Before providing your personal data, please read this information about processing of your personal data provided in accordance with Art. 12-14 of the Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter as the “Regulation”) and Sections 19 and 20 of the Act No. 18/2018 coll. on Personal Data Protection.
Who are we and where to find us? Your personal data will be processed by the controller JONA s.r.o. with its registered office at: Tatranská 364, 059 92 Huncovce, Slovakia, corporate identification number (IČO): 45882771, Company registered in the Commercial Register of the District Court in Prešov, section: Sro, entry No.: 23622/P (hereinafter as the “Company” or “we”). Should you have any concerns or question, please send an email to: info@jona-technology.com
Information for individual data subject categories and purposes of the processing
Below you can find information regarding individual purposes of the processing and individual data subjects. For more details, please click the link applicable to you.
- Contractual partners and potential contractual partners of the Company, members of statutory bodies and contact persons of the contractual partner
Concerned persons: Concerned persons are natural persons who are contractual partners of the Company or members of the statutory bodies of the contractual partners and their contact persons or who are potential contractual partners and have contacted the Company or have been contacted by the Company before concluding the contract.
What data do we process, for what purposes, on what legal basis and for how long:
Data categories: Name and surname, title, contact data, data on the job position, data from contractual, payment or accounting documents (bank data, data on delivered or withdrawn products or services).
Purpose: We process personal data of contractual partners and potential contractual partners – natural persons as well as members of the statutory bodies of the contractual partners and their contact persons for the following purposes:
- For preparation (i.e., e.g., providing the requested price offer or product information), concluding and fulfilling the contract with the contractual partner, including data sent via the contact form on the Company’s website
- Fulfillment of legal obligations (especially according to the Act on Accounting, the Act on Income Tax and the Act on Archives and other legal regulations)
- Verification of the right to act on behalf of the contractual partner and contacting the contractual partner regarding the personal data of persons acting on behalf of our contractual partners (statutory bodies, managers) or their contact persons under the contract to fulfill contractual obligations under our contracts, contact the contractual partners and keeping records of the documents on which their data are stated following legal regulations.
- Where necessary to assert, prove or defend the legal claims of the Company.
The legal basis is for the purpose
- Article 6 par. 1 letter b) of the Regulation, i.e., the processing is necessary for the performance of a contract to which the person concerned is a party, or that, at the request of the person concerned, pre-contractual measures are taken in the case of a natural person – partner;
- Art. 6 par. 1 letter c) of the Regulation, i.e., the legal obligation of the operator in cases where the law imposes the obligation to record or report the documents on which their data are listed, in particular, the Income Tax Act and the Accounting Act
- Art. 6 par. 1 letter f) of Regulation, i.e., the Company’s legitimate interest in fulfilling contractual and legal obligations or in contacting contractual partners through a contact person concerning personal data of natural persons acting on behalf of the contractual partner or his contact persons in negotiating, preparing or performing a contract;
- Art. 6 par. 1 letter f) of the Regulation of the Company’s legitimate interest – assertion, proving and defending legal claims in the case of data necessary for asserting, defending and proving legal claims.
Processing time: To prepare the contract, we store personal data for a maximum of 1 year from their acquisition if the contract has not been concluded. We process personal data specified in the contract and/or processed for the performance of the contract, related to the contract or necessary for the performance of legal obligations for the duration of the contract in which they are stated or for the performance of which they are used. After the termination of the contract, we process this personal data during the limitation period of claims (usually 4 years) to defend, prove and enforce legal claims, or if proceedings or claims on the Company’s claims or obligations have been initiated during such period or are threatened and a complete resolution of all claims. Personal data on accounting and tax documents and other documents and papers to which mandatory registration or archiving applies are further stored for the duration of the archiving or registration period, for example, for 5 years for data in tax and accounting documents.
Objection
The data subjects have the right to object to processing their data for the purpose set out in points 3 and 4.
Transfers
We do not transfer personal data outside the territory of the Member States of the European Union or an international organization
Other rights
The persons concerned have other rights listed in section 4 of this information
- Persons exercising their rights under the Regulation
Concerned persons: Concerned persons are natural persons who have exercised some of their rights under the Regulation and for this purpose contacted the Company or also persons who have given the Company consent to the processing of personal data for any of the above purposes and later revoke the consent.
What data do we process, for what purposes on what legal basis and for how long:
Data categories:
Data stated in the application of the person concerned, data stated in the consent and the appeal, usually contact details of the applicant
We process personal data for the following purposes:
1. To fulfill the obligations under the Regulation on the rights of data subjects (processing the data subject’s requests)
2. To fulfill the obligations under the Regulation and prove the existence of consent within a certain period in the case of revoked consent
3. Where necessary for the exercise, proving or defending the legal claims of the Company.
The legal basis is for the purpose
1. Art. 6 par. 1 letter (c) the legal obligation of the provider to process the requests of the persons concerned according to Article 12 et seq. of the Regulation
2. Art. 6 par. 1 letter c) the legal obligation to prove the existence of consents and to fulfill other obligations according to Art. 24 of the Regulation
3. Art. 6 par. 1 letter f) of the Regulation – Company’s legitimate interest – assertion, proving and defending legal claims in the case of data necessary for asserting, defending and proving legal claims.
Processing time for 4 years from the processing of the application or withdrawal of consent. In the case of the purposes of proving, defending and claiming for the duration of the existence of these claims until the complete settlement.
Objection
The data subjects have the right to object to processing their personal data for the purpose set out in points 3 and 4.
Transfers
We do not transfer personal data outside the territory of the Member States of the European Union or an international organization
Other rights
The persons concerned have other rights listed in section 4 of this information
- Recipients of marketing information
Concerned persons: Concerned persons are natural persons who have been customers of the Company or a contact person of the customer, or who have subscribed to the e-mail list of the Company’s marketing contacts (they have given their consent to the sending of marketing announcements).
What data do we process, for what purposes on what legal basis and for how long:
Data categories:
Name and surname, e-mail address, or telephone number, address
We process personal data for the following purposes:
- sending marketing announcements about the Company’s products and activities, sending offers
The legal basis is
- Art. 6 par. 1 letter f) of the Regulation – legitimate interest of the Company – direct marketing – for customers and contact persons of customers who have already purchased the goods or services of the Company
- Art. 6 par. 1 letter a) consent – in the case of voluntary provision of personal data and consent to the sending of marketing announcements (newsletters) and offers via e-mail communication
Processing period For a period of 3 years from the last purchase in case of legitimate interest, until the withdrawal of consent or the period specified in the consent in case of consent.
Objection
The data subjects have the right to object to processing their personal data according to the legal basis (legitimate interest) for direct marketing.
Transfers
We do not transfer personal data outside the territory of the Member States of the European Union or an international organization
Other rights
The persons concerned have other rights listed in section 4 of this information
- Other persons concerned
If you do not belong to any category or you are not sure which one you belong to and at the same time you suspect that we process your data, please contact us by e-mail at info@jona-technology.com
Concerning data that we process based on a legitimate interest, you have the right to objectto the processing at any time for reasons relating to your specific situation against the processing of such personal data. In the case of processing for direct marketing, you have the right to object at any time. You can exercise your rights by e-mail at info@jona-technology.com or by post sent to our address. In the case of an objection to direct marketing, it is applied by unsubscribing from the list to which marketing ads are sent to the clickable link attached in the e-mail or text communication.
- Your other rights
Right of access
You have the right to know what data, for what purposes we process about you and to whom we provide it, as well as other information (right of access). If you would like this information or obtain a copy of the personal information about you, please contact us at the address below. Before responding to your request, we may ask you to verify your identity and provide additional information about your request. We will try to respond within a reasonable time and in any case within the time limits set by law.
Right to repair, update
When providing data, it is your responsibility to ensure that you provide true, accurate and complete information and keep it up to date. You can also update your personal information by contacting us using the contact information below. You have the right to ask us to correct your data if it is incorrect or to complete it if it is incomplete. In such a case, do not forget to state in your initial correspondence your name, username (if it is an account) and postal code, or name, surname and date of birth in the case of data that we process to provide services; This will help us protect the details and preferences regarding your data from unauthorized access.
Right to restrict processing
You have the right to restrict processing in cases specified by regulations, such as until they are corrected or during opposition proceedings, or in cases where our Company no longer needs personal data, but you need it to exercise your rights.
The right to erasure and the right to forget
You have the right to delete data in cases specified by the regulations, particularly when the period for which we processed them expires or ends, or their processing is illegal, or you have successfully objected to the processing unless this right is restricted by law.
Right of portability
If we process data based on consent or contract by automated means, you have the right to data portability (the right to obtain data in a structured, commonly used, machine-readable format and transfer it to another operator). If technically possible, you can request that we transfer the data directly to the new operator.
Right to lodge a complaint
If you are not satisfied with how we reacted to the exercise of your rights or if you think that we are processing your data in violation of regulations, you have the right to file a complaint with the Personal Data Protection Office of the Slovak Republic or the relevant office according to your usual residence or place of work.
Exercise of rights
You can exercise your rights at any time by e-mail or notification sent by post to our address.
- Recipients of personal data
Company may be provided to the following categories of recipients:
- External staff and contractors: Natural or legal persons established in the EU who provide the Company with work or services related to the Company’s business, for example, performing parts of contracts or delivering the Company’s products and may need specific personal data of data subjects
- Accounting, tax and legal advisers: Natural or legal persons established in the EU who provide accounting, tax or legal advisory services to the Company.
- IT services and IT platforms, social networks: Natural and legal persons established in the EU are the authors, operators or administrators of electronic platforms or social networks through which the Company communicates with customers, participants in the education or other stakeholders.
- Provision of personal data electronically by minor persons under 16 years of age
If you are under 16 years of age, obtain permission from your parent / legal guardian before providing us with information through our website. Users without this consent are not authorized to provide us with personal data, and if they do so, we will stop processing their data as soon as we find out this information.