Privacy Policy
How we protect your personal data
The protection of your privacy in the processing of personal data is an important matter for us. For this reason, we have prepared this document for you, which sets out the Basic Principles for the Processing of Personal Data. We recommend that you read this document, and we trust that it will reassure you that your personal data will be processed to the necessary extent, securely and professionally.
When protecting personal data, our baseline document is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as „GDPR“) and relevant provisions of Act No 18/2018 Coll. on the protection of personal data and on amendments to certain acts (hereinafter referred to as the „Act“).
Big -agency Slovakia s.r.o. respects and protects the personal data of data subjects with whom it comes into contact. In this document, we provide you with all the information necessary for you to be acquainted with what personal data we collect, for what purposes we process it, with whom we share it, what rights you have, and how you can contact us in case of further questions regarding the processing of personal data.
Should any change regarding the processing of personal data occur, we will inform you of it by updating this document published on our website. For this reason, we recommend that you visit our website regularly and familiarise yourself with the current wording of the Privacy Policy.
About us
Big – agency Slovakia, s.r.o.
Registered office: Vietnamská 54, 821 04 Bratislava
Company Registration Number: 47 177 331
Company registered in the Commercial Register of the District Court BA, Section Sro, Insertion number: 97960/B
Email: info@bigagency.sk
What is personal data and why we process it
Under the GDPR, personal data means any information relating to an identified or identifiable living natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
We process personal data only to the necessary extent and to achieve a specific processing purpose. This purpose is always defined prior to the acquisition of the personal data itself, and without the processing of personal data, this legitimate purpose could not be achieved.
Legal basis for processing personal data
We process your personal data on the following legal bases:
Article 6(1)(a) GDPR – Consent – Your consent is required for the fulfilment of a specific purpose. Consent is given by a clear affirmative act establishing a freely given, specific, informed and unambiguous indication of your agreement to the processing of personal data relating to you.
Article 6(1)(b) of the GDPR – Performance of a contract – the processing of personal data is necessary for the performance of a contract to which you, as the data subject, are a party, or in order to take steps at your request prior to entering into a contract. It is possible that we also process your data for the purpose of fulfilling our obligations arising from a contract with our contractual partner, who processes your personal data and who is the controller of your personal data within the meaning of the GDPR.
Article 6(1)(c) of the GDPR – processing is necessary for compliance with a legal obligation to which we are subject. We may also process and archive your personal data because we are required to do so directly by law.
Article 6(1)(f) of the GDPR – the processing of personal data is necessary for the purposes of our legitimate interests. Before carrying out any processing of personal data on the basis of this legal ground, we always assess whether such processing would constitute a disproportionate interference with your rights. Our legitimate interest is, for example, the interest in acquiring new professional members for our team, whereby we approach data subjects via their details published on websites that provide business and employment-oriented services (e.g. LinkedIn).
Categories of personal data we process
When providing our services and creating our creative solutions, we may process the following categories of personal data:
Identification data such as your academic title, first name, surname, date of birth, birth number, identity card number
Contact details such as permanent address, email address and telephone number
Employment details – for example, staff number
If you are a sole trader, we may also process your personal data such as your registration number (IČO), tax number (DIČ), VAT registration number (IČ-DPH), business name and place of business
data on persons acting on behalf of legal entities such as personal data on directors, board members, authorised or empowered persons
Video recordings
Photograph
Data relating to our website usage, such as cookies
IP address allocation data
Data originating from publicly accessible sources, such as data stated on social networks (e.g. your Facebook and Instagram profiles) or data published by you on websites, or mobile applications, that provide services focused on business and employment (e.g. LinkedIn).
Who we disclose personal data to
In some cases, we also need to transfer the personal data you have provided to other entities. We assure you that we only transfer personal data to these entities in necessary cases and to the necessary extent. We would like to inform you that the categories of recipients may change depending on the specific purpose of the processing of personal data.
Recipients / categories of recipients of personal data
Authorised persons within our company – persons who have access to personal data – are bound by confidentiality, and this obligation continues even after the termination of their cooperation with us
Our contractual partners – based on our instructions, our personal data is processed by our contractual partners to the extent necessary for the specified purpose. We assure you that in selecting our contractual partners, we have proceeded in accordance with the GDPR and the Act, and we have entrusted the processing of personal data to a contractual partner who provides sufficient security, technical, organisational and personnel measures to ensure the protection of the rights of the data subject
Our contractual partners – based on the instructions of the controller with whom we, as a processor, have concluded a personal data processing agreement, may process your personal data, to the extent necessary for the specified purpose.
In order to fulfil our obligations arising from legal regulations and the requirements of state or other authorities, we also make your personal data available to law enforcement authorities, courts, bailiffs, etc.
Purposes of personal data processing
We always obtain your personal data for a specific, pre-determined purpose. As the range of services we provide is wide, we obtain personal data for various purposes. These purposes include, for example:
Provision of our services – data that we obtain from you in order to be able to deliver our services to you, i.e. we enter into various types of contracts with you, for example, copyright contracts, extra/background actor contracts, contracts for work, etc. – the provision of personal data is a contractual requirement, or a requirement necessary for the conclusion of a contract; if you were to refuse to provide us with your personal data, it will not be possible to ensure the performance of these contracts
Invoicing – personal data is processed for the purpose of issuing invoices and for receiving and recording payments or receivables – the provision of personal data in this case is a legal requirement
Communication with you
Direct marketing
Sending of event invitations – We process your data for the purpose of sending you event invitations
Confirmation of event attendance – We collect your data in the event of verifying your attendance at the event
Arranging accommodation at the event – if you are interested in arranging accommodation at the event, we collect your personal data precisely for this purpose
Competitions – We process your data in the event of your participation in a competition
Adrenaline activities – We process your data if you take part in an adrenaline activity that we provide
Promotional activity / presentation – Your details are collected in the event of your participation in a promotional activity / presentation
Recruitment campaign
For other purposes arising from our contracts with our partners
Retention period for personal data
Generally speaking, personal data will be processed by our company only for the necessary period and always for the period stipulated by applicable legal regulations. The length of time for which personal data is retained further depends on the purpose for which we process the personal data.
Personal data provided to us for the purpose of fulfilling the contract with you as the data subject shall be retained for the entire duration of the contract and, after the termination of the contractual relationship, until the expiry of all limitation periods relating to the rights and obligations connected with the customer contract, otherwise in all cases for a period of 15 years from the termination of the contractual relationship. If the data subject asserts any claim against us, or in the event of the initiation of judicial, administrative or other proceedings concerning the given contract or the service provided on the basis thereof, we shall, for the purpose of protecting our legitimate interests, process the necessary personal data of the data subject until the complete and final settlement of all disputed claims, or until a final and binding decision concluding the relevant proceedings and the expiry of the limitation period for the enforcement of the relevant final and binding decision obtained in the given proceedings.
Where the processing of personal data is based on your consent, we process your personal data until that consent is withdrawn; for example, personal data obtained for marketing purposes or via cookies are processed for the entire duration of this consent for marketing purposes / consent to the use of cookies.
Transfers to third countries
We do not transfer your data to third countries. Our contractual partners with whom we cooperate and to whom we provide personal data (as stated above) also do not transfer personal data to third countries.
Safety
We care about the security of your data and handle it only in accordance with applicable legal regulations, including the GDPR and the Act. We place strong emphasis on the security, technical, organisational and personnel protection of the processed data.
Personal data in electronic form is stored in databases and systems that we protect against any damage, destruction, loss or other misuse. Access to them is restricted to persons who need to handle personal data with regard to the purpose of processing personal data. We regularly check and improve the security of personal data.
Biscuits
We use cookies on our website. Cookies are small text files that are stored in your browser's memory and contain data about your visit to the website. These files are anonymous and contain data such as your language, browser and other settings when viewing the page. Some cookies are sent by your browser to us for the purpose of analysing site traffic.
The cookies that your browser sends to us are used to analyse the flow of information, customise services, content and advertising, measure the effectiveness of promotion, and promote trust and security. These data are anonymous, aggregated and do not harm your device. We use Google Analytics tools for the analysis.
By clicking on the relevant “I agree“ box, which is displayed to the user on our websites, you grant consent to the use of cookies.
Cookie settings can be changed within your internet browser. By deleting or blocking cookies, you will still be able to visit our websites, but some features may not function properly.
Your rights regarding the protection of personal data
As a data subject, you have the following rights in relation to the protection of personal data:
Right of access to personal data
you have the right to request confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, you have the right to gain access to such personal data. A copy of the personal data undergoing processing will be provided to you. For any further copies requested by you, a reasonable fee based on administrative costs may be charged.
Right to repair
You have the right to have incorrect personal data concerning you rectified without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Right to erasure (the „right to be forgotten“)
you have the right for your personal data to be erased and to stop being processed:
if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
if you have withdrawn your consent or objected to the processing of personal data concerning you; or
if the processing of your personal data does not comply with the Data Protection Act for other reasons.
Right to restriction of processing
you have the right to request that we restrict processing if:
you contest the accuracy of the personal data for a period enabling us to verify the accuracy of the personal data;
processing is unlawful and you decide that instead of requesting the erasure of personal data you will request the restriction of their processing;
we no longer need your personal data for processing purposes, but you require them for the establishment, exercise or defence of legal claims.
If you have exercised the right to restriction of processing, we will inform you before the restriction of processing is lifted.
Right to data portability
where the processing of personal data is carried out by automated means, you have the option to obtain the personal data concerning you, and which you have provided to us, in a structured, commonly used, machine-readable and interoperable format. At the same time, you have the right to ask us to transmit your personal data to a controller of your choice.
In this connection, we inform you that in the given case we are not responsible for how you will process personal data, or how the company that receives the personal data will process it. Data portability does not automatically lead to the deletion of data from our systems, nor does it affect the original data retention period that applies to the transferred data.
Right to object
you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you.
Right to withdraw consent (if applicable)
you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.
Right to lodge a complaint with a supervisory authority
when you believe that we are processing your personal data in violation of applicable legal regulations, you have the right to lodge a complaint with the state authority supervising the protection of personal data. This is the Office for Personal Data Protection of the Slovak Republic, Odborárske námestie 3, 817 60 Bratislava 15, Slovak Republic.
You can exercise your above-mentioned rights by writing an email to info@bigagency.sk and stating „Personal data protection“ in the subject line.
Contact us
If you have any questions or comments regarding the processing of personal data, please send us an email at info@bigagency.sk