Cookie notice

Change my cookie settings

Company:

Business name:
MATHISON legal s.r.o.
Registered office:
Galvániho 15/B, 821 04 Bratislava, Slovak Republic
Company registration number (IČO):
46 079 882
Registration:
Commercial Register maintained by Bratislava I District Court, Section Sro, File No. 71909/B
Statutory body:
JUDr. Ing. Eva Schin Majdúchová, Managing Director (konateľ)
Contact details:
info@mathison.sk, 0908 587 876

(the “Company” or “Controller”).

To ensure that the Controller's services on the website www.mathisonlegal.sk/ (the “Website”) work properly, small data files called cookies are stored on your device.

  1. What are cookies?
    A cookie is a small text file that the Website stores on your computer or mobile device when you visit. It enables the Website to remember your actions and preferences (such as your login name, language, font size and other display preferences), so that you do not have to re-enter them whenever you return or move between pages. Cookies are recorded and stored with your consent under Section 55(5) of Act No. 351/2011 Coll. on Electronic Communications, as amended. You can prevent these files from being stored on your device at any time through your browser settings (www.allaboutcookies.org)
  2. Purposes and legal basis of personal data processing, and identification of recipients (Article 13(1)(c) and (e) GDPR and Section 19(1)(c) and (e) of the Act):

    The Controller's Website uses the following cookies:
    1. Technical (strictly necessary) cookies, which enable the Website's basic functions.
      Strictly necessary cookies enable basic functions such as security settings, network management and accessibility. You can disable them through your browser settings, but this may affect how the Website functions.
    1. Functional cookies help the Controller maintain consistent Website settings throughout your visit, such as language, font size and other display preferences.

      Functional cookies also record data that enables the Controller to monitor Website traffic. This consists only of statistics and anonymised data, so the Controller cannot identify you from it.

      The Controller uses Google Analytics, an analytics tool provided by Google Inc., to record visits to the Website and its sections. Analysis of traffic and visitor behaviour helps the Controller adapt the Website's content. Information about how and to what extent Google uses data is available through this link,
    1. Marketing (advertising) cookies enable relevant advertisements to be displayed and their effectiveness to be measured.

      The Controller uses cookies from Facebook Ireland Ltd. to display its advertisements on Facebook and other digital platforms belonging to that company. These cookies also record advertisements displayed in order to improve them and track user behaviour on websites with the Facebook pixel or a Facebook social plugin. They collect Website visitors' contact details (particularly names, email addresses and telephone numbers) to match them with Facebook accounts, as well as event data about visitors and their actions, such as Website visits, app installations and product purchases, for analytics and measurement. Information about how and to what extent Facebook uses data is available through this link.

      Marketing cookies also include cookies from LinkedIn Ireland Unlimited Company. These record visitors' language preferences, support referrals from other websites, track visitors to present relevant advertisements and measure their success, and personalise content. The data recorded includes browser cookies on mobile or desktop devices, the Google advertising ID on Android or IDFA on iOS, operating system, device make and model (user agent), IP address, access time (timestamp), page URL or app name. This is combined with other data about registered LinkedIn users. Information about how and to what extent LinkedIn uses data is available through this link.
    You can control or delete cookies as you choose. You can delete all cookies stored on your computer and configure most browsers to prevent them from being stored. If you do so, you may need to adjust some settings manually each time you visit, and some services or features will not work.

    Cookie settings in commonly used browsers:

    Firefox
    Google Chrome
    Internet Explorer
    Safari

    For other browsers, please consult the relevant browser documentation.
  1. Legitimate interests of the Controller or a third party where personal data is processed under Article 6(1)(f) GDPR and Section 13(1)(f) of the Act (Article 13(1)(d) GDPR and Section 19(1)(d) of the Act): Personal data is not processed on this legal basis.
  2. Whether the Controller intends to transfer personal data to a third country or international organisation, and identification of that country or organisation (Article 13(1)(f) GDPR and Section 19(1)(f) of the Act): The Controller does not intend to make such a transfer.
  1. Personal data retention periods, or the criteria used to determine them (Article 13(2)(a) GDPR and Section 19(2)(a) of the Act):

    Strictly necessary cookies are retained for 24 hours.
    Functional cookies are retained for 13 months.
    Marketing (advertising) cookies are retained for 13 months.
  2. The data subject's rights to request access to personal data concerning them, rectification, erasure or restriction of processing, to object to processing and to data portability (Article 13(2)(b) GDPR and Section 19(2)(b) of the Act):
    The data subject has the following rights in relation to the Controller:
    1. Right of access to personal data: The data subject may obtain confirmation from the Controller as to whether their personal data is processed and, if so, access to that data and information about
      • the purposes of processing,
      • the categories of personal data processed,
      • the identity or categories of recipients to whom the data has been or will be disclosed, particularly recipients in third countries or international organisations, where possible,
      • the retention period or, where this cannot be specified, the criteria used to determine it,
      • the right to request rectification, erasure or restriction of processing, or to object to processing,
      • the right to request proceedings under Section 100 of the Act or lodge a complaint with a supervisory authority under Article 77 GDPR,
      • the source of the personal data if it was not collected from the data subject,
      • the existence of automated individual decision-making, including profiling, under Article 22(1) and (4) GDPR and Section 28(1) and (4) of the Act (in these cases, the Controller provides information particularly about the logic involved and the significance and envisaged consequences of that processing for the data subject).

      The Controller will provide a copy of the personal data being processed. For additional copies requested by the data subject, it may charge a reasonable fee reflecting administrative costs. If the request is made electronically, the information will be provided in a commonly used electronic format unless another format is requested.

      Information must be provided immediately and no later than one month. The Controller may extend the period by a further two months if the request is complex or frequent, but must notify the data subject of the reasons for the extension within one month.

      For an unfounded or excessively frequent request, the Controller may charge a fee proportionate to its costs or refuse the request. It must explain the reason for refusal and the data subject's right to complain to a supervisory authority.
    1. Right to rectification: The data subject may require the Controller to correct inaccurate personal data concerning them without undue delay. Taking account of the purposes of processing, they may also require incomplete personal data to be completed.

      Information must be provided immediately and no later than one month. The Controller may extend the period by a further two months if the request is complex or frequent, but must notify the data subject of the reasons for the extension within one month.

      For an unfounded or excessively frequent request, the Controller may charge a fee proportionate to its costs or refuse the request. It must explain the reason for refusal and the data subject's right to complain to a supervisory authority.
    2. Right to erasure or restriction of processing: The data subject may require the Controller to erase personal data concerning them without undue delay. Where that right is exercised, the Controller must erase the data without undue delay if
      • the data is no longer necessary for the purpose for which it was collected or otherwise processed,
      • the data subject withdraws consent and there is no other legal basis for processing,
      • the data subject objects to processing and there are no overriding legitimate grounds,
      • the data is processed unlawfully,
      • erasure is required to comply with the GDPR, the Act, a specific regulation or an international treaty binding on the Slovak Republic, or
      • the data was collected in connection with the offer of information society services.

      The preceding two sentences do not apply where processing is necessary
      • to exercise the right to freedom of expression or information,
      • to comply with an obligation under the GDPR, the Act, a specific regulation or an international treaty binding on the Slovak Republic, or to perform a task in the public interest or exercise official authority vested in the Controller,
      • for reasons of public interest in the area of public health,
      • for archiving, scientific or historical research, or statistical purposes where exercising the right would be likely to prevent or seriously impair the achievement of those purposes, or
      • to exercise a legal claim.

      The data subject may require the Controller to restrict processing if
      • they contest the accuracy of the data, for a period allowing the Controller to verify it,
      • processing is unlawful and they oppose erasure, requesting restriction of use instead,
      • the Controller no longer needs the data for processing, but the data subject requires it to exercise a legal claim, or
      • they object to processing, pending verification of whether the Controller's legitimate grounds override theirs.

      Where processing is restricted, the Controller may process the data, other than storing it, only with the data subject's consent, to exercise a legal claim, to protect persons or for reasons of public interest.
    3. Right to object: Where personal data is processed for direct marketing, the data subject may object at any time, including to profiling. If they object to processing for direct marketing, the Controller must stop processing their data for those purposes.
    4. Right to data portability: The data subject may receive personal data concerning them that they provided to the Controller in a structured, commonly used and machine-readable format and transmit it to another controller. This right must not adversely affect others' rights and freedoms. It applies where:
      • processing is based on consent or a contract, and
      • processing is carried out by automated means.

      The Controller has one month to transfer the data. This may be extended by two months if the transfer is complex. The Controller must inform the data subject and explain the extension. If the Controller does not take steps to transfer the data, it must explain why and inform the data subject of their right to complain to a supervisory authority.

  1. Right to withdraw consent to the processing of personal data at any time (Article 13(2)(c) GDPR and Section 19(2)(c) of the Act):
    The data subject may withdraw consent to processing their personal data at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. Consent may be withdrawn in the same way it was given.
  2. Right to request proceedings under Section 100 of the Act or complain to a supervisory authority under Article 77 GDPR (Article 13(2)(d) GDPR and Section 19(2)(d) of the Act):
    Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement, if they consider that the processing of personal data relating to them infringes the GDPR.

    They may also file a request to initiate personal data protection proceedings with the Office for Personal Data Protection of the Slovak Republic. The proceedings determine whether individuals' rights, the GDPR, the Act or other data protection legislation have been infringed and, where shortcomings are established and it is justified and appropriate, impose corrective measures or a fine for infringing the GDPR, the Act or other data protection legislation.

    A request to initiate proceedings must contain:
    • the applicant's first name, surname, correspondence address and signature,
    • identification of the respondent, including their first name, surname and permanent address, or business name, registered office and identification number, if assigned,
    • the subject of the request and the rights allegedly infringed in the processing of personal data,
    • evidence supporting the allegations,
    • where the request is made by the data subject, a copy of a document or other evidence showing that they exercised the relevant right under the Act or other legislation, if they did so, or an explanation of special circumstances justifying why they did not exercise it.

    A template request to initiate proceedings will be published on the website of the Office for Personal Data Protection of the Slovak Republic.
  1. Automated individual decision-making, including profiling (Article 13(2)(f) GDPR and Section 19(2)(f) of the Act):
    The Controller does not use automated individual decision-making or profiling.

Bratislava, 24 August 2021

MATHISON legal s.r.o.
JUDr. Ing. Eva Schin Majdúchová, Attorney-at-Law and Managing Director

Do you need advice on your case?
Write to a partner at the firm and arrange a consultation.

We usually reply within 24 hours

By submitting the contact form, I confirm that I have read the Information on the processing of personal data.

MATHISON
MATHISON MATHISON MATHISON