Data Protection Declaration
Name and address of the responsible person
The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:
BAAS, s.r.o., Farská 1707, 018 61 Beluša, Company ID: 36300624
Phone: +421 42 4710 241
E-mail: baas@baas.sk
General information on data processing
1. Scope of personal data processing
We process personal data of our users only to the extent necessary for the functionality of the website, as well as our content and performance. The processing of personal data of our users is regularly carried out only with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons, and the processing of data is permitted by statutory provisions.
2. Legal basis for processing personal data
If the consent of the data subject is obtained for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
When processing personal data necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
If the processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis.
If processing is necessary to safeguard the legitimate interests of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interests, Article 6(1)(f) GDPR serves as the legal basis for processing.
3. Data deletion and storage period
Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if provided for by the European or national legislator in EU regulations, laws, or other regulations to which the data controller is subject. Blocking or deletion of data will also occur when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.
Preparation of the website and creation of log files
1. Description and scope of data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the calling computer. The following data is collected:
- Information about the browser type and version
- User's operating system
- Internet service provider of the user
- User's IP address
- Date and time of access
- Websites from which the user's system reaches our website
- Websites that are called up by the user's system via our website
The data is also stored in log files of our system. Storage of this data together with other personal data of the user does not take place.
2. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
3. Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.
Storage in log files is done to ensure the functionality of the website. The data is also used to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.
In these purposes, our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR also lies.
4. Storage period
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of recording data for the preparation of the website, this is the case when the respective session is ended.
In the case of storing data in log files, this is the case after 180 days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.
5. Possibility of objection and removal
The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
Use of Cookies
1. Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or transferred from the internet browser to the user's computer system. When a user calls up our website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identifiable even after a page change. The following data is stored and transmitted in cookies:
- Search behavior
In addition, we use cookies on our website that allow the analysis of user behavior during surfing. The following data may be transmitted in this way:
- Entered search terms
- Frequency of page calls
- Use of website functions
User data obtained in this way is pseudonymized through technical measures. Therefore, it is no longer possible to assign the data to the user who called it up. The data is not stored together with other personal user data.
When our website is called up, the user will be informed through an information banner about the use of cookies for analytical purposes and referred to this data protection statement. In this context, information will also be provided on how to prevent the storage of cookies through browser settings.
When our website is accessed, the user will be informed about the use of cookies for analytical purposes and consent will be requested for the processing of personal data used in this context. In this context, reference will also be made to this data protection statement.
2. Legal Basis for Data Processing
The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) of the GDPR.
The legal basis for processing personal data using cookies for analytical purposes is the existence of the user's consent under Article 6(1)(a) of the GDPR.
3. Purpose of Data Processing
The purpose of processing technically necessary cookies is to simplify the use of the website for the user. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change. We need cookies for the following applications:
- Remembering search terms
User data obtained through technically necessary cookies is not used to create user profiles.
The use of analytical cookies is carried out for the purpose of improving the quality of our website and its content. Through analytical cookies, we learn how the website is used, allowing us to continually optimize our offerings.
In these purposes, there is also our legitimate interest in the processing of personal data under Article 6(1)(f) of the GDPR.
4. Storage Duration, Objection, and Removal Options
Cookies are stored on the user's computer and are transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may not be possible to use all functions of the website to their full extent.
Contact form and email contact
1. Description and scope of data processing
Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and saved. This data is:
- Salutation
- First name, last name
- Email address
- Company (optional)
- Position (optional)
- Message
At the time the message is sent, the following data is also stored:
- The user's IP address
- Date and time of registration
Alternatively, you can contact us via the provided email address. In this case, the user's personal data transmitted with the email will be stored.
2. Legal basis for data processing
The legal basis for the processing of data is Article 6(1)(f) GDPR. If the email contact aims to conclude a contract, the additional legal basis for processing is Article 6(1)(b) GDPR.
3. Purpose of data processing
The processing of personal data from the input mask serves us only to process the contact. In the case of contact by email, this also includes the necessary legitimate interest in processing the data
4. Duration of storage
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.
The additional personal data collected during the sending process will be deleted after a period of 7 days at the latest.
5. Possibility of objection and removal
The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be deleted in this case.
Google Analytics
Data Protection Statement for the Use of Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies," which are text files stored on your computer that allow an analysis of your website usage. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. However, due to the activation of IP anonymization on this website, your IP address will be truncated by Google within member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. At the request of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage to the website operator. The IP address provided by your browser in the context of Google Analytics will not be merged with other Google data. You can prevent the storage of cookies by appropriately setting your browser; however, please note that in this case, you may not be able to use all features of this website to their full extent. Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at Google Optout.
Further information on the terms of use and data protection can be found at www.google.com/analytics/terms/sk.html. Please note that on this website, Google Analytics has been expanded with the "anonymizeIp" code to ensure the anonymized collection of IP addresses (so-called IP masking).
Rights of the Data Subject
If personal data about you is processed, you are a data subject within the meaning of the GDPR, and you have the following rights against the responsible entity:
- Right to information
- Right to rectification
- Right to restriction of processing
- Right to erasure
- Right to notification
- Right to data portability
- Right to object
- Right to withdraw consent related to data protection
- Automated decision-making, including profiling
- Right to lodge a complaint with the supervisory authority