I. Introduction
This document describes how elbega s.r.o., with its registered office at Obrancov mieru 1095/25, Company ID (IČO) 52 75 1104, Tax ID (DIČ) 212 112 3411, registered in the Commercial Register of the District Court Trenčín, Section: Sro, Insert No. 39155/R, processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
This English version is a translation. In the event of any discrepancy, the Slovak version shall prevail.
II. Data Protection Officer
Elbega s.r.o. has appointed Ing. arch. Vladimír Gašpárek as the Data Protection Officer (DPO). The DPO can be contacted at:
Email: gasparek@elbega.com
Phone: +421 907 482 181
III. Purposes of processing personal data
We process personal data for the following purposes:
Project delivery: To conclude contracts and provide architectural services, including design, consulting, project management and construction work.
Customer service: To communicate with customers, provide information about projects and updates, and respond to enquiries.
Employees: To fulfil employment-law obligations and for employee-related administration (payroll, work equipment, training and similar).
Marketing and advertising: To inform about company news and services, where the customer has expressly consented.
IV. Categories of personal data processed
Customers and clients: First name, surname, contact details (e-mail, phone number), address, payment details, project information.
Employees: First name, surname, address, personal identification number, bank account number, job position, information on education and experience.
Suppliers and external partners: Name, contact details, trade names, Company ID, Tax ID.
V. Legal basis for processing personal data
Personal data are processed on the following legal bases:
- Consent of the data subject (e.g. marketing activities).
- Performance of a contract (e.g. conclusion and delivery of architectural projects).
- Legal obligation (e.g. retention of data for tax administration purposes).
- Legitimate interest (e.g. operating our website and marketing activities, where no sensitive data are involved).
VI. Security of personal data
elbega s.r.o. is committed to protecting personal data through appropriate technical and organisational measures that ensure:
Physical security: Protection against unauthorised access to the premises where data are stored.
Information security: Encryption of personal data and regular updates of software and security systems.
Access rights: Personal data may only be accessed by authorised employees who have been properly trained in data protection.
VII. Retention of personal data
We retain personal data only for as long as necessary to fulfil the purpose for which they were collected. After this period, the data will be deleted or anonymised unless there is a legal basis for retaining them further (e.g. for tax or legal obligations).
VIII. Rights of data subjects
Everyone whose data we process has the following rights:
- The right of access to their personal data.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure (the right to be forgotten) where the data are no longer needed or the processing does not comply with the GDPR.
- The right to restriction of processing (if the data subject does not wish their data to be processed for certain purposes).
- The right to data portability (the right to obtain their personal data in a commonly used format and transfer them to another controller).
- The right to object (to processing based on legitimate interest or for direct marketing purposes).
- The right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic if they believe that the processing of their data infringes the GDPR.
IX. Obtaining and managing consent
Where the processing of personal data requires the consent of the data subject (e.g. for marketing purposes), consent will be obtained in a clear and unambiguous manner. The data subject may withdraw this consent at any time.
X. Personal data breach notification
In the event of a personal data breach (e.g. a data leak), elbega s.r.o. will notify the Office for Personal Data Protection without undue delay and within 72 hours, and will inform the affected data subjects where necessary.
XI. Conclusion
This document is binding on all employees and partners of elbega s.r.o. If you have any questions regarding the processing of personal data, please contact the Data Protection Officer, who will provide you with detailed information and advice.