ORIWIN, s.r.o.
Hálkova 2753/13, 010 01 Žilina
IČO: 3641025

as the controller of the information system, publishes the following data protection statement under the title


pursuant to Article 13 and the relevant recitals of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the “Regulation”) and Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts (hereinafter referred to as the “Personal Data Protection Act”)

The purposes of processing personal data are the reasons for which the personal data of data subjects (employees, clients) are processed in our information systems on precisely defined legal grounds. The purposes are specifically identified, explicitly stated and legitimate, and we comply with the principle of lawfulness under Articles 6 and 9 of the Regulation when processing the personal data of data subjects.

Data subjects about whom personal data are processed in our information systems for specified purposes may exercise the following rights in writing or electronically:

a) The right of access to personal data – this is the right to obtain confirmation of whether your personal data are being processed as well as the right to obtain access to these data, within the scope of the purposes and duration of the processing, the category of personal data concerned, the range of recipients, the procedure for any automated processing, and, where applicable, the consequences of such processing. As a controller, we have the right to use all reasonable measures to verify the identity of the data subject who requests access to the data, in particular in relation to online services and identifiers (Article 15, recitals 63, 64 of the Regulation).

b) The right to rectification of incorrect and completion of incomplete personal data (Article 16, recital 65 of the Regulation).

c) The right to erasure – “forgetting” of personal data which are no longer necessary for the purposes for which they were collected and processed; on withdrawal of the consent on the basis of which the processing is carried out; in the event of unlawful processing; where the personal data were collected in connection with an offer of information society (in the case of children), subject to the conditions set out in Article 17, recitals 65, 66 of the Regulation.

d) The right to restriction of processing may be exercised if you, as the data subject, contest the accuracy of the personal data and other particulars within the meaning of Article 18, recital 67 of the Regulation, in the form of temporary transfer of the selected personal data to another processing system, prevention of user access to the selected personal data or temporary removal of the processing.

e) The right to data portability is the right to transfer the personal data provided by you to our information systems on the basis of consent or the performance of a contract to another controller in a structured, commonly used and machine-readable format, insofar as this is technically feasible, also subject to the conditions of Article 20, recital 68 of the Regulation in the event that the processing is carried out by automated means. By applying

This right shall be without prejudice to Article 17 of the Regulation. The right to data portability does not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us as controller.

f) Without prejudice to any other administrative or judicial remedies, you have the right, as a data subject, to lodge a complaint under Article 77 of the Regulation with the Office for Personal Data Protection of the Slovak Republic if you consider that the processing of personal data concerning you is in breach of the Regulation or the Data Protection Act.

ORIWIN, s.r.o., Hálková 2753/13, 010 01 Žilina, as the operator of the information system, has taken all appropriate personal, organisational and technical measures in order to protect your personal data to the maximum extent possible in order to reduce the risk of their misuse, leakage and the like. Pursuant to our obligation under Article 34 of the Regulation, we hereby notify you as data subjects that if a situation arises in which we, as the controller, breach the protection of your personal data in a way that is likely to result in a high risk to the rights and freedoms of natural persons, we will notify you without undue delay of this fact.


In order to comply with the principle of minimisation, any personal data provided by you is a necessary legal or contractual requirement for the fulfilment of the purpose of its processing. Failure to provide the mandatory data necessary for the conclusion of a contract may result in the contractual relationship not being concluded.

In case of any questions related to the protection of your personal data, including the exercise of your rights under the Regulation and the Data Protection Act, please contact us at the following email address:

Email address: btpteam@oriwin.eu