No products in the basket.
The following information relates to the processing of personal data of visitors and/or customers of this website by CarnoMed. The processing and protection of this personal data is governed by the provisions of Act No. 18/2018 Coll., on the protection of personal data, as amended (hereinafter referred to as the "Act"), in conjunction with the provisions of Regulation (EU) No. 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (hereinafter referred to as the "Regulation").
CarnoMed s.r.o. respects the privacy of all data subjects with whom we are in contact, regardless of whether we process personal data ourselves or by other parties. It is important to us that everyone understands what personal data we process about you, why we do it and what your rights are. We therefore encourage you to read this Privacy Policy which will give you more information about CarnoMed Ltd's processing of your personal data.
This Privacy Policy sets out how we process your personal data, for example, when providing services and selling products, entering into a contractual relationship or pursuing legitimate interests.
We may process personal data about you in different ways and in different situations depending on whether you are a client, supplier or job applicant or employee. We may also process personal data about visitors to our website, depending on how you choose to interact with us or which of our services you choose to use. Regardless of the situation, we promise that we will never sell, commercialize or use your personal information in violation of applicable data protection regulations.
This privacy statement applies to you and your personal information because you are a client of CarnoMed s.r.o.
CarnoMed s.r.o. is a company that acts as a controller in the processing of your personal data. This statement explains how we will use the personal data we collect from you or from third parties during the course of your contractual relationship with CarnoMed Ltd.
We may update this statement from time to time and if we do, we will notify you at this location. This version of the privacy statement was issued on 1.8.2021.
We process the following personal data:
- Personal contact data - for example, your first name, last name, permanent home address, mailing address, email address, contact telephone number, academic degree.
- Contact details - for example, email address and telephone number.
- Contractual data - for example, the content of your contract with our company, including any amendments to it and the scope of services provided.
- Services and products provided - products and services.
- Payment information - such as your bank account number and the amount of services, products and fees charged.
- Correspondence and communication details - such as email, postal correspondence.
CarnoMed s.r.o. as the controller will process your data for the following purposes:
- Client administration - We keep records of all our customers and their services in order to improve the quality of service and streamline processes. We also make strategic decisions about offers to our customers based on the analysis of our records.
- Tax and Accounting - In order to comply with our obligations under the Tax Act and other regulations related to financial compliance, we are required to process certain personal data.
- Dispute Resolution, Complaints - We may process personal data for the purposes of dispute resolution, complaints or legal proceedings or if we suspect an offence that we would like to investigate further.
- Compliance with the law - We may need to process your personal data to comply with the law (e.g. dealing with security requests from government authorities) or to comply with a court order.
- Marketing consents - We may also use other data but only on the basis of specific consents we have obtained from you in advance.
The controller may share your data with third parties in the following circumstances:
- We may share your personal data with other third parties who act on our behalf, such as a service provider or our suppliers who arrange or provide part of our services. In such cases, these third parties may only use your personal information for the purposes described above and only in accordance with our instructions;
- Authorised persons such as solicitors, auditors and tax advisers will have access to your personal data. In this case, access will only be granted if it is necessary for the purposes described above and only if that person is bound by a duty of confidentiality;
- If required by law or court order, we may share your personal information with, for example, our suppliers or clients, tax authorities, social security offices, law enforcement agencies, or other governmental authorities.
- Our employees will also have access to your personal information. In this case, access will only be granted if it is necessary for the purposes described above and only if the employee in question is bound by a duty of confidentiality.
We retain your personal data for the limited time necessary to fulfil the purpose of processing and will delete it when it is no longer necessary for the purpose of processing. In most cases, this means that we will retain your data for the duration of your contractual relationship with us. As far as possible, we will delete the data during that relationship once it is no longer needed. In any case, we will delete your personal data at the latest within a statutory period after the end of the contractual relationship, unless the relevant legislation requires retention.
We may process your personal data for a longer period of time after the end of the relationship in the event of an ongoing legal dispute or if you have given us permission to retain your personal data for a longer period of time.
Legal basis for processing your data
In most cases, we process your personal data on the basis that the processing is necessary for the purposes of the legitimate interest pursued by us, on a lawful basis, on a contractual basis or on the basis of your consent as a data subject. In the case of processing based on consent, you always have the possibility to withdraw your consent.
Will you be subject to automated decision-making?
Your personal data will not be used in automated decision-making.
It is important that you understand that this is your personal data that we are processing and that we want you to be aware of this. Although we will not need your permission to process your personal data, you have many rights in relation to the processing of your personal data. All your rights under specific legislation can be found in the document: Information on the rights of the data subject.
How can you find out about the use of your data or exercise your rights?
If you have any further questions about the processing of your personal data or if you wish to make a complaint about how we process your personal data, you can contact us by email at info@carnomed.sk, or in writing at CarnoMed s.r.o, Partizánska 2, 811 03 Bratislava, Slovak Republic and your suggestions and requests will be investigated.
If you are not satisfied with our response or if you believe that we are processing your data unfairly or unlawfully, you can complain to the Supervisory Authority, which is the Office for Personal Data Protection (ÚOOÚ). For more information about the DPO and their complaints procedure, please visit https://dataprotection.gov.sk/uoou
This Policy applies to the processing of your personal data as a representative of our current or prospective supplier or business partner.
We may update this statement from time to time without notice. Therefore, we encourage you to review it periodically.
This version of the statement was issued on 1.8.2021
In order to enter into and perform a contract with you or the company you represent, it is necessary to process your personal data. We may also process personal data about visitors to our website or physical locations, depending on how you choose to interact with us (see our Privacy Policy for more information).
We only process your personal data if we have a legal basis to do so. This means that the processing must be necessary for the performance of a contract to which you or the company you represent is a party or to enable action to be taken on request before the contract is concluded, the processing is possible on the basis of a legitimate interest or on the basis of obligations arising from a special regulation. In accordance with our legitimate interest, we may also use your data in order to improve the services and processes we provide to you and to respond promptly to changes, as the IT industry is constantly evolving and the technologies themselves are being optimised. As the industry is not resistant to change, we will use the data we collect to improve existing services and build on others for a high customer experience. In this case, we process personal data for the purpose of technical development, testing, delivery, maintenance and support of IT systems.
We have a legal obligation to disclose your personal data when inspected by authorised institutions and in preventing, monitoring and proving fraud, combating money laundering and other crimes.
Your data will be held securely in accordance with data protection legislation.
We store information necessary to manage the contractual or business relationship. For example, we need your name, job title and contact information such as address, phone number and email to communicate with you and ensure secure and truthful identification.
In order to comply with our legal obligations, such as anti-money laundering, we also verify other personal data such as your birth number or date of birth, ID or travel document number or similar identification and related information required under specific regulations (Act No. 297/2008 Coll. on the Protection against the Laundering of the Proceeds of Crime and on the Protection against the Financing of Terrorism and on the Amendment of Certain Acts.
Unless we agree otherwise with you or it is necessary to establish, exercise or defend legal claims, we will not include special categories of personal information (often called "sensitive personal data", such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, and the processing of data relating to health or sex life).
We may share your personal data with our suppliers who arrange and/or provide part of our services, e.g. hosting services, lawyers, auditors and tax advisors, service providers, supervisory authorities. We may also share your personal information with our Clients if you represent a supplier that is part of the services we provide to them and to authorized institutions.
Our employees will also have access to your personal information. In this case, access will only be granted if it is necessary for the purposes described above and only if the employee in question is bound by a duty of confidentiality.
We retain your data for as long as necessary to fulfil the purpose of processing under the special regulations and the purpose for which it was collected, if we have a legitimate interest in retaining it, e.g. until the end of the contractual relationship and/or the expiry of the limitation period, within which we should be able to defend ourselves against legal claims. We are also legally obliged to retain your personal data for a certain period of time in order to prevent and detect fraud, to detect and demonstrate anti-money laundering as well as for financial audits.
Your personal data will not be used in automated decision making.
It is important that you understand that this is your personal data that we are processing and that we want you to be aware of this. Although we do not need your permission to process your personal data, you have many rights in relation to the processing of your personal data. All your rights under specific legislation can be found in the document: Information on the rights of the data subject.
If you have any further questions about the processing of your personal data or if you wish to make a complaint about how we process your personal data, you can contact us by email at info@carnomed.sk, or in writing to CarnoMed s.r.o, Partizánska 2, 811 03 Bratislava, Slovak Republic and your suggestions and requests will be investigated.
If you are not satisfied with our response or if you believe that we are processing your data unfairly or unlawfully, you can complain to the Supervisory Authority, which is the Office for Personal Data Protection (ÚOOÚ). Further information about the DPO and their complaints procedure can be found at https://dataprotection.gov.sk/uoou
We may update this statement from time to time without notice. We therefore recommend that you consult it regularly. This version of the statement was issued on 1.8.2021.
If you visit a booth that writes cookies, a small text cookie will be created on your computer. A cookie is a short text file that a website stores on your computer or mobile device (including a tablet) when you browse it. If you visit the same site next time, it will make you connect faster. In addition, the site will "get to know" you and offer you the information you prefer, ensure that you do not repeat advertising already displayed, offer to complete the identification data already filled in during previous visits to the web environment and, following this information, display relevant content and offers of estimated activities and services that we assume you could take advantage of.
We use cookies to analyse website traffic through Google Analytics, Google AdSense, CarnoMed s.r.o. internal systems (as described above). This is an analytics tool that helps website and app owners understand how their visitors use these resources. Cookies can be used for statistical data about website usage without personally identifying individual visitors.
If we are able to identify the person of a visitor to the web environment when recording, this will constitute processing of personal data. We must have a legal basis for such processing. One legal basis may be the consent of you as the data subject, and the other, especially when tracking activities and evaluating them, will be the legitimate interest of the controller, i.e. us, to offer you the best possible service or support settings for your activities in a contractual relationship with our company, streamlining our processes so that we can respond promptly to changes, as the IT industry is constantly evolving and the technologies themselves are being optimised. As this industry is not resistant to change, we will use the data collected to improve existing services and build on others for a high level of comfort for you, the customer.
Session cookies - are temporary cookies stored on your computer, laptop or mobile device until you leave the website(s), at which point they are deleted. Such cookies help the website(s) to remember information as you move from page to page, so that you do not need to re-enter or re-fill the information again.
Persistent cookies - remain stored on your computer, laptop or mobile device even after you leave the website(s); such cookies help the website(s) to remember you when you return as a visitor, while not identifying you as a person.
Information about your visit to our website (www page)
Connection IP address information, browser fingerprint
Information about your activity
Automated Decision Making and Profiling
In our environment, there is no association of the above activities with your person and therefore automated processing has no impact on your rights and freedoms. Similarly, there is no profiling in the processing of your data.
How to check your cookie settings
You can control or delete cookies at your discretion. Please visit aboutcookies.org for details. You can delete all cookies stored on your computer and you can set most browsers to prevent them from being stored.
Cookies are useful as long as site owners do not misuse them for unauthorised data collection. If you don't trust cookies, you can periodically delete them from your hard drive. In some cases, cookies may incorrectly record information and therefore cause problems with logging in to, for example, our web applications. Instructions for deleting all cookies, even incorrectly written cookies, can be found below.
Instructions for deleting Cookies in individual web browsers
Internet Explorer™
Safari™
Opera™
Mozilla Firefox™
Google Chrome™
Browsing data stored according to the cookie settings is not stored on our systems. For your protection, you can at any time file a complaint with the Supervisory Authority of the Slovak Republic, which is the Office for Personal Data Protection via https://dataprotection.gov.sk/uoou/
If we process your data on the basis of your consent, you may withdraw or object to this consent at any time by submitting a complaint to our points of contact or by sending a complaint to the contact point listed in the Contact details section.
It is important to CarnoMed s.r.o that you understand that it is your personal data that we are processing and that we want you to be aware of this. You have many rights in relation to the processing of your personal data. Please read the following information carefully to learn more about your rights and our obligations.
CarnoMed s.r.o. is:
(a) obliged to process personal data only in a lawful manner and in such a way that the fundamental rights of the data subject are not violated,
b) entitled to obtain personal data only for a specifically identified, explicitly stated and legitimate purpose and may not further process them in a way that is incompatible with that purpose,
(c) entitled to process only personal data which are adequate, relevant and limited to the necessary extent given by the purpose for which they are processed,
(d) required to take reasonable and effective measures to ensure that personal data which are inaccurate in relation to the purpose for which they are processed are erased or rectified without undue delay,
(e) required to keep personal data in a form which permits identification of the data subject at the latest for as long as is necessary for the purpose for which the personal data are processed.
(f) required to process personal data in a manner which ensures, through appropriate technical and organisational measures, adequate security of personal data, including protection against unauthorised processing of personal data, unlawful processing of personal data, accidental loss of personal data, erasure of personal data or damage to personal data,
(g) shall not use or disclose personal data beyond what is necessary for the intended purpose.
The data subject has the right to obtain confirmation from CarnoMed s.r.o. as to whether personal data concerning him or her are being processed. The data subject has the right to obtain access to and information about:
(a) the purpose of the processing of the personal data,
(b) the category of personal data processed,
(c) the identification of the recipient or the category of recipient to whom the personal data have been or are to be disclosed, in particular a recipient in a third country or an international organisation, where applicable,
(d) the period of retention of the personal data; if this is not possible, information on the criteria for determining it,
(e) the right to obtain from the controller the rectification, erasure or restriction of the processing of personal data relating to the data subject, or the right to object to the processing of personal data,
f) the right to bring an action pursuant to Section 100 of Act No. 18/2018 Coll. on the protection of personal data,
g) the source of the personal data, if the personal data were not obtained from the data subject,
h) the existence of automated individual decision-making, including profiling
CarnoMed s.r.o. is obliged to provide the data subject with the personal data it processes. CarnoMed s.r.o. may charge a reasonable fee corresponding to the administrative costs for the repeated provision of personal data requested by the data subject. CarnoMed s.r.o. is obliged to provide the personal data to the data subject in the manner requested by the data subject.
CarnoMed s.r.o. provides the following information to data subjects:
a) identification data of the company as the controller: CarnoMed s.r.o, with registered office at Partizánska 2, 811 03 Bratislava, Slovak Republic, Registered in the Commercial Register of the District Court Bratislava I, sec. No.: 46 572 392, ID No.: 46 572 392,
b) contact details of the company as an operator: CarnoMed s.r.o, with registered office at Partizánska 2, 811 03 Bratislava, Slovak Republic, tel.: +421 914 336 337 email: info@carnomed.sk, web: www.carnomed.sk
c) the purpose of personal data processing is defined in the Privacy Statement - Clients and Privacy Statement - Privacy Policy (suppliers and others)
d) the list of personal data processed is defined in the Privacy Statement - Clients and the Privacy Statement - Privacy Policy (Suppliers and Others)
(e) the retention period for personal data is: for the duration of the contract
The person concerned has the right to have CarnoMed s.r.o.
a) correct the inaccurate personal data concerning him/her. With regard to the purpose of the processing of personal data, the data subject has the right to have incomplete personal data completed,
(b) erase the personal data concerning him or her.
CarnoMed s.r.o. is obliged to erase personal data without undue delay if the data subject has exercised the right to erasure, if
a) the personal data are no longer necessary for the purpose for which they were collected or otherwise processed,
(b) the data subject withdraws the consent on the basis of which the personal data are processed and there is no other legal basis for the processing of the personal data,
(c) the data subject objects to the processing of the personal data and there are no overriding legitimate grounds for the processing of the personal data,
(d) the personal data of the data subject are unlawfully processed, the ground for erasure is the fulfilment of an obligation under the Personal Data Protection Act, a special regulation or an international treaty to which the Slovak Republic is bound.
If CarnoMed s.r.o. has disclosed personal data and is obliged to erase them pursuant to the preceding paragraph, it is also obliged to take appropriate security measures, including technical measures, taking into account the available technology and the costs of their implementation, for the purpose of informing other controllers who process the personal data of the data subject of his/her request that these controllers erase the references to his/her personal data and copies or copies thereof or copies thereof. The provisions of this and the preceding paragraph shall not apply in the cases provided for by the Data Protection Act.
The data subject has the right to have CarnoMed s.r.o. restrict the processing of personal data if
a) the data subject objects to the accuracy of the personal data during a period which allows CarnoMed s.r.o. to verify the accuracy of the personal data,
b) the processing of the personal data is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use,
c) CarnoMed s.r.o. no longer needs the personal data for the purpose of the processing of the personal data, but the data subject needs the personal data to assert a legal claim,
d) the data subject objects to the processing of personal data until it is verified whether the legitimate grounds on the part of CarnoMed s.r.o. override the legitimate grounds of the data subject.
If the processing of personal data has been restricted, the CarnoMed s.r.o. may, except for storage, process the personal data only with the data subject's consent or for the purpose of asserting a legal claim, for the protection of individuals or for reasons of public interest. The CarnoMed s.r.o. shall inform the data subject before the restriction of the processing of personal data is lifted.
- CarnoMed s.r.o. is obliged to notify the recipient of the rectification of personal data, the erasure of personal data or the restriction of the processing of personal data, unless this proves impossible or requires disproportionate effort.
- The data subject shall have the right to object to processing of personal data concerning him or her for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing. If the data subject objects to the CarnoMed s.r.o. to the processing of personal data for the purpose of direct marketing, the CarnoMed s.r.o. may no longer process the personal data for the purpose of direct marketing.
- Taking into account the nature, scope and purpose of the processing of personal data and the risks of varying likelihood and severity for the rights of the natural person, CarnoMed s.r.o. is obliged to take appropriate technical and organisational measures to ensure and demonstrate that the processing of personal data is carried out in accordance with the relevant generally applicable law. These measures shall include the implementation by CarnoMed s.r.o. of appropriate data protection procedures, where this is proportionate to the processing activities.
- CarnoMed s.r.o. is obliged to periodically review the duration of the purpose of processing personal data and to ensure that the personal data is deleted without undue delay after the purpose has been fulfilled; this does not apply if the personal data is part of a registry record.
- CarnoMed s.r.o. declares that it has adopted, taking into account the state of the art, the cost of implementing the measures, the nature, scope, context and purpose of the processing of personal data and the risks of varying likelihood and severity to the rights of natural persons, appropriate technical and organisational measures to ensure a level of security appropriate to that risk, including:
(a) pseudonymisation and encryption of personal data,
(b) ensuring the continued confidentiality, integrity, availability and resilience of personal data processing systems,
(c) a process for restoring the availability of and access to personal data in the event of a physical or technical incident,
(d) a process for regularly testing, assessing and evaluating the effectiveness of technical and organisational measures to ensure the security of the processing of personal data.
- CarnoMed s.r.o. is obliged to ensure that the natural person acting on behalf of CarnoMed s.r.o. who has access to personal data processes such data only on the basis of instructions from CarnoMed s.r.o. or pursuant to a specific regulation or international treaty to which the Slovak Republic is bound.
- CarnoMed s.r.o. is obliged to notify the data subject without undue delay of a personal data breach if such a personal data breach may result in a high risk to the data subject's rights.
Notification is not required if,
a) CarnoMed s.r.o. has taken appropriate technical and organisational protective measures and applied them to the personal data to which the personal data breach relates, in particular encryption or other measures which render the personal data unreadable to persons not authorised to have access to it,
(b) CarnoMed s.r.o. has taken follow-up measures to ensure that there is a high risk of a breach of the data subject's rights,
(c) it would involve disproportionate effort; CarnoMed s.r.o. is obliged to inform the public or take other action to ensure that the data subject is informed in an equally effective manner.
We measure your satisfaction with your purchase through e-mail questionnaires as part of the Verified Customers program in which our e-shop is involved. These are sent to you every time you make a purchase with us, unless, pursuant to § 62 of the Act No. 351/2011 Coll. on electronic communications, as amended, you do not refuse the sending of electronic mail for direct marketing purposes. The processing of personal data for the purpose of sending questionnaires within the framework of the Verified Customers programme is carried out on the basis of our legitimate interest, which consists in ascertaining your satisfaction with your purchase with us. For sending questionnaires, evaluating your feedback and analysing our market position, we use a processing agent, which is the operator of the Heureka.sk portal, to which we may pass information about the goods you have purchased and your e-mail address for these purposes.
Your personal data is not passed on to any third party for its own purposes when sending email questionnaires.
You can object to the sending of e-mail questionnaires within the framework of the Verified Customers program at any time by refusing further questionnaires using the link in the e-mail with the questionnaire. If you object, we will not send you the questionnaire any further.
