PRINCIPLES OF PERSONAL DATA PROCESSING

  1. The data subject – a visitor of the website.
  2. Controller – the website www.drogy.org controller is Odyseus, civic association, Tomášikova 223/26, 821 01 Bratislava-Ružinov, ID: 31788734; Odyseus, CA is registrated at Ministry of Interior of Slovak Republic, registration number VVS/1-900/90-13648. The number of Trade Register: 110-162064.
  3. The data subject agrees with personal data processing by the controller to the extent given below.
  4. The controller of the website is responsible for personal data processing according the Regulation of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter GDPR)
  5. The list of the personal data: name, surname, street and number, postcode, town, e-mail, telephone number, cookies. More information on cookies. 
  6. Purposes of personal data processing: an issuance of a tax document, contacting the customer regarding the order, fulfillment of the contract, processing of the request sent via the contact form or other legitimate interest. Personal data may not be further processed in a way incompatible with those purposes.
  7. Intermediaries – data recipients such as Google, Sendinblue, (payment gateways) with which we have brokerage agreements
    1. Google (Ads Data Processing Terms)
    2. Google Analytics a Google AdWords (Data Processing Amendment)
    3. Smartsupp (DPA)
  8. We don’t sell, neither we trade or provide your personal data to the third parties in any other way, except of the intermediaries mentioned in the previous point.
  9. The legal basis for the personal data processing:
    1. Personal data processing (name, surname, title, street and number, postal code, town) is necessary according the special regulation or international contract by which the Slovak Republic is bound. Especially according to Act no. 222/2004 Coll. on value added tax.
    2. Personal data processing (email, telephone number) is necessary for the fulfillment of the contract.
    3. If you have agreed to receive the newsletter, you can withdraw it anytime by clicking on the button unsubscribe (odhlásiť) in a newsletter or by an email request.
  10. Embedded content from other websites – the articles on this website can contain embedded content (e.g. videos, pictures, articles etc.). The embedded content from other websites behaves the same way, as if the visitor visited the other website. These websites can collect your personal data, use the cookies, insert the third party tracking and monitor your interaction with embedded content, including tracking your interaction with embedded content if you have an account on the website and if you are logged in.
  11. Retention period of personal data: 10 years.
  12. By agreeing to the terms and conditions, the data subject shall at the same time give his or her explicit and unconditional consent for the controller to process his or her personal data for the above purposes, during the above period and to the extent specified above. The data subject has the right to withdraw his or her consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing resulting from the consent prior to its withdrawal. The data subject is obliged to provide true and current personal data. The rights of the data subject are regulated in the chapter 3 of GDPR. It concerns e.g. the right to submit a complaint to the supervisory body, the right to object to the processing, the right to request access to personal data concerning the data subject from the controller, the right to rectify, delete or restrict the processing of personal data, as well as the right to data portability.
  13. In the case of registration on the website, the customer has the right to delete the account by sending a request to the controller’s e-mail.
  14. These terms and conditions are valid from 25.5.2018