Principles of Personal Data Processing at M2M Solutions s.r.o.
We understand the importance of protecting personal data and we approach it responsibly. Therefore, we would like to inform you about the conditions under which we process your personal data when you visit our website and use our services. The primary legal basis for this processing is Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts (hereinafter referred to as the “Personal Data Protection Act”) and REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (hereinafter referred to as “GDPR”). We kindly ask you to read the Principles of Personal Data Processing carefully, which are available on our website and can be accessed at any time.
When processing your personal data, we adhere to the principles of lawfulness, purpose limitation, data minimization, storage limitation, accuracy, integrity, confidentiality, and accountability.
Any changes in legal regulations or modifications to our internal processes may result in adjustments to these principles; therefore, our company reserves the right to amend and supplement these Principles.
Personal Data Controller:
Business Name: M2M Solutions
Legal Form: Limited Liability Company (Slovak: s.r.o.)
Registered Office: Vysokoškolákov 1757/1, 010 01 Žilina
Place of Business: Vysokoškolákov 1757/1, 010 01 Žilina
Business ID: 45 911 525
VAT Registration Number: SK 20 23 160 568
Registered in: the Commercial Register maintained at the District Court of Žilina, Section Sro, File No. 53967/L
Phone: +421 948 101 816
E-mail: info@m2ms.sk
Website: www.m2ms.sk
If you have any questions regarding your personal data, please do not hesitate to contact us at gdpr@m2ms.sk. You can also use this email address to request changes to your personal data or to obtain a copy of the personal data we process about you.
Purpose of Personal Data Processing
We record and use the personal data of visitors to our website only to the extent necessary for the operation of a functional website, its content, and its services. This means that we collect only the personal data that your browser automatically transmits and that is temporarily stored in a log file. This includes the following data: the IP address of the requesting computer, the date and time of access, the name and URL of the downloaded file, the website from which access is made, the browser used, and, if applicable, the operating system of your computer, as well as the name of your internet service provider. The purpose of processing this data is the general administration of the website, to ensure smooth connection to the website, and to ensure convenient use of the website.
To provide our services at a high level of quality, our company needs to collect certain personal data of data subjects and share it with other recipients in order to fulfil legal obligations and ensure the highest standard of services.
Visitors to our website are entitled, based on their own decision, to contact our company via online contact forms for the purpose of mutual communication in the following cases:
Applying for employment via the Career online form
Requesting a meeting and demo presentation via the Book a Demo online form
Submitting inquiries via the Contact Form
Subscribing to our Newsletter
Legal Basis for Personal Data Processing of Data Subjects
When processing personal data, the company acts in accordance with the applicable and current Personal Data Protection Act and the GDPR.
The legal basis for processing your personal data is your explicit consent, which you may withdraw at any time. Providing your personal data for this purpose is neither a statutory nor a contractual requirement; however, without processing it, we are unable to properly handle your request or other inquiry.
Categories of Collected Personal Data
Career Online Form:
Name, surname, email address, phone number, CV
Book a Demo Online Form:
Name, surname, business name, email address, message content. Optional data: company address, phone number
Contact Online Form:
Name, surname, email address, subject and message content. Optional data: phone number
Newsletter Subscription Online Form:
Email address
Recipients
Our company may disclose your personal data to the following recipients:
Processors — entities that provide our company with supporting services to achieve our business objectives.
Supervisory, regulatory, and other public authorities — in the course of performing their duties under specific legislation (e.g., the Slovak Trade Inspection, the Office for Personal Data Protection, etc.).
Courts and law enforcement authorities — based on their request or within the legitimate interests of the controller for the purpose of establishing, exercising, or defending legal claims.
Other recipients — to whom the controller is obliged to provide personal data under specific legislation or legitimate interest, such as auditors, legal advisors, or persons who are in an employment or similar relationship with us.
Data Subject’s Consent
The Company obtains the data subject’s consent freely, without any pressure, coercion, or conditioning by threats of refusal of a contractual relationship, provided services, or obligations arising for the controller under legally binding acts of the European Union, international treaties binding on the Slovak Republic, or national law.
Consent is granted separately for each specific purpose of personal data processing.
As a data subject, you may withdraw your consent at any time.
The Company respects your privacy and treats all personal data provided as confidential.
Processors
In the course of its business activities, the Company cooperates with several processors whose goal is to provide high-quality services. These entities process the personal data of data subjects on behalf of the Company in the performance of their contractual obligations. These supporting services include the following areas:
Achieving the Company’s own business objectives — subsidiary WerksRevolution GmbH.
The Company hereby declares that, when selecting individual processors, it has duly considered their professional, technical, organizational, and personnel qualifications, as well as their ability to guarantee the security of the processed personal data through appropriate security measures in accordance with the Personal Data Protection Act.
Furthermore, when choosing suitable processor, the Company has acted to ensure that the rights and legally protected interests of data subjects are not jeopardized.
As the controller, the Company has concluded written agreements with processors pursuant to Section 34 of the Personal Data Protection Act. These agreements regulate the protection of personal data processed by the processors, which have been authorized to process the personal data of data subjects within the scope, under the conditions, and for the purpose set out in the contract and in accordance with the Personal Data Protection Act.
Conditions and Methods of Personal Data Processing
The Company processes the personal data of data subjects in its information systems using both automated and non-automated means of processing.
The Company does not disclose processed personal data, except in cases required by specific legal regulations or by a decision of a court or other state authority.
The Company will not process your personal data for any other purpose, nor to a greater extent than specified in this notice and in the records of individual information systems maintained by the Controller, without your explicit consent or another valid legal basis.
Retention Period of Personal Data
Personal data is stored for the period necessary to process and respond to inquiries received through the completed online forms. Information about job applicants is retained for a period of two years in order to contact them if a suitable job position becomes available. After this period, the data will be deleted unless the applicant requests otherwise.
The company does not transfer personal data to third countries or international institutions.
Rights of the Data Subject related to Personal Data Processing
A data subject has the right, upon a written request addressed to the Company, to obtain:
accurate information, in an intelligible form, about the source from which the Company obtained their personal data for processing,
access to their personal data,
a list, in an intelligible form, of their personal data being processed,
correction or erasure of their incorrect, incomplete or outdated personal data,
deletion of their personal data once the purpose of processing has been fulfilled; if the processed data includes official documents containing personal data, they may request their return,
erasure of their personal data if the processing is unlawful,
restriction of the processing of their personal data,
the blocking and erasure of their personal data if they object at any time to its processing by stating legitimate reasons or providing evidence of unauthorised interference with their rights and legally protected interests which are or could be harmed by such processing; unless there are legal grounds preventing this and the objection is found to be justified, the Company is obliged to block and erase the relevant personal data without undue delay as soon as the circumstances allow,
the prevention of the processing of their personal data which they believe is or will be used for direct marketing purposes without their consent, and to request its erasure,
the right to transfer their personal data to another controller,
information as to whether providing personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, whether the data subject is obliged to provide the personal data, and the possible consequences of failing to do so,
the right to lodge a complaint pursuant to Section 100. If a data subject suspects that their personal data is being processed unlawfully, they may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, located at Hraničná 12, 820 07 Bratislava 27, Slovak Republic, or contact the authority via its website http://www.dataprotection.gov.sk.
By this notice, we have informed you, as a data subject, about the protection of your personal data and have advised you of your rights related to personal data protection, within the scope of this written notice. If you have any questions, please contact us at gdpr@m2ms.sk.