General terms and conditions

I.
General provisions and definitions

1. These general terms and conditions (hereinafter referred to as GTC) regulate the rights and obligations of SMARTUP accounting s.r.o., with registered office at Roľnícka 187, 831 07 Bratislava, Slovak Republic, ID number: 50 753 045, registered in the Commercial Register of the Bratislava I District Court, section: Sro, insert no. 118114/B and/or SMARTUP Legal s.r.o., law firm, with registered office at Roľnícka 187, 831 07 Bratislava, Slovak Republic, SAK 5038 (hereinafter referred to as the "supplier") and the customer when ordering the product via the smartup.sk website.

2. GTC are effective on the day they are published on smartup.sk.

3. The relations of the contracting parties, which are not regulated by these general terms and conditions, are governed by the relevant provisions of Act No. 513/1991 Coll. Commercial Code as amended and Act No. 22/2004 Coll. on electronic commerce, as amended.

4. Customer means a natural and/or legal person who orders a product electronically via the smartup.sk website

5. Electronic order means "Order form", sent either from the internal environment of smartup.sk (and/or lacnesro.sk.) and/or by sending an e-mail message to the supplier.

6. LEGAL INFORMATION ON TERMS AND OPTIONS FOR ALTERNATIVE DISPUTE RESOLUTION:

   "If the consumer feels that some of his consumer rights have been violated, he can submit a proposal to start an alternative dispute resolution, either through the European platform or at the relevant Slovak authorities according to the Alternative Dispute Resolution Act.

   However, before taking this step, the consumer must first contact the supplier for a remedy. Only after receiving a negative response or if no response is sent at all within 30 days, the consumer can file a motion to initiate dispute resolution. The proposal can be submitted by the consumer within a period of 1 year from the rejection of the aforementioned request, while for all disputes, their value must reach at least EUR 20.

   The competent authorities for the delivery and resolution of complaints are:

   • Sl
   • private subjects of alternative dispute resolution, registered in the List maintained by the Ministry of Economy on the website: http://www.economy.gov.sk/zoznam-subjektov-alternativneho-riesenia-spotrebitelskych-sporov/146987s.

   If the consumer submits a motion to initiate proceedings, the above-mentioned entities shall notify the supplier of the beginning of dispute resolution and deliver all necessary documents together with a request for comment on the facts in question within a period of at least 15 days. The supplier is obliged to cooperate in solving such a dispute, otherwise he faces a fine from the Slovak Trade Inspection in the amount of EUR 500 to EUR 10,000.

   All dispute resolution should be completed within 90 days of initiation. In more complex cases, this period can be extended by 30 days, even repeatedly. If both parties express an interest in amicable settlement of the dispute, the aforementioned entities will draw up an agreement on dispute settlement. The agreement is then binding for both parties.

   Alternative dispute resolution is free of charge. An authorized legal entity may request a fee of a maximum of EUR 5 including VAT when initiating a dispute. The platform for submitting proposals is http://ec.europa.eu/odr ".

7. Supplier contact details:

SMARTUP accounting s.r.o., Roľnícka 187, 831 07 Bratislava, Slovak Republic, ID number: 50 753 045, registered in the Commercial Register of the District Court Bratislava I., section: Sro, entry no. 118114/B

Advokátska kancelária SMARTUP Legal s.r.o., with registered office at Roľnícka 187, 831 07 Bratislava, Slovak Republic, SAK 5038

Tel.: +421 (0)948 383 363 / (Monday to Friday) between 9:00 a.m. - 12:00 p.m., 1:00 p.m. - 5:00 p.m./4:00 p.m.

E-mail: [email protected]

II.
An order

1. The "Order Form" must contain true and complete data filling. The customer takes full responsibility for the content and grammatical correctness of the data he enters in the "Order Form". The customer is obliged to fill in the "Order Form" grammatically correctly, with diacritics. The supplier bears no responsibility for grammatical inconsistencies, content inconsistencies and typos in the filled-in "Order Form", and if the customer incurs damage as a result of incorrectly filling out the "Order Form", the customer bears this in full.

2. Changes to one item of data in the "Order Form", after sending the "Order Form" to the supplier, can be made by the customer one (1) time free of charge, each further change to the data sent in the "Order Form" is charged at EUR 10 (ten euros)/ item. One item in the "Order Form" means in particular, but not exclusively: change of a person's name, correction of a typo in a person's name, change of a person's surname, correction of a typo in a person's surname, correction of a person's date of birth, correction of a person's social security number, change of address, extension/ narrowing down to one object of business activity of a commercial company, and others.

3. The submitted "Order Form" is considered a contract (hereinafter referred to as the "Contract") and is binding. The "contract" can be canceled within 60 days from the payment of the proforma invoice in the amount of 50% of the price of the ordered product, min. however, EUR 60/order.

III.
Terms of payment

1. The price of the product is always listed next to the selected product and is paid in the form of an advance invoice, in full. The price of the product does not include notary/administrative fees for verifying the authenticity of the signature, nor for verifying the authenticity of photocopies of documents, nor fees for (judicial) translations of foreign language documents.

2. The price is always quoted without value added tax, as the supplier is not a VAT payer.

3. The supplier reserves the right to unilaterally adjust (increase/decrease) the prices of the products on smartup.sk (lacnesro.sk), with the fact that the new prices are effective on the day of their publication on the web address whose products are affected by the change. The price adjustment does not apply to services already ordered.

4. In the event that an obviously incorrect price appears for some product, e.g. price 0 euro or 1 euro, the supplier is not obliged to deliver the service at the wrong price, but can offer the customer to deliver the service at the correct price. If the customer does not agree with the proper price in this case, he can withdraw from the contract.

5. After the delivery of the product, the supplier sends the customer a tax document (invoice) in which he settles the advance payment of the customer.

IV.
Terms of Delivery

1. For each product, the estimated delivery time of the product is indicated, which starts from the day of "delivery of the documents to the supplier". "Delivery of documents to the supplier" means the delivery of documents in the required number of copies, the delivery of the required attachments, documents, confirmations, as well as the delivery of documents in the required form (e.g. original form, form of timeliness of the document, form of court translation, form of verification of signatures, etc. ).

2. We would like to point out to clients that product delivery times are indicative due to the variability of compliance with legal deadlines by state institutions.

3. The customer is obliged to provide the supplier with the cooperation necessary for the delivery of the product, in particular, but not exclusively:

   1. check your e-mail address listed in the electronic order daily;

   2. maintain a functional telephone number, specified in the electronic order and respond to the supplier's phone calls;

   3. to immediately confirm the delivery of his e-mail messages to the supplier;,

   4. after sending the documents, print them using the printer in the number of copies recommended by the supplier and ensure at your own expense that they are signed by authorized persons. On documents where, on the basis of the supplier's notification, it is necessary to verify the authenticity of the signatures of the signatories, the customer undertakes to ensure the verification of the authenticity of the signatures at the notary's office or the municipal registry department, at his own expense.

   5. no later than two (2) months from the date of "delivery of the documents to the customer", deliver these documents together with attachments and/or confirmations and/or documents that the supplier requested from the customer in the required number of copies and/or in the required form to the supplier's address. "Delivery of documents to the customer" means the delivery of documents to the e-mail address of the customer, specified in the "Order Form" and/or sent via the internal environment, or to the e-mail address of the customer from which he communicates with the supplier. If the customer does not deliver the documents and/or annexes/other confirmations/documents to the supplier within a period of two (2) months from the date of "delivery of the documents to the customer", or delivers them but in the wrong form/number of copies, and until the expiry of the period of two months from the date of "delivery documents to the customer" does not ask the supplier to cancel the order according to point II.3, his right to provide the service expires and the "Agreement" becomes ineffective on the last day of this two-month period. In this case, the customer is not entitled to a refund of the paid price of the service.

IN.
Privacy

1. The supplier stores personal data, provided by the customer, exclusively for the purpose of delivering the product, processing the electronic order, settling payments, exercising its legal claims from the contract, for mandatory archiving and for communication between the contracting parties and state institutions.

2. We would like to inform the customers that in order to deliver the products, it is necessary to process their personal data also in the scope of social security number and parents' first and last names.

3. Terms of personal data processing: online, in written form, in the form of paper originals and/or photocopies, in the form of backup and storage of data in electronic form, scans. The supplier also stores and processes the generally applicable identifier (in particular the social security number) of the customer.

4. The customer grants the supplier consent to provide his personal data to the supplier's employees and subcontractors, to the extent of the data that is necessary to fulfill the purpose of the order.

5. The supplier is obliged by law to make personal data available to law enforcement authorities, tax authorities and other state institutions.

6. The supplier proceeds in the handling of personal data in accordance with the provisions of No. 122/2013 Coll. on the protection of personal data and amendments to certain laws, as amended. By ordering the product, the customer confirms that he has provided his personal data to the supplier voluntarily and agrees to their processing in the supplier's records, unless they are in conflict with legal regulations, as well as to the disclosure and provision to state authorities under the conditions and to the extent established by legal regulations.

VI.
Disclaimer

1. The supplier bears no responsibility for viruses or other attacks on the computer system or other technical devices of the users of this website.

2. The supplier does not provide legal services according to special regulations. If necessary, professional services are provided by lawyers and notaries.

3. The supplier is not liable to a third party for direct, indirect or extraordinary damages caused by the use of information from smartup.sk/nanohy.sk.

VII.
Copyright

1. Information published on the website smartup.sk/nanohy.sk is not authorized to be modified, copied, publicly distributed or used for commercial purposes in any way. The content published on this site is subject to copyright.

2. The content of the site is a copyrighted work according to the Copyright Act. The property rights to the work are carried out by SMARTUP accounting s.r.o. It is not permitted to copy, publicly distribute, process or translate the content of the page.

VIII.
Final provisions

1. When using the website smartup.sk/lacnesro.sk, the customer is expected to be familiar with the technical possibilities of the Internet and to accept possible problems caused by technology.

2. The supplier is not responsible for damages caused by faulty connection to smartup.sk. The protection of the computer or the data on the customer's computer is the responsibility of the customer.

3. The supplier warns that the information provided at smartup.sk/lacnesro.sk may be updated without prior notice.

4. The customer is entitled to change the range of products at smartup.sk/lacnesro.sk without prior notice.

5. The contracting parties have agreed that all disputes that arise between them from legal relations based on the contract or related contracts, including disputes about the validity, interpretation and termination of this contract, will preferably be resolved by agreement.

6. By using the smartup.sk/a or lacnesro.sk site and/or by sending an electronic order from this site, the user of this site declares that he has familiarized himself with the General Terms and Conditions, understood their content, and agrees to these general terms and conditions in their entirety, without reservations.

GDPR Information

INFORMATION ON PROCESSING OF PERSONAL DATA BY THE OPERATOR FOR MARKETING PURPOSES

provided according to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with the processing of personal data and on the free movement of such data, which repeals Directive 95/46/EC (General Data Protection Regulation), in the effective version from 25.05. .2018 (hereinafter also "GDPR Regulation") and according to Act no. 18/2018 Coll. on the protection of personal data and on the amendment and supplementation of certain laws, in the effective version from 05.25.2018 (hereinafter also the "Act on the Protection of Personal Data").

With effect from May 25, 2018, all personal data is processed in accordance with the GDPR Regulation.

I hereby acknowledge that the website operated on behalf of the company SMARTUP accounting s.r.o., IČO: 50753045, registered office Roľnícka 187, 831 07 Bratislava, Slovak Republic, a company registered in the Business Register OS BA I, Dept. Ltd., company no. 118114/B (hereinafter also "the company") is not directly intended for persons who cannot independently give the operator consent to the processing of their personal data.

A. Who we are

The company SMARTUP accounting s.r.o., ID number: 50753045 maintains accounting for clients and provides services in accordance with the Act on the Residence of Foreigners in the Slovak Republic. More information about the projects implemented by the company is available at: http://www.smartup.sk/ (hereinafter also "Projects").

Smertup therefore processes personal data concerning you in the following scope:

1) first and last name, maiden name; also parents;

2) e-mail address;

3) telephone number;

4) permanent residence, permanent residence of parents;

5) social security number and date of birth;

(data specified in points 1) to 5) above, hereinafter collectively also "Personal data").

B. Information regarding the processing of Personal Data on behalf of Smartup in accordance with the GDPR Regulation and the Personal Data Protection Act

1. Identification and contact details of the operator

The operator on whose behalf the Personal Data is processed is the company SMARTUP accounting s.r.o., ID number: 50753045, registered office Roľnícka 187, 831 07 Bratislava, Slovak Republic, a company registered in the Commercial Register OS BA I, Dept. Ltd., company no. 118114/B.

2. Purposes of Personal Data processing and legal basis for Personal Data processing

(i) the purpose of fulfilling the obligations of the company, as an operator, according to the relevant legal regulations, for example tax obligations or obligations related to consumer protection in the internal market. The legal basis for the processing of Personal Data is the fulfillment of legal obligations (Article 6, paragraph 1, letter c) of the GDPR Regulation);

(ii) the purpose of keeping records of the requests of the persons concerned and their processing by the operator. The legal basis for the processing of Personal Data is the legitimate interest of the company (Article 6(1)(f) of the GDPR Regulation).

3. Categories of affected persons

The company, as the operator, also processes Personal Data for the purposes of direct marketing regarding clients, as affected persons, who it records have shown interest in some of the company's Projects.

4. Legitimate interests pursued by the company as an operator

the company sees its legitimate interest in the possibility of introducing clients to advantageous offers related to Projects in the future. The legal basis for the processing of Personal Data on behalf of the company for the purpose of direct marketing is the legitimate interest of the company, according to the relevant article of the GDPR Regulation and the relevant provision of the Personal Data Protection Act, provided that in the given case such interest is not overridden by interests or fundamental rights and freedoms of the person concerned who require the protection of personal data.

If, as a data subject, you are not interested in receiving news and current information about advantageous offers related to Projects, you can at any time and free of charge exercise the right to object, for reasons related to your specific situation, to the processing of Personal Data for the purposes of direct marketing by the company, as the operator, in particular in the following ways

a) at any time and free of charge by clicking on the relevant link found in each newsletter;

b) via the telephone line at telephone number +421 948 383 363

c) via e-mail: [email protected]; or

d) by post at the address of the company's headquarters, namely the following address: SMARTUP accounting s.r.o., Roľnícka 187, 831 07 Bratislava, Slovak Republic

If you object to the processing of Personal Data for the purpose of direct marketing, the company will not process your Personal Data further, and as a result you will not receive any information about news from the company.

In the field of handling requests from affected persons, the company sees its legitimate interest in the possibility of demonstrating the compliance of procedures with the requirements of the GDPR Regulation.

5. Instruction on the voluntariness or obligation to provide consent to the processing of personal data. In the event that the data subject is interested in the operator, the company, sending him news and marketing information, the data subject is obliged to provide the company, as the operator, with at least his e-mail address and consent to the processing of his Personal Data for direct marketing purposes, otherwise it is not possible to subscribe to news and marketing information sent by the company.

6. Recipients or categories of recipients of Personal Data

It is assumed that Personal Data processed on behalf of the company, as an operator, for the purpose of direct marketing will be provided to the following recipients:

i. of Touch4IT s.r.o., with registered office at Hana Meličkova 5, 841 05 Bratislava, ID number: 48 024 066, entry: Commercial register of the District Court Bratislava I, Section: S.r.o., Insert number: 102430/B (hereinafter also "Touch4IT s.r.o.");

7. Transfer of Personal Data to a third country

The company does not transfer information to a third country.

e: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm.

8. The period of storage of Personal Data, respectively the criteria for determining the period of processing of Personal Data

Personal data will be processed until the purpose of processing the Personal Data for which it was obtained no longer exists, but at the latest until the legal basis for the processing of Personal Data according to the GDPR Regulation and the Personal Data Protection Act is established.

9. Information regarding automated individual decision-making:

SMARTUP accounting, as, as the operator, when processing Personal Data on behalf of SMARTUP accounting, as, does not use any automated individual decision-making procedures or profiling.

10. Information on other rights of clients, as data subjects, according to valid and effective legal regulations and information on the procedures for exercising the rights of clients, as data subjects, according to the provisions of the Personal Data Protection Act:

Subject to compliance with the conditions established by valid and effective legal regulations governing the protection of personal data according to the GDPR Regulation and the Personal Data Protection Act, you, as a data subject, have the following rights:

The right to request from the operator access to personal data concerning her, according to Article 15 of the GDPR Regulation. The person concerned has the right to obtain from the intermediary, as the operator, confirmation as to whether personal data concerning him or her is being processed, and if so, he or she has the right to obtain access to this personal data and the following information:

a) processing purposes;

b) categories of affected personal data;

c) recipients or categories of recipients to whom personal data have been or will be provided, especially recipients in third countries or international organizations;

d) if possible, the expected period of storage of personal data, or if this is not possible, the criteria for its determination;

e) the existence of the right to request from the operator the correction of personal data relating to the person concerned or their deletion or restriction of processing, or the right to object to such processing;

f) the right to file a complaint with the supervisory authority;

g) if the personal data were not obtained from the data subject, any available information as to their source;

h) the existence of automated decision-making, including the profiling referred to in Article 22 paragraph 1 and 4 of the GDPR Regulation and, in these cases, at least meaningful information about the procedure used, as well as the meaning and expected consequences of such processing for the person concerned.

i. If personal data is transferred to a third country or an international organization, the data subject has the right to be informed about adequate guarantees regarding the transfer according to Article 46 of the GDPR Regulation.

The company, as the operator, will provide a copy of the personal data that is being processed. For any additional copies requested by the data subject, the operator may charge a reasonable fee corresponding to administrative costs. If the person concerned submitted the request by electronic means, the information will be provided in a commonly used electronic form, unless the person concerned has requested another method. The right to obtain a copy must not have adverse consequences on the rights and freedoms of others.

ii. The right to correct personal data according to Article 16 of the GDPR Regulation:

The person concerned has the right to have the company, as the operator, correct incorrect personal data concerning him without undue delay. With regard to the purposes of processing, the data subject has the right to supplement incomplete personal data, including by providing a supplementary statement.

iii. Right to erasure (right to be “forgotten”) according to Article 17 of the GDPR Regulation:

The person concerned also has the right to obtain from the company, as the operator, the deletion of personal data concerning him without undue delay, and the company, as the operator, is obliged to delete personal data without undue delay if any of the following reasons are met:

a) personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;

b) the person concerned revokes the consent on the basis of which the processing is carried out, according to Article 6 paragraph 1 letter a) or Article 9 par. 2 letters a) GDPR regulations, and if there is no other legal basis for processing;

c) the person concerned objects to the processing according to Article 21 paragraph 1 of the GDPR Regulations and there are no valid reasons for processing or the data subject objects to the processing according to Article 21 par. 2 GDPR Regulations;

d) personal data were processed illegally;

e) personal data must be deleted in order to comply with a legal obligation under Union law or the law of a Member State to which the controller is subject;

f) personal data were obtained in connection with the offer of information society services according to Article 8, paragraph 1 of the GDPR Regulations.

If the controller has published personal data and is obliged to delete personal data, taking into account the available technology and the costs of implementing the measures, it will take reasonable measures, including technical measures, to inform the operators that carry out the processing of personal data that the data subject requests them to delete all references to these personal data, their copy or replicas.

The right to erasure does not apply if the processing is necessary:

a) to exercise the right to freedom of expression and information;

b) to fulfill a legal obligation that requires processing according to Union law or the law of a Member State to which the operator is subject, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator;

c) for reasons of public interest in the field of public health in accordance with Article 9 par. 2 letters h) ai), as well as Article 9 par. 3 GDPR Regulations;

d) for the purposes of archiving in the public interest, for the purposes of scientific or historical research or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, if it is likely that the right mentioned above will make it impossible or seriously difficult to achieve the goals of such processing, or

e) to demonstrate, exercise or defend legal claims.

iv. Right to restriction of processing according to Article 18 of the GDPR Regulation:

The data subject has the right to have the controller restrict processing in one of the following cases:

a) the person concerned contests the correctness of the personal data, during the period allowing the operator to verify the correctness of the personal data;

b) the processing is illegal and the data subject objects to the erasure of personal data and requests a restriction of their use instead;

c) the operator no longer needs the personal data for processing purposes, but the data subject needs them to prove, exercise or defend legal claims;

d) the person concerned has objected to the processing according to Article 21 paragraph 1 of the GDPR, until it is verified whether the legitimate reasons on the part of the operator prevail over the legitimate reasons of the person concerned.

If the processing has been limited in accordance with the limitation above, such personal data, with the exception of storage, is processed only with the consent of the person concerned or for proving, exercising or defending legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or a member state. The operator will inform the affected person who has reached the restriction of processing in accordance with the above before the restriction of processing is cancelled.

in. The right to data portability according to Article 20 of the GDPR Regulation:

The person concerned has the right to obtain the personal data concerning him and which he provided to the operator in a structured, commonly used and machine-readable format and has the right to transfer this data to another operator without being hindered by the operator to whom the personal data was provided, if: a) the processing is based on consent according to Article 6 par. 1 letter a) or Article 9 par. 2 letters a) Regulations of the GDPR, or on the contract according to Article 6 par. 1 letter b) GDPR Regulations, and b) if the processing is carried out by automated means. When exercising his right to data portability, the data subject has the right to transfer personal data directly from one operator to another operator, as long as this is technically possible. The application of the right does not affect Article 17 of the GDPR Regulation. The said right does not apply to processing necessary to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator. The right to data portability must not have adverse consequences on the rights and freedoms of others.

vi. The right to object to processing, including objecting to profiling (if carried out) according to Article 21 of the GDPR Regulation:

What is profiling?

The GDPR characterizes data processing as "profiling" if it includes: automated processing of personal data, use of such personal data to evaluate certain personal aspects concerning a natural person. Specific examples include analyzing or predicting aspects of:

relating to an individual's performance at work, assets, health, personal preferences, interests, reliability, behaviour, location or movement. This definition implicitly excludes data processing that is not "automated".

The person concerned has the right to object at any time, for reasons related to his specific situation, to the processing of personal data concerning him, which is carried out on the basis of Article 6 para. 1 letter e) or f) GDPR Regulations, including objection to profiling based on the said provisions. The operator may not further process personal data, unless he proves the necessary legitimate reasons for processing that outweigh the interests, rights and freedoms of the person concerned, or reasons for proving, exercising or defending legal claims. If personal data is processed for the purposes of direct marketing, the data subject has the right to object at any time to the processing of personal data concerning him for the purposes of such marketing, including profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, personal data may no longer be processed for such purposes. In connection with the use of information society services and regardless of Directive 2002/58/EC, the data subject may exercise his right to object by automated means using technical specifications. If personal data is processed for the purposes of scientific or historical research or for statistical purposes according to Article 89, paragraph 1 of the GDPR Regulations, the data subject has the right to object for reasons related to his specific situation to the processing of personal data concerning him, except in cases where the processing is necessary for the performance of the task for reasons of public interest.

vii. The right to file a complaint with a supervisory authority pursuant to Article 77 of the GDPR Regulation:

The supervisory body to which the affected person addresses his complaint in justified cases is the Office for the Protection of Personal Data of the Slovak Republic, with headquarters at Hraničná 12, 820 07 Bratislava 27.

viii. The right to withdraw consent to processing according to Article 7 of the GDPR Regulation:

If the legal basis for the processing of personal data is the consent of the person concerned, the person concerned is entitled to withdraw his consent at any time without this affecting the legality of the processing based on the consent granted before its withdrawal. The right to withdraw consent at any time, even before the expiration of the period for which this consent was granted, can be exercised by the person concerned in particular in the following ways:

a) at any time and free of charge by clicking on the relevant link found in each newsletter;

b) via the telephone line at telephone number 00421 948 383 363;

c) via e-mail: [email protected]; or

d) by post at the registered office of SMARTUP accounting s.r.o., at the following address: Roľnícka 187, 831 07 Bratislava, Slovak Republic.

The company is obliged to take appropriate measures and provide the affected person with information pursuant to Sections 19 and 20 of the Personal Data Protection Act and notices pursuant to Sections 21 to 28 and 41 of the Personal Data Protection Act, which relate to the processing of their personal data, in a concise, transparent, understandable and in an easily accessible form, formulated clearly, especially in the case of information intended specifically for the child. The company is obliged to provide information in paper or electronic form, usually in the same form in which the application was submitted. If the data subject requests it, the company can also provide information verbally, if the data subject proves his identity in another way. The company provides cooperation to the affected person in exercising his rights according to Sections 21 to 28 of the Personal Data Protection Act. In the cases referred to in § 18 par. 2, the operator cannot refuse to act on the basis of the request of the person concerned in the exercise of his rights according to Sections 21 to 28 of the Personal Data Protection Act, if he does not prove that he is unable to identify the person concerned. The company is obliged to provide the affected person with information about the measures taken based on his request pursuant to Sections 21 to 28 of the Personal Data Protection Act within one month of receiving the affected person's request. In justified cases, taking into account the complexity and number of requests, the company may extend the deadline by another two months, even repeatedly, but it is obliged to inform the affected person of any such extension within one month of receiving the request, together with the reasons for the extension of the deadline. If the person concerned has submitted a request in electronic form, the company will provide information in electronic form, if the person concerned has not requested the provision of information in another way. If the company does not take measures based on the request of the affected person, it is obliged to inform the affected person within one month of the delivery of the request about the reasons for not acting and about the possibility of submitting a proposal according to § 100 of the Personal Data Protection Act to the Office for the Protection of Personal Data of the Slovak Republic, with headquarters at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, www.dataprotection.gov.sk

Information pursuant to Sections 19 and 20 of the Personal Data Protection Act and notices and measures taken pursuant to Sections 21 to 28 and 41 of the Personal Data Protection Act are provided free of charge. If the data subject's request is clearly unfounded or disproportionate, especially due to its recurring nature, the company may:

a) demand a reasonable fee taking into account the administrative costs of providing information or a reasonable fee taking into account the administrative costs of notification or a reasonable fee taking into account the administrative costs of carrying out the requested measure; or

b) refuse to act on the basis of the request.

The obvious groundlessness of the request or the inadequacy of the request is demonstrated by the company. The company may request the provision of additional information necessary to confirm the identity of the person concerned if it has legitimate doubts about the identity of the natural person who submits the request pursuant to Sections 21 to 27 of the Personal Data Protection Act; the provision of § 18 of the Personal Data Protection Act is not affected by this.

in Bratislava, on 01.05.2018
SMARTUP accounting sro and Advokátska kancelária SMARTUP Legala sro
operator of www.smartup.sk
Copyright © 2023 SMARTUP Legal s.r.o., all rights reserved.