GDPR – Privacy Policy

PRIVACY STATEMENT – Cookies and Web Policy, CANOR, spol. s r.o., Družstevná 39, Prešov 08006, CRN: 36466387, Business Register of the District Court Prešov, Section: Sro, Insert No. 12155/P, (hereinafter referred to as 'CANOR, spol. s r.o.')

PRIVACY STATEMENT - COOKIES AND WEB POLICY

COOKIES
If you visit a website that uses cookies, a small text “cookie” file will be created on your computer or mobile device (including tablet) when you browse it. If you visit the same website again, the cookie will help you connect faster. In addition, such a website will “recognize” you and offer you the information you prefer, ensure that advertising already displayed is not repeated, or allow you to enter your password without re-entering. In the case of filling in identification data, cookies will offer you the addition of data already filled in during previous visits to this web environment, and based on this information, you will be shown relevant content and offers for your assumed activities and services that you could use.
We use cookies to analyze traffic on our websites through services such as Google Analytics, Google AdSense, Facebook, Strossle or Gemius SA, Exponea, and others. It is an analytics tool that helps websites and app owners understand how their visitors use their websites. Cookies can be used for statistical data on the use of websites without personally identifying individual visitors.

LEGAL BASIS FOR PROCESSING
If we can identify the person of the visitor to our web environment during the recording, this will be the processing of personal data. We must have a legal basis for such processing. One legal basis can be your consent as a data subject.

WHICH COOKIES DO WE ASSESS

First-party cookies
These cookies enable the use of basic functions such as logging in as a registered user or pre-filling forms. If you decline these cookies, we cannot guarantee the full functionality of our websites.

Persistent cookies
They serve to identify your preferred activities that you consciously perform on our websites.

Session cookies
These cookies are used to analyze visitor behavior on the website and subsequently to improve its functionality and design. If you decline these cookies, we cannot guarantee the full functionality of our websites.

Advertising cookies
They serve to optimize the displayed content and advertising regarding the visitor’s habits and the effectiveness of the marketing communication of submitters. Thanks to them, for example, you will not be shown unnecessarily often advertising from an area you are not interested in.

Third-party cookies
They are created and used by service providers such as Google Analytics, Google AdSense, Facebook, Strossle, Gemius SA, Exponea, and others. These services are integrated into our websites because we consider them useful and completely safe. You can find the rules of use on the websites of these companies. Thanks to them, for example, you will not be shown unnecessarily often advertising from an area you are not interested in.

WHAT DATA ABOUT YOU CAN WE ASSESS

Information about your visit to our website (www sites);
Information about the IP address of the connection, information about the browser you use;
Information about your activity on our website.

AUTOMATED INDIVIDUAL DECISION-MAKING AND PROFILING
In our environment, the mentioned activities on our website are not linked to your person, and thus automated processing does not affect your rights and freedoms. Likewise, no profiling occurs when processing your data.

HOW TO CHECK THE COOKIES SETTING
You can check or erase cookies at your discretion. See aboutcookies.org for details. We only keep your personal data for a limited time and delete them when they are no longer needed for the processing purposes stated in this statement.

Cookies are useful if website owners do not abuse them for unauthorized data collection. If you do not trust the functionality of cookies, you can regularly erase them from your disk. In some cases, incorrect recording of information obtained through cookies may occur, and therefore, a problem with logging in, for example, to our web applications. Instructions for removing all cookies, including incorrectly entered ones, can be found below. Instructions for erasing cookies in individual internet browsers.

Internet Explorer™
https://support.microsoft.com/sk-sk/help/278835/how-to-delete-cookie-files-in-internet- explorer

Safari™
https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Opera™
https://www.opera.com/help/tutorials/security/privacy/

Mozilla Firefox™
https://support.mozilla.com/sk/kb/odstranenie-cookies

Google Chrome™
https://support.google.com/chrome/answer/95647?hl=sk&hlrm=en

LOCATION OF YOUR PERSONAL DATA
We do not transfer your data to third countries outside the European Economic Area (EEA) and the European Union (EU).

HOW LONG WE WILL KEEP BROWSING DATA
Browsing data stored according to cookies settings are not stored in our systems.

CONSENT WITHDRAWAL
If we process your data based on your consent, this consent can be withdrawn at any time.

CONTACT INFORMATION
If you want to file a complaint about how we process your personal data, including in relation to the aforementioned rights, or you have any further questions regarding the processing of your personal data, you can contact Mgr. Pavol Čurlík (Data Protection Officer) by e-mail to: and your suggestions and requests will be checked. You can also contact us in writing via our company’s standard contact points.

If you suspect a violation of the protection of your personal data or believe that we are processing your data in violation of the law, or if you are not satisfied with our response to your questions or suggestions, you can contact the supervisory authority, which is The Office for Personal Data Protection, and you have the right to initiate proceedings pursuant to § 100 of Act No. 18/2018 Coll. on Personal Data Protection. You can find more information about The Office for Personal Data Protection and its complaints procedure here: www.dataprotection.gov.sk.

We may update this statement without notice. Therefore, we ask you to regularly familiarize yourself with its current wording, which you can find either on our website or we will gladly provide it to you upon request. This version of the statement was issued on 18.7.2024.

PRIVACY STATEMENT CUSTOMERS

In CANOR, spol. s r.o., we respect the privacy of all data subjects with whom we are in contact, regardless of whether we process personal data ourselves or with the help of other entities. It is important to us that you know what personal data we process about you, why we do it and what your rights are. Therefore, we ask you to read this statement to provide you with more information about the processing of your personal data.

CATEGORIES OF PERSONAL DATA - CONTROLLER

Area	Activity	Types of personal data
Finance	Bookkeeping and tax agenda - keeping accounting and tax records, processing accounting documents, financial statements, and documents for the annual report	Personal data stated on accounting records/invoices/orders in the scope of title, name and surname, contact details (registered office, telephone number, e-mail address) of the statutory representative and contact person, bank details, signature; Personal data to the extent necessary to perform a financial audit - accounting documentation, basic company documentation; Personal data of the Foundation's management in the scope of name, surname, post; Personal data of donors in the scope of the name, surname, amount of donation; Personal data of natural persons and legal entities to whom the Foundation has provided funds for the public benefit purpose for which the Foundation was established, and information on how these funds have been used.
PR/Marketing	Publishing photographs, videos, audio recordings, interviews, and articles on the Operator's websites, social networks, and in the media space	Photo, video, and audio documentation from events organized by the Operator based on a legitimate interest, in the case of individual photos, videos, and articles, personal data in accordance with the given consent, e.g. name, surname, age, or data that the data subject provides in the published business card, article or video
Legal Agenda	Resolving the Controller's non-contentious agenda, participating in proceedings, and asserting and/or protecting the Controller's legal claims	Personal data of data subjects to the extent necessary for the conduct of the relevant proceedings, in a particular title, name, surname, affiliation to a legal entity, telephone and e-mail contact, registered office, correspondence address, subject of the dispute or the claim asserted, evidence and necessary documents
Registry and archiving	Archival care - record-keeping, archiving, decommissioning, disposal	Personal data to the extent specified in the documentation, which must be archived in accordance with the applicable legislation and the Controller's Registry Rules
Commercial relations	Management of supplier relationships - pre-contractual and contractual agenda - communication, concluding a contract, implementation of a contractual relationship	Name, surname, title of the business partner's statutory representative(s), telephone, or email contact; name, surname, title of the contact person designated by the business partner, his/her functional status, telephone, or email contact;
Commercial relations	Development, production, assembly, service, and delivery	invoicing data of business partners, tel. number, email, and other personal data necessary for entering a contractual relationship and its management and fulfillment of orders, ordered goods, and services

PURPOSES OF THE DATA PROCESSING - CONTROLLER
CANOR, spol. s r.o. will process your data for the following purposes:

Activity	Purpose	Legal basis
Bookkeeping and tax agenda - keeping accounting and tax records, processing of accounting documents, financial statements, and documents for the annual report	Processing of personal data in connection with accounting and tax administration	Processing is necessary for the performance of a contract to which the data subject is a party or to take pre-contractual measures at the request of the data subject. The processing is necessary for the fulfillment of a legal obligation of the controller.
Publishing photographs, videos, audio recordings, interviews and articles on the Operator's websites, social networks and in the media space	Strengthening brand awareness, increasing transparency, and building the reputation of the operator by disclosing information about the operator's activities	The data subject has consented to the processing of his or her personal data for one or more specific purposes. Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Resolving the Controller's non-contentious agenda, participating in proceedings and asserting and/or protecting the Controller's legal claims	Processing of personal data for the purpose of conducting a legal agenda, proving, exercising and/or defending the legal claims of the controller	Processing is necessary for the performance of a contract to which the data subject is a party or to take pre-contractual measures at the request of the data subject. The processing is necessary for the fulfilment of a legal obligation of the controller. Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Archival care - record-keeping, archiving, decommissioning, disposal	Processing of personal data for the purpose of fulfilling obligations in connection with archival care	Processing is necessary for compliance with a legal obligation of the controller.
Management of supplier relationships - pre-contractual and contractual agenda - communication, concluding a contract, implementation of a contractual relationship	Processing of personal data for the purpose of carrying out pre-contractual and contractual relationships with suppliers of goods and services necessary to ensure the activity	Processing is necessary for the performance of a contract to which the data subject is a party or to take pre-contractual measures at the request of the data subject. Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Development, production, assembly, service, and delivery	Concluding contractual relationships for the purpose of supplying goods and services consisting of development, production, assembly, and service, including claims	Processing is necessary for the performance of a contract to which the data subject is a party or to take pre-contractual measures at the request of the data subject.

If we process your personal data on the legal basis of fulfilling our legal obligation, the following legislative provisions may apply:

Activity	Title of the provision
Archival care - record-keeping, archiving, decommissioning, disposal	Act No. 395/2002 Coll. Act on Archives and Registries and on Amendments to Certain Acts
Resolving the Controller's non-contentious agenda, participating in proceedings and asserting and/or protecting the Controller's legal claims	Regulation (EU) 2016/679 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
	Act No. 161/2015 Coll. Civil Procedure Code
	Act No. 461/2003 Coll. Act on Social Insurance
	Act No. 462/2003 Coll. Act on Income Compensation in Case of Temporary Work Incapacity and on Amendments to Certain Acts
	Act No. 39/2015 Coll. Act on Insurance and Amendments to Certain Acts
	Act No. 650/2004 Coll. Act on Supplementary Pension Saving and on Amendments to Certain Acts
	Act No. 355/2007 Coll. Act on Protection, Support and Development of Public Health and on Amendments to Certain Acts
	Act No. 43/2004 Coll. Act on Retirement Pension Saving and Including Consequential Amendments
	Act No. 311/2001 Coll. Labour Code
	Act No. 160/2015 Coll. Civil Procedure Code
	Act No. 580/2004 Coll. Act on Health Insurance and amending Act No. 95/2002 Coll. on Insurance Industry and on Amendments to Certain Acts
	Act No. 595/2003 Coll. Income Tax Act
	Act No. 513/1991 Coll. Commercial Code
	Act No. 563/2009 Coll. Act on Tax Administration (Tax Procedure Code) and on Amendments to Certain Acts
	Act No. 297/2008 Coll. Act on the Prevention of Legalization of Proceeds of Criminal Activity and Terrorist Financing and on Amendments and Supplements to Certain Acts
	Act No. 301/2005 Coll. Code of Criminal Procedure
	Act No. 125/2006 Coll. Act on Labor Inspection and on amendment and supplement of Act No. 82/2005 Coll. on Illegal Work and Illegal Employment and on amendment and supplement of other acts
	Act No. 283/2002 Coll. Act on Travel Allowances
	Act No. 233/1995 Coll. Act of the National Council of the Slovak Republic on Bailiffs and Enforcement Activity (Enforcement Code) and on Amendments and Supplements to Other Acts
	Act No. 600/2003 Coll. Act on Child Allowance and amending Act No. 461/2003 Coll. on Social Insurance
	Act No. 431/2001 Coll. Accounting Law
	Act No. 162/2015 Coll. Administrative Procedure Code
	Act No. 54/2019 Coll. Act on Certain Measures Related to Reporting on Anti-Social Activity and on Amendments to Certain Acts
	Act No. 222/2004 Coll. Act on Value Added Tax
	Act No. 71/1967 Coll. Act on Administrative Proceedings (Administrative Code)
	Act No. 5/2004 Coll. Act on Employment Services and on Amendment to Certain Acts
	Act No. 18/2018 Coll. Act on Personal Data Protection and Amendments to Certain Acts
	Act No. 152/1994 Coll. Act of the National Council of the Slovak Republic on Social Fund, amending the Act of the National Council of the Slovak Republic No. 286/1992 Coll. on Income Taxes, as amended
	Act No. 124/2006 Coll. Act on Occupational Safety and Health Protection and on the Amendment of Certain Acts
	Act No. 483/2001 Coll. Act on Banks and on the Amendments of Certain Acts
	Act No. 423/2015 Coll. Act on Statutory Audit and amending and supplementing Act No. 431/2002 Coll. on Accounting, as amended
Bookkeeping and tax agenda - keeping accounting and tax records, processing of accounting documents, financial statements, and documents for the annual report	Act No. 301/2005 Coll. Code of Criminal Procedure
	Act No. 162/2015 Coll. Administrative Procedure Code
	Act No. 161/2015 Coll. Civil Procedure Code
	Act No. 595/2003 Coll. Income Tax Act
	Act No. 233/1995 Coll. Act of the National Council of the Slovak Republic on Bailiffs and Enforcement Activity (Enforcement Code) and on Amendments and Supplements to Other Acts
	Act No. 431/2001 Coll. Accounting Law
	Act No. 423/2015 Coll. Act on Statutory Audit and amending and supplementing Act No. 431/2002 Coll. on Accounting, as amended
	Act No. 513/1991 Coll. Commercial Code
	Act No. 563/2009 Coll. Act on Tax Administration (Tax Procedure Code) and on Amendments to Certain Acts
	Act No. 297/2008 Coll. Act on the Prevention of Legalization of Proceeds of Criminal Activity and Terrorist Financing and on Amendments and Supplements to Certain Acts
	Act No. 160/2015 Coll. Civil Procedure Code
	Act No. 18/2018 Coll. Act on Personal Data Protection and Amendments to Certain Acts
	Regulation (EU) 2016/679 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
	Act No. 222/2004 Coll. Value Added Tax Act
	Act No. 71/1967 Coll. Act on Administrative Proceedings (Administrative Code)
	Act No. 483/2001 Coll. Act on Banks and on the Amendments of Certain Acts

PARTIES THAT MAY HAVE ACCESS TO YOUR DATA
CANOR, spol. s r.o., as the controller, may share your data with third parties in the following cases:

Activity	Purpose	Recipients
Bookkeeping and tax agenda - keeping accounting and tax records, processing accounting documents, financial statements, and documents for the annual report	Processing of personal data in connection with accounting and tax administration	Financial Administration of the Slovak Republic Ing. Jana Iskrová
Publishing photographs, videos, audio recordings, interviews, and articles on the Operator's websites, social networks, and in the media space	Strengthening brand awareness, increasing transparency, and building the reputation of the operator by disclosing information about the operator's activities	Operator's websites and social networks
Resolving the Controller's non-contentious agenda, participating in proceedings, and asserting and/or protecting the Controller's legal claims	Processing of personal data for the purpose of conducting a legal agenda, proving, exercising and/or defending the legal claims of the controller	Mgr. Ivana Paprčková Murajdová, attorney-at-law
Archival care - record-keeping, archiving, decommissioning, disposal	Processing of personal data for the purpose of fulfilling obligations in connection with archival care
Management of supplier relationships - pre-contractual and contractual agenda - communication, concluding a contract, implementation of a contractual relationship	Processing of personal data for the purpose of carrying out pre-contractual and contractual relationships with suppliers of goods and services necessary to ensure the activity
Development, production, assembly, service, and delivery	Processing of personal data for the purpose of carrying out pre-contractual and contractual relationships with suppliers of goods and services necessary to ensure the activity	Ing. Vratislav Režo Kamil Pavúk - Service Michal Duch - DUEL System Transport companies

In such cases, these third parties may only process your personal data for the purposes stated and only in accordance with our instructions or applicable law. Our employees will also have access to your personal data. In such a case, access shall be granted only if it is necessary for those purposes and only if the worker is bound by a duty of confidentiality.

LOCATION OF YOUR PERSONAL DATA
Your personal data will be accessed by authorized employees of CANOR, spol. s r.o., in the Slovak Republic within the European Union and the European Economic Area. If the processing takes place outside the EU, these are the following cases:

Activity

Purpose

Landscape

Company

Publishing photographs, videos, audio recordings, interviews, and articles on the Operator's websites, social networks, and in the media space

Strengthening brand awareness, increasing transparency, and building the reputation of the operator by disclosing information about the operator's activities

United States, USA

Meta Platforms Ireland Limited (FB, IG) Google Ireland Limited (YT) LinkedIn Ireland Unlimited Company Twitter International Unlimited Company

STORAGE OF PERSONAL DATA- CONTROLLER
We only store your personal data for a limited time, and they will be deleted when they are no longer needed for the processing purposes set out in this statement.

Activity	Archiving period
Bookkeeping and tax agenda - keeping accounting and tax records, processing accounting documents, financial statements, and documents for the annual report	Current year and then for 10 years
Publishing photographs, videos, audio recordings, interviews, and articles on the Operator's websites, social networks, and in the media space	In the case of granted consent, for the period of its granting, but no more than until its withdrawal, or for the duration of the legitimate interest of the operator
Resolving the Controller's non-contentious agenda, participating in proceedings, and asserting and/or protecting the Controller's legal claims	For a period of 10 years from the conclusion of the given court proceedings or out-of-court proceedings, or until the dispute is concluded, the request/complaint is dealt with, and all obligations are settled
Archival care - record-keeping, archiving, decommissioning, disposal	In accordance with the applicable legislation and deadlines specified in the registry rules for the given agenda.
Management of supplier relationships - pre-contractual and contractual agenda - communication, concluding a contract, implementation of a contractual relationship	For a period of 10 years after the termination of the contract, accounting documents enter the processing activity "Accounting and tax agenda"
Development, production, assembly, service, and delivery	For the duration of the contract and subsequently for a period of 10 years (accounting agenda)

We may process your personal data for a longer period in the event of an ongoing legal dispute, or if you have given us your consent.

WHAT RIGHTS DO YOU HAVE
According to the Data Protection Act, you have certain rights in relation to their processing. Here is a list of these rights, as well as what the given right means for you.

Right of access
You can request information about how we process your personal data, including information about:

Why we process your personal data.
What categories of personal data we process with whom we share your personal data.
How long we keep your personal data/what are the criteria for determining this period.
What rights do you have.
Where we get your personal data from (if we did not get it from you).
If the processing involves automated decision-making (so-called profiling).
If your personal data has been transferred to a country that is outside the EEA, how we will ensure that your personal data is protected.

All of the above information is available in this Privacy Policy. You can also request a copy of the personal data we process about you. However, additional copies will be charged.

Right to rectification
It is important that we have the correct information about you and ask that you notify us if any of your personal data is incorrect, e.g. if you have changed your name or if you have moved.

Right to erasure
If we process your personal data in an unlawful manner, for example, if we process your personal data for longer than necessary or for no reason, you can ask us to delete that data.

Right to restriction
If you believe that we do not have the right to process your personal data, you can object to our processing. In such cases, we may only continue processing if we can demonstrate compelling legitimate grounds that outweigh your interests, rights, and freedoms. However, we may always process your personal data if it is necessary to establish, exercise or defend legal claims.

Right of data transfer
You may request that your personal data that you have provided to us for processing on the basis of consent or for the performance of a contract be provided to you in a structured, commonly used, and machine-readable format. You also have the right to request the transfer of this information to another data controller.

Withdraw of consent
If you have given us your consent for any processing activity, this consent is voluntary, and you have the right to withdraw it at any time in any way.

We will also inform other parties to whom we may have provided your personal data about your request(s).

In case of doubt, you have the right to submit a proposal to initiate proceedings pursuant to § 100 of the Data Protection Act to the relevant supervisory authority, for example via www.dataprotection.gov.sk.

HOW CAN I COMPLAIN ABOUT THE USE OF MY DATA OR HOW DO I EXERCISE MY RIGHTS?
If you want to file a complaint about how we process your personal data, including in relation to the above rights, you can contact our Data Protection Officer (“DPO”) and your suggestions and requests will be reviewed.

Contact to the Data Protection Supervision Officer: office@canor-audio.com.

If you are not satisfied with our response, or you believe that we are processing your data unfairly or illegally, you can complain to the relevant supervisory authority, which is the Office for Personal Data Protection (ÚOOÚ). Further information about the Office for Personal Data Protection and their complaint procedure can be found here: www.dataprotection.gov.sk.

CONTACT DETAILS
If you have any further questions regarding the processing of your personal data, you can contact us through our Data Protection Supervisory Officer (DPO) by email sent to office@canor-audio.com.

PRIVACY STATEMENT REPRESENTATIVES OF BUSINESS PARTNERS

At CANOR, spol. s r.o., we respect the privacy of all data subjects with whom we are in contact, regardless of whether we process personal data ourselves or with the help of other entities. It is important to us that you know what personal data we process about you, why we do it and what your rights are. Therefore, we ask you to read this statement to provide you with more information about the processing of your personal data.

CATEGORIES OF PERSONAL DATA - CONTROLLER

Area	Activity	Types of personal data
Camera monitoring	Monitoring of selected areas of the operator	Monitoring of the movement of persons, portrait of the person concerned, activities/activities carried out in the monitored area, date and time of these activities, date and time of entry and departure from the monitored zone;
Finance	Bookkeeping and tax agenda - keeping accounting and tax records, processing of accounting documents, financial statements, and documents for the annual report	Personal data stated on accounting records/invoices/orders in the scope of title, name and surname, contact details (registered office, telephone number, e-mail address) of the statutory representative and contact person, bank details, signature; Personal data to the extent necessary to perform a financial audit - accounting documentation, basic company documentation; Personal data of the Foundation's management in the scope of name, surname, post; Personal data of donors in the scope of name, surname, amount of donation; Personal data of natural persons and legal entities to whom the Foundation has provided funds for the public benefit purpose for which the Foundation was established, and information on how these funds have been used.
PR/Marketing	Publishing photographs, videos, audio recordings, interviews and articles on the Operator's websites, social networks and in the media space	Photo, video, and audio documentation from events organized by the Operator based on a legitimate interest, in the case of individual photos, videos and articles, personal data in accordance with the given consent, e.g. name, surname, age, or data that the data subject provides in the published business card, article or video
Legal agenda	Resolving the Controller's non-contentious agenda, participating in proceedings and asserting and/or protecting the Controller's legal claims	Personal data of data subjects to the extent necessary for the conduct of the relevant proceedings, in particular title, name, surname, affiliation to a legal entity, telephone and e-mail contact, registered office, correspondence address, subject of the dispute or the claim asserted, evidence and necessary documents
Registry and archiving	Archival care - record-keeping, archiving, decommissioning, disposal	Personal data to the extent specified in the documentation, which must be archived in accordance with the applicable legislation and the Controller's Registry Rules
Commercial relations	Management of supplier relationships - pre-contractual and contractual agenda - communication, concluding a contract, implementation of a contractual relationship	Name, surname, title of the business partner's statutory representative(s), telephone, or email contact; name, surname, title of the contact person designated by the business partner, his/her functional status, telephone, or email contact;

PURPOSES OF THE DATA PROCESSING - CONTROLLER

Activity	Purpose	Legal basis
Monitoring of selected areas of the operator	Protection of property, safety and health, detection of crime based on the legitimate interest of the operator	Processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Bookkeeping and tax agenda - keeping accounting and tax records, processing of accounting documents, financial statements, and documents for the annual report	Processing of personal data in connection with accounting and tax administration	Processing is necessary for the performance of a contract to which the data subject is a party or to take pre-contractual measures at the request of the data subject. The processing is necessary for the fulfilment of a legal obligation of the controller.
Publishing photographs, videos, audio recordings, interviews and articles on the Operator's websites, social networks and in the media space	Strengthening brand awareness, increasing transparency, and building the reputation of the operator by disclosing information about the operator's activities	The data subject has consented to the processing of his or her personal data for one or more specific purposes. Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Resolving the Controller's non-contentious agenda, participating in proceedings and asserting and/or protecting the Controller's legal claims	Processing of personal data for the purpose of conducting a legal agenda, proving, exercising and/or defending the legal claims of the controller	Processing is necessary for the performance of a contract to which the data subject is a party or to take pre-contractual measures at the request of the data subject. The processing is necessary for the fulfilment of a legal obligation of the controller. Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
Archival care - record-keeping, archiving, decommissioning, disposal	Processing of personal data for the purpose of fulfilling obligations in connection with archival care	Processing is necessary for compliance with a legal obligation of the controller.
Management of supplier relationships - pre-contractual and contractual agenda - communication, concluding a contract, implementation of a contractual relationship	Processing of personal data for the purpose of carrying out pre-contractual and contractual relationships with suppliers of goods and services necessary to ensure the activity	Processing is necessary for the performance of a contract to which the data subject is a party or to take pre-contractual measures at the request of the data subject. Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

If we process your personal data on the legal basis of fulfilling our legal obligation, the following legislative provisions may apply:

Activity	Title of the provision
Archival care - record-keeping, archiving, decommissioning, disposal	Act No. 395/2002 Coll. Act on Archives and Registries and on Amendments to Certain Acts
Resolving the Controller's non-contentious agenda, participating in proceedings and asserting and/or protecting the Controller's legal claims	Act No. 600/2003 Coll. Act on Child Allowance and amending Act No. 461/2003 Coll. on Social Insurance
	Act No. 431/2001 Coll. Accounting Law
	Act No. 162/2015 Coll. Administrative Procedure Code
	Act No. 54/2019 Coll. Act on Certain Measures Related to Reporting on Anti-Social Activity and on Amendments to Certain Acts
	Act No. 222/2004 Coll. Act on Value Added Tax
	Act No. 71/1967 Coll. Act on Administrative Proceedings (Administrative Code)
	Act No. 5/2004 Coll. Act on Employment Services and on Amendment to Certain Acts
	Act No. 18/2018 Coll. Act on Personal Data Protection and Amendments to Certain Acts
	Act No. 423/2015 Coll. Act on Statutory Audit and amending and supplementing Act No. 431/2002 Coll. on Accounting, as amended
	Act No. 152/1994 Coll. Act of the National Council of the Slovak Republic on Social Fund, amending the Act of the National Council of the Slovak Republic No. 286/1992 Coll. on Income Taxes, as amended
	Act No. 124/2006 Coll. Act on Occupational Safety and Health Protection and on the Amendment of Certain Acts
	Act No. 483/2001 Coll. Act on Banks and on Amendments to Certain Acts
	Act No. 39/2015 Coll. Act on Insurance and Amendments to Certain Acts
	Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
	Act No. 161/2015 Coll. Civil Procedure Code
	Act No. 461/2003 Coll. Act on Social Insurance
	Act No. 462/2003 Coll. Act on Income Compensation in Case of Temporary Work Incapacity and on Amendments to Certain Acts
	Act No. 650/2004 Coll. Act on Supplementary Pension Saving and on Amendments to Certain Acts
	Act No. 355/2007 Coll. Act on Protection, Support and Development of Public Health and on Amendments to Certain Acts
	Act No. 595/2003 Coll. Income Tax Act
	Act No. 43/2004 Coll. Act on Retirement Pension Saving and Including Consequential Amendments
	Act No. 311/2001 Coll. Labour Code
	Act No. 160/2015 Coll. Civil Procedure Code
	Act No. 580/2004 Coll. Act on Health Insurance and amending Act No. 95/2002 Coll. on Insurance Industry and on Amendments to Certain Acts
	Act No. 233/1995 Coll. Act of the National Council of the Slovak Republic on Bailiffs and Enforcement Activity (Enforcement Code) and on Amendments and Supplements to Other Acts
	Act No. 513/1991 Coll. Commercial Code
	Act No. 563/2009 Coll. Act on Tax Administration (Tax Procedure Code) and on Amendments to Certain Acts
	Act No. 297/2008 Coll. Act on the Prevention of Legalization of Proceeds of Criminal Activity and Terrorist Financing and on Amendments and Supplements to Certain Acts
	Act No. 301/2005 Coll. Code of Criminal Procedure
	Act No. 125/2006 Coll. Act on Labor Inspection and on amendment and supplement of Act No. 82/2005 Coll. on Illegal Work and Illegal Employment and on amendment and supplement of other acts
	Act No. 283/2002 Coll. Act on Travel Allowances
Bookkeeping and tax agenda - keeping accounting and tax records, processing of accounting documents, financial statements, and documents for the annual report	Act No. 483/2001 Coll. Act on Banks and on the Amendments of Certain Acts
	Act No. 71/1967 Coll. Act on Administrative Proceedings (Administrative Code)
	Act No. 161/2015 Coll. Civil Procedure Code
	Act No. 301/2005 Coll. Code of Criminal Procedure
	Act No. 162/2015 Coll. Administrative Procedure Code
	Act No. 563/2009 Coll. Act on Tax Administration (Tax Procedure Code) and on Amendments to Certain Acts
	Act No. 297/2008 Coll. Act on the Prevention of Legalization of Proceeds of Criminal Activity and Terrorist Financing and on Amendments and Supplements to Certain Acts
	Act No. 160/2015 Coll. Civil Procedure Code
	Act No. 595/2003 Coll. Income Tax Act
	Act No. 233/1995 Coll. Act of the National Council of the Slovak Republic on Bailiffs and Enforcement Activity (Enforcement Code) and on Amendments and Supplements to Other Acts
	Act No. 431/2001 Coll. Accounting Law
	Act No. 423/2015 Coll. Act on Statutory Audit and amending and supplementing Act No. 431/2002 Coll. on Accounting, as amended
	Act No. 513/1991 Coll. Commercial Code
	Act No. 222/2004 Coll. Value Added Tax Act
	Act No. 18/2018 Coll. Act on Personal Data Protection and Amendments to Certain Acts
	Regulation (EU) 2016/679 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)

PARTIES THAT MAY HAVE ACCESS TO YOUR DATA
CANOR, spol. s r.o., as the controller, may share your data with third parties in the following cases:

Activity	Purpose	Recipients
Monitoring of selected areas of the operator	Protection of property, safety and health, detection of crime based on the legitimate interest of the operator	The Police Force of the Slovak Republic The Prosecutor's Office of the Slovak Republic Courts of the Slovak Republic PcWorms, s. r. o.
Bookkeeping and tax agenda - keeping accounting and tax records, processing of accounting documents, financial statements, and documents for the annual report	Processing of personal data in connection with accounting and tax administration	Financial Administration of the Slovak Republic Ing. Jana Iskrová
Publishing photographs, videos, audio recordings, interviews and articles on the Operator's websites, social networks and in the media space	Strengthening brand awareness, increasing transparency, and building the reputation of the operator by disclosing information about the operator's activities	Operator's websites and social networks
Resolving the Controller's non-contentious agenda, participating in proceedings and asserting and/or protecting the Controller's legal claims	Processing of personal data for the purpose of conducting a legal agenda, proving, exercising and/or defending the legal claims of the controller	Mgr. Ivana Paprčková Murajdová, attorney-at-law
Archival care - record-keeping, archiving, decommissioning, disposal	Processing of personal data for the purpose of fulfilling obligations in connection with archival care
Management of supplier relationships - pre-contractual and contractual agenda - communication, concluding a contract, implementation of a contractual relationship	Processing of personal data for the purpose of carrying out pre-contractual and contractual relationships with suppliers of goods and services necessary to ensure the activity

Activity	Purpose	Landscape	Company
Publishing photographs, videos, audio recordings, interviews, and articles on the Operator's websites, social networks, and in the media space	Strengthening brand awareness, increasing transparency, and building the reputation of the operator by disclosing information about the operator's activities	United States, USA	Meta Platforms Ireland Limited (FB, IG) Google Ireland Limited (YT) LinkedIn Ireland Unlimited Company Twitter International Unlimited Company

STORAGE OF PERSONAL DATA - CONTROLLER
We only store your personal data for a limited time, and they will be deleted when they are no longer needed for the processing purposes set out in this statement.

Activity	Archiving period
Monitoring of selected areas of the operator	for 3 days
Bookkeeping and tax agenda - keeping accounting and tax records, processing accounting documents, financial statements, and documents for the annual report	Current year and then for 10 years
Publishing photographs, videos, audio recordings, interviews, and articles on the Operator's websites, social networks and in the media space	In the case of granted consent, for the period of its granting, but no more than until its withdrawal, or for the duration of the legitimate interest of the operator
Resolving the Controller's non-contentious agenda, participating in proceedings, and asserting and/or protecting the Controller's legal claims	For a period of 10 years from the final conclusion of the given court proceedings or out-of-court proceedings, or until the dispute is concluded, the request/complaint is dealt with, and all obligations are settled
Archival care - record-keeping, archiving, decommissioning, disposal	In accordance with the applicable legislation and deadlines specified in the registry rules for the given agenda.
Management of supplier relationships - pre-contractual and contractual agenda - communication, concluding a contract, implementation of a contractual relationship	For a period of 10 years after the termination of the contract, accounting documents enter the processing activity "Accounting and tax agenda"

We may process your personal data for a longer period in the event of an ongoing legal dispute, or if you have given us your consent.

WHAT RIGHTS DO YOU HAVE
According to the Data Protection Act you have certain rights in relation to their processing. Here is a list of these rights, as well as what the given right means for you.

Right of access
You can request information about how we process your personal data, including information about:

Why we process your personal data
What categories of personal data we process With whom we share your personal data
How long we keep your personal data/what are the criteria for determining this period What rights do you have
Where we get your personal data from (if we did not get it from you)
If the processing involves automated decision-making (so-called profiling)
If your personal data has been transferred to a country that is outside the EEA, how we will ensure that your personal data is protected

All of the above information is available in this Privacy Policy. You can also request a copy of the personal data we process about you. However, additional copies will be charged.

Right to restriction
From the moment you have requested the rectification of your personal data or if you have objected to the processing, and until we are able to investigate the issue or confirm the accuracy of your personal data (or change it according to your instructions), you are entitled to restricted processing. This means that we (with the exception of the storage of personal data) can only process your personal data in accordance with your consent, if it is necessary in connection with legal claims, to protect the rights of someone else, or where there is a substantial public interest in the processing. You can also request that we restrict the processing of your personal data if the processing is unlawful, but you do not want us to erase the personal data.

Right to object
If you believe that we do not have the right to process your personal data, you can object to our processing. In such cases, we may only continue processing if we can demonstrate compelling legitimate grounds that outweigh your interests, rights, and freedoms. However, we may always process your personal data if it is necessary to establish, exercise or defend legal claims.

Withdraw of consent
If you have given us your consent for any processing activity, this consent is voluntary, and you have the right to withdraw it at any time in any way.

We will also inform other parties to whom we may have provided your personal data about your request(s).

PRIVACY POLICY

CANOR, spol. s r.o. respects the privacy of all data subjects with whom we are in contact; regardless of whether we process personal data ourselves or with the help of third parties. It is important to us that everyone understands, which of your personal data we process, for what purposes and what your rights are. Therefore, we ask you to read this Privacy Policy, which will provide you with more information about the processing of your personal data by CANOR, spol. s r.o.

This Privacy Policy sets out how we process your personal data when carrying out activities as a controller or a processor.

We may update this statement from time to time without notice. We therefore ask you to familiarize yourself with its content on a regular basis. This version of the statement was issued on 18.7.2024.

We may process personal data about you in different ways and in different situations depending on whether you are a client, customer, supplier or job applicant or an employee. We may also process personal data about visitors to our website(s), depending on how you choose to interact with us. Regardless of the situation, we promise that we will never sell, commercialize, or use your personal data in violation of applicable data protection regulations.

CANOR, spol. s r.o. respects your privacy, regardless of whether we process your personal data ourselves or on behalf of other parties. It is important to us that you understand what personal data we process about you, why we do it, and what your rights are. Therefore, we ask you to read this Privacy Policy, which will provide you with more information about the processing of your personal data by CANOR, spol. s r.o.

If you are a former employee, you can find more detailed information about the processing of your data in the Privacy Statement – Former Employees section.

If you are a debtor, you can find more detailed information about the processing of your data in the Privacy Statement – Debtors section.

If you are a contractor, more detailed information about the processing of your data can be found in the Privacy Statement – Contractors section.

If you work on agreement, you can find more detailed information about the processing of your data in the Privacy Statement – Work on Agreement sectionContractors section.

If you are a natural person [affected persons – GDPR], you can find more detailed information about the processing of your data in the Privacy Statement – Natural Persons [Affected Persons – GDPR] section.

If you are a natural person [camera system], you can find more detailed information about the processing of your data in the Privacy Statement – Natural Persons [Camera System] section.

If you are a natural person [users of social networks], you can find more detailed information about the processing of your data in the Privacy Statement – Natural Persons [User of Social Networks] section.

If you are a natural person [cooperating self-employed person], you can find more detailed information about the processing of your data in the Privacy Statement – Natural Persons [Cooperating Self-Employed Person] section.

If you are a customer, you can find more detailed information about the processing of your data in the Privacy Statement – Customer section.

If you are an employee’s family, you can find more detailed information about the processing of your data in the Privacy Statement – Employee's Family section.

If you are a job seeker, you can find more detailed information about the processing of your data in the Privacy Statement – Job Seekers section.

If you are an employee, you can find more detailed information about the processing of your data in the Privacy Statement – Employees section.

If you are representatives of business partners, more detailed information about the processing of your data can be found in the Privacy Statement – Business Partner Representatives section.

Information about the processing of cookies can be found in the Web and Cookies section.

To notify us of a data protection violation or to submit a data subject rights request, please use the e-mail address office@canor-audio.com, or contact us by mail at CANOR, spol. s r.o.

GDPR – Privacy Policy

Canor Asterion V2

Canor Hyperion P1

Canor Virtus M1

Canor Virtus I2