Introduction

The Carnifex spol. s r.o., provider of International Logistics Services.

As such we do not process personal data (as defined by GDPR) other than retaining the names of individuals and telephone numbers that may identify them.

However we still have some obligations under GDPR and PECR and this document clarifies these.

This notice has been written using guidance from the ICO (Information Commissioner’s Office) and applies to:

Email and Text correspondence

Telephone contact

Marketing

GDPR means General Data Protection Regulation (GDPR) (EU) 2016/679.

PECR means Privacy and Electronic Communications (EC Directive) Regulations 2003.

Please read this notice carefully and contact us if you have any questions or concerns.

We can be contacted at info@carnifex.sk

What information do we collect?

The only personal data we collect, as defined by GDPR, are individuals’ names and telephone numbers that may identify them.

We do not collect any sensitive personal data as defined by GDPR.

We collect this data from existing Carnifex databases; websites; directories; exhibitions and third party contacts.

How do we use personal data?

We use personal data for:

• • • Providing services
    • Delivering marketing and events communication
    • Legal obligations (e.g. as required by Finančné riaditeľstvo SR, Police or other Gov’t bodies)

What legal basis do we have for processing your personal data?

As defined by GDPR we process personal data based on:

Consent. An individual has given us clear consent. An individual can withdraw this consent and inform us via email or telephone.

Contract. The processing is necessary for a contract we have or because we have been asked to take specific steps before entering into a contract.

Legitimate interests.

It can be summarised as follows:

Purpose – We have a legitimate interest in marketing our services to existing and potential customers to maintain sales.

Necessity – We cannot achieve this without using the names, email addresses or telephone numbers of individuals.

Balancing – These legitimate interests are what would be reasonably expected and are not overridden by the individual’s interests, rights or freedoms.

When do we share personal data?

We treat personal data confidentially and only disclose or share it when necessary as outlined in the previous “legal basis” section. We do not: Sell personal data.

Share personal data with third parties unless necessary to provide our services or conduct our business operations.

Where do we store and process personal data?

Personal data is processed and stored in the Carnifex spol. s r.o., Slovak republic unless shared with a third-party for the purposes of providing our services or conducting our business operations.

If we transfer data outside the European Economic Area to a country that has not received an adequacy decision from the EU in respect of data privacy, we enforce our Trading Conditions which requires the receiver to adhere to EU standard data protection clauses.

How do we secure personal data?

Personal Data is retained and protected with the following provisions:

Personal data is stored on secure servers and accessed only by Carnifex staff using secure software

Backups are retained and rotated by named Carnifex staff.

How long do we keep your personal data for?

Carnifex spol. s r.o. retain personal data (i.e. names of individuals and telephone numbers) for a minimum of 10 years plus current, to meet the requirements, in respect of financial accounting, international trade conventions and customs documentation.

Your rights in relation to personal data

Under GDPR, we respect the right of data subjects to access and control their personal data. As such we allow individuals:

• • • access to personal data (we retain only names and telephone numbers)
    • opportunity for correction and deletion (unless we are required to retain by law)
    • to withdraw consent (if processing data on condition of consent)

Individuals can exercise these rights by contacting us as detailed below. If an individual is unhappy with our response, they may lodge a complaint.

PECR

Privacy and Electronic Communications (EC Directive) Regulations 2003).

Carnifex spol. s r.o. use direct marketing (only to businesses, not individuals), that is covered under PECR.

We do not make live calls to companies that have objected to us calling in the past, or who are registered with CTPS (Corporate Telephone Preference Service).

How to contact us.

Please contact: Carnifex spol. s r.o., Černyševského 15, 851 01  Bratislava, Slovakia

VAT ID: SK2023610402

Telephone: +421/944 440 404, +421/232 20 10 65

Email: info@carnifex.sk