Personal Data Protection

Statement on the Processing of Personal Data

Qubit Security s. r. o., with its registered office at J. Kozáčeka 2, 960 01 Zvolen, Company ID: 47 717 505 (hereinafter the “Company”), processes your personal data for the purpose of securing and holding the Qubit Conference® and Qubit Academy events, only on lawful grounds and in accordance with the Regulation [1] and the Personal Data Protection Act [2].

When your personal data is processed by the Company, you are a data subject, i.e. the person whose personal data is being processed.

Your personal data will be stored securely, in accordance with the security policy of the controller and the processor, and only for the period necessary to fulfil the purpose of processing. Access to your personal data will be granted exclusively to persons authorised by the controller (the Company) to process personal data, who process it on the controller’s instructions, in accordance with the controller’s security policy.

Your personal data is backed up in accordance with the Company’s retention rules. Your personal data will be completely deleted from the backup storage as soon as this is possible in accordance with the backup rules. Personal data stored on backup storage serves to prevent security incidents, in particular a breach of data availability resulting from a security incident. The Company is obliged to ensure data backup in accordance with the security requirements of the Regulation and the Personal Data Protection Act.

As the controller, the Company has a legal obligation to provide your personal data during an inspection, supervisory activity or at the request of authorised state bodies or institutions, where this follows from special regulations [3].

In accordance with the Regulation and the Personal Data Protection Act, the Company as the controller processes your personal data to the extent and under the conditions laid down in special regulations, on the lawful grounds set out in Article 6 of the Regulation.

As a rule, we process the ordinary category of personal data about you. We process your personal data upon registration for an event on the basis of a contract (a pre-contractual relationship) in which you, as the data subject, are one of the contracting parties. Failure to provide your personal data upon registration may result in the impossibility of entering into the contractual relationship and non-attendance at the event. We will process your personal data for 2 years after the contract expires.

It is in the Company’s legitimate interest to maintain a database of clients, including information about data subjects who attended events in the past. The database of clients and event participants helps us respond to your requests more effectively and prepare activities for you in a targeted manner, taking your preferences into account. We process your personal data for this purpose for the period of the existence and preparation of events.

It is in the Company’s legitimate interest to send participants a newsletter or other promotional material in order to promote the Company’s activities. Where a data subject has given consent to receive the newsletter or other promotional materials (this need not always be a participant), they may withdraw consent at any time. Withdrawal of consent does not affect the processing of personal data up to its withdrawal. We will process personal data for the period of the existence and preparation of events, or until consent is withdrawn, or until an objection is raised.

We may process your personal data, including photographs, by publishing it on our websites, on the basis of the Company’s legitimate interest in presenting and informing about its activities, or on the basis of a contract where it concerns a recording of a lecture, workshop or presentation. When publishing photographs and recordings, the Company takes care not to interfere disproportionately with your rights and freedoms.

You may object to the inclusion of your personal data in the client database or to the publication of photographs and recordings directly with the Company, in person, by telephone or by e-mail.

Your personal data is retained for 10 years after the contract expires, due to the controller’s legal obligations to keep accounting records and meet tax obligations.

Where your contact details are provided within your company, we may share them with professional organisations (our event partners, sponsors or exhibitors) as a list of companies to promote similar products and services related to your area of interest. If you do not agree to your company’s contact information being shared with third-party organisations, please send us an e-mail at [email protected].

The event is sponsored by the companies listed as sponsors on the event website. We may disclose to event sponsors the names, job titles, company and e-mail address of our participants. This is in our legitimate business interests and the legitimate business interests of our sponsors: it allows us to attract the most suitable sponsors for the events and to facilitate business-to-business communication between our sponsors and our participants during and after our events. Our sponsors may contact you regarding their products and services.

Personal data for the purposes of fulfilling accounting and tax obligations is processed mainly on the basis of Act No. 431/2002 Coll. on Accounting as amended, Act No. 222/2004 Coll. on Value Added Tax as amended, and Act No. 40/1964 Coll. the Civil Code as amended. Processing your personal data for this purpose is a legal obligation of the Company. For this purpose we process your personal data through the processor EKONOM-CENTER, spol. s r.o. The Company declares that, when selecting the processor, it ensured its professional qualities and the compliance of the personal data processing with the Regulation and the Personal Data Protection Act. The retention of personal data we process about you in connection with the Company’s activities is governed by Act No. 395/2002 Coll. on Archives and Registries.

On our Qubit Conference® and Qubit Academy websites we use cookies in order to improve the quality of the services provided. You can find information about the processing of cookies in the Cookies & Web section.

Your Rights under the Regulation and the Personal Data Protection Act

Right of Access

You have the right to be provided with a copy of the personal data we hold about you, as well as information on how we use your personal data. In most cases your personal data will be provided in written, paper form unless you request another method of provision. If you requested this information by electronic means, it will be provided to you electronically where technically possible.

Right to Rectification

We take reasonable steps to ensure the accuracy, completeness and currency of the information we hold about you. If you believe that the data we hold is inaccurate, incomplete or out of date, please do not hesitate to ask us to amend, update or complete this information.

Right to Erasure

You have the right to ask us to erase your personal data, for example where the personal data we obtained about you is no longer necessary to fulfil the original purpose of processing. However, your right must be assessed in light of all relevant circumstances. For instance, we may have certain legal and regulatory obligations, which means we may not be able to comply with your request.

Right to Withdraw Consent

Where you give us consent to process personal data, you may withdraw it at any time in person, in writing to the address stated in the header of this document, or at [email protected]. In the case of special processing conditions, the conditions for withdrawing consent may be set separately, but always so that its withdrawal is less burdensome for you as the data subject.

Right to Restriction of Processing

Under certain circumstances you are entitled to ask us to stop using your personal data. This applies, for example, where you believe the personal data we hold about you may be inaccurate, or where you believe we no longer need to use your personal data.

Right to Data Portability

Under certain circumstances you have the right to ask us to transfer the personal data you provided to us to another third party of your choice. The right to portability, however, applies only to personal data we obtained from you on the basis of consent or on the basis of a contract to which you are one of the contracting parties.

Right to Object

You have the right to object to processing that is based on our legitimate interests. If you raise an objection to such processing of personal data, we will review and assess your objection. Where your rights outweigh the Company’s legitimate interest, we will no longer process your personal data for that purpose.

Right to Lodge a Complaint

If you wish to lodge a complaint about the way your personal data is processed, including the exercise of the above rights, you may contact the Company directly. We will duly examine all your suggestions and complaints.

If you are not satisfied with our response, or you believe we process your personal data unfairly or unlawfully, you may lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, dataprotection.gov.sk, Galvaniho Business Centrum II, Galvaniho 7/B, Bratislava; tel.: +421 /2/ 3231 3214; e-mail: [email protected].

Should you have any questions regarding the processing of your personal data, you can contact us.

Contact

Mária Krahulecová
Tel.: +421 949 000 338
E-mail: [email protected]

Notes

• [1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).
• [2] Act No. 18/2018 Coll. on Personal Data Protection.
• [3] For example, Act No. 171/1993 Coll. on the Police Force; Act No. 18/2018 Coll. on Personal Data Protection.