Information obligation pursuant to Article 13 Regulation of the European Parliament and the Council No. 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, repealing Directive No. 95/46/EC (General Data Protection Regulation) (GDPR)

The information system operator, which concerns the concerned persons - buyers and contains personal data of the persons concerned, is Pavol Jozef Šafárik University in Košice, Šrobárova 2, 041 80 Košice, CRN: 0397768, e-mail:rektor@upjs.sk

Data Protection Officer:

Mgr. Gabriela Ciberejová, phone No.: +421(0)55/2341586, e-mail: zodpovedna-osoba@upjs.sk

Purpose of processing personal data: registration of users, maintenance of the database of registered users, processing of orders, informing users on the status of orders, and keeping of accounting and other documents related to the arranging the order.

Legal basis for the processing of personal data: Article 6 par. (1) b) GDPR (processing is necessary for the performance of the contract)

The operator obtains personal data from buyers to the extent necessary to meet the obligations arising from the purchase contract concluded between the operator and the buyer, the subject matter of which is the delivery of the ordered goods at the agreed purchase price. The buyer shall provide such personal information to the operator on a voluntary basis in order to fulfil his/her obligations under the purchase contract and to further communicate with him/her.

Recipients of personal data: The operator shall provide personal data on buyers acquired via the Internet store to the recipient only to the extent necessary to fulfil their obligations under the purchase contract. Accordingly, the operator shall provide personal data on buyers, such as the name, surname, and address for the delivery to a third party that ensures the delivery of the order to the buyer.

Retention period: UPJŠ shall be obliged to keep accounting and other documents related to ordering the items containing personal data under the Registry Rules and Registry Plan for 10 years from granting the order. The period shall begin on 1 January of the year following the year in which the order was placed. After this time, personal data will be immediately discarded.

Purpose of processing personal data: Sending advertising and promotional e-mails

Legal basis for the processing of personal data: Article 6 (1) f) GDPR - legitimate interest of the operator (re-addressing of the customer with the offer of similar goods).

There is no automated decision making at UPJŠ, including the profiling referred to in Article 22 (1) to (4) GDPR.

The person concerned shall have the right, upon request, in written or electronic form unibook@upjs.sk from the Operator:

(a) to require access to his/her personal data;

(b) to require the correction, erasure, or limitation of the processing of his/her personal data;

(c) to object to the processing of personal data;

(d) to the transferability of their personal data;

(e) to withdraw his/her consent to the processing of personal data whenever personal data are processed on this legal basis;

(f) the right to lodge a complaint with the supervisory authority; i.e. Office for Personal Data Protection of the Slovak Republic

The rights of the person concerned are specified in Articles 15 to 21 of the GDPR.