and possess adequate personnel, technical, and organizational capabilities.

We only disclose personal data to the extent necessary and only to parties under a confidentiality obligation. These include:

• Employees
• Contracted service providers (e.g. software providers, IT support)
• Legal advisors
• Accountants
• Providers of technical infrastructure, social media account operators, and analytics services

You will always be informed in greater detail if your data is transferred to specific recipients based on the purpose of processing.

5. Intellectual Property

The services provided through the Platform are subject to intellectual property protection and are owned by the Controller. Unless otherwise agreed in writing, services are intended for personal use only. It is prohibited to copy, reproduce, distribute, or publish them in any way without the Controller’s written permission.

6. External Links

The Platform may contain links to third-party websites. We are not responsible for the privacy practices of such websites. We encourage you to read their privacy policies when visiting them.

7. Data Retention Periods

Personal data is retained only for as long as necessary for the purposes for which it is processed.

• If processed based on your consent – data is retained until the consent is withdrawn or until the specific purpose is fulfilled.
• If processed to comply with legal obligations – data is retained for the period required by applicable legislation.
• If processed based on legitimate interest – data is retained for the duration of such interest.
• If processed for participation in promotional contests – the retention period is specified in the respective contest terms.

No personal data is transferred to third countries or international organizations.

8. Your Rights

Under the GDPR and the Data Protection Act, you have the following rights:

• Right of access – obtain confirmation as to whether or not your personal data is being processed and to receive a copy.
• Right to rectification – correct or complete inaccurate or incomplete personal data.
• Right to restriction of processing – request temporary restriction, for example, during the verification of data accuracy.
• Right to erasure (right to be forgotten) – request deletion where data is no longer needed, or consent has been withdrawn.
• Right to data portability – receive data in a structured, commonly used, and machine-readable format and transfer it to another controller.
• Right to withdraw consent – withdraw your consent at any time with effect for the future.
• Right to object – object to processing based on legitimate interest or public interest, including profiling and direct marketing.
• Right to lodge a complaint – submit a complaint to the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR).

For any exercise of these rights, please contact us using the contact details above. We will respond to your request within one month, which may be extended by two months where necessary due to complexity or volume.

9. Children’s Privacy

If you are under the age of 16, please ask your parent or legal guardian for consent before submitting personal data. If we become aware that we have collected data from a child without proper consent, we will delete such data.

10. Changes to the Policy

We may update this Policy from time to time (e.g. due to legal or technical changes). The latest version will always be published on our Platform, including the date of effect. Continued use of the Platform following such changes constitutes your acknowledgment of the updated Policy.

Controller:
DigFin, a.s.
Raymanova 2766/9, 080 01 Prešov
Company ID: 54 486 459
Email: eliska.dzuganova@digfin.eu