Privacy and Personal Data Protection Policy


1. Introduction

1.1 We are committed to protecting the privacy of visitors to our website and users of our services in accordance with applicable legislation, in particular Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on Personal Data Protection, as amended. 1.2 This policy applies wherever we act as the controller of personal data of website visitors and service users, i.e. where we determine the purposes and means of processing such personal data. 1.3 In this policy, “we”, “us” and “our” refer to Ryba Žilina, spol. s r.o.


2. How we use personal data

2.1 In this section we specify: (a) the general categories of personal data we process; (b) the source and category of data where data were not obtained directly from you; (c) the purposes for which we process personal data; and (d) the legal bases for processing. 2.2 We may process data on use of our website and services (usage data), including IP address, geolocation, browser and version, operating system, referral source, length of visit, page views, navigation paths, and timing/frequency patterns. The source of usage data may be Google Analytics. Such data may be processed for analytics and service improvement. The legal basis is your consent and our legitimate interests. 2.3 We may process information you publish on our website or when using our services for publication and administration of our website and services; the legal basis is consent. 2.4 We may process contact and communication data, including metadata generated via contact forms, for communication and record-keeping; the legal basis is our legitimate interests and/or performance of a contract or pre-contractual measures. 2.5 We may process personal data where necessary for the establishment, exercise or defence of legal claims, whether in judicial, administrative or out-of-court proceedings; the legal basis is our legitimate interest. 2.6 In addition, we may process personal data where necessary to comply with legal obligations or to protect our interests or the interests of another natural person.


3. Disclosure of personal data to other persons

In addition to specific disclosures set out in this policy, we may disclose your personal data where such disclosure is necessary to comply with legal obligations, to protect your vital interests or the vital interests of another natural person, or for the establishment, exercise or defence of legal claims.


4. International transfers of personal data

You acknowledge that personal data submitted for publication through our website or services may be accessible via the internet worldwide. We cannot prevent third parties from using, or misusing, such personal data.


5. Retention and deletion of personal data

This section sets out our data retention and erasure rules designed to help ensure compliance with legal obligations. Personal data shall not be retained for longer than necessary for the purpose(s) for which they are processed. Usage data, publication data, inquiry data, notification data and correspondence data are retained for a maximum period of 3 years. Notwithstanding the foregoing, we may retain personal data where retention is necessary for compliance with legal obligations or for protection of your interests or the interests of another natural person.


6. Changes

We may update this policy from time to time by publishing a new version on our website.


7. Your rights

You have rights under data protection law, including the right of access, rectification, erasure, restriction of processing, objection to processing, data portability, the right to lodge a complaint with a supervisory authority, and the right to withdraw consent. You may request confirmation as to whether we process your personal data and obtain additional information regarding processing purposes, data categories and recipients. Under certain conditions, you may request erasure, restriction, object to processing (including direct marketing), and receive your data in a structured, commonly used and machine-readable format, where applicable. If you believe that our processing of personal data violates applicable data protection laws, you may lodge a complaint with the competent supervisory authority in the EU. You may exercise your rights by written notice.


8. Details about us

This website is owned and operated by Ryba Žilina, spol. s r.o., registered in the Slovak Republic under Company ID (IČO) 31563490, with its registered office at P.O. Hviezdoslava 8194/85, 010 01 Žilina. You may contact us by post at the above address, via the contact form on our website, by telephone at the number(s) published on our website, or by e-mail at the e-mail address(es) published on our website.