Terms of personal data protection

• 1. Basic provisions
  • The controller of personal data according to Art. 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on free movement of these data (hereinafter referred to as "GDPR") is Dávid Pavličko, ID 53249704 with its registered office at Švábovce, 059 12, Slovakia (hereinafter referred to as the "Administrator").
  • Contact details of the administrator are:
    1. Address: Švábovce, 059 12, Slovakia
    2. Email: support@fatless.sk
  • Personal data means any information identified or identifiable a natural person; an identifiable natural person is a natural person that is possible directly or indirectly identify, in particular by reference to a specific identifier, such as an email, location, network identifier or according to one or more special ones elements of physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • The administrator has not appointed a person responsible for personal data protection.

• 2. Sources and categories of personal data processed
  • The administrator processes the personal data you have provided to.
  • The administrator processes your email in its notified format for the following purpose (includes name and | or surname, if applicable), which is necessary for the purposes of registration to the Fatless.sk service
  • The administrator processes cookies and network identifiers on the operated websites.

• 3. Legal reason and purpose of personal data processing
  • The legal reason for processing personal data is:
    1. the legitimate interest of the administrator in the provision of direct marketing (especially for sending information about the Fatless.sk service and tips for healthier lifestyle, with the exception of the dissemination of commercial communications by electronic means) according to Art. 6 par. 1 letter (f) GDPR and within the meaning of recital 47 of the GDPR
    2. Your consent to processing for the purpose of providing direct marketing under Art. 6 par. 1 letter a) GDPR in connection with § 7 par. 2 of Act no. 480/2004 Coll., on certain information society services (ie for the purpose of disseminating business) notification by electronic means)
    3. Your consent to the collection of cookie data as network identifiers according to Art. 6 par. 1 letter a) GDPR
    As a result of not giving your consent to the processing of personal data where it is The legal reason for processing the personal data of the entity is that the personal data should be processed on the basis of consent will not be processed.
  • The purpose of personal data processing is:
    1. enabling your access to the Fatless.sk service provided by the administrator; at registration is required email, which is necessary to allow access to Fatless.sk service, the provision of email is a necessary requirement for Fatless.sk providing access to the Fatless.sk service
    2. sending business announcements and other marketing activities (direct marketing)
    3. measuring web traffic, targeted advertising, customizing the display of websites and mobile applications
    4. there is an automated individual decision-making by the administrator within the meaning of Art. 22 GDPR, based on the collection of cookies.

• 4. Processing of personal data obtained from third parties
  • User data obtained from 3rd parties (e.g. Facebook, Google…) cannot be used for contextual advertising or marketing. The use of the data for research purposes requires the consent of the parties from whom the data are obtained. The user may at any time request the cancellation of the account, where all personal data provided by third parties will be permanently deleted.

• 5. Use of anonymous data
  • Anonymous data with deleted personal data of Fatless users containing data on eating habits, physical activity and anthropometric data may use the administrator for other services or for studies on consumer behavior within Fatless.

• 6. Data retention period
  • The administrator stores personal data for the entire time you have access to the Fatless.sk service in accordance with the contractual conditions, but for a maximum of 5 years from the last login to the Fatless.sk service
  • Until you ask your administrator to cancel your Fatless account
  • Until you revoke the consent to the processing of personal data for marketing purposes, if the personal data is processed on the basis of consent
  • After the retention period of personal data, the administrator will delete the personal data.

• 7. Recipients of personal data (subcontractors of the controller)
  • Recipients of personal data are persons:
    1. ensuring the operation of the service (for example, the hosting server provider of the administrator)
    2. participating in the execution of one-off or regular payments on the basis of an order for paid services of the administrator (eg payment gateway operators)
    3. providing marketing services for the Fatless.sk service (for example, a provider of emailing services)
  • The controller does not intend to transfer personal data to third countries (outside the EU) or to international organizations.

• 8. Your rights
  • Under the conditions set out in the GDPR, you have:
    1. the right of access to their personal data pursuant to Art. 15 GDPR,
    2. the right to correct personal data pursuant to Art. 16 GDPR, or restriction of processing according to Art. 18 GDPR.
    3. the right to delete personal data pursuant to Art. 17 GDPR.
    4. the right to withdraw the consent to the use of cookies for marketing purposes using the procedure described on the website cookies
    5. the right to object to the processing under Art. 21 GDPR a
    6. the right to data portability according to Art. 20 GDPR.
    7. the right to withdraw consent to processing (this procedure does not apply to the right to take back consent - see above), in writing or electronically to an address or email administrator referred to in point 1 above of these conditions (Basic Provisions).
  • You also have the right to complain to the Office for Personal Data Protection (with its registered office at Hraničná 12, 820 07, Bratislava 27, https://dataprotection.gov.sk/uoou/) in the case that you believe that your privacy rights have been violated.

• 9. Conditions of personal data security
  • The controller declares that he has taken all appropriate technical and organizational measures to secure personal data.
  • The administrator has taken technical measures to secure the data repositories.
  • The controller declares that only persons authorized by him have access to personal data.

• 10. Final provisions
  • You agree to these terms by checking your online consent form when registering the Fatless.sk service. By checking the consent, you confirm that that you are familiar with the terms of personal data protection and that you accept them in full.
  • The administrator is entitled to change these conditions. New version of the terms of personal protection will publish the data on its website and at the same time send you a link to the new one a version of these terms and conditions to your email address provided to you by the administrator. The data subject has the right to express his disagreement with the change of conditions, in writing or electronically to the address or email of the administrator referred to in point 1 above of these conditions (Basic provisions). If the data subject disagrees with the change of conditions, the controller will not be able to further process personal data, while the account will be canceled in Fatless application.