Article 1 – Who we are (Controller)
- Your personal data is processed by:
- Business Name: SPECIALY s.r.o.
- Registered Office: Vo Výmoli 5/A 040 22 Košice-Dargovských hrdinov, Slovakia
- ID No. (IČO): 46789031
- Contact: info@autopozicovna-kosice.sk, tel: +421 915 600 702
- (hereinafter referred to as the "Controller").
Article 2 – Why and on what basis do we process your data?
- We process your data only to the extent necessary for the operation of the car rental service.
- Purpose: Conclusion and performance of the rental agreement
- Legal basis: Performance of a contract (Art. 6 (1) (b) of the GDPR).
- Explanation: Without this data, we would not be able to enter into an agreement with you and hand over the vehicle.
- Purpose: Accounting and tax records
- Legal basis: Legal obligation (Art. 6 (1) (c) of the GDPR).
- Explanation: We are required by law to archive invoices and agreements (e.g., the Accounting Act).
- Purpose: Handling of damage events and traffic fines
- Legal basis: Legitimate interest (Art. 6 (1) (f) of the GDPR) and legal obligation.
- Explanation: If an accident occurs or if we receive a fine for a traffic violation, we must provide your details to the insurance company or the police.
Article 3 – What data do we process?
- We only process standard personal data:
- First name, last name, title.
- Permanent residence address.
- Date of birth.
- ID card number and driving license number (we only record this information in the agreement; we do not make photocopies or scans of these documents).
- Contact details (telephone, email).
- Payment details (bank account number for deposit refunds).
Article 4 – Who has access to your data (Recipients)?
- We do not sell your data. Only the following partners may have access to it, if necessary:
- External accounting firm (for processing accounting).
- Insurance companies (in the event of an insurance claim).
- Police and public authorities (in the case of traffic violations/fines).
- IT service providers (e.g., website hosting or email services).
Article 5 – How long do we store the data?
- The retention period varies depending on the type of document:
- Accounting documents (invoices, agreements): 10 years (as required by the Accounting Act).
- Other data: For the duration of the statutes of limitation (generally 3 to 4 years after the termination of the contract) to enable us to defend ourselves in legal disputes. After this period, the data is shredded or deleted.
Article 6 – Your Rights
- Under the GDPR, you have the right to:
- Request access to your data (to find out what information we hold about you).
- Request the correction of incorrect data.
- Request the deletion of data (if it is no longer needed for accounting or legal protection purposes).
- Object to processing based on legitimate interest.
- File a complaint with the Office for Personal Data Protection of the Slovak Republic if you believe that we are handling your data in violation of the law.