Information on personal data processing

The information below explains the process of handling with your personal data you have provided to us and also defines your rights related to the personal data processing as our clients, suppliers and third parties when doing business activities and during the events.

Our group of BDO entities as members of international network of independent public accounting, tax and advisory firms (as joint data controllers, where applicable), as follows:

• company BDO, spol. s r. o., seat at Eurovea - Central 3, Pribinova 10, 811 09 Bratislava, ID No.: 35 836 032, registered in Commercial registry of Municipal court Bratislava III, section Sro, insert no. 26518/B,
• company BDO Services, spol. s r. o., seat at Eurovea - Central 3, Pribinova 10, 811 09 Bratislava, ID No.: 35 716 401, registered in Commercial registry of Municipal court Bratislava III, section Sro, insert no. 14535/B,
• company BDO Audit, spol. s r. o., seat at Eurovea - Central 3, Pribinova 10, 811 09 Bratislava, ID No.: 44 455 526, registered in Commercial registry of Municipal court Bratislava III, section Sro, insert no. 54967/B,
• company BDO Consulting, spol. s r. o., seat at Eurovea - Central 3, Pribinova 10, 811 09 Bratislava, ID No.: 54 315 069, registered in Commercial registry of Municipal court Bratislava III, section Sro, insert no. 157966/B,
• company BDO Tax, spol. s r. o., seat at Eurovea - Central 3, Pribinova 10, 811 09 Bratislava, ID No.: 46 396 381, registered in Commercial registry of Municipal court Bratislava III, section Sro, insert no. 155291/B,
• company BDO Legal s.r.o., seat at Eurovea - Central 3, Pribinova 10, 811 09 Bratislava, ID No.: 51 803 330, registered in Commercial registry of Municipal court Bratislava III, section Sro, insert no. 129300/B
• company BDO Holding, spol. s r.o., seat at Eurovea - Central 3, Pribinova 10, 811 09 Bratislava, ID No.: 47 237 678, registered in Commercial registry of Municipal court Bratislava III, section Sro, insert no. 79264/B

will be processing your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) and Slovak Act no. 18/2018 Coll. on Personal Data Processing as amended.


What is the purpose of your personal data processing?

1. Response to your inquiry

We will only collect your personal data if you choose to disclose it to us in your inquiry, for example to contact you by e-mail, phone or in any other way that you choose to contact us, but especially through the contact form on our website www.bdoslovakia.com.
The primary purpose of processing your personal data is to respond to your inquiry and provision of tax, accounting and business advisory. Provision of personal data for realization of demand or other messages submitted in a contact form on our website www.bdoslovakia.com, or provision of personal data via e-mail is essential for us to be able to respond to you properly and in a timely manner. We will not be able to answer your inquiry if we are not provided with your personal data in the necessary extent.
Legal ground for personal data processing is:
1. Act no. 40/1964 Coll. Civil Code as amended,
2. Act no. 513/1991 Coll. Commercial Code as amended,
3. Execution of agreement,
4. Our legitimate interest.
 

2. Provision of tax, accounting and other professional advisory services

We also process your personal data for the purpose of providing tax, accounting and other professional advisory services and/or statutory audit services and related consulting. We provide these services to you based on your request and your consent to the provision of our services. If you do not provide us with your personal data, we are not able to provide you with our professional consulting services. Moreover, in some cases, the provision of data is a contractual and legal requirement obligation of one of the BDO companies as provider of regulated consultancy services.
Legal ground for personal data processing is:
1. Agreement on provision of professional services,
2. Accounting, payroll, tax, audit regulations,
3. Act no. 40/1964 Coll. Civil Code as amended;
4. Act no. 513/1991 Coll. Commercial Code as amended;
5. Our legitimate interest.
 

3. Marketing

If you have given your consent to the processing of personal data for marketing purposes, we will process your personal data to the extent of the consent given. You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of the processing of personal data until its revocation. The legal basis for the processing of your personal data is your consent. In special cases, the legal basis may also be the legitimate interest of the controller, which is to promote our services and inform our clients of new legal obligations that may affect them.
 

4. AML

We also process your personal data for the purpose of fulfilling our legal obligations as data processor regarding prevention and protection against money laundering and terrorist financing. The legal basis is Act no. 297/2008 Coll. on Protection against Money Laundering and Terrorist Financing and on Amendments to Certain Acts, as amended. We obtain personal data in this regard from publicly available sources and non-public registers and/or directly from the persons concerned (provided in the contract, AML questionnaire and other documents) as well as from third parties who are in a contractual, employment or other similar relationship (statutory bodies, owners, beneficial owners, etc.). Provision of data in connection with the identification of ownership and organizational structure as well as identification and verification of identification of beneficial owners of client is a legal requirement, and therefore failure to provide such data might cause breach of our legal obligations as the obliged person and therefore inability to provide our services to you.
 

5. Video surveillance

For security reasons, we monitor our premises (offices) through camera recordings. It is in our legitimate interest to ensure the protection of persons and property against illegal acts, especially in the prevention and clarification of robberies, thefts, vandalism or various acts. The monitored area of our premises is clearly marked with monitoring information. The record can be used for the purpose of detecting criminal offenses, identifying and investigating perpetrators, as well as for the purpose of protection against money laundering and terrorist financing, detection of illegal financial transactions, court proceedings, criminal proceedings, proceedings on offenses. We store personal data in the form of videos and audio recordings for 14 calendar days from its production. Subsequently, the personal data are automatically deleted. The legal basis is our legitimate interest in the protection of his property, financial and other interests.
 

6. BDO as data processor of personal data

We can also act as a data processor appointed by a data controller to process personal data on data controller’s behalf. The processing of personal data by us takes place on the basis of a concluded agreement on the provision of professional services with an entity with which you may be in an employment, contractual or other similar relationship and an agreement on authorizing us as the processor to process personal data on behalf of the data controller. The purpose of personal data processing is to provide accounting, tax and/or payroll services or related professional consulting services. In this case, we process your personal data in the name and on behalf of the entity with which you have a certain relationship and which provides us with your personal data. In most cases, such data processing involves the processing of general personal data; in the provision of payroll accounting, there may also be the processing of special categories of personal data (work incapacity records, etc.).
We process only personal data necessary for the provision of any of the above purposes of processing the personal data of the data subjects.


Who are the third-party recipients of your personal data?
Your personal data are processed by the software available to our certain employees.
We cooperate with a variety of external entities whose interoperability is necessary for the proper provision of response to your inquiry, or provision of ordered service and share with them your personal data. Such external entities are in particular qualified external subcontractors, with which we usually cooperate on provision of our services (mostly advocates, tax advisors, auditors, accountants etc.) or IT providers, with which we cooperate for the purpose of proper function of our website. We have a contractual relationship with the above entities and they process your personal data on our behalf.
When we share your personal data, we put in place appropriate measures to make sure that our service providers keep your personal data confidential and secure.
We may also share your personal data with other BDO member firms, where required for the provision of services to you and/or for administrative purposes, provided that this is consistent with the basis on which we have collected your personal data
Your personal data may also be shared with various government agencies and institutions in order to comply with legal requirements and/or obligations.
Your personal data collected for the purpose of the direct marketing are not shared with any third parties and the solely purpose of their processing is our direct marketing.

„Cookie“ on our webpage
We use cookies on our webpage www.bdoslovakia.com. The collection of the cookies is conditioned to your consent. The cookies are small text documents consisting of a number of numbers and letters that are stored on your computer’s hard disk by a web browser and also can uniquely identify your computer and your IP address.

Our Company uses cookies for the following purposes:

• responsiveness,
• the ability to communicate by e-mail,
• identify the visitor and agree to the use of cookies.

You can check and/or delete cookies at your discretion - for details please visit www.aboutcookies.org. You can clear all cookies stored on your computer and set most browsers to prevent them from being stored. In this case, however, you may need to manually adjust some settings each time you visit a website, and some of the services and features of our website may not work properly.


Using Google Analytics and Google Remarketing
At our website www.bdoslovakia.com can be used the services of the third parties such as Google Inc. Analytics and so on. For these services, the cookies are used. Using these services of the third parties we analyze visit and use of our webpage. We share the collected information about the use of our webpage with the analytical services providers to evaluate it. Even though your personal data are transferred to the third parties abroad, your personal data are always anonymized by truncating the IP address of the last three places to prevent a clear assignment to a particular individual. There is also a possibility to sign out of these analytical services by expressing a disagreement with the use of cookies on our website.

Social networks
Our website includes a feature that allows sharing through social media applications, such as Facebook Like and Twitter widget. These social media applications may collect and use information regarding your use of our website. The use of such functionality may require the use of cookies on your device in order to facilitate the use of their services, to display your interaction on the website, and to record data about your activity across the Internet and on our website. Any personal information you provide through such social media applications may be collected and used by other members of this social media application, and such interactions are governed by the privacy policies of the companies providing the application in question. We do not have control over these companies and are not responsible for the use of your personal data by these companies.

Cloud solutions
We also use cloud solutions for internal communication or communication with sister’s companies, or qualified service providers we cooperate with. We use these solutions primarily to increase productivity and mobility of employees and subcontractors, internal cooperation on documents and information activities of individual authorized persons. We use web portals to collaborate between our employees and partners, to share and create information. To protect the data shared within these cloud solutions, we use advanced technologies and software tools to encrypt data to maintain the protection and integrity of shared data.

Children
We understand the importance of protecting children's privacy, especially in the online environment. Our website is not specifically designed and aimed at children under 16 years of age. We never knowingly collect information about persons under 16 years of age and do not store information about them, except as part of an engagement to provide our professional services or if they were part of the inquiry submitted on our website.

International personal data transfers
Your personal data will not be transferred outside the territory of the Slovak Republic. This does not apply in the case of your explicit consent to such transfer of your personal data abroad or in case of provision of ordered services abroad. When we do so, we take appropriate steps to ensure its security and confidentiality in accordance with applicable data protection law.

How long is your personal data retained?
Your personal data will be retained for the period necessary to fulfill the purposes for which we collected it, or for the period of archiving stipulated by the Slovak Act on Archives and Registries, including for the purposes of satisfying any legal, accounting or reporting requirements. We will regularly review your personal data and we will securely delete or anonymize it when it is no longer required for the purpose(s) for which it was collected.
Your personal data will be stored safely, in accordance with our security policy and only for the time necessary to fulfil the purpose of processing. Your personal data will only be accessed by persons authorized by us to process personal data that are processed by us in accordance with our security policy.
Your personal data is backed up, in accordance with our retention policy. Your backup data will be completely deleted as soon as it is possible in accordance with the backup rules. Personal data stored on backup sites is used to prevent security incidents, in particular to disrupt data availability as a result of a security incident. We are obliged to provide data backup in accordance with the security requirements of the Regulation and the Act on Personal Data Protection Act.
For further details about the retention period of your personal data, please do not hesitate to contact us.

Your rights
You have the following rights in relation to the processing of your personal data:

• to be informed about your personal data that we process (why we process it, how long the data will be kept, etc.);
• to access the personal data at any time; You have the right to request access to your personal data that we process, and you also have the right to consult them. At your request, we must provide you with a copy of your personal data. You may also obtain an answer to any questions you may have concerning the processing of your personal data (purposes of processing, data recipients, retention period, etc.);
• to rectify any inaccurate or incomplete your personal data; If your personal data have changed or are incorrect, you are entitled to ask us to rectify, complete or erase the outdated, incorrect or incomplete personal data that we hold about you;
• to erasure/ right to be forgotten In certain circumstances, you have the right to request that your personal data is erased e.g. if the personal data is no longer necessary for the purposes for which it was processed or when you have withdrawn your consent and there is no other legal basis for the processing; Personal data processed on the basis of consent to process a personal data for the marketing purposes will be erased immediately upon the delivery of the request for erasure of such data, or immediately upon withdrawal of consent to process a personal data;
• to restrict the processing of your personal data; You have the right to obtain the restriction of the processing of your personal data. We may thus temporarily and/or partially stop the processing being carried out. You may permanently stop a specific processing operation or all processing operations carried out by us on your personal data by exercising your right to object;
• to data portability that allows for the obtainment in a structured, commonly used, and machine-readable format of the personal data; You have also the right to receive your personal data which you have provided to us and transmit these data to another data controller;
• to object to certain types of processing: In addition, and in certain circumstances, you have the right to object to the processing of your personal data. This right cannot be exercised where processing is necessary for the performance of legal obligations.

You may exercise your above stated rights either personally at our registered office or by post to any of the BDO Slovakia companies listed in the introduction or by email to: gdpr@bdoslovakia.com.

We ask you to clearly indicate which right you wish to invoke and to which data processing you wish to oppose or limit or which consent you wish to withdraw.
In the event of reasonable doubt as to the identity of the person making the request, we may request additional information necessary to confirm the identity of the person concerned.
When you exercise your rights, no fee will be charged unless we consider the request to be manifestly unfounded or excessive (this will be the case, for example, when it is a repeated request). However, we may charge you a reasonable sum not exceeding our reproduction costs for any additional copies requested.
For any request relating to your rights, we will respond to your request within one month. However, this period may be extended to two months if the request proves to be complex and/or because of the number of requests we have to deal with. In the event of an extension of this period, we will inform you of this by giving you the reason for this decision.
Please note that in certain circumstances provided for by law, we may refuse access to your information or not accept your request where we are authorized to do so by applicable data protection legislation.
However, if you have any concerns that your rights have been violated in the processing of your personal data, or your personal data are not processed for such a purpose or to an extent that was agreed, you have the right to contact the Data Protection Authority, with the registered office situated at Budova Park one, Námestie 1.mája 18, 811 06 Bratislava.
If you no longer want your personal data which were collected on the basis of your consent, to be processed by us, but you want your personal data which were collected on the basis of your consent, to be processed by another subject, you may request us to provide you your personal data. Your personal data will be provided to you without undue delay in a commonly used and machine-readable format.

Automated individual decision-making, including profiling 
Your personal data will not be processed for automated decision-making or profiling.

What if your rights has been during the processing your personal data violated?
If you believe that your rights have been violated in the processing of your personal data, or your personal data are not processed for such a purpose or to an extent that was agreed, you have the right to contact the Slovak Data Protection Authority, with the registered office situated at situated at Budova Park one, Námestie 1.mája 18, 811 06 Bratislava.

The contact details
Contact details If you have any questions about processing your personal data or this Privacy Notice you can contact us via e-mail address: gdpr@bdoslovakia.com.