Personal Data Protection Rules

Limited Liability Company Jazyková škola LIBERTY s.r.o., legal address: Slovakia, Banska Bystrica, 97401, Janka Kráľa St. 3, Banska Bystrica, State Registration Number (IČO): 54617731, registered in the Trade Register of the Regional Court of Banska Bystrica, Department: Sro, Entry: 43728/S, represented by: Mgr. Oksana Kuzmova - Director, contact information: email: info@libertyschool.eu, (hereinafter also referred to as "Personal Data Controller" or "Controller") informs the data subject about the fulfillment of the obligation to provide information in accordance with Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of the EU of April 27, 2016 "On the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (general data protection regulation)" (hereinafter referred to as "Regulation") and by Article 19 of Law No. 18/2018 "on the protection of personal data" (hereinafter referred to as "Data Protection Law"), providing the information below.

The data subject, in accordance with Section 2 (e) of Art. 19 of the Data Protection Law, is obligated to provide personal data for the purpose specified below, otherwise it will not be possible to conclude the contract that the data subject expressed a desire to conclude. When providing services, special regulations require the provision of correct personal data; otherwise, it is impossible to provide customers with the required services.

1. Identification Data and Contact Information of the Controller

Personal Data Controller: Jazyková škola LIBERTY s.r.o., legal address: Slovakia, Banska Bystrica, 97401, Janka Kráľa St. 3, Banska Bystrica, State Registration Number (IČO): 54617731, registered in the Trade Register of the Regional Court of Banska Bystrica, Department: Sro, Entry: 43728/S, represented by: Mgr. Oksana Kuzmova - Director, contact information: email: info@libertyschool.eu,

2. Purpose and Legal Basis for Processing Personal Data

2.1 Purpose: Application on the website, conclusion of the contract and pre-contractual relations,

Legal Basis

Section 1 b) of Art. 6 of the Regulation or Section 1 b) of Art. 13 of the Data Protection Law: processing of personal data is necessary to perform a contract to which the data subject is a party, or to take pre-contractual measures at the request of the data subject.

The Controller hereby notifies the customer as a data subject that in the process of concluding the contract, it will process personal data without the consent of the data subject, since the processing of personal data will be carried out within the framework of pre-contractual relations, and the processing of personal data is necessary to conclude a contract for the provision of required services.

2.2 Purpose: Distribution of Information

Legal Basis:

Section 1 f) of Art. 6 of the Regulation or Section 1 f) of Art. 13 of the Data Protection Law: processing of personal data is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are outweighed by the interests or rights of the data subject requiring protection of personal data.

The Controller's legitimate interest is to inform customers (depending on the type of service provided). The Controller provides various services to the customer and therefore it is a legitimate interest of both the Controller and the customer to be informed about facts that may affect the customer's rights and obligations and may have a significant impact on the quality of their life and the quality of their family's life. In accordance with the principle of proportionality, the Controller has concluded that informing customers through notifications outweighs the interest in protecting the confidentiality of the data subject. For this purpose, for processing email address, phone, and name and surname, the Controller has taken appropriate technical and organizational measures for their protection.

2.3 Purpose: Distribution of Information

Legal Basis:

Section 1 a) of Art. 6 of the Regulation or Section 1 a) of Art. 13 of the Data Protection Law: the data subject has given consent to the processing of their personal data for at least one specific purpose.

The Controller hereby notifies the customer as a data subject that if they are interested in receiving notifications, newsletters, advertisements and similar information without entering into a contract with the Controller, the Controller will use their email address to send the requested information. The Controller hereby states that it will process personal data in accordance with moral standards and will act in such a way that this does not contradict the Data Protection Law and the Regulation.

3. Period of Storage of Personal Data

The period of storage of personal data for the purposes specified in sections 2.1 and 2.2: a specific period of time - the time specified by law for the exercise of rights and obligations arising from the contract. This period cannot be determined in advance, since the provision of services under the contract may last several years.

4. Rights of the Data Subject

The data subject has the right to:

• request access from the controller to personal data concerning the respective data subject,

• request the correction of personal data,

• request the deletion of personal data or restriction of processing of personal data,

• object to the processing of personal data, and also to the right to the transfer of personal data,

• withdraw their consent at any time,

• file a petition for proceedings in accordance with § 100 of the Data Protection Law.

The data subject may request the exercise of the above rights at any time, namely by email to info@libertyschoo.eu, or in writing to the postal (legal) address of the controller. The Controller processes the data subject's request regarding the aforementioned rights within the statutory timeframes.

5. Transfer of Personal Data

For the purpose of sending changes and amendments to laws and similar information, the Controller processes email addresses through KUDA s.r.o., CSA 19, 97401 B.Bystrica, IČO: 51 337 291, registered in the Trade Register of the Regional Court of Banska Bystrica, Department: Sro, Entry: 33567/S. As a result of the transfer of email addresses, no threat arises to the rights of the data subject.