Information regarding the processing and protection of clients’ personal data

Fulfilment of the information obligation before processing personal data within the meaning of Article 13 of the GDPR.

Legislation

• Act no. 18/2018 on the protection of personal data and the amendment of certain laws
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals concerning the processing of personal data and on the free movement of such data

 

Identification of the personal data administrator

The administrator of the portal www.atlantiscapital.fund is the company Atlantis Capital Group Ltd., with Business ID: 51 965 836 and registered office at Bardosova 30, 831 01 Bratislava (from now on referred to as “we” or the “administrator”), which processes your personal data as an administrator, i.e. determines how personal data will be processed, for what purpose and for how long.

HOW WE PROCESS YOUR PERSONAL DATA

Completion of the contact form

We collect your personal data by filling out the contact form in the range of name and surname, email, and telephone so that we can answer your queries. We store the personal data provided by you based on your consent.

Create an account in our “client zone” web interface

By creating an account in our web interface, we collect your personal data in the range of name and surname, email, and telephone, so that we can reply to your queries more effectively. We store the personal data provided by you based on your consent. You can simply cancel your created account by sending an email to: office@atlantiscapital.fund

Contact details in case of any queries regarding the processing of personal data

If you have any queries regarding the protection of your personal data, do not hesitate to contact us at the email address: office@atlantiscapital.fund, and we will respond to your queries within 7 days.

Withdrawal of consent to the processing of personal data

You have the right to revoke your consent to the processing of your personal data at any time in writing by a message sent to the email address: office@atlantiscapital.fund. We will delete your personal data in such a case within 15 days of receiving your revocation of consent to the processing of personal data.

Protection of your personal data

The administrator declares that the processed personal data will not be transferred to a third country or an international organization that does not guarantee an adequate level of personal data protection following the GDPR and the Personal Data Protection Act.

Your personal data is processed following § 13 par. 1 letter f) of the Personal Data Protection Act for 5 years.

Rights of the concerned persons

According to Article 15 to 22 of the GDPR and § 19 to 29 of the Personal Data Protection Act, the following rights of the data subjects apply:

The right to access personal data

Each concerned person has the right to have the controller confirm whether he or she processes personal data concerning him or her. If the controller processes the personal data of the data subject, the data subject has the right to access them and other information on:

• the purpose of processing personal data;
• the category of processed personal data;
• the recipient in a third country or an international organization, if possible; if personal data are transferred to a third country or international organizations;
• the retention period of personal data; if this is not possible, information on the criteria for its determination,
• the right to request the rectification, erasure or restriction of the processing of personal data, or the right to object to the processing of personal data;
• the right to file a motion to initiate proceedings according to Section 100 of the Personal Data Protection Act or to file a complaint under Art. 15 letter f) GDPR;
• source of personal data, if personal data have not been obtained from the data subject;
• the existence of automated individual decision-making, including the profiling of the transfer of personal data to third countries or international organizations, and of adequate safeguards under Art. 46 GDPR or § 48 of the Personal Data Protection Act.

The controller is obliged to provide the data subject with copies of his personal data which he processes. The controller may charge a reasonable fee for the repeated provision of copies of personal data, corresponding to the administrative costs. The controller is obliged to provide personal data in the required manner.

The right to correct personal data

The data subject has the right to have the controller correct incorrect personal data concerning him without undue delay. Depending on the purpose of the processing of personal data, the data subject has the right to complete his or her incomplete personal data.

The right to delete personal data

The data subject has the right to have the controller delete the personal data concerning him without undue delay, under the conditions laid down in Art. 17 GDPR or § 23 of the Personal Data Protection Act.

If the data subject requests the controller to delete his personal data, the controller is obliged to delete them in the following cases:

• personal data are no longer needed for the purpose for which they were obtained or otherwise processed;
• the data subject withdraws the consent based on which the controller processes his personal data and there is no other legal basis for the processing of personal data;
• the data subject will object to the processing of personal data according to Art. 21 par. 1 GDPR or § 27 par. 1 of the Personal Data Protection Act and do not outweigh any legitimate reasons for the processing of personal data or will object to the processing of personal data for direct marketing, including profiling to the extent that it is related to direct marketing;
• personal data are processed illegally;
• the reason for the deletion is compliance with an obligation laid down by law;
• personal data were obtained in connection with the offer of information society services according to Art. 8 par. 1 GDPR or § 15 par. 1 of the Personal Data Protection Act.

If the controller has disclosed the personal data of the data subject and is obliged to delete them based on the above conditions, he is also obliged to inform other controllers processing his personal data given the available technology and costs, so that these controllers delete references to personal data and their copies or depreciations.

The administrator is not obliged to delete the personal data of the data subject if it is necessary:

• to enforce the right to freedom of expression or the right to information;
• to fulfill an obligation under a law or an international treaty or to fulfill a task carried out in the public interest or the exercise of official authority conferred on the operator;
• for reasons of public interest in the field of public health;
• for archiving purposes, for scientific purposes, for historical research purposes or for statistical purposes, where erasure is likely to make it impossible or seriously difficult to achieve the objectives of such processing;
• to assert a legal claim.

The right to restrict the processing of personal data

The data subject has the right to have the controller restrict the processing of his or her personal data if:

• disputes the accuracy of her personal data; the controller limits the processing of such personal data to the period of verification of their accuracy;
• the processing of personal data is illegal and instead of erasing, the data subject requests that restrictions on their use;
• the controller no longer needs personal data for processing personal data, but needs the data subject to assert a legal claim;
• the data subject objects to the processing of personal data; the controller shall restrict the processing of his personal data until it is verified that the legitimate reasons on the part of the controller outweigh the legitimate reasons of the data subject.

If the processing of personal data has been restricted, in addition to the retention, the controller may process personal data only with the consent of the data subject or to assert a legal claim, to protect the rights of another natural or legal person or for reasons of public interest.

The controller is obliged to inform the data subject before the restriction on the processing of personal data is abolished.

A declarative obligation concerning the correction, deletion, or restriction of the processing of personal data:

The controller is obliged to notify the recipient (anyone to whom personal data has been provided) of the correction of personal data, deletion of personal data, or restrictions on the processing of personal data unless this proves impossible or requires a disproportionate effort.

Right to portability of personal data

It is possible to have the right to obtain personal data concerning the data subject which the data subject has provided to the controller in a structured, commonly used, and machine-readable format.

At the same time, He or she has the right to transfer this personal data to another controller, if it is technically possible and if the processing of his personal data is performed by automated means (i.e. electronically), while the personal data are processed either:

• with the consent of the person concerned,
• or are necessary for the fulfillment of a contract to which the person concerned is a party or execution of the measure before the conclusion of the contract at the request of the person concerned.

This right must not adversely affect the rights of others.

The right of portability does not apply to the processing of personal data necessary for the performance of the task carried out in the public interest or the exercise of official authority conferred on the administrator.

The right to initiate proceedings for the protection of personal data

If a citizen would be directly affected by his or her rights established by the Personal Data Protection Act, he or she has the right to submit a proposal to initiate proceedings on personal data protection, respectively, according to Section 100 of the Personal Data Protection Act. GDPR complaint. The purpose of the proceedings is to determine whether the rights of natural persons have been violated in the processing of their personal data or the law has been violated and, if deficiencies are found, if justified and expedient, to impose remedial measures or a fine for violating the law.

The Office shall publish a model of the proposal on its website. The request to initiate proceedings must contain evidence in support of the allegations made in the proposal and a copy of the document or other evidence proving the exercise of the controller’s right (right of access to personal data, right to request correction of personal data, right to erase or restrict processing of personal data, right to object to processing personal data, the right to the transfer of personal data) if such a right has been exercised by the data subject, or an indication of reasons worthy of special consideration for not exercising the right in question.

The proposal in question must, following the provisions of § 100 par. 3 of the Personal Data Protection Act include:

1. name, surname, correspondence address and signature of the petitioner,
2. an indication of the person against whom the application is directed, stating the name, surname, permanent residence or name, registered office and identification number, if assigned,
3. the subject of the proposal with an indication of the rights which should have been violated during the processing of personal data,
4. evidence in support of the claims made in the proposal,
5. a copy of the document or other evidence proving the exercise of the right under the second part of the second title of this Act or a special regulation, if such a right has been exercised by the person concerned, or an indication of the reasons worthy of special consideration for not applying the law in question, if the application filed by the person concerned.

The Office shall then decide on the petitioner’s application within 90 days from the day of the commencement of the proceedings. In justified cases, the Office may extend this period accordingly, but not by more than 180 days. The Office shall inform the participants in the proceedings in writing about the extension of the time limit.

The right to object to the processing of personal data

The data subject has the right to object to the processing of his personal data becuase the controller performs profiling or processes his personal data on the following legal grounds:

• the processing of personal data is necessary for the performance of a task carried out in the public interest or the exercise of official authority conferred on the controller;
• the processing of personal data is necessary for the legitimate interests of the controller or of a third party.

The controller cannot process personal data further unless he has demonstrated the necessary legitimate interests for the processing of personal data which outweigh the rights or interests or the grounds for asserting a legal claim.

Cookies

Following the relevant legal regulations, we hereby inform you that the administrator’s servers use a small amount of data for their activities, which they send to your terminal device, which allows us to adapt our website to your needs and improve the use of administrator servers (so-called cookies). Cookies are used only by the administrator, as the operator of the server or the relevant website.

None of the cookies used on our website collects and contains information that has the nature of your personal data and therefore does not allow you to identify your specific person in any way.

Cookies are useful because they are mainly used to analyse website traffic and to ensure greater comfort in their use by, for example, allowing you to remember for the next visit to our website.

If you have any questions or comments, you can contact us at: office@atlantiscapital.fund 

Cookie settings

Web browsers (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) support cookie management. As part of the web browser settings, you can manually delete individual cookies, block or completely disable their use, or block or allow them only for individual websites. In this case, however, we cannot guarantee that all areas of our site will retain their intended function.

Instructions for blocking and deleting cookies from the most frequently used browsers:

Mozilla: https://support.mozilla.org/sk/kb/povolenie-zakazanie-cookies

Chrome: https://support.google.com/chrome/answer/95647?hl=sk

Explorer: https://support.microsoft.com/en-us/help/17442

Safari (Mac): https://support.apple.com/kb/ph21411?locale=sk_SK

Opera: http://help.opera.com/Windows/10.50/sk/cookies.html

This document shall enter into force on 1.5.2020