Data Controller
The controller of this website and the controller of personal data is Roman Budzák.
Contact: info@romanbudzak.art
Personal Data I Process
Through the contact form, I process the first and last name, email address and the content of the message provided by the visitor in the form.
If necessary to handle a visitor’s subsequent request, I may also process additional information provided to me for this purpose, in particular contact and delivery details and information related to payment.
When using the website, technical data related to its operation and security may also be processed to the extent necessary, such as the IP address and data recorded in server logs.
Purpose of Processing Personal Data
I process personal data for the purpose of receiving and responding to messages and enquiries submitted through the contact form, subsequent communication with the sender and, where applicable, handling any further request from the sender.
Technical data may be processed for the purpose of ensuring the proper and secure operation of the website.
Legal Basis for Processing
The legal basis for processing personal data when receiving and responding to messages submitted through the contact form and for subsequent communication is my legitimate interest pursuant to Article 6(1)(f) of the GDPR in receiving and responding to messages that visitors to the website send to me voluntarily and in communicating with them.
Where further processing of personal data is necessary in order to take steps at the visitor’s request prior to entering into a contract or for the performance of a contract, the legal basis is Article 6(1)(b) of the GDPR.
The processing of technical data necessary for the operation and security of the website is based on my legitimate interest pursuant to Article 6(1)(f) of the GDPR in ensuring the functionality and security of the website.
I do not use personal data obtained through the contact form to send marketing communications.
Retention of Personal Data
I retain personal data obtained through the contact form and related communications for no longer than 12 months from the last communication, unless further retention is necessary to comply with a legal obligation, perform a contractual relationship, or protect my rights and legitimate interests.
Technical data is retained only for as long as necessary to ensure the operation and security of the website.
Where applicable law requires certain data or documents to be retained for a longer period, I retain them for the period prescribed by the relevant legislation.
Recipients of Personal Data
I do not provide personal data to third parties for their own marketing purposes.
To the extent necessary, personal data may be processed by providers of technical services that I use to operate the website and for electronic communications, in particular the web hosting provider Websupport and the email service provider Google.
In connection with the use of Google services, personal data may, in certain circumstances, be transferred outside the European Economic Area, in particular to the United States. For such transfers, Google uses the relevant mechanisms provided for under the GDPR, in particular adequacy decisions, including the EU–U.S. Data Privacy Framework, and, where necessary, Standard Contractual Clauses approved by the European Commission. More information about the mechanisms used by Google for international transfers of personal data is available in Google’s privacy policies.
Provision of Personal Data
Providing personal data through the contact form is voluntary. However, without providing the information necessary to contact you and respond to your message, I may not be able to reply to your message or handle your request.
Rights of the Data Subject
Subject to the conditions laid down in the GDPR, you have, in particular, the right:
- to access your personal data,
- to rectify inaccurate or incomplete personal data,
- to have your personal data erased,
- to restrict the processing of your personal data,
- to data portability, where the conditions laid down in the GDPR are met,
- to object to the processing of personal data based on legitimate interests.
You may exercise your rights by contacting me at info@romanbudzak.art.
You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
Security of Personal Data
I have implemented appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or unauthorised disclosure. Personal data is accessible only to persons and service providers who require access to it for the purposes stated above.
Automated Decision-Making
No automated individual decision-making or profiling takes place in connection with the processing of personal data.