GDPR at a Glance
Legal Basis
GDPR & Act No. 18/2018 Coll.
Retention Period
max. 5 years
Transfer to Third Countries
No, EEA only
Your Rights
Access, rectification, erasure, portability
Security
SSL/TLS encryption
Cookies
Only with your consent
The company INVETIX s.r.o. (hereinafter referred to as the “controller”) values your privacy and is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR) and Act No. 18/2018 Coll. on the protection of personal data.
This privacy policy explains what data we collect, why we process it, how we protect it, and what your rights are.
Controller
The controller of personal data is:
- ✓Company name: INVETIX s.r.o.
- ✓Registered office: Skalná 655/19, 059 21 Svit, Slovakia
- ✓Company ID (IČO): 51 666 901
- ✓Tax ID (DIČ): 2120744428
- ✓Phone: +421 903 629 183
- ✓Email: info@pozicovnapoprad.sk
- ✓Website: www.pozicovnapoprad.sk
The controller has not appointed a Data Protection Officer (DPO) pursuant to Art. 37 GDPR, as the processing of personal data does not require the appointment of a DPO. All questions regarding the protection of personal data may be directed to the email address listed above.
Purpose of Personal Data Processing
We process your personal data for the following purposes:
2.1. Processing reservations and contract performance
Processing your vehicle reservation, concluding and performing the rental agreement, handling payments, resolving complaints, and communication related to the rental.
2.2. Communication
Responding to your enquiries submitted via the contact form, email or phone, and sending you information about the status of your reservation.
2.3. Compliance with legal obligations
Maintaining accounting and tax records, handling insurance claims, fulfilling reporting obligations to government authorities, and archiving documents in accordance with applicable legislation.
2.4. Marketing (with consent only)
Sending marketing offers, information about new services and discounts. We send marketing communications only with your prior consent, which you may withdraw at any time.
Legal Basis for Processing
We process your personal data on the following legal bases pursuant to Art. 6 GDPR:
- ✓Performance of a contract (Art. 6(1)(b) GDPR) — processing of data necessary for concluding and performing the vehicle rental agreement, handling reservations and related services.
- ✓Legal obligation (Art. 6(1)(c) GDPR) — fulfilling obligations arising from tax, accounting, and archiving regulations.
- ✓Legitimate interest (Art. 6(1)(f) GDPR) — protecting the controller’s property, debt recovery, improving services and operating the website.
- ✓Consent (Art. 6(1)(a) GDPR) — sending marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing prior to its withdrawal.
Scope of Processed Data
Depending on the purpose of processing, we may collect the following personal data:
4.1. Identification data
- ✓first and last name
- ✓date of birth
- ✓permanent residence address
- ✓ID card or passport number
4.2. Contact data
- ✓email address
- ✓phone number
4.3. Driving licence data
- ✓driving licence number
- ✓date of issue and validity
- ✓driving licence category
4.4. Reservation and rental data
- ✓date and time of vehicle pick-up and return
- ✓type and registration number of the rented vehicle
- ✓vehicle condition at pick-up and return
- ✓kilometres driven
4.5. Payment data
- ✓payment information (payment method, amount)
- ✓deposit details
4.6. Electronic signature of the contract
If you sign the rental agreement electronically on a touch device when collecting the vehicle, we additionally process the image of your signature, the technical record of how it was made (stroke dynamics, time, IP address and device type, the channel and time of the one-time-code verification) and the checksum of the signed document. We process this data solely as evidence that the contract was concluded under Art. 6(1)(b) and (f) GDPR, never to identify individuals or for any other purpose, and we keep it for as long as the contract itself.
Data Recipients
Your personal data may be disclosed to the following recipients for the purpose of contract performance and legal obligations:
- ✓Insurance companies — in the event of insurance claims and for comprehensive and statutory vehicle insurance purposes.
- ✓Government authorities and law enforcement agencies — if required by law or upon a legitimate request (e.g. Slovak Police, tax authorities).
- ✓Accounting and tax advisors — to the extent necessary for bookkeeping and fulfilment of tax obligations.
- ✓IT service providers — ensuring the operation of the website, hosting and reservation system (they process data exclusively according to our instructions and based on a data processing agreement).
Your personal data is not transferred to third countries outside the European Economic Area (EEA).
Data Retention Period
We retain personal data only for the period necessary to fulfil the purpose for which it was collected:
- ✓Contractual and accounting data: 5 years from the end of the contractual relationship (in accordance with accounting and tax regulations, in particular Act No. 431/2002 Coll. on Accounting).
- ✓Marketing data: until withdrawal of your consent.
- ✓Contact form data: 1 year from the last communication, if no contract was concluded.
- ✓Cookie data: according to the validity period of the respective cookies (see section 7).
After the retention period expires, your personal data is securely deleted or anonymised.
Data Subject Rights
As a data subject, you have the following rights under the GDPR and Act No. 18/2018 Coll.:
- ✓Right of access (Art. 15 GDPR) — you have the right to obtain confirmation as to whether your personal data is being processed and, if so, to access such data.
- ✓Right to rectification (Art. 16 GDPR) — you have the right to have inaccurate personal data corrected and incomplete data completed.
- ✓Right to erasure (Art. 17 GDPR) — you have the right to request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
- ✓Right to restriction of processing (Art. 18 GDPR) — you have the right to request the restriction of processing of your data in certain cases (e.g. if you contest the accuracy of the data).
- ✓Right to data portability (Art. 20 GDPR) — you have the right to receive your personal data in a structured, commonly used and machine-readable format and to transfer it to another controller.
- ✓Right to object (Art. 21 GDPR) — you have the right to object to the processing of your personal data based on the legitimate interest of the controller.
- ✓Right to withdraw consent — if processing is based on consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing prior to its withdrawal.
- ✓Right to lodge a complaint — you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, tel.: +421 2 3231 3214, web: dataprotection.gov.sk.
You may exercise your rights by sending a request to the email address info@pozicovnapoprad.sk or in writing to the registered office of the controller. We will respond to your request within 30 days of its receipt.
Data Security
The controller has adopted appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, destruction or loss, in particular:
- ✓encrypted communication (SSL/TLS) on the website
- ✓restricted access to personal data for authorised persons only
- ✓regular data backups
- ✓server and database security with passwords and access controls
- ✓regular updates of software components and security patches
Changes to the Privacy Policy
The controller reserves the right to update or amend this privacy policy at any time. The updated version will be published on this page with the date of the last update.
In the event of significant changes, we will inform you via our website or by email (if we have your email address).
We recommend that you check this page regularly to stay informed about the current rules for the protection of your personal data.
Controller Contact Details
INVETIX s.r.o.
Skalná 655/19, 059 21 Svit
IČO: 51 666 901 | DIČ: 2120744428
IBAN: SK92 0900 0000 0052 3115 6064
Tel.: +421 903 629 183
Email: info@pozicovnapoprad.sk