Personal data protection & GDPR

Internal directive for the protection of personal data   24 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) in accordance with § 32 of Act no. 18/2018 law enforcement officer on the protection of personal data (hereinafter referred to as “the law”)
(hereinafter referred to as the “Guideline“)

I.
The basic provisions
The subject of this Directive is the regulation of the protection and handling of personal data in activities carried out by authorized persons of the operator, which are:

Business name: unique products s.r.o. o.z.
Responsible persom:unique products s.r.o.
Email: info@maurobeauty.academy

(hereinafter referred to as “Operator“).
2. For the purposes of this Directive, an authorized person is understood as an executive and/or employee of the Operator who, in the performance of his work, comes into contact with  the personal data of the affected persons (hereinafter referred to as the “Authorized Person“).

1. General duties

1. Personal data must be adequately secured in all cases where it is handled in the organization.
2. The authorized person can handle personal data only on the condition that it is necessary for the performance of his work activities or on the basis of an individual mandate of the Operator.
3. The authorized person is obliged to maintain the confidentiality of personal data with which he comes into contact in the performance of his work or activities resulting from his mandate.
4. The obligation of confidentiality continues even after the termination of the employment relationship with the authorized person.
5. The authorized person can only deal with such personal data as are necessary for the performance of his work or activities resulting from the authorization.
6. The authorized person can only carry out those operations with personal data that are necessary for the performance of his work activity or activity resulting from the authorization.
7. The authorized person may not obtain information related to personal data beyond the scope of his work activity or authorization.
8. The authorized person is obliged to ensure that during the performance of his/her work activities or activities resulting from the authorization, there is no leakage of processed personal data or a violation of the security of processing operations.

III.
Personal data

1. The personal data of the operator are stored and backed up in the database of the website
2. An authorized person can access the database exclusively using access to FTP hosting and using name and password  security.
3. Each authorized person has their access name and password needed to access the administration of the website, while the database is available only to persons who voluntarily entered their data and exclusively for use  for use within the scope of the employee’s work.
4. Written consent is granted by the Operator upon request, and only to the extent necessary to fulfill the purpose of the authorized person.
5. The authorized person then submits written consent to the head of the IT department, who will provide personal data only to the extent of the consent granted by the Operator.
6. The authorized person may not provide the obtained personal data to third parties or persons.
7. The authorized person may not provide his access to the administration to any other persons.

IV.
Personal Data protection & GDPR

1. All work computers of authorized persons must have  password-protected  the users must be logged out after finishing work.
2. Personal data must not be located in a publicly accessible place and must be protected in lockable areas inaccessible to third parties.
3. Security breach

1. In the event of a breach of personal data security, the authorized person is obliged to inform all parties involved without delay.
2. The authorized person is obliged to suspend his activity, while he may not perform any actions that could lead to an increase in the risk of personal data security.
3. The authorized person is obliged to inform about  the type of unit of personal information.
4. The authorized person hands over the minutes to the company manager

1. V.
   Processing of data subjects’ submissions

1. Requests and objections of the persons concerned are processed by a person to whom it follows from the content of the work activity or from the mandate (hereinafter referred to as the “designated person”).
2. After receiving the request, objection or complaint of the person concerned (hereinafter referred to as “submission”), the designated person informs the person concerned about its acceptance and the next procedure.
3. The appointed person is obliged to evaluate the submission of the person concerned no later than within 30 days from the date of its delivery.
4. If the evaluation of the submission would require more time, the designated person is obliged to contact the Operator and inform the affected persons accordingly.
5. After evaluating the submission, the designated person is obliged to inform the affected persons appropriately within the above-mentioned deadline.

Information obligation of the operator

according to the article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) in accordance with
§ 19 of Act no. 18/2018 law enforcement officer on the protection of personal data (hereinafter referred to as “the law”).

1.  

Operator:

Business name: unique products s.r.o. o.z.
Responsible persom:unique products s.r.o. o.z.
Email:info@maurobeauty.academy

(hereinafter referred to as ,,operator”)

The operator is dedicated to aesthetic medicine, cosmetics and dermatological services in the supporting part www.uniqueclinique.academy

 It processes personal data for advertising and marketing purposes, as well as in the sense of concluding a contract and for the purpose of realizing the content and selling and delivering products.

Processing of personal data for the purpose of records (employee attendance, client (business partner) database) for the purpose of continuous improvement of the quality of services provided (complaints, comments), archiving reasons and analytical reasons, for the purpose of maintaining security, alarm, camera system in accordance with applicable legislative provisions.

1. The period  of processing of personal data for individual purposes is determined in the range of:

1. 10 years of processing personal data for marketing purposes
2. 5 years from the date of conclusion of the contract
3. In the time frame necessary to ensure the purpose of the processing for the stated reasons in accordance with the relevant legislative provisions
4. Processing of personal data according to par. III letter b) is a legal requirement. It is not possible to process the personal data of the participants without their consent

• Processing of personal data according to par. III letter c) is necessary for the conclusion of the contract. If the person concerned does not provide his personal data, it is not possible to conclude a valid contract.

1. The person concerned has the right to access to your data. Based on the request of the person concerned, the operator will issue a confirmation of whether the personal data of the person concerned are being processed. If the operator processes this data, it will issue a copy of this personal data to the person concerned upon request.
2. Issuance of the first copy according to par. VIII is free. For any additional copies requested by the person, the operator will charge a fee corresponding to the administrative costs incurred by issuing the copy. If a person requests information in the form of electronic means, it will be provided to him in a commonly used electronic form, namely by e-mail, unless he requests another method.
3. The person concerned has the right to correction of personal data, if the operator records incorrect personal data about it. At the same time, the person concerned has the right to completion of incomplete personal data. The operator will correct or supplement personal data without undue delay after the person concerned requests it.

• The person concerned has the right to delete personal data concerning him, provided that:

1. personal data are no longer necessary for the purposes for which they were obtained or otherwise processed;
2. the person concerned revokes the consent on the basis of which the processing is carried out,
3. the person concerned objects to the processing of personal data according to par. XVIII,
4. personal data were processed illegally,
5. he reason for erasure is the fulfillment of the obligation of the law, special regulation or international treaty to which the Slovak Republic is bound, or
6. personal data was obtained in connection with the offer of information society services to a person under the age of 16.

• The affected person will not have the right to erasure of personal data, provided that it is

their processing necessary:

1. to exercise the right to freedom of expression and information;
2. to fulfill an obligation according to the law, a special regulation or

of an international agreement to which the Slovak Republic is bound, or to fulfill a task carried out in the public interest or in the exercise of public authority entrusted to the operator,

1. for reasons of public interest in the field of public health,
2. for the purposes of archiving in the public interest, for the purposes of scientific or

historical research or for statistical purposes, if it is likely that the right to erasure will make it impossible or seriously difficult to achieve the goals of such processing, or

1. to demonstrate, exercise or defend legal claims.

XIII. The operator shall delete the personal data of the affected persons based on the request, without undue delay after evaluating that the request of the affected person is

reasonable.
XIV. The affected person has the right to limit the processing  of personal data, if:

1. challenges the correctness of personal data with an objection according to par. XVIII, during the period allowing the operator to verify the correctness of personal data;
2. processing is illegal and the affected person requests restriction of their use instead of erasure of personal data;
3. the operator no longer needs the personal data for processing purposes, but the data subject needs them to prove, exercise or defend legal claims;
4. the affected person objected to the processing of personal data on the basis of the legitimate claim of the operator, until it is verified whether the legitimate reasons on the part of the operator prevail over the legitimate reasons of the affected person.
5. If the person concerned requests the restriction of the processing of his personal data, the operator will not carry out any processing operations with the affected data, except storage, without the consent of the person concerned.

XVI. The affected person will be informed by the operator if the restriction on the processing of this data is lifted.

Internal directive in the field of personal data protection

XVII. The affected person has the right to data portability, which means the acquisition of personal data that it has provided to the operator, while having the right to transfer this data to another operator in a commonly used and machine-readable format, provided that the personal data were obtained based on the consent of the person concerned or on the basis of a contract and their processing takes place in the form of automated means.

XVIII. The affected person has the right at any time to object to the processing of her personal data  for reasons related to her specific situation. The person concerned can object to the processing of his personal data on the basis of:

1. he legal title of the performance of tasks carried out  in the public interest or in the exercise of public authority, or from the legal title of the legitimate interest of the operator,
2. processing personal data for direct  marketing purposes,
3. processing for the purposes of scientific or historical research or

statistical purposes.

XIX. If the person concerned objects to the processing of personal data for the purposes of direct marketing according to point XVIII letter b), her personal data operator cannot process further.

1. The operator will assess the received objection in a reasonable time. The operator may not continue to process personal data if he does not demonstrate the necessary legitimate interests in processing personal data that outweigh the rights or interests of the person concerned, or grounds for asserting a legal claim.

XXI. The affected person has the right  to withdraw his consent  to the processing of personal data at any time, as long as the processing of personal data was based on this legal title.

XXII. The affected person withdraws  his consent by contacting the responsible person  with his request in any chosen way.

XXIII. However, the legality of personal data processing based on the granted consent is not affected by its revocation.

XIV. The affected person has  the right to submit a proposal  to the Office for the Protection of Personal Data of the Slovak Republic, if he believes that his rights in the field of personal data protection have been violated.

The operator declares that, as part of the company’s culture, in addition to the relevant legislative provisions, it observes good manners and perceives the need for appropriate protection of personal data as one of the many pillars of functioning in its area of business activity.

INFORMATION ON THE USE OF COOKIES

In accordance with § 55 paragraph 5 NRSR Act No. 351/2011 Coll. on electronic communications as amended, we would like to inform you about the use of cookies and draw your attention to the possibility of changing the settings of your internet browser in case you are not satisfied with the current settings for the use of cookies.

What are cookies?

Cookies are small text files that can be sent to the Internet browser when visiting websites and stored on your device (computer or other device with Internet access, such as a smartphone or tablet). Cookies are stored in the file folder of your internet browser. Cookies usually contain the name of the website from which they originate and the date of their creation. The next time you visit the page, the web browser reloads the cookie files and sends this information back to the website that originally created the cookies. The cookies we use do not damage your computer.

Why do we use cookies?

We use cookies in order to optimally create and constantly improve our services, adapt them to your interests and needs, and improve their structure and content. We distinguish short-term, so-called “session cookies” are only temporary and remain stored in the browser until you close it. Long-term, so-called “persistent cookies”, they remain stored on the device for longer or until you manually delete them (the length of time the cookie remains on your device depends on the settings of the cookie itself and the settings of your browser).

NECESSARY COOKIES ENABLE:

remember the contents of your shopping list,
o remember the place you reached in a certain sequence.

FUNCTIONAL COOKIES ENABLE:

remember your login data,
ensure security after logging in,
ensure the uniform operation of the entire site,
“live chat” support.

PERFORMANCE COOKIES ENABLE:

supporting site performance by reducing the loading time of the pages you visit,
increase in user satisfaction.

ANALYTIC COOKIES ENABLE:

mainly the tracking tool google analytics, for tracking traffic and optimizing content for users in connection with improving user interaction
increase in user satisfaction.

MARKETING COOKIES ENABLE:

marketing and remarketing activities, i.e. Google remarketing tool, Google tag manager and Facebook remarketing tools, for displaying relevant user advertisements
increase in user satisfaction with displayed advertising.

Use of cookies

By using pages operated by unique products s.r.o. o.z., you consent to the use of cookies in accordance with the settings of your internet browser. If you visit our website, the acceptance of cookies is enabled in your browser, you do not change the settings of your internet browser and you continue to visit our website, we consider this as acceptance of our terms of use of cookies.

Text editor How can you change cookie settings?

a

Instructions for changing or deleting cookies can be found in the “help” option of each browser. If you use different devices to access the pages (e.g. computer, smartphone, tablet), we recommend that each browser on each device adapt cookies to your preferences.

YOU CAN FIND MORE INFORMATION ABOUT YOUR BROWSER SETTINGS ON THESE PAGES:

Chrome 
Safari 
Mozilla Firefox 
Internet Explorer 
Edge

Why keep cookie settings?

The use of cookies and their permission in the web browser is at your discretion. However, if their settings are changed, some of our websites may have limited functionality and reduced user comfort.

What cookies do we use on our site?

Name Cookie

Label

Duration

Character

Description

cookielawinfo-checkbox-necessary	Necessary	11 months	necessary	This cookie is set by the GDPR Cookie Consent plugin. Cookies are used to store the user’s consent to the storage of cookies in the “Necessary” category.
cookielawinfo-checkbox-functional	functional	11 months	necessary	A cookie is set based on GDPR cookie consent to record the user’s consent for cookies in the “Functional” category.
cookielawinfo-checkbox-performance	Performance	11 months	required	This cookie is set by the GDPR Cookie Consent plugin. The cookie is used to store the user’s consent for cookies in the “Performance” category.
cookielawinfo-checkbox-analytics	Analytics	11 months	necessary	This cookie is set by the GDPR Cookie Consent plugin. The cookie is used to store the user’s consent for cookies in the “Analytical” category.
viewed_cookie_policy	Necessary	11 months	necessary	The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not the user has agreed to the use of cookies. It does not store any personal data.

G

Name	Duration	Purpose
_ga	2 roky	Google Analytics – This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier.
_gid	24 hours	Google Analytics – This cookie is used to distinguish users.
_gat	1 minute	oogle Analytics – This cookie does not store any information about the user, it is only used to limit the number of requests that need to be made to doubleclick.net.
_utma	2 years	Google Analytics – Keeps the number of visits for each unique visitor. First visit, last and penultimate. It is used, for example, to distinguish between new and returning visitors.
cookieconsent_status	1 year	Consent to the use of cookies

If you want to anonymize your data sent to Google Analytics, you can use the  Google Analytics Opt-Out option