I. Name and Address of the Responsible Party
The responsible party within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the member states, as well as other legal provisions related to data protection:

Acconti Plus
Líščie údolie 12

841 04 Bratislava
Slovakia
Tel. +421 911 510 314
www.acconti.sk

II. General Information on Data Processing
1. Scope of Personal Data Processing
We process personal data of our users only to the extent necessary to provide a functional website, as well as our content and services. The processing of personal data of our users is regularly carried out only with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of data is permitted by law.

2. Legal Basis for Processing Personal Data
If we obtain consent from the data subject for processing personal data, Article 6(1)(a) of the GDPR serves as the legal basis. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary to carry out pre-contractual measures. If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In cases where processing is necessary to protect the vital interests of the data subject or another natural person, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary for the purposes of the legitimate interests pursued by our company or a third party and these interests are not overridden by the interests, fundamental rights, and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for processing.

3. Data Deletion and Storage Duration
Personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also occur if provided for by European or national legislation in Union regulations, laws, or other provisions to which the responsible party is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

III. Website Provision and Creation of Log Files
1. Description and Scope of Data Processing
Whenever our website is accessed, the system automatically records data and information from the accessing computer's system.
The following data is collected:
(1) Information about the browser type and version used
(2) The user's operating system
(3) The user's Internet service provider
(4) The user's IP address
(5) Date and time of access
(6) Websites from which the user's system accessed our website
(7) Websites accessed by the user's system via our website
These data are also stored in the log files of our system. Storage of these data together with other personal data of the user does not take place.

2. Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.

3. Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to deliver the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. Additionally, the data helps us optimize the website and ensure the security of our information technology systems. No evaluation of the data for marketing purposes takes place in this context. These purposes constitute our legitimate interest in data processing under Article 6(1)(f) GDPR.

4. Storage Duration
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. In the case of data collection for website provision, this is when the respective session ends. In the case of log file storage, this is the case after no more than 180 days.

5. Right to Object and Removal
Data collection for website provision and the storage of data in log files is essential for operating the website. Therefore, the user has no right to object.

List of Cookies
A cookie is a small block of data (text file) stored in your browser by a website when you visit it, with the purpose of remembering information about you, such as your language preferences or login details. These cookies are set by us and are called first-party cookies. We also use third-party cookies, which are cookies from a domain different from the domain of the website you are visiting, for our advertising and marketing activities.
Specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies
These cookies are set by various social media services that we have added to the site to allow you to share our content with your friends and networks. They can track your browser across other sites and build a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies, you may not be able to use or see these sharing tools.

Cookies for Web Analytics (USA Providers)
We use cookies for web analysis purposes, which are also operated through Google LLC. These cookies can transfer the collected data to another country, particularly to the USA, which does not guarantee an adequate level of data protection. In the event of personal data being transferred to the USA, there is a risk that these personal data may be processed by US authorities for control and monitoring purposes, without the affected person having the corresponding legal protection options. Furthermore, we expressly point out that Google LLC may link this data with your other data, such as browsing history, personal accounts, or user data.

The option to withdraw consent early through the adjustment of "Cookie Settings" in our Privacy Policy remains unaffected.

IV. Use of Cookies
a) Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. If a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic sequence of characters that allows the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website more user-friendly. Some elements of our internet site require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
(1) Search behavior
In addition, we use cookies on our website that allow an analysis of the user's surfing behavior.

The following data may be transmitted in this way:
(1) Entered search terms
(2) Frequency of page accesses
(3) Use of website functions
The user data collected in this way is pseudonymized by technical means. Therefore, the data cannot be assigned to the accessing user. The data is not stored together with other personal data of the user.
When accessing our website, the user is informed about the use of cookies for analytical purposes via an information banner and referred to this data protection declaration. In this context, there is also a notice on how to prevent the storage of cookies in the browser settings.
When accessing our website, the user is informed about the use of cookies for analytical purposes and consent is obtained for the processing of personal data used in this context. In this context, a reference to this data protection declaration is also made.
b) Legal Basis for Data Processing
The legal basis for the processing of personal data using technically necessary cookies is Article 6(1)(f) GDPR.
The legal basis for the processing of personal data using cookies for analytical purposes, given the user's consent, is Article 6(1)(a) GDPR.
c) Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our internet site cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
Cookies are required for the following applications:
(1) Remembering search terms
User data collected through technically necessary cookies is not used to create user profiles.
Analytical cookies are used to improve the quality of our website and its content. Through analytical cookies, we learn how the website is used and can constantly optimize our offerings.
In these purposes also lies our legitimate interest in processing personal data according to Article 6(1)(f) GDPR.
d) Storage Duration, Objection, and Removal Options
Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically.
If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website in full.

V. Contact Form and Email Contact
1. Description and Scope of Data Processing
A contact form is available on our website, which can be used for electronic contact. If a user uses this option, the data entered in the input mask will be transmitted to us and stored. These data are:

At the time of sending the message, the following data is also stored:
(1) The user's IP address
(2) Date and time of registration
For the processing of data, your consent is obtained during the sending process and reference is made to this data protection declaration.

Alternatively, contact can be made via the provided email address.
In this case, the user's personal data transmitted by email will be stored.

In this context, no data is passed on to third parties.
The data is used exclusively for processing the conversation.
2. Legal Basis for Data Processing
The legal basis for processing data is the user's consent, Article 6(1)(a) GDPR.

The legal basis for processing data transmitted in the course of sending an email is Article 6(1)(f) GDPR. If the email contact is aimed at concluding a contract, then the legal basis for processing is Article 6(1)(b) GDPR.
3. Purpose of Data Processing
The processing of personal data from the input mask serves solely to process the contact. In the case of contact via email, this also constitutes the necessary legitimate interest in processing the data.
Other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.
4. Duration of Storage
The data will be deleted as soon as it is no longer necessary for achieving the purpose for which it was collected. For personal data from the contact form input mask and those sent via email, this is the case when the respective conversation with the user has ended. The conversation is considered ended when it can be inferred from the circumstances that the relevant matter has been fully resolved.

Additional personal data collected during the sending process will be deleted at the latest after seven days.
5. Right to Object and Removal
The user can withdraw their consent to the processing of personal data at any time. If the user contacts us via email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

If you wish to exercise your right to object, simply email us at vasuctovnik@acconti.sk.
All personal data stored during contact will be deleted in this case.

VI. Rights of the Data Subject

If personal data is processed by you, you are considered a data subject within the meaning of the GDPR, and the following rights apply to you concerning the responsible entity:
1. Right to information
2. Right to rectification
3. Right to restriction of processing
4. Right to erasure
5. Right to notification
6. Right to data portability
7. Right to object
8. Right to withdraw consent related to data protection
9. Automated individual decision-making, including profiling
10. Right to lodge a complaint with a supervisory authority

VII. Information for the Data Subject under Act No. 18/2018 Coll. on Personal Data Protection (hereinafter referred to as the "Act") – Monitoring of Premises

his information is intended for data subjects whose personal data is processed through the Acconti camera system operating within the Slovak Republic (hereinafter referred to as the "Operator").
The Operator hereby provides the data subject with the following information in advance before collecting personal data:
a) Purpose and Legal Basis for Processing Personal Data:
(i) Protection of the Controller’s legitimate interests pursuant to § 13(1)(f) of the Act – protection of property
Controller through electronic monitoring systems, ensuring strict compliance with legal deadlines for the disposal of such collected data
(ii) Attendance recording of personnel,
(iii) Fulfillment of the Controller’s legal obligations – accounting and payroll management,
fulfillment of obligations related to the training and education of employees and other individuals
in accordance with specific regulations (Occupational Safety and Health Act, environmental protection legislation),
b) Scope and list of processed personal data: depiction of the data subject's figure in case of electronic monitoring of individuals;
c) Identification details of entities that may process personal data on behalf of
the Controller: IT services,
contractors, subcontractors, and other partners of the Controller, whether in a direct or indirect contractual relationship, performing activities related to monitoring, assessing, evaluating, and maintaining IT systems where personal data is stored, such as WABEZ s.r.o.
d) Provision of personal data to third parties: Personal data will not be provided to third parties;
e) Disclosure of personal data to recipients: Regulatory and inspection authorities of the state administration, authorities involved in misdemeanor or criminal proceedings, courts, investor/contractual partner of the Controller;
f) Publication: Personal data will not be published;
g) Third countries: There will be no transfer of personal data to third countries;

Additional information provided to the data subject:

i) Duration of personal data processing – according to the purpose of processing personal data determined by specific legal provisions specifying retention periods, or tied to the duration of contractual relationships and related rights and obligations. After the retention period/expiration of the contractual relationship/other termination of the purpose, personal data will be disposed of in accordance with applicable legal provisions based on a decision by the Data Protection Authority;
ii) The data subject has the right to request access to their personal data processed by the Controller, and further has the right to rectify and erase incorrect personal data, the right to erase personal data in cases where the obligation to process or retain personal data does not arise from specific legal provisions, the right to restrict processing in cases specified in § 24 of the Act, the right to data portability, and the right to object;
iii) The data subject is entitled to submit a proposal for initiating proceedings to the Data Protection Authority to determine whether there has been a violation of the rights of individuals in the processing of personal data or a breach of the Act;
v) In cases where processing of personal data is necessary for fulfilling the Controller’s legal obligations or contractual relationships where processing of personal data is also necessary for fulfilling the data subject's tasks, the data subject is obliged to tolerate the processing of personal data to the extent necessary for the purpose.