GDPR

If you are our customer, newsletter subscriber or website visitor, you entrust us with your personal data. We are responsible for their protection and security. Please familiarize yourself with the personal data protection, principles, and rights you have in connection with the GDPR (General Data Protection Regulation).

Who is the administrator?

We are Re-forma, s. r. o., with registered office at Námestie Slobody 2013/3, 960 01 Zvolen, Slovak Republic, IČO: 56 569 343, which operates the website www.reformastudio.sk. We process your personal data as an administrator, i.e., we determine how the personal data will be processed and for what purpose, for how long and we select other processors, if necessary, who will assist us with the processing.

Contact details

If you would like to contact us during the processing, you can contact us by e-mail: info@reformastudio.sk

We declare

We declare that as the administrator of your personal data, we comply with all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and the GDPR, and therefore that:

  • we will process your personal data only based on a valid legal reason, in particular legitimate interest, performance of a contract, legal obligations or consent granted,
  • we comply with the information obligation pursuant to Article 13 of the GDPR before the processing of personal data begins,
  • we will enable you and support you in exercising and exercising your rights under the Personal Data Protection Act and the GDPR.

Scope of personal data and purposes of processing

We process personal data that you entrust to us for the following reasons (to fulfil these purposes):

  • Provision of services, performance of the contract. Your personal data in the following scope: e-mail, we absolutely need to fulfil the contract (e.g., sending price lists, sending product catalogues, etc. delivery of goods).
  • Accounting. If you are a customer, we need your personal data (invoicing data) to comply with the legal obligation to issue and record tax documents.
  • Marketing – sending newsletters/ journals. We use your personal data (e-mail and name), what you click on in the email and when you open it most often for the purpose of direct marketing – sending commercial communications. If you are our customer, we do so out of legitimate interest, because we reasonably assume that you are interested in our news, until you unsubscribe.

If you are not our customer, we send you newsletters/journals only based on your consent, until you unsubscribe. In both cases, you can revoke this consent by using the unsubscribe link in each email sent.

We retain your personal data for the duration of the limitation periods, unless the law provides for a longer period for their retention, or we have stated otherwise in specific cases.

Cookies

When you browse our websites, we record your IP address, how long you stay on the site and which page you come from. We view the use of cookies to measure website traffic and customize the display of websites as our legitimate interest as the administrator, because we believe that this allows us to offer you even better services.

Cookies for advertising targeting will only be processed with your consent.

Our websites can also be browsed in a mode that does not allow the collection of personal data. You can disable the use of cookies on your computer.

Security and protection of personal data

We protect personal data to the greatest extent possible using modern technologies that correspond to the level of technical development. We protect them as if they were our own. We have adopted and maintain all possible (currently known) technical and organizational measures that prevent the misuse, damage, or destruction of your personal data.

Transfer of personal data to third parties

Our employees and collaborators have access to your personal data. To ensure specific processing operations that we cannot provide ourselves, we use the services and applications of processors who can protect data even better than us and specialize in the given processing. These are the following providers:

  • Accounting processing.
  • Google, Meta (Facebook and Instagram) are third parties that have access to your personal data, through online advertising
  • Payment gateway (Stripe) and acuity scheduling also have access to clients’ personal data, at the moment when payment is made, and an hour is booked)

The personal data provided may be shared with third parties only if it is necessary to perform the services, we provide to you. We conclude formal contracts with third parties to ensure the protection of your personal data. In addition, we will not provide your personal data to anyone unless required by law and/or the GDPR.

It is possible that in the future we will decide to use other applications or processors to facilitate and improve the quality of processing. However, we promise you that in such a case, when choosing, we will place at least the same demands on the processor for security and quality of processing as on ourselves.

Transfer of data outside the European Union

We process data exclusively in the European Union or in countries that ensure a level of protection based on a decision of the European Commission.

Your rights in relation to the protection of personal data

You have several rights in relation to the protection of personal data. If you would like to exercise any of these rights, please contact us by e-mail: info@reformastudio.sk

You have the right to information, which is already fulfilled by this information page with the principles of personal data processing.

Thanks to the right of access, you can call us at any time and we will provide you with evidence within 14 days of what personal data we process and why.

If something changes for you or any of your personal data is outdated or incomplete, you have the right to supplement and change your personal data.

You can exercise the right to restrict processing if you believe that we are processing your inaccurate data, you think that we are processing it unlawfully, but you do not want to delete all the data or if you have objected to the processing.

You can limit the scope of personal data or the purposes of processing. (For example, by unsubscribing from the newsletter, you limit the purpose of processing for sending commercial communications.)

Right to portability

If you would like to take your personal data and transfer it to someone else, we will proceed in the same way as when exercising the right of access – with the only difference that we will provide you with the information in a machine-readable format. Here we need at least 30 days.

Right to erasure (to be forgotten)

Another right of yours is the right to erasure (to be forgotten). We do not want to forget you, but if you wish, you have the right to do so. In this case, we will delete all your personal data from our system and from the system of all sub-processors and backups. We need 30 days to ensure the right to erasure.

In some cases, we are bound by a legal obligation, and for example, we must register issued tax documents for a period specified by law. In this case, we will delete all such personal data that are not bound by another law. We will inform you by e-mail when the deletion is complete.

Complaint to the Personal Data Protection Office

If you feel that we are not handling your data in accordance with the law, you have the right to contact the Personal Data Protection Office with your complaint at any time. We would be very happy if you first inform us about this suspicion so that we can do something about it and correct any possible errors.

Unsubscribing from newsletters and commercial communications

We send you emails with inspirations, articles or products and services if you are our customer based on our legitimate interest.

If you are not a customer yet, we send you emails only based on your consent. In both cases, you can unsubscribe from our emails by clicking the unsubscribe link in each email sent.

Confidentiality

We would like to assure you that our employees and collaborators who will process your personal data are obliged to maintain confidentiality regarding personal data and security measures, the disclosure of which would jeopardize the security of your personal data. This confidentiality continues even after the termination of the contractual relationship with us. Without your consent, your personal data will not be released to any other third party.

Thank you for the time you spent reading the principles of personal data processing.