DECLARATION OF CONSENT FOR PROCESSING OF PERSONAL DATA

I hereby grant my consent in accordance with the § 11 of the Law 122/2013 Coll. on Personal Data Protection and about Amendment of other Acts with the processing and storage of my personal data by the company winney, s.r.o. . (winey. Ltd.), Registration number: 47 222 026, address: Papiernická 1789/16, Ružomberok 034 01, registered in the commercial register of Okresný súd Žilina (District Court Žilina), section: Sro (Ltd.), specification nr. 59394/L (hereinafter referred to as “Provider“). I also agree that my personal data will be disclosed to the third parties. I declare I have been informed in accordance with § 15, Article 1 of the Act no. 122/2013 Col. on Personal Data Protection and about Amendment of other Acts about the conditions of personal data processing by the Provider

Information according to § 15 Art. 1 of the Act no. 122/2013 on Personal Data Protection and about Amendment of other Acts

1. IDENTIFICATION DATA
1) The Provider of the webpage and information system is the company: winney, s.r.o. . (winey. Ltd.), Registration number: 47 222 026, address: Papiernická 1789/16, Ružomberok 034 01, registered in the commercial register of Okresný súd Žilina (District Court Žilina), section: Sro (Ltd.), specification nr. 59394/L (further only “Provider“)

2. PURPOSE OF THE PROCESSING OF PERSONAL DATA
1) The Provider processes the personal data for the following purpose:
a. identification of Candidate/Customer (hereinafter referred to as „Data Subject“)
b. provision of services, confirmation and registration of orders, conclusion of the contract
c. registry of persons concerned (data subjects)
d. provision of services and fulfillment of obligations towards the data subject, handling of possible complaints of provided services
e. issuance of tax and non-tax documents
f. to assert claims from legal relations between the data subject and the provider
g. communication with the data subject
h. internal marketing needs of the Provider

3. LIST OF PROCESSED PERSONAL DATA
1) The Provider processes personal data of the person concerned in the extent in which he or she stated them in the Order and in the extent as stated in telephone calls or electronic communication and in documents provided/addressed/delivered to the Provider by the data subject or third persons on behalf of the data subject.
2) The Provider processes especially following personal data of data subjects:
a. Name and surname
b. Residence and Postal Code
c. Telephone number and e-mail

4. VOLUNTARY PROVISION OF PERSONAL DATA
1) Data subject provides his or her personal data to the Provider voluntarily for the purpose of fulfillment of obligations of the Provider arising from the Contract or pre-contract relations with the Data subject or while negotiating the change of the Contract, which takes part on request of the data subject and further communication.
2) The Provider processes personal data of the data subject only for a limited period necessary to fulfill obligations arising from the Contract and generally binding regulations.
3) The Data Subject declares his or her consent with processing of personal data for an indefinite period of time. This approval can be withheld anytime in a written form. The consent shall expire in the period of 1 month after the delivery of the withdrawal of consent of the Data Subject to the Provider and personal data shall be subsequently deleted.

5. PROVISION AND DISCLOSURE OF PERSONAL DATA
1) The Data Subject takes notes that his or her personal data shall be disclosed or provided to a third party for the purpose of the fulfillment of obligations of the Provider arising from the Contract or pre-contracted relations with the data subject.
2) The Provider is authorized to provide personal data of data subjects to the Intermediary in accordance with § 8 of the Act no. 122/2013 on Personal Data Protection and about Amendment of other Acts.

6. DISCLOSURE POLICY OF PERSONAL DATA
1) The Provider does not disclose personal data of data subjects.

7. INFORMATION ON THE RIGHTS OF DATA SUBJECTS
1) The Data Subject is authorized, on the basis of a written request, to require from the Provider:
a. Confirmation whether the data on him or her are or are not processed,
b. Information on the processing of personal data in the information system in the extent classified by the Act no. 122/2013 Col., § 15 Art. 1, from letter a) to letter e), from the second to the sixth point in a generally comprehensible form
c. Exact information about the source from which the Provider gained the personal data to process in a generally comprehensible form
d. The list of the personal information that are the subject of processing in a generally comprehensible form
e. A correction or disposal of incorrect, incomplete or not up-to-date personal data that are the subject of processing
f. A disposal of personal data whose purpose of processing finished
g. A disposal of personal data that are the subject of processing, but there has been a violation of law.
h. Blocking of the personal data from the reason of the withdrawal of the consent before its maturity in case that the Provider processes personal data on the basis of the consent of the data subject.
2) The data subject, on the basis of the written request, has the right to have objections to
a) Personal data processing about which he or she assumes that are or shall be processed for purposes of direct marketing without a permission and also ask their disposal
b) The use of personal data stated in the Act no. 122/2013 and Col., § 10, Art 3, letter d) for the use in direct marketing in postal service,
c) Provision of personal data stated in the Act. No 122/2013 § 10, Art 3, letter d) for the use in direct marketing
3) The data subject, on the basis of the written request or in person, when the matter is urgent, has the right to object to processing of personal data in cases defined in the Act. No 122/2013 § 10, Art 3, letters a), e), f), or g) any time from the Provider by stating a legitimate reason or a submission of evidence about tampering his or her rights and by the law of protected interests which are or can be harmed by such personal data processing in a concrete case. In case that legal reasons do not oppose and it is proved that the objection of the data subject is rightful, the Provider is obliged to block and to dispose of the personal data to which the data subject objected immediately when the circumstances allow it.
4) The Data subject, on the basis of the written request or in person, when the matter is urgent, has the right at the Provider to object to and not to be subjected to the decision of the Provider which could have legal effects or significant impact in the case that such a decision is taken exclusively on the basis of actions of automatic personal data processing. The data subject has the right to ask the Provider to review the decision via the method different from the automatic processing, whilst the Provider is obliged to grant the application of the data subject and, thus, that the authorized person shall have the decisive role, he or she informs the data subject on the way of review and a result of the exploration within the period stated in the Act. No 122/2013 § 10, Art 3. The data subject does not have the right only in case when a special act defines it, in which there are amended measures to secure ligitimate interests of data subject, or in case that within the pre-contract relations the Provider took a decision by which he or she meets the demand of the data subject or when the Provider, on the basis of the contract, took other adequate measures to secure legitimate interests of the data subject.
5) If the data subject exercises the right
a. In a written form and from the content of the request results that he or she is exercising his or her right, the request is regarded as delivered in accordance with the Act, the reguest sent via the electronic service or via fax the data subject delivers in a written form within the period of three day from the day of its transmission in accordance with the Act
b. In person in oral form into the minutes from which it must be obvious who claims the right, what it is seeked and when and who made the minutes, his or her signature and the signature of the data subject, the Provider is obliged to deliver the copy of the minutes to the data subject,
c. By the mediator in accordance with the Article 6, letter a) or the letter b) he or she is obliged to deliver the request or the minutes to the Provider without any delay.
6) The data subject, in case of suspicion that his or her personal data are being processed wrongly, he or she may initiate proceedings on personal data protection at the authority.
7) In case that the data subject does not have capacity for legal acts in full, his or her legal official may claim the right.
8) If the data subject does not live, in accordance with the Act, the related party can claim his or her right.
9) The data subject is obliged to state only truthful personal data. For the untrueness of personal data is responsible that person, in accordance with the § 16, Art. 1, of the Act no. 122/2013 and Col. on Personal Data Protection and about Amendment of other Acts, who provided the data for the information system.