Information obligation for contact persons

PERSONAL DATA PROCESSING STATEMENT

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC

(hereinafter "GDPR")

As you or a third party have provided us with your personal data as specified in the contract (including other legal acts, such as written authorisation) or as the addressee as specified in an email or by mail (hereinafter "HB Reavis" or "we"), we would like to provide you with the following information regarding the processing of your personal data and your rights related to this processing.

HB Reavis is part of the international HB Reavis Group, which consists of all entities consolidated within HB Reavis Holding S.A., which is headquartered in Luxembourg (hereinafter "HB Reavis Group"), on the basis of which this Personal Data Processing Statement refers to the HB Reavis Group.


What is our purpose and our legitimate interest in processing your personal data?

We process your personal data in order to effectively fulfil our contractual obligations under the contract with you or a third party on whose behalf you have acted or who has identified you as a contact person and the legal obligations to us or a third party under applicable law. As we have entered into an agreement with you or this third party, we need to process your personal data to ensure effective, error-free and direct communication, and to ensure compliance with our contractual and legal obligations (taxes and accounting) to you or this third party. This processing also applies to legal acts other than contracts, such as written authorisations.

We process your personal data for the purpose of recording incoming and outgoing mail and emails.


What is our legal basis for the processing of your personal data?

We process your personal data on the basis of a legitimate interest within the meaning of Article 6 (1)(f) GDPR. In the case of tax and accounting matters, we process your personal data on the basis of a legal obligation pursuant to Article 6 (1)(c) GDPR. In the event of failure to provide personal data that we are required to process under applicable law, we will not be able to meet our legal obligations to you or any third party.

We process your personal data on the basis of a legitimate interest within the meaning of Article 6 (1)(f) GDPR.


What personal data is processed?

Title, name, surname, job title, job classification, functional classification, personal or employee number, professional department, place of work, signature, telephone and fax number, email and identification data of your employer (including identification details for the person or entity you are representing).

Name, surname, address, phone number and email.


How long do we retain your personal data?

As soon as we no longer need your personal data for the purposes for which we processed it, we will delete your personal data unless we have a legal obligation to retain it. Some details and correspondence may be retained until the end of the claim period, in connection with pre-contractual or contractual relationships, or to comply with legal requirements regarding the retention of personal data.


Who do we share your personal information with?

We provide data based on several contracts with third parties that act as our intermediaries, joint operators or independent operators. We may also provide your personal information to our business partners who provide us with:

Consulting services

Auditing services

Legal Services

Accounting services

We may also share your personal information with companies within the HB Reavis Group. We may also be required to provide your personal information to public authorities, in particular, courts and law enforcement agencies (police and prosecutor’s office), and only to the extent necessary by applicable and effective legislation.


Who do we obtain your personal data from?

We collect your personal data from you or from a third party whom we have entered into a contract (or other legal act) with or that has identified you in a postal item or email.


Do we use automatic individual decision-making?

No, we do not use automatic individual decision-making.


Do we transfer your data to third countries?

Your personal data is processed exclusively in the territory of the Slovak Republic and other member states of the European Union. Your personal data may be processed in a country outside the European Union only if the European Committee confirmed that such a country provides an adequate level of personal data protection, or if other appropriate safeguards to protect personal data exist (for example, binding internal company rules or standard European contractual clauses on personal data protection).


Other information:

Personal data may also, in duly justified cases, be processed for the purpose of dealing with legal matters, including the performance of duties of public authorities and their monitoring for the purpose of legal protection. Personal data may also be archived in the public interest as well as for scientific, historical or statistical research.


What are your rights?

Your rights as a data subject are listed below. You need to be aware that the exact terms of exercising the individual rights are regulated in Chapter III GDPR and may not be applicable in each specific situation. You have the following rights:

The right to access the personal data we process about you

The right to correct incorrect and inaccurate personal data and the right to supplement incomplete data

The right of restriction, i.e., to restrict the processing of your personal data

The right to delete personal data if there is no purpose or it has been processed unlawfully

The right to object to the processing of personal data if you believe that we have not processed personal data lawfully

The right to be excluded from automatic individual decision-making

The right to obtain personal data in a commonly used and machine-readable format and the right to transfer such data to another operator

The right to withdraw consent to the processing of personal data

The right to lodge a complaint to the supervisory authority


How can you exercise your rights?

electronically: dataprivacy@hbreavis.com

in writing to the address stated in the contract or by mail or email 

by phone: +421 918 723 243


We strive to protect your privacy as much as possible. We therefore process your personal data in accordance with GDPR and all other applicable legislation. However, if you do not agree with the way your personal data is processed, you can exercise your rights via our designated contact person:

Designated contact person: Erika Wild, mailing address: Twin City C, Mlynské Nivy 16, 821 09 Bratislava, Slovak Republic, phone: +421 918 723 243, email: dataprivacy@hbreavis.com

Or you can make a complaint to the supervisory authority regarding the processing of your personal data. You can find your local supervisory authority at: https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm