logo th design biele
Instagram Pinterest

/Gdpr

Privacy Policy

Processing of Personal Data in Accordance with the Regulation of the European Parliament and the Council of the EU

in accordance with Articles 13 to 22 of Regulation (EU) No. 2016/679 of the European Parliament and the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “General Data Protection Regulation” or “GDPR”) and the provisions of § 19 et seq. of Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”). Pursuant to Article 13 of the General Data Protection Regulation, or § 19 of the Personal Data Protection Act, the website operator: https://thdesign.sk/ (hereinafter also referred to as the “operator”) is obliged, in cases where personal data concerning the data subject is obtained, to provide the data subject with the following information:

I. Contact Information of the Operator

Name: TH Interior Design s. r. o. Address: Sídlisko Lúky 61, 952 01 Vráble Contact: info@thdesign.sk Company ID: 56592663 Commercial Register: District Court Nitra, section: Sro, file no. 64508/N.

II. Purpose of Processing the Data Subject’s Personal Data

The operator processes the data subject’s personal data for the following purposes:
  • further contact via email address or phone number entered through the inquiry form
  • preparation of a non-binding price quote

III. Scope of Processing the Data Subject’s Personal Data

For the above purposes, the operator knowingly processes the following personal data from the data subject:
  • First Name
  • Last Name
  • Email Address
  • Phone Number
Personal data that the operator unknowingly processes from the data subject:
  • IP Address

IV. Retention Period of the Data Subject’s Personal Data

The personal data of the data subject will be processed, collected, archived, and securely stored for the period necessary for the purposes for which the personal data were processed or collected and until the legal basis for their possible archiving ceases or until the validity of the data subject’s consent to the processing of personal data expires. Upon the data subject’s request for deletion of data, all personal data will be permanently deleted and related orders (if any) anonymized.

V. Methods of Obtaining, Recording, and Securing the Data Subject’s Personal Data

The data subject’s personal data are most often obtained directly from them, for example, by filling out a contact form. In such a case, the provision of personal data is voluntary and does not constitute any contractual or legal obligation. The website operator is obliged to record all user requests related to the withdrawal, correction, and deletion of the data subject’s personal data. To secure the personal data of the data subject, the operator uses modern technical and security mechanisms that protect processed personal data from unauthorized access or transfer, loss or destruction, or other potential misuse. The operator does not transfer and does not intend to transfer the data subject’s personal data to a third country or international organization.

VI. Rights of the Data Subject Regarding the Processing of Their Personal Data

The General Data Protection Regulation and the Personal Data Protection Act establish general conditions for exercising individual rights of the data subject. However, this does not automatically mean that the operator will comply with each request, as exceptions may apply, or certain rights may be linked to specific conditions that may not always be met. The operator will always review each request concerning legal regulations and applicable exceptions.
  1. With the consent of the data subject, the operator may process additional personal data for purposes other than those specified in point II, or other personal data necessary for achieving the specific purpose in point III. If the processing of personal data is based on the consent of the data subject, the data subject has the right to withdraw consent at any time. The data subject may, but does not have to, grant the operator consent for the processing of personal data—refusal to grant consent does not have any negative impact on the data subject. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. The data subject can withdraw consent in the same way it was granted.
  2. The data subject has the right to request information from the operator on whether their personal data are being processed. They also have the right to request access to personal data concerning them. Upon such a request, the operator will issue a confirmation with information about the processing of their personal data. The operator is obliged to provide the data subject with their personal data being processed. For repeated requests, the operator may charge a reasonable fee corresponding to administrative costs. The operator must provide the data in the manner requested by the data subject.
  3. The data subject has the right to request correction or completion of inaccurate, outdated, or incomplete personal data. The operator must correct the data without undue delay, considering the purpose of processing.
  4. The data subject has the right to object to processing or request deletion of personal data processed unlawfully, beyond the intended purpose, or upon withdrawal of consent.
  5. The data subject has the right to object to processing based on public interest or legitimate interests, including profiling. The operator may not process data unless overriding legitimate interests are demonstrated.
  6. The data subject may object to processing for direct marketing purposes, including profiling. If objected, the operator may no longer process data for this purpose.
  7. The data subject has the right not to be subject to decisions based solely on automated processing, including profiling.
  8. The data subject has the right to data portability, requesting data in electronic form for transfer to another company.
  9. The data subject has the right to initiate proceedings to determine whether their rights have been violated in data processing.
  10. The data subject has the right to request the operator to restrict the processing of personal data if the data subject disputes the accuracy of the personal data, for a period enabling the operator to verify the accuracy of the personal data; if the processing of personal data is unlawful and the data subject objects to the deletion of personal data and instead requests the restriction of their use; if the operator no longer needs the personal data for processing purposes, but the data subject needs them to assert a legal claim; or if the data subject objects to the processing of personal data based on public interest or the legitimate interests of the operator or a third party, until it is verified whether the operator’s legitimate reasons outweigh the data subject’s legitimate reasons. If the processing of personal data is restricted, except for storage, the operator may process personal data only with the consent of the data subject, for the purpose of asserting a legal claim, protecting persons, or for reasons of public interest. The operator is obliged to inform the data subject whose personal data processing is restricted before lifting the restriction.
  11. The data subject has the right to request the operator to provide their personal data in an electronic form that allows the transfer of the data subject’s personal data to another company or a third party. The data subject has the right to obtain the personal data concerning them, which they have provided to the operator, in a structured, commonly used, and machine-readable format, and has the right to transfer these personal data to another operator if technically feasible and if the personal data are processed by the operator based on the data subject’s consent or a contractual relationship.
  12. The data subject has the right to submit a proposal to initiate proceedings for the protection of personal data, the purpose of which is to determine whether the rights of natural persons have been violated in the processing of their personal data, or whether the Personal Data Protection Act or a specific regulation has been violated. If deficiencies are found, corrective measures or penalties may be imposed for violating this law or specific regulations related to personal data protection. Proceedings are initiated based on a proposal by the data subject or a person who claims to be directly affected in their rights established by this law. The requirements for the proposal and the proceedings themselves are regulated in Section 100 of Act No. 18/2018 Coll. on Personal Data Protection.
  13. Information provided by the operator based on the exercised right of the data subject is provided free of charge. If the data subject’s request is manifestly unfounded or disproportionate, especially due to its repetitive nature, the operator may charge a reasonable fee reflecting the administrative costs of providing the information or refuse to act on the request. The data subject can submit their request in writing, by mail, or by email. The operator will handle the data subject’s request and inform the data subject of the result in the same manner as the request was submitted.

VII. Supervisory Authority

Office for Personal Data Protection of the Slovak Republic
Hraničná 12
820 07 Bratislava 27
Slovak Republic

Company ID: 36064220
E-mail: statny.dozor@pdp.gov.sk