Privacy Policy
Dávid Kurňavka, e-mail: davidkurnavka@gmail.com (hereinafter referred to as the “Controller”), hereby informs all natural persons whose personal data may be processed by the Controller (hereinafter referred to as the “Data Subject”) of the facts in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”), and Act No. 110/2019 Coll. on the processing of personal data.
Scope and Purpose of Personal Data Processing
(i) The Controller processes personal data of all natural persons who have expressed an interest in making contact via the “Contact” form available on the Controller’s website https://www.davidkurnavka.sk, in the following scope: name and surname, e-mail address, telephone number, and message text (if provided). The purpose of such processing is to handle the inquiry submitted by the Data Subject through the form and to enable subsequent communication between the Controller and the Data Subject.
(ii) The Controller may process personal data of Data Subjects who have expressed an interest in receiving updates about new artwork, collections, or exhibitions, in the following scope: name and surname, e-mail address. The purpose of such processing is to send information about the artist’s news and offers.
(iii) The Controller also processes personal data of Data Subjects who have visited the website https://www.davidkurnavka.sk, in the scope of cookies. The purpose of processing is to ensure the functionality of the website (so-called “necessary cookies”) and basic traffic analysis. The website does not use advertising or personalization cookies.
Legal Basis and Duration of Personal Data Processing
Personal data referred to in points (i) and (iii) are processed on the legal basis of the legitimate interest of the Controller, which consists of communication with the Data Subject and ensuring the proper functioning of the website.
Personal data referred to in point (ii) are processed on the basis of the consent of the Data Subject, granted by providing their data for the purpose of receiving updates and newsletters.
In the case of processing based on legitimate interest, personal data will be stored for the period necessary to handle the inquiry and subsequent communication, but no longer than 6 months from the last contact with the Data Subject. In the case of processing based on consent, the data will be stored until the consent is withdrawn.
The Data Subject has the right to withdraw their consent at any time by sending a request to davidkurnavka@gmail.com. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Providing personal data is not a legal or contractual requirement; however, without such data it is not possible to properly handle the submitted request or communicate with the Data Subject.
Categories of Recipients of Personal Data
Personal data may be disclosed only to persons who technically ensure the operation of the website for the Controller, in particular the web hosting provider. Personal data are not provided to any other third parties.
Rights of the Data Subject in Connection with Personal Data Processing
Data Subjects whose personal data are processed are entitled to all rights provided under the GDPR, including the right to:
request information from the Controller regarding the processing of their personal data,
obtain access to their personal data, request their correction, completion, or deletion,
request restriction of processing,
object to the processing of personal data,
and lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection, website: www.uoou.cz.
The Data Subject may contact the Controller electronically regarding the exercise of their rights at davidkurnavka@gmail.com.
Information on Automated Decision-Making Including Profiling
No automated decision-making, including profiling as referred to in Article 22(1) and (4) of the GDPR, takes place during the processing of personal data.
