Notice on the processing of cookies
This notice on the processing of personal data (hereinafter referred to as the "Notice") has been prepared by KODYS SLOVENSKO, s.r.o., with its registered office at Sliačska 2, 831 02 Bratislava, ID No.: 31 387 454, registered in the Commercial Register of the District Court Bratislava I, Section Sro, Insert No.: 8247/B (hereinafter referred to as the "Company") for the purpose of providing concise, transparent, comprehensible and easily accessible information regarding the processing of your personal data.
1. General introduction
This Notice is prepared in accordance with Article 13, Section 19 of the Act, the Electronic Communications Act and other generally applicable legislation.
The Company is the operator of the web portal https://www.kodys.sk, on which it uses cookies.
Some cookies may, among other functions, collect your personal data. In such cases, the Company is also the controller within the meaning of Article 4(7) of the GDPR or Section 5(o) of the Act.
If you have any questions about this Notice, cookies, the processing of your personal data or the exercise of your rights under the GDPR and the Act, you may contact the Company at any time:
(a) by post to KODYS SLOVENSKO, s.r.o., Sliačska 2, 831 02 Bratislava;
b) by e-mail to the following e-mail address: info@kodys.sk;
c) by telephone: +421 2 4342 3844.
2. Definitions of terms used
In accordance with the principle of transparency and clarity, the Company uses the following terms for the purposes of providing information in this Announcement:
Data subjects are visitors to the Portal who have cookies placed on their device, regardless of whether personal data is processed through these cookies;
GDPR means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation);
Portal means the web portal https://www.kodys.sk, including all subdomains, subpages and components;
Act is Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Additions to Certain Acts, as amended;
Act on Electronic Communications is Act No. 452/2021 Coll. on Electronic Communications, as amended;
3. What are cookies?
Cookies are small text files that are stored by the web browser on the computer or other device of the Data Subject, such as a mobile phone or tablet, when visiting the Portal. Among other things, cookies allow the Portal to recognize the Touched Person's device and remember certain information about their sessions during the connection. Cookies remember the type of web browser used or the settings chosen, which remain the default settings when you revisit the Portal, improving the Touched Person's experience.
The Company uses cookies primarily for the purpose of ensuring the smooth functionality of the Portal and for the purpose of improving the Touched Person's experience on the Portal. These purposes are fulfilled by collecting aggregate statistics on the number of Data Subjects and obtaining data on how the Portal is used, and the Company may also use third party cookies for these purposes.
The Company may use several types of cookies with different functionalities on the Portal. In general, the following types of cookies exist:
- Temporary cookies
These cookies identify activity on the Portal, and their function is that the Portal remembers the Subject while he or she is on the Portal. These cookies are automatically deleted when the Data Subject leaves the Portal or closes the web browser.
- Permanent cookies
Permanent cookies, unlike temporary cookies, remain stored on the storage device of the Data Subject and their storage is not affected by closing the web browser or switching off the device. Within the category of permanent cookies, a further distinction is made between analytical, advertising and other cookies.
Analytical cookies
These cookies help to collect data relating in particular to visits, the origin of visits and the performance of the Portal. Analytical cookies identify repeat visits to the Portal from the same web browser on the same device and can track the activity of the Data Subject when visiting the Portal. This information then helps to identify technical problems that may occur on the Portal and also the effectiveness of the individual components of the Portal, which enables the Company to improve the navigation of the Portal and thus the overall user experience of the Data Subject. The consent of the Data Subject is required for this type of cookie if his or her personal data is processed. In the event that the Data Subject does not grant consent to the Company or a third party, no analytical personal data will be collected about his or her visit to the Portal.
Advertising cookies
These cookies allow targeted advertising to be displayed on the Portal or targeted advertising on other portals, which means that the Data Subject is shown targeted advertising based on the Data Subject's activity on the Portal. The consent of the Data Subject is required for this type of cookie. If the Data Subject does not give consent to the Company or a third party, they will not be shown personalised advertising.
Other cookies
These cookies enable a wide range of functionality on the Portal that is distinct from analytics or advertising cookies. For example, these cookies are technical cookies that ensure the functionality of different parts of the Portal. Among other cookies, the Company also includes essential cookies that the Company may store on the Subject's device automatically pursuant to Section 109(8) of the Electronic Communications Act.
- Company cookies (first-party cookies)
Company Cookies are cookies created or managed directly by the Company and used on the Portal. The Company may also use third-party platforms, however, control over these cookies rests solely with the Company and all data collected through these cookies remains with the Company, and it is the Company's sole discretion whether to share this data with third parties. The consent of the Data Subject is required for this type of cookies, except where they are essential cookies. In the event that the Data Subject does not give consent, these cookies will not be stored on the Data Subject's device, except for essential cookies.
- Third-party cookies
Third-party cookies are cookies that are not created or managed by the Company, but by a third independent party (e.g. a business partner, service provider, etc.). The third-party cookie operator is an independent third party that places these cookies on the Subject's device when he or she visits the Portal, but the information obtained through these cookies is available to the third party, which may then share it with the Company. Third party cookies are used for different purposes (e.g. analytical or advertising), but the common goal is to improve the user experience of the Data Subject. Third-party cookies may be stored on the Data Subject's device temporarily or permanently. The consent of the Data Subject is required for this type of cookie. If the Data Subject does not give consent to the third party, these cookies will not be stored on the Data Subject's device.
The Company currently uses the following cookies on the Portal:
-
Google Analytics - The Company uses the Google Analytics platform on the Portal, which stores cookies on the Data Subject's device via tags for the purpose of analysing the Data Subject's use of the Portal (see analytics cookies). These cookies are set as Company cookies (first-party cookies), which are managed directly by the Company. For more information about these cookies, the Data Subject can visit the website of the Platform Operator here. By consenting to the use of these cookies, the Data Subject agrees that the Company may store these cookies on the Data Subject's device and obtain information through them and use the information thus obtained for the purpose of carrying out analytics. Consent can be revoked at any time in the web browser, here or here.
-
Hotjar Tracking Code - The Company uses cookies (tracking code) from Hotjar Limited on the Portal to analyse the Data Subject's visits to the Portal (see analytics cookies). These cookies are set as Company cookies (first-party cookies) which are managed directly by the Company. For more information regarding these cookies, the Data Subject can visit the Platform Operator's website here. By consenting to the use of these cookies, the Data Subject agrees that the Company may store these cookies on the Data Subject's device and obtain information through them, including personal data, and use the information thus obtained for the purpose of performing analytics. Consent can be withdrawn at any time in the web browser, here or here.
-
Rubicon Project - The Company uses cookies on the Portal from Magnite Inc. which uses cookies for advertising purposes through the use of the Portal by the Data Subject (see advertising cookies). These cookies are set as Company cookies (first-party cookies), which are managed directly by the Company. For more information about these cookies, the Data Subject can visit the Platform Operator's website here. By consenting to the use of these cookies, the Data Subject agrees that the Company may store these cookies on the Data Subject's device and obtain information, including personal data, through these cookies and use the information obtained in this way for the purpose of conducting marketing. Consent can be withdrawn at any time in the web browser, here or here.
-
Tawk - The Company uses cookies on the Portal from tawk.to, which uses cookies to provide the communication platform through which the Company communicates with the Data Subject (see other cookies). These cookies are set as Company cookies (first-party cookies), which are managed directly by the Company. For more information about these cookies, the Data Subject can visit the website of the platform operator here. By consenting to the use of these cookies, the Data Subject agrees that the Company may store these cookies on the Data Subject's device and obtain information, including personal data, through these cookies and use the information thus obtained for the purpose of providing the Communication Platform. Consent may be withdrawn at any time in the web browser, here or here.
-
LinkedIn - The Company uses cookies on the Portal from LinkedIn, which uses cookies to analyse the Data Subject's visit to the Portal (see analytics cookies) and to carry out marketing (see advertising cookies). These cookies are set as third-party cookies and are managed by LinkedIn Ireland Unlimited Company. For more information regarding these cookies the Data Subject can visit the website of the platform operator here. By consenting to the use of these cookies, the Data Subject agrees that the Company may store these cookies on the Data Subject's device and obtain information through them, including personal data, and use the information so obtained for the purpose of carrying out analytics and marketing. Consent can be withdrawn at any time in the web browser, here or here.
-
YouTube (embedded videos) - The Company uses cookies from Google (which owns the YouTube platform) on the Portal by placing the videos found on this platform directly on the Portal. These cookies are used for advertising purposes by detecting views of Youtube videos and the use of the video player of the Concerned Person (see advertising cookies). These cookies are set as third-party cookies managed by Google Ireland Limited. These cookies will only be stored on the Touched Person's device if they start playing a YouTube video via the Portal. For more information regarding these cookies, the Data Subject can visit the platform operator's website here. By consenting to the use of these cookies, the Data Subject agrees that the platform operator Google Ireland Limited and other third parties may store these cookies on the Data Subject's device and collect information, including personal data, and use the information collected for marketing purposes. Consent can be withdrawn at any time in the web browser, here or here.
4. Information on the processing of (personal) data via cookies
The Company or third parties process a number of data, including personal data of the Data Subject, via cookies. The Company provides below an overview of the information in connection with the (personal) data processed.
|
Cookies and processed data |
Purpose of data processing |
Legal basis for data processing |
Data retention period |
Consequences of not providing personal data |
|
Rubicon Project Personal data in the scope of the standard HTTP protocol (including IP address, web browser information), information on button clicks and information on redirection to other web portalsare processed. |
The purpose of the processing of this data is to display personalised advertising to the Data Subject. |
The Data Subject'sconsent to the processing of his or her personal data and the storage of cookies on the Data Subject's device. Consent can be withdrawn at any time in the web browser, here or here. |
The retention period of individual cookies varies based on the individual functions they provide. You can find out the specific retention period of cookies in your web browser. |
Voluntary disclosure. Failure to provide consent will result in the Company not processing the Data Subject's personal data and not storing cookies on the Data Subject's device. |
|
Google Analytics The Company has set up the use of the Platform so that no personal data is processed. Only anonymised IP address and online identifier (Unique ID) data is processed. |
The purpose of processing this data is to perform analytics (i.e. use of the Portal) |
Consent of the Data Subject to the storage of cookies on his/her device. Consent can be revoked at any time in the web browser, here or here. |
The retention period of individual cookies varies based on the individual functions they provide. You can find out the specific retention period of cookies in your web browser. |
Voluntary disclosure. Failure to provide consent will result in the Company not storing cookies on the Subject's device. |
|
Hotjar Tracking Code Personal data is processed and this includes IP address, resolution setting, device type (Unique ID), operating system, browser type, location (at country level), preferred language, mouse movements and clicks, keystrokes, domain and URL, number of visits and time and date of each session. |
The purpose of processing this data is to perform analytics (i.e. use of the Portal) |
The Data Subject'sconsent to the processing of his/her personal data and the storage of cookies on the Data Subject's device. Consent can be withdrawn at any time in the web browser, here or here. |
The retention period of individual cookies varies based on the individual functions they provide. You can find out the specific retention period of cookies in your web browser. |
Voluntary disclosure. Failure to provide consent will result in the Company not processing the Data Subject's personal data and not storing cookies on the Data Subject's device. |
|
Youtube Personal datais processed to the extent of the Data Subject's unique identifier (unique ID) and preferred video player settings. |
The purpose of the processing is for marketing purposes. |
Consent of the Data Subject to the processing of his/her personal data and the storage of cookies on the Data Subject's device. Consent can be withdrawn at any time in the web browser, here or here. |
The retention period of individual cookies varies based on the individual functions they provide. You can find out the specific retention period of cookies in your web browser. |
Voluntary disclosure. Failure to provide consent will result in the Company not processing the Data Subject's personal data and not storing cookies on the Data Subject's device. |
|
Tawk Personal datais processed in the scope of the standard HTTP protocol (including IP address, web browser information). |
The purpose of processing this data is to ensure communication between the Company and the Data Subject. |
The Data Subject'sconsent to the processing of his/her personal data and the storage of cookies on the Data Subject's device. Consent can be withdrawn at any time in the web browser, here or here. |
The retention period of individual cookies varies based on the individual functions they provide. You can find out the specific retention period of cookies in your web browser. |
Voluntary disclosure. Failure to provide consent will result in the Company not processing the Data Subject's personal data and not storing cookies on the Data Subject's device. |
|
Personal datais processed within the scope of the standard HTTP protocol (including IP address and web browser information). |
The purpose of the processing of this data is to perform analytics (i.e. use of the Portal) and marketing activities. |
The Data Subject'sconsent to the processing of his/her personal data and the storage of cookies on the Data Subject's device. Consent can be revoked at any time in the web browser, here or here. |
The retention period of individual cookies varies based on the individual functions they provide. You can find out the specific retention period of cookies in your web browser. |
Voluntary disclosure. Failure to provide consent will result in the Company not processing the Data Subject's personal data and not storing cookies on the Data Subject's device. |
5. Rights of Data Subjects
In connection with the processing of personal data, you, as a Data Subject, are entitled to the rights set out below, which you may exercise at any time by submitting a request to the Company. In such a case, the Company is obliged to provide the Data Subject with information on the measures taken on the basis of his/her request without undue delay, but at the latest within 1 month. The Company may extend this period by a further 2 months, in which case it shall inform the Data Subject of any such extension within 1 month of receipt of the request, together with the reasons for the delay.
- Right of access (Article 15 of the GDPR or Article 21 of the Act)
The Data Subject shall have the right to obtain confirmation as to whether the Company is processing his or her personal data and, if so, to obtain access to such personal data. The data subject also has the right to be provided with all information within this Notice, and the Company will update this Notice periodically.
- Right to rectification (Art. 16 GDPR or Art. 22 of the Act)
The data subject has the right to rectification of the personal data processed by the Company about him or her without undue delay. The data subject also has the right to have incomplete personal data completed.
- Right to erasure/forgetting (Art. 17 GDPR or Art. 23 of the Act)
The data subject has the right to have the personal data processed by the Company about him or her erased without undue delay. However, the right to erasure is not absolute and it is necessary that at least one of the grounds within the meaning of Article 17(1) of the GDPR and Section 23(2) of the Act is fulfilled, or the Company is not obliged to erase such personal data in the cases referred to in Article 17(3) of the GDPR and Section 23(4) of the Act.
- Right to restriction of processing (Art. 18 GDPR or Art. 24 of the Act)
The data subject has the right to have the Company restrict the processing of his or her personal data under the conditions set out in Article 18 GDPR and Section 24 of the Act.
- Right to portability (Art. 20 GDPR or Art. 26 of the Act)
The data subject has the right to obtain the personal data he or she has provided to the Company in a structured, commonly used and machine-readable format and has the right to transfer such personal data to another controller if he or she has provided his or her personal data on the basis of consent and such personal data is processed by the Company by automated means.
- Right to object (Art. 21 GDPR or Art. 27 of the Act)
The data subject shall have the right to object to processing of personal data concerning him or her by the Company where such processing is carried out for the performance of a task carried out in the public interest or for legitimate purposes of the Company or third parties, including objecting to profiling based on these legal bases. The data subject shall also have the right to object to the processing of personal data about him or her by the Company for direct marketing purposes, including profiling.
- Right in relation to automated individual decision-making, including profiling (Art. 22 GDPR or Art. 28 of the Act)
The data subject has the right not to be subject to a decision which is based solely on automated processing, including profiling, and which has effects concerning him or her or similarly significantly affects him or her.
- Right to bring proceedings (Section 100 of the Act)
A data subject has the right to bring a data protection proceeding under Section 100 of the Act before a supervisory authority if he or she believes that the Company is processing his or her personal data in breach of the GDPR or the Act.
The data subject may file a petition to initiate proceedings with the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava. More information is available on the website of the Office for Personal Data Protection of the Slovak Republic.
- Right to withdraw consent (Article 7 of the GDPR or Article 14 of the Act)
If personal data are processed on the legal basis of the Data Subject's consent, the Data Subject has the right to withdraw his or her consent at any time without affecting the lawfulness of processing based on consent granted before its withdrawal.
You can withdraw your consent at any time in your web browser.
6. Recipients of personal data
The Company may disclose the personal data of Data Subjects to other natural or legal persons, public authorities or international organisations.
The Company ensures the highest possible level of protection of personal data in the case of provision of personal data of Data Subjects, and in the case of provision of personal data to its processors or joint controllers, the Company has a contractual relationship within the meaning of Article 26 or Article 28 of the GDPR, or Article 33 or Article 34 of the Act.
The Company provides personal data of Data Subjects to the following categories of recipients and public authorities:
- Controlling or controlled entities and other entities in the horizontal or vertical hierarchy of the Company's organizational structure;
- business partners of the Company;
- the Company's legal, tax, accounting, IT and other advisors;
- Google Ireland Limited, whose registered office is Gordon House Barrow Street, Dublin 4, DO4E5W5, Ireland, Company Registration Number (CRN): 368047 as an agent or independent controller, and more information on the use of personal data is available here;
- Hotjar Limited, whose registered office is Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta, Registration Number (CRN): C 65490, for the purpose of carrying out analytics on the Portal;
- Magnite, Inc., whose registered office is 12181 Bluff Creek Dr 4th floor, Los Angeles, CA 90045, United States of America, with more information on the use of personal data available here;
- tawk.to Inc., located at 187 E Warm Springs Rd suite b, Las Vegas, United States of America as an intermediary, with more information on the use of personal data available here;
- LinkedIn Ireland Unlimited Company, with registered office at Wiltin Place, Dublin 2, Ireland, Registration Number (CRN): 477441 as an independent data controller, with more information on the use of personal data available here;
7. Retention period of personal data
In addition to the retention periods set out for individual personal data under clause 4 of this Notice, the Company may retain the personal data of Data Subjects for longer periods where it is necessary to retain the personal data for longer than the set period because of the legitimate interests of the Company or because of a change in its legal obligations.
8. Transfer of personal data to third countries or international organisations
The Company may transfer the personal data of Data Subjects to third countries (countries outside the European Union or the European Economic Area) or to international organisations. In the event of any transfer of Personal Data to third countries or international organisations, the Company shall at all times undertake to ensure an adequate level of protection of the Personal Data of Data Subjects.
The Company transfers Personal Data to the following third countries:
- The United States of America and to tawk.to Inc. based on standard contractual clauses, which the Company will provide upon request;
9. Automated individual decision-making, including profiling
The Company does not use automated individual decision-making, including profiling, when processing the personal data of Data Subjects.