WHAT IS THIS DOCUMENT FOR?

In this document you will learn:

Which data are needed for fulfilling our legal obligations a where it is your decision if you are willing to comply with our personal data requirements. What are your rights and how can you execute them.

WHO IS PROCESSING YOUR DATA?
Your personal data will be processed by ProFin Experts s.r.o.

Our contact details are:
Mailing address: ProFin Experts, s. r. o., Šikmá 12, 821 06 Bratislava
Telephone number: +421 (0) 947 933 076
Email address: info@profinexperts.sk

WHY IS PERSONAL DATA BEING PROCESSED?

DEMAND FOR OUR SERVICES

WHY DO WE NEED DATA? (PURPOSE OF PROCESSING)
We need the data for evidence and processing requests regarding our services, in particular for requests regarding the demand and the interest in our services, for preparing an offer and for performing other necessary pre-contractual actions.

ON WHAT BASIS DO WE PROCESS DATA? (LEGAL BASIS OF PROCESSING)
We process the data based on your consent, which you provided when you sent your request.

IS THE PROVISION OF DATA NECESSARY?
Yes. Without providing the necessary data, we cannot process your request. However, it is up to you whether you contact us with a request and give us your consent to process your data.

HOW LONG DO WE NEED THE DATA? (STORAGE PERIOD)
We will keep the data for the duration of the offer, usually for 90 days. However, if a contract is mutually concluded, personal data will continue to be processed in the frame of a concluded contract nonetheless.

TO WHOM CAN THE DATA BE PROVIDED? (Beneficiary categories)
Your personal data may be transferred to our contractual partner (real estate agent) for the purpose of processing the request.

CONTRACT CONCLUDED WITH THE CLIENT

WHY DO WE NEED DATA? (PURPOSE OF PROCESSING)
For the fulfillment of the contract in which we undertook to mediate the purchase, sale or lease of the client's property.

ON WHAT BASIS DO WE PROCESS DATA? (LEGAL BASIS OF PROCESSING)
We process data on the basis of a mutually concluded contract.

IS THE PROVISION OF DATA NECESSARY?
Provision is necessary, without providing personal data it is not possible to fulfill our contractual obligations.

HOW LONG DO WE NEED THE DATA? (STORAGE PERIOD)
The data will be kept for the time necessary to exercise liability claims, i.e., for a period of 4 years from the termination of the contract.

TO WHOM CAN THE DATA BE PROVIDED? (Beneficiary categories)
To a lawyer for the purpose of preparing and assessing contractual documentation (e.g. for the preparation of a purchase contract), possibly for the authorization of a contract, notaries for the purpose of preparing a notary record or a bank for the purpose of preparing a bond, an expert for the purpose of preparing an expert opinion or an energy certificate for real estate, a financial intermediary mediation of a loan for the acquisition of real estate or another real estate agency, which represents the interests of the other contracting party in a business relationship, to the relevant district office (cadastral department) when submitting a proposal for registration in the real estate cadastre.

PREVENTION OF MONEY LAUNDERING

 WHY DO WE NEED DATA? (PURPOSE OF PROCESSING)
To fulfill the obligations of the obliged person according to Act no. 297/2008 Coll. on protection against the legalization of income from a criminal activity and on protection against the financing of terrorism and on the amendment of certain laws.

ON WHAT BASIS DO WE PROCESS DATA? (LEGAL BASIS OF PROCESSING)
On the basis of Act no. 297/2008 Coll. on protection against the legalization of income from criminal activity and on protection against the financing of terrorism and on the amendment of certain laws.

IS THE PROVISION OF DATA NECESSARY?
The provision of personal data is necessary to fulfill our legal obligations.

HOW LONG DO WE NEED THE DATA? (STORAGE PERIOD)
We are obliged to store the data for five years from the end of the contractual relationship with the client in accordance with § 19 of Act no. 297/2008 Coll.

TO WHOM CAN THE DATA BE PROVIDED? (Beneficiary categories)
NAKA financial intelligence unit, realtor

ACCOUNTING

WHY DO WE NEED DATA? (PURPOSE OF PROCESSING)
To fulfill the legal obligations for accounting.

ON WHAT BASIS DO WE PROCESS DATA? (LEGAL BASIS OF PROCESSING)
On the basis of Act no. 431/2002 Coll. on accounting, as amended, Act no. 595/2003 Coll. on income tax as amended, Act no. 222/2004 Coll. on value added tax as amended and other legal regulations.

IS THE PROVISION OF DATA NECESSARY?
The provision of personal data is necessary to fulfill our legal obligations.

HOW LONG DO WE NEED THE DATA? (STORAGE PERIOD)
We are obliged to keep accounting documents for a period of ten years.

TO WHOM CAN THE DATA BE PROVIDED? (Beneficiary categories)
Statistical Office of the Slovak Republic, executor, bankruptcy administrator, provisional administrator, auditor, tax office, health insurance company, social insurance company, accountant, tax consultant

EXERCISE OF LEGAL CLAIMS

WHY DO WE NEED DATA? (PURPOSE OF PROCESSING)
To exercise our legal claims and protect against the claims of third parties.

ON WHAT BASIS DO WE PROCESS DATA? (LEGAL BASIS OF PROCESSING)
On the basis of legitimate interest according to Article 6 par. 1 letter f) of the General Data Protection Regulation (processing is necessary for the purposes of legitimate interests pursued by the operator).

IS DATA PROCESSING NECESSARY?
The processing of personal data of the person concerned is necessary to achieve the purpose of the processing. Without the processing of personal data, we would not be able to assert a legal claim.

HOW LONG DO WE NEED THE DATA? (STORAGE PERIOD)
Until the end of the enforcement of the claim, or until the expiration of the limitation period for making a claim.

TO WHOM CAN THE DATA BE PROVIDED? (Beneficiary categories)
Slovak Trade Inspection, court, lawyer or other legal representative, law enforcement authorities.

COMPLAINTS

WHY DO WE NEED DATA? (PURPOSE OF PROCESSING)
We need the data to fulfill our legal obligation, i.e. for the purpose of recording and handling received complaints.

ON WHAT BASIS DO WE PROCESS DATA? (LEGAL BASIS OF PROCESSING)
Fulfilling our legal obligations according to Act no. 250/2007 Coll. on consumer protection.

IS THE PROVISION OF DATA NECESSARY?
The provision of data relating to your case is necessary in order for us to process your claim in accordance with the law.

HOW LONG DO WE NEED THE DATA? (STORAGE PERIOD)
We will keep the data related to the complaint and its handling until the deadline for issuing a fine by the Slovak Trade Inspection, i.e., within three years from the handling of the claim or complaint, or after the expiry of the period for exercising the right in court.

TO WHOM CAN THE DATA BE PROVIDED? (Beneficiary categories)
Slovak Trade Inspection, court, lawyer or other legal representative, mediator, subject of alternative dispute resolution, realtor

INITIATIVES OF THE PERSONS CONCERNED

WHY DO WE NEED DATA? (PURPOSE OF PROCESSING)
For the purpose of processing the suggestions of the persons concerned who have exercised their rights with us according to the General Regulation on the Protection of Personal Data (GDPR) and Act No. 18/2018 Coll. on the protection of personal data.

ON WHAT BASIS DO WE PROCESS DATA? (LEGAL BASIS OF PROCESSING)
Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation) and Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain laws.

IS THE PROVISION OF DATA NECESSARY?
The provision of data is necessary to process the initiative.

HOW LONG DO WE NEED THE DATA? (STORAGE PERIOD)
Until the sanction is imposed by the Personal Data Protection Office of the Slovak Republic, i.e., for a period of 5 years from the exercise of the right of the person concerned.

TO WHOM CAN THE DATA BE PROVIDED? (Beneficiary categories)
Personal Data Protection Office of the Slovak Republic, court, lawyer or other legal representative, realtor.

DOES PROFILING OCCUR?
No automated decision-making or profiling is used in the processing of personal data.

IS PERSONAL DATA TRANSFERRED TO THE THIRD STATES?
No, we do not intend to transfer your personal data to the third countries. Your personal data is not processed outside the territory where the common rules established by the General Regulation on the protection of personal data are applied. The free movement of data within the member states of the European Union is guaranteed by this regulation.

WHAT ARE YOUR RIGHTS?

The General Data Protection Regulation (GDPR) gives you a wide range of rights to exercise your rights related to the protection of your personal data and control over how it is processed.

We will try to deal with your request as soon as possible, usually within one month of receiving the request. If your request will be complex and its processing will be time-consuming, we can (in accordance with the General Data Protection Regulation) if necessary, extend this period by another two months. We will inform you about the extension of the deadline within one month from the delivery of the request and we will give you the reasons justifying the extension of the deadline.

If we have doubts about your identity, for security reasons we may ask you to provide additional information necessary to confirm your identity, e.g., documenting the application with an officially verified signature or presenting an identifying document.

In accordance with the General Data Protection Regulation, we have the option to reject obviously unfounded or unreasonable requests (especially due to their recurring nature), or to demand a reasonable fee taking into account the administrative costs for providing information or for notification or for carrying out the requested action.

RIGHT OF ACCESS TO DATA

You have the right to access the information about the extent to which your personal data is processed. If you ask us to do so, we will provide you with information on whether and to what extent we process your personal data. You also have the right to ask us for a copy of the data being processed. For any additional copies you request, we may charge a reasonable fee to reflect our administrative costs. If you submit a request by electronic means, we will provide you with the information in a commonly used electronic form by default, unless you explicitly ask us for another method of provision.

RIGHT TO CORRECTION

We strive to keep all personal data we process up-to-date, accurate and complete. However, if you find inconsistencies in our data, you should request the correction of personal data (if you find that they are incorrect) or request the completion of incomplete data (if you find that they are incomplete).

RIGHT TO DATA TRANSFER

You have the right to receive your personal data that you have provided to us in a commonly used electronic format and transfer it to another entity. However, this right only applies to data that we process on the basis of your consent or on the basis of a contract between you and us. The right to transfer does not apply to data that we process to fulfill our legal obligations.

The right to portability applies only to the extent that we process your data by automated means.

The right to portability only applies to the data you have provided to us. It does not affect data that we have obtained by further observing or developing the original data that you have provided to us.

RIGHT TO WITHDRAW CONSENT

If we process your personal data on the basis that you have given us your consent, you can withdraw your consent at any time. You can withdraw your consent in writing to our mailing address or by sending an e-mail to our e-mail address, where you indicate that you are withdrawing your consent to the processing of personal data.

The withdrawal of consent does not affect the legality of the processing that we carried out before the withdrawal of consent, but it prevents us from further processing your data for the purposes for which we needed your consent to the processing of personal data.

THE RIGHT TO OBJECT AGAINST PROCESSING

You have the right to object to the processing of personal data that takes place on the basis of our legitimate interest (e.g., exercising legal claims or sending information to current and past clients). If it is marketing activities, we will stop processing your personal data without further ado; in other cases, we will do so if we do not have serious legitimate reasons for continuing such processing.

RIGHT TO LIMIT PROCESSING

You have the right to request the restriction of the processing of your personal data if:

• • at the same time you challenge the correctness of personal data (during the period allowing us to verify the correctness of personal data) or

• • if the processing is illegal and you do not request their deletion, or

• • we no longer need them, but you need them to assert your claims, or

• • you objected to data processing based on a legitimate interest.

Restriction of processing means that, with the exception of storage, such personal data is processed only with your consent or only to the extent necessary to demonstrate, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or the member state.

If we restrict the processing of your data and later also the reasons for which we restrict the processing, we will inform you about this before the processing of the processing.

RIGHT TO BE FORGOTTEN (RIGHT TO DELETION)

You have the right to request the deletion of your personal data if any of the following reasons are met:

• • you revoked the consent based on which we processed your personal data and at the same time there is no other legal basis for processing your personal data (e.g., fulfillment of our legal obligations),

• • you objected to the processing of your personal data based on a legitimate interest,

• • personal data are no longer necessary for the purposes for which they were obtained or processed,

• • We have processed personal data unlawfully or it must be deleted to comply with a legal obligation.

However, according to the applicable rules, we cannot comply with your request for data deletion if we still need personal data to fulfill our legal obligations or if further processing is necessary to prove, exercise or defend legal claims.

RIGHT TO FILE A COMPLAINT

If you believe that your rights regarding personal data have been violated, you have right to file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, Hraničná 12, 820 07 Bratislava) can be found on the website of the Personal Data Protection Office of the Slovak Republic www.dataprotection.gov.sk. www.dataprotection.gov.sk.