Principles of personal data processing

Dear customer,
from May 25, 2018, protection of personal data in the Slovak Republic will be governed by new rules based on the European legislation, namely the Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, also known as GDPR). This regulation stipulates the rights and obligations pertaining to personal data processing for the following parties:

  • natural persons – (individuals or data subjects) – hereinafter referred to as “Customers”
  • controllers – in this case it is the Mincovňa Kremnica, š.p. – i.e. entities processing personal data for specific purposes, and
  • processors – the controllers’ contractual partners providing to the data controller certain services related to personal data processing under the authority of the controller(s).

Mincovňa Kremnica, š.p., as the data controller needs to comply with the following principles of personal data processing:

Contact information of the personal data controller:
Mincovňa Kremnica, š.p.
Address: Štefánikovo námestie, 96701 Kremnica, Slovak Republic
E-mail: sales@mint.sk
Phone: +421 678 78 00

The data controller pursuant to Art. 4(7) of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data is Mincovňa Kremnica, š.p., with its registered office at Štefánikovo námestie 25/24, 96701, Kremnica, Corporate ID: 00010448

  1. THE SCOPE OF PROCESSED PERSONAL DATA

    According to Art. 4(1) of the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter as “GDPR”), personal data shall be: “any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.”

    Mincovňa Kremnica, š.p. (hereinafter as the “Company”) processes personal data provided by the Customers upon commencement of the business relationship, i.e. when submitting an order, making a product reservation or registering a customer account. The Company is also processing personal data received from the Customer as part of a loyalty scheme and profiling, the objective of which is to provide personalized offers to customers, and to send business information, such as newsletters, product information, and customer satisfaction surveys. The processed personal data can be divided into:

    • Common personal Information: Name and surname, billing and delivery address, academic title, e-mail address, phone number, date of birth, bank account number, information about previous business interactions (reservations, orders, invoices). When a Customer uses electronic access at www.mint.sk, the following data is processed: IP address and cookies. For more information about our Cookie policy, please visit this link.
    • Sensitive personal information: none
  2. PURPOSE OF PERSONAL DATA PROCESSING

    Customers’ personal data are processed for the following purposes:

    1. Registration of customers in the IT systems of Mincovňa Kremnica and sending of information.
      Customer registration is important and necessary in order to establish a business relationship and to inform the Customer of the business process taking place (product reservations, orders, invoices, etc.). The scope of data provided by the Customer needs to match our future business interactions. The Customer provides his/her name and surname, billing address, e-mail address and other optional data, such as the phone number. For this processing purpose the Customer gives his/her consent which may be withdrawn at any time in the same manner in which it was granted, i.e. using the website www.mint.sk – after logging in to their customer account. In case of registration in the factory store of Mincovňa Kremnica, the customer may withdraw his or her consent in the store.
    2. Sending of business information and newsletter
      By sending business information and newsletters we provide information to the Customer about ongoing marketing activities and the product portfolio of Mincovňa Kremnica, š.p. The scope of provided data is limited to the e-mail address, name and surname. For this purpose, a legitimate interest of Mincovňa Kremnica, š.p. is applied, i.e. direct marketing (in particular when sending business information) provided that a business relationship already exists with the Customer. In cases where such business relationship has not yet been established, the Customer has to give his/her consent to process personal data for this purpose. In both cases the granted consent may be withdrawn using the link in the footer of each e-mail containing business information or using the contact information specified above.
    3. Personal data processing for purposes of legitimate interest
      Customers’ personal data are processed for purposes of legitimate interest in particular to protect the property of Mincovňa Kremnica, š.p. The following Customer's data is collected for this purpose: name and surname, current residence and ID card - to verify the Customer's identity.
    4. Processing for purposes of contract performance
      For purposes of contract performance Mincovňa Kremnica processes Customer's personal data in connection to valid contracts concluded pursuant to Art. 6(1)(b) of the EU Regulation 2016/679.
    5. Lawful basis of personal data processing
      Mincovňa Kremnica needs to comply with the valid legislation of the Slovak Republic and the European Union and processes Customers' personal data for these purposes in the following cases:
      • The Customer's personal data related to all tax documents need to be retained for the period stipulated by the law.
      •  Act No. 222/2004 Coll. - on Value Added Tax
      •  Act No. 431/2002 Coll. - on Accounting
      • Act No. 563/2009 Coll. - on Tax Administration
  3. SOURCES OF PERSONAL DATA

    Mincovňa Kremnica, š.p., processes personal data which you have provided, or data obtained in the processing of your order.

  4. WITHDRAWAL OF CONSENT TO PROCESS PERSONAL DATA

    The Customer may withdraw his or her voluntarily provided consent to process personal data at any time in full or in part. The Customer may withdraw his or her consent in several ways:

    • using his or her customer account at www.mint.sk
    • using an e-mail request sent to sales@mint.sk
    • using a written request sent to Mincovňa Kremnica, š.p., Štefánikovo námestie 25/24, 96701 Kremnica,
    • using the unsubscribe link which can be found in the footer of each newsletter.

    Following the withdrawal of consent to process personal data Mincovňa Kremnica, š.p. may only process personal data in cases where another reason for processing exists and only within the scope adequate to this purpose.

  5. PERIOD OF PERSONAL DATA PROCESSING

    The period during which personal data will be processed is different for different purposes as specified below:

    • Registration of customer in an IT system by virtue of his or her consent with the registration:
      • The Customer's consent is granted for a period of 5 years. After the expiry of this period the client's data may not be processed anymore.
      • Should the Customer withdraw his or her consent during this period of 5 years, his or her personal data may not be continued to be processed.
    • Sending of business information and newsletter:
      • The Customer's consent is granted for a period of 5 years. After the expiry of this period the client's data may not be processed anymore.
      • Should the Customer withdraw his or her consent during this period of 5 years, his or her personal data may not be continued to be processed.
    • Personal data processing on the basis of legitimate interest:
      • The Customer's data will only be processed as long as the controller's legitimate interest applies.
    • Personal data processing for purposes of contract performance:
      • The Customer's data will only be processed for the period necessary for a due performance of contractual obligations.
    • Legal grounds of personal data processing:
      • The Customer's personal data will be processed for as long as the legal grounds to process them last.
  6. CUSTOMER'S RIGHTS AND PERSONAL DATA PROCESSING

    The Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of personal data introduces new rights for the data subjects with regard to personal data processing. Mincovňa Kremnica, š.p. undertakes to accommodate the Customers’ interests in connection to such rights. All requests of data subjects shall be processed at the latest within 30 days from the date of the Customer's request made in accordance with the EU Regulation 2016/279.

    1. Customer's right to access to personal data

      The Customer has the right to know whether Mincovňa Kremnica is processing his or her personal data. If so, the Customer may request access to such data using an active request. If the Company does process Customer's personal data, it will issue a written confirmation and the Customer may obtain the following information:

      • the purpose of processing 
      • the category of personal data 
      • the period during which his or her personal data will be processed 
      • all available information about the source of data, unless the data were obtained directly from the Customer 
      • the fact whether the data is used in automated decision-making and profiling
    2. Customer's right to have his or her personal data rectified

      The Customer has the right to demand that all of his or her personal data we process is correct, complete and up-to-date. If the data is incorrect or outdated, the Customer may request that we rectify or amend such data:

      • using an e-mail request sent to sales@mint.sk
      • using a written request sent to Mincovňa Kremnica, š.p., Štefánikovo námestie 25/24, 96701 Kremnica
    3. Customer's right to have his or her personal data erased

      The Customer shall have the right to obtain from the controller the erasure of personal data concerning him or her without an undue delay and the controller shall have the obligation to erase the personal data without an undue delay where one of the following grounds applies:

      • the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
      • the data subject withdraws the consent on which the processing is based according to point (a) of Article 6(1), or point (a) of Article 9(2), and where there is no other legal ground for the processing;
      • the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
      • the personal data have been unlawfully processed;
      • the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
      • the personal data have been collected in relation to the offer of information society services referred to in Article 8(1) of the Regulation.
    4. The right to restriction of processing of client's personal data

      The Customer has the right to demand that Mincovňa Kremnica restricts processing of his or her personal data in the following cases:

      • the accuracy of the personal data is contested by the Customer, for a period enabling the controller to verify the accuracy of the personal data;
      • the processing is unlawful, and the Customer opposes the erasure of the personal data and requests the restriction of their use instead;
      • the controller no longer needs the personal data for the purposes of the processing, but they are required by the Customer for the establishment, exercise or defence of legal claims;
      • the Customer has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.

      Where processing has been restricted due to the above reasons, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

      A Customer who has obtained restriction of processing pursuant to paragraph 1 shall be informed by the controller - Mincovňa Kremnica, š.p. – before the restriction of processing is lifted.

    5. The right to data portability

      The Customer shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

      • the processing is based on consent pursuant to point (a) of Article 6(1) or point (a) of Article 9(2) or on a contract pursuant to point (b) of Article 6(1) of the Regulation; and
      • the processing is carried out by automated means.

      The right to data portability shall not adversely affect the rights and freedoms of others.

    6. The right to object

      The Customer has the right to object to processing of his or her personal data on grounds relating to his or her particular situation, pursuant to:

      • point e) of Article 6(1) - processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
      • or point f) - processing is necessary for the purposes of the legitimate interests pursued by the controller - Mincovňa Kremnica or a third party, including profiling based on those provisions.

      The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

      Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

  7. AUTOMATED INDIVIDUAL DECISION-MAKING

    Mincovňa Kremnica uses a form of automated individual decision-making – profiling, which is based on the Customer's behaviour patterns and purchase history, the objective of which is to create a personalized product offer (e.g. commemorative letters, sets of circulation coins).

    The Customer shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

    The above clause shall not apply, if such decision:

    • is necessary for entering into, or performance of, a contract between the data subject and a data controller;
    • is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard the data subject's rights and freedoms and legitimate interests; or
    • is based on the data subject's explicit consent.
  8. PROTECTION OF PERSONAL DATA BY THE CONTROLLER

    Mincovňa Kremnica hereby represents it adopted all appropriate technical, process and organizational measures to ensure protection of personal data, and that only authorized personnel have access to personal data.

  9. PERSONAL DATA PROCESSING

    Mincovňa Kremnica, š.p., is processing personal data in electronic and documentary form. We use means of automated individual decision-making or profiling on the basis of Customer's preferences and shopping behaviour in order to create tailored business offers.

    The Customer has the right to lodge a complaint with the Office for Personal Data Protection if he or she assumes that his or her right to protection of personal data is being violated.

  10. FINAL PROVISIONS

    By checking the consent box in the Customer account internet form, by submitting an order or a reservation or by signing a contract with Mincovňa Kremnica, š.p. either at the website of Mincovňa Kremnica or one provided by a business representative of the Company, you agree with these terms and conditions. By performing any of the above you confirm that you have familiarised yourself with the terms of personal data processing and accept them in their entirety.

    The controller reserves the right to amend these Principles. The current wording of the Principles of personal data protection becomes valid on May 24, 2018, and will be at all times available at this website.