Principles for the Processing of Personal Data

We care about protecting your privacy. For that reason, we ask that you read this Privacy Policy (hereinafter referred to as the “Privacy Policy”) carefully. This Privacy Policy describes in detail how we collect, use, store, and, wherever applicable, disclose your personal data in the various operations conducted by DNA ERA. If you have any questions, queries, or requests regarding the protection of privacy, please contact us at info@dnaera.sk For the purposes of this Privacy Policy, the following terms shall have the following meanings: “GDPR” means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.
“Personal Data” as defined by the GDPR means any personal data relating to a specific living natural person who is identifiable or could be identified by that data, and which is processed by DNA ERA for any of the purposes defined in this Privacy Policy. “Controller” means the specific person who determines the purpose for which the Personal Data is processed, meaning DNA ERA in accordance with this Privacy Policy. “Processor” means a person other than the Controller who processes Personal Data on behalf of the Controller in a particular case. “Portal” means the website operated by the Controller and hosted on the internet domain stage.dnaera.sk. The Portal includes any and all parts of the website, its subpages, their content, source and machine codes as they are available and utilised on the aforementioned domain at any time.
DNA ERA processes your Personal Data in accordance with the GDPR and Act No. 18/2018 Coll. on the Protection of Personal Data and Amending and Supplementing Certain Acts.

What Personal Data do we collect about you?

1. Personal Data that you provide to us

Personal Data you provide to us when you:

choose to subscribe to our newsletter,
choose to contact us by email, or
use the contact form.

You provide your Personal Data to us voluntarily and you are responsible for assessing the extent to which you provide such Personal Data. However, DNA ERA is unable to respond to your queries or requests without you providing some Personal Data.
You are responsible for the accuracy, completeness and truthfulness of the Personal Data you provide and DNA ERA will rely on the accuracy, completeness and truthfulness of such Personal Data. DNA ERA shall not be held liable for any damage that you or any third party may incur in connection with the provision of inaccurate, incomplete, or untrue Personal Data.

2. Personal Data that we obtain from your use of the Portal

DNA ERA may also collect data that allows you to be identified indirectly. In particular, this relates to the following data:

information and data from the devices you use to access the Portal, which may include general information about your device;
log data, which is data and information that our servers automatically store whenever you access the Portal (in particular, the IP address, the time of access, data about the hardware and software you use, the number of clicks, the pages you see or their order, and the time you spend on the pages, among others);
data about your use of the Portal;
information obtained through cookies and other user tracking tools, including cookies and tracking tools from our partners or social network operators;
information obtained by tracking user actions after clicking on an advertising banner or link, as well as information about activities on third party sites (such as search engines and social networks);
information we obtain through social plug-ins operated by third parties, including the Facebook like button and others.

The above data does not in itself allow the identification of a specific living natural person. The above data becomes Personal Data when we link it to a specific identified or identifiable living natural person.

How do we process your Personal Data?

DNA ERA, as the Controller, processes your Personal Data to the extent of and in accordance with this Privacy Policy and for the purposes defined later in this Privacy Policy.

1. Sending messages for direct marketing purposes (newsletter)

DNA ERA processes your Personal Data (your email address) for the purpose of sending direct marketing messages (newsletter subscription) to your email address in order to inform you about news and updates on DNA ERA products and projects, if you have requested to receive direct marketing messages (newsletter subscription) on the Portal.

We assume that when you enter your email address in the form for sending direct marketing messages on the Portal (newsletter subscription), you agree to receive direct marketing messages.

The legal basis for the processing of Personal Data in this case is our legitimate interest in using direct marketing to offer you information and products that may be relevant and interesting to you.

We will continue to process your Personal Data for this purpose until you unsubscribe from receiving direct marketing messages (newsletter subscription).

2. Providing, improving, and optimising the operation of the Portal

DNA ERA processes your Personal Data, including the data obtained from your use of the Portal as defined above, for the purposes of providing, improving, and optimising the operation of the Portal, to enhance the user experience, to provide technical support for the Portal, for analytical and statistical evaluation of the use of the Portal and profiling, to detect and prevent misuse of the Portal (including the prevention of fraud, security incidents, and other similar occurrences), to assess risks and to comply with legal obligations.
The legal basis for the processing of Personal Data in this case is our legitimate interest in ensuring the proper operation of the Portal and the optimisation of its functionality.

Your Personal Data will be processed for a period of 4 years.

You can prevent such processing by disabling the use and storage of cookies on your device by changing your browser settings. However, that may cause some features of the Portal to function incorrectly.

You can also delete the cookies that have been stored on your device. You can also choose to browse our Portal in private mode, which will limit the amount of data stored by cookies.

3. Answering questions, requests, and queries

DNA ERA processes your Personal Data in the scope of your first name, surname, email address and, wherever applicable, any other data that you choose to provide to us via the contact form or via email, for the purpose of contacting you, as well as for the purpose of processing your question, request, or query, or to carry out other actions related your question, request, or query.
The legal basis for processing Personal Data in this case is our legitimate interest in ensuring the appropriate service and provision of client support by DNA ERA.

Your Personal Data will be processed for as long as is necessary to respond to your question, request, or query or until other action is taken in relation to your question, request, or query, but for no longer than 1 year.

4. Processing requests in relation to the exercise of data subject rights under the GDPR

DNA ERA processes your Personal Data in the scope of your first name, surname, email address and, wherever applicable, any other data that you choose to provide to us via the contact form or via email, for the purposes of examining, assessing, taking action, processing, and informing you of the processing of your request relating to the exercise of your rights under Articles 16 to 22 of the GDPR.

The legal basis for processing Personal Data in this case is the performance of our legal obligations.

Your Personal Data in this case will be processed and stored for a period of 10 years from the date of receiving your request.

To whom do we disclose your Personal Data?

DNA ERA discloses your Personal Data in the following cases:

when DNA ERA is under a legal obligation to do so, in particular at the request of law enforcement authorities, courts, other public authorities, or other authorised persons;
when it is necessary for the performance of our obligations and to safeguard our legitimate interests, in particular to our lawyers, consultants, auditors, IT service providers, marketing, and advertising agencies, etc.

We enter into Personal Data Processing Agreements with persons who have the status of Processors in accordance with the GDPR. They always process Personal Data following the instructions by and on behalf of DNA ERA. All our Processors process Personal Data in accordance with this Privacy Policy.

What are your rights in relation to the protection of Personal Data?

As a data subject, you have the following rights in relation to the Personal Data we process.

1. Right of Access

You have the right to request confirmation from DNA ERA as to whether your Personal Data is being processed and to request access to that Personal Data (repeated access to Personal Data may be subject to a fee by DNA ERA), and information about

the purpose of the processing of the Personal Data;
the category of the Personal Data being processed
the identification of the recipient or the category of recipient to whom the Personal Data has been or is to be disclosed, in particular a recipient in a third country or an international organisation, if applicable;
the period of retention of the Personal Data; if this is not possible, information on the criteria for determining it;
the right to request the rectification, erasure, or restriction of the processing of Personal Data relating to the data subject from DNA ERA, or the right to object to the processing of Personal Data;
the right to propose to initiate proceedings for the protection of Personal Data;
the source of the Personal Data if the Personal Data was not obtained from you;
the existence of automated individual decision-making, including profiling, in particular information on the procedure used, as well as on the meaning and foreseeable consequences of such processing of Personal Data for the data subject.

2. Right to Rectification

You have the right to request that DNA ERA amend incorrect Personal Data concerning you without undue delay and, regarding the purpose of the processing of the Personal Data, you also have the right to have your incomplete Personal Data completed.

3. Right to Erasure

You have the right to request that DNA ERA erase Personal Data relating to you without undue delay if:

these are no longer necessary for the purpose for which they were collected or processed;
you have withdrawn your consent to their processing and there is no other legal basis for their processing;
you object to their processing;
your Personal Data has been obtained unlawfully,
the grounds for erasure is compliance with an obligation under the GDPR, a specific regulation, or an international treaty to which the Slovak Republic is bound; or
the Personal Data was obtained in connection with an offer of information society services by DNA ERA pursuant to Article 8(1) of the GDPR (offer of information society services to a child).

4. Right to Restriction of Processing

You have the right to request that DNA ERA restrict the processing of your Personal Data if:

you object to the accuracy of the Personal Data during the period in which DNA ERA
is able to verify the accuracy of the Personal Data;
the processing of the Personal Data is unlawful and you object to the erasure of the Personal Data, and instead request the restriction of its use;
DNA ERA no longer needs the Personal Data for the purpose of processing the Personal Data, but you need the Personal Data to assert or defend legal claims;
you have objected to the processing of your Personal Data while DNA ERA verifies that the legal grounds on its side outweigh your legal grounds.

5. Right to the Portability of Personal Data

You have the right to request that DNA ERA provide you with the Personal Data relating to you in a structured, commonly used, and machine-readable format, and the right to require that DNA ERA transfer that Personal Data to another Controller, but only if the legal basis for the processing is your consent or the fulfilment of an agreement and the processing is conducted by automated means.

6. Right to Object

You have the right to object, on grounds relating to your particular situation, to the processing of your Personal Data, including profiling, which is carried out on the legal basis of our legitimate interest. On the basis of your objection, we will assess whether, in light of your particular situation, the protection of your legitimate interest, and your rights and freedoms, outweighs our legitimate interests pursued by the processing of your Personal Data, or if the legitimate grounds are the establishment, exercise, or defence of our legal claims.

You have the right to object to the processing of Personal Data for direct marketing purposes.

You have the right to withdraw your consent to the processing of Personal Data at any time. Withdrawal of consent does not affect the lawfulness of the processing of Personal Data carried out on the basis of consent prior to its withdrawal. Withdrawal of consent does not apply to the processing of Personal Data carried out by DNA ERA on a legal basis other than your consent.

7. Right to Initiate Proceedings for the Protection of Personal Data

You have the right to initiate personal data protection proceedings via the Office for Personal Data Protection of the Slovak Republic or another supervisory authority in your place of residence.

Security

1. All Personal Data that we collect and process is protected by appropriate technological means and security measures to prevent unauthorised access to or misuse of such Personal Data. We are continuously improving and implementing new administrative, technological, and organisational measures to ensure adequate Personal Data security.

2. Notwithstanding all our measures, it is important to keep in mind that data transmission over a public network on the internet, or any storage of electronic data, cannot be 100% secure.

3. Portions of the Portal may contain links to third party websites and services that are not owned or operated by DNA ERA. DNA ERA has no control over these websites and services. These websites may use their own tools to collect information and data about you, including your Personal Data.