Privacy Policy

Who Processes Your Personal Data?

Your personal data is processed by RIS Company s.r.o., registered at Národná 5, 010 01 Žilina, ID No. 51988275, recorded in the Commercial Register of the District Court in Žilina, Section: Sro, Insert No.: 71028/L (hereinafter referred to as the “controller”). As far as data processing by the controller is concerned, you are the data subject, i.e., the person whose personal data is processed. Your personal data will be processed securely, in accordance with the security policy of the controller.

What Rights Do You Have as a Data Subject?

  • Right of Access – You have the right to obtain a copy of the personal data we hold about you and information on how we use your personal data.
  • Right to Rectification – If you believe the data we hold is inaccurate, incomplete, or out of date, please feel free to ask us to correct, update, or supplement the information.
  • Right to Erasure (Right to Be Forgotten) – You have the right to request the erasure of your personal data.
  • Withdraw Consent – In cases where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the legality of personal data processing carried out before its withdrawal.
  • Right to Restrict Processing – Under certain circumstances, you have the right to request that we stop using your personal data.
  • Right to Data Portability – Under certain circumstances, you have the right to request that we transfer your personal data, which you have provided to us, to another third party of your choice.
  • Right to Object – You have the right to object to the processing of personal data based on our legitimate interests.
  • Right to Lodge a Complaint – If you believe your personal data is being processed unfairly or unlawfully, you can lodge a complaint with the supervisory authority: the Office for Personal Data Protection of the Slovak Republic.

The controller will not use your personal data for automated individual decision-making, including profiling.

If the provision of personal data is a legal/contractual requirement, as the data subject, you are obliged to provide this personal data. Failure to provide the personal data necessary for concluding a contract may result in the contract not being concluded.

If you object to the processing of your personal data, you have the right to submit a request or complaint in writing to the company’s registered address: Národná 5, 010 01 Žilina, or via email at tomas@tomasriska.com.

The controller does not transfer personal data to third countries or international organizations.

Information on the Processing of Clients’ Personal Data

Legal Obligations

Your personal data will be processed for the purpose of fulfilling our legal obligations in the areas of taxation, accounting, and complaints. The legal basis for processing your personal data is Article 6(1)(c) of the GDPR, meaning that your personal data will be processed based on fulfilling our legal obligations. If we process your personal data to meet our legal obligations in taxation, accounting, and complaints, we will process your personal data in the scope of: name, surname, bank account number, email, or other personal data necessary for handling complaints in accordance with the principle of data minimization. If we process your personal data to comply with anti-money laundering and terrorism financing regulations, we will store it for five years from the termination of our contractual relationship or five years from the transaction date. If we process your personal data to fulfill tax and accounting obligations, we will process it for 10 years after fulfilling the legal obligation. If we process your personal data for complaint-related duties, we will process it for one year after concluding the complaint handling process.

Contractual Obligations

We will process your personal data to fulfill our obligations arising from contracts as well as to manage the contractual relationships of which you are a party. The legal basis for the processing of your personal data is Article 6(1)(b) of the GDPR, meaning that your personal data is processed based on performance of a contract to which you, as the data subject, are party. For this purpose, we will process your personal data in the scope of: identification data, address, and contact details. We will process your personal data for 10 years after the termination of the contractual relationship.

Legitimate Interests

We will process your personal data for the purpose of internal record-keeping, asserting legal claims arising from contracts, and maintaining a record of exercised rights and breaches of protection under Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (the “Act”). The legal basis for processing personal data is Article 6(1)(f) of the GDPR, meaning your personal data will be processed based on our legitimate interests. The main legitimate interests are internal record-keeping, asserting legal claims arising from contracts, and maintaining a record of exercised rights and breaches of protection as per the Act. If we process your personal data to assert legal claims, we will do so in the scope of: name, surname, phone number, email, or additional personal data cited in the contracts, in accordance with the principle of data minimization. If we process your personal data for internal record-keeping, we will do so in the scope of: name, surname, title, email, phone number. If we process your personal data to maintain a record of exercised rights and breaches, we will process the personal data indicated in your request. For internal record-keeping, your personal data will be processed for the duration of the contractual relationship. For legal claims, your personal data will be processed for 10 years after the contractual relationship ends. For maintaining a record of exercised rights and breaches under the Act, we will process your personal data for six months following the end of the five-year period during which you exercised your right or a data breach occurred.

Recipients

Recipients of your personal data will be authorized persons or other persons in a contractual relationship with RIS Company s.r.o.

Information on the Processing of Website Visitors’ Personal Data

Website Visitors

  1. Your Personal Data
    When you visit this website, we automatically collect the following personal data about you:

    • Information on the specific pages you visit
    • Date and time of your visit
    • Your IP address
    • Your web browser
    • The website (URL) you visited before arriving at this website
    • Certain cookies (see Section 2.1 below)

    We also collect any information you provide to us when using this website.

    While you are not obligated to provide personal data upon request, if you choose not to, you may not be able to use all the website’s features.

  2. Cookies, Google Analytics, Facebook, and AddThis Plugins

    2.1. Cookies
    This website uses so-called cookies, which are small files created on your computer when you visit a website. Cookies typically provide additional functionalities for site visitors. For example, they may track your visits, support your navigation on the site, help you pick up where you left off, and remember your preferences for future visits. A cookie cannot access the data on your computer or read or modify any data on your computer.

    Most of the cookies used on this website are temporary cookies, which are automatically deleted once you leave the site. Persistent cookies, on the other hand, remain on your computer until you manually delete them in your browser. For example, persistent cookies allow the site to recognize you upon a future visit.

    To manage cookies stored on your computer, adjust your browser settings to notify you whenever a website wants to create a cookie, or you can block cookies completely. You can also delete cookies that have already been placed on your computer. For more information on how to do this, consult the “Help” feature of your browser.

    Please note that disabling cookies may affect your online experience and/or prevent you from fully using our website.

    2.2. Google Analytics
    This website uses Google Analytics, a web analytics service provided by Google, Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). Google Analytics uses cookies to help analyze how you use the site. The information generated by these cookies about your use of the website will be transmitted to and stored by Google on servers in the United States. If IP anonymization is activated on this website, your IP address is truncated by Google within a Member State of the EU or another state in the EEA before being transferred to the US. In exceptional cases, the full IP address is transferred to Google servers in the US and truncated there. Google will use this information on behalf of the website operator to evaluate your use of the website, compile reports on website activity, and provide additional services related to website usage and internet usage. Google will not associate your IP address with any other data held by Google. You can prevent Google from collecting information (including your IP address) via cookies and from processing this data by downloading and installing this browser plugin: http://tools.google.com/dlpage/gaoptout.

    For more information on terms of use and data protection, see the Google Analytics Terms of Service or Google Analytics Privacy Policy. Note that this website uses the “gat.anonymizeIp();” feature to ensure IP addresses are collected anonymously (IP masking).

Contact Forms – Information Requests

Your personal data will be processed to complete the steps related to evaluating your inquiry submitted via the contact form on our website. The legal basis for processing your personal data is Article 6(1)(b) of the GDPR, meaning that your personal data will be processed to take steps prior to entering into a contract. We will process your personal data in the scope of: name, email, and any other personal data you provided in the contact form. Once we receive your inquiry submitted via the contact form, your personal data will be processed for 10 days after the end of the month in which the inquiry was received.

Recipients

Recipients of your personal data will be authorized persons or other persons in a contractual relationship with the controller, including the website administrator, entities to which the controller is legally obliged to provide personal data, and the company’s managing director.

If we wish to process your personal data for the purpose of promoting our company, you will be informed in advance in a separate document.