Information on the processing of personal data relating to the “live chat”

The responsible person, e-mail: dpo@geodeticca.sk.

For the purpose of communication and the related provision of services of the highest quality.

We process your personal data to the extent that you provide it to us in the “live chat”, as well as online identifiers.

The legal basis for the processing of personal data under Article 6(1)(b) of the GDPR, or §13(1)(b) of the Personal Data Protection Act, is that the processing of personal data is necessary for the performance of a contract to which the data subject is a party, or in order to take steps at the data subject's request prior to entering into a contract,

and under Article 6(1)(f) of the GDPR, or §13(1)(f) of the Personal Data Protection Act, is the legitimate interest of the joint operators, the aim of which is to achieve services and cooperation of the highest quality (where services, requests or orders are enquired about by a representative of an organisation – for example an employee of a company, etc.).

Your personal data is processed on the servers of the Amazon Web Service data centre (within the European Union – Germany, Frankfurt). The data centres are owned by Amazon.com, with registered office: Inc 440 Terry Ave N, Seattle, WA 98109, United States of America. For more information on GDPR measures within AWS data centres, see: https://aws.amazon.com/blogs/security/all-aws-services-gdpr-ready/. The administrator of these servers and the owner of the domain www.bitrix24.eu, where your personal data is processed, is Bitrix, Inc., with registered office: 901 N. Pitt St, Suite 325 Alexandria VA 22314, United States of America.

Personal data is stored within the European Union.

We keep your personal data for the necessary period, namely until your request or enquiry has been resolved.

If you act as a natural person, providing your personal data is necessary, because it is an essential element without which your question, request or enquiry could not be handled (i.e. it is a pre-contractual / contractual requirement).

If you act on behalf of a legal person, providing your personal data is necessary to achieve the legitimate interests of the joint operators. If personal data is not provided, it would not be possible to effectively provide services / handle your request or enquiry.

The personal data obtained is not subject to profiling or automated decision-making.

On the basis of a written request, or in person with the joint operators, you have the right to:

• request access to your personal data and its correction, erasure or a restriction of the processing of your personal data;
• the portability of personal data;
• object to the processing of personal data;
• lodge a proposal to initiate proceedings on the protection of personal data.

Under the applicable legislation, the joint operators are obliged to provide data subjects with information about the essential elements of their Agreement of joint operators. In the case of processing the data of data subjects “in the live chat” on the website www.geodeticca.sk, the joint operators are GEODETICCA, s.r.o., with registered office Floriánska 19, 040 01 Košice, ID No.: 36 572 161, GEODETICCA VISION, s.r.o., with registered office Floriánska 19, 040 01 Košice, ID No.: 44 014 091, and the civic association GEODETICCA TECHNOLOGICAL INSTITUTE, with registered office Floriánska 19, 040 01 Košice, ID No.: 42 112 842. The subject of their cooperation, which is agreed for an indefinite period, is the joint collection of personal data through a single shared live chat.

GEODETICCA, s.r.o. handles and answers all requests of data subjects, fulfils the information obligation in relation to data subjects, and represents the joint operators in any proceedings before the Office for Personal Data Protection. In relation to the processing of personal data, the joint operators have an equal standing and decide jointly in this area. Each of the joint operators is obliged to ensure that only such personal data is processed as corresponds in content and scope to the purpose of processing; the data may be used only in the manner in which the purpose of its processing was set. Each of the joint operators is obliged to ensure the protection of personal data by implementing and documenting security measures in accordance with the relevant provisions of the GDPR and other generally binding legal regulations governing the protection of personal data.

Regardless of the terms of the agreement of joint operators, a data subject may exercise their rights with each operator and against each operator.