Provision of information and notices regarding the processing of personal data pursuant to Section 19 of Act No. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the "Act") and Articles 12, 13, 14, 15 to 22 and 34 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR")
Hilberman Capital, s.r.o., with registered office at Cintorínska 12, Bratislava - mestská časť Staré Mesto 811 08, ID No.: 53 602 650, company registered in the Commercial Register of the District Court in Bratislava, sec. No. 150777/B (hereinafter referred to as the "Controller") processes personal data and complies with the protection of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR") and Act No. 18/2018 Coll. of the National Assembly of the Slovak Republic No. on the protection of personal data (hereinafter referred to as the "Act"). The Controller hereby provides the data subject with the following information and notices regarding the processing and protection of personal data:

The personal data controller is:
Hilberman Capital, s.r.o., with registered office at Cintorínska 12, Bratislava - mestská časť Staré Mesto 811 08, ID No.: 53 602 650, company registered in the Commercial Register of the District Court in Bratislava, sec. No. 150777/B, e-mail: info@hilberman.com

Purpose and legal basis of personal data processing
The processing of personal data is carried out on the following legal basis and for the following purposes:

the processing is necessary for the performance of a contract to which the data subject is a party or for the performance of a pre-contractual measure at the request of the data subject, the processing is necessary for the purpose of the legitimate interests of the controller, namely for the purpose of direct marketing, the fulfilment of the legal obligations of the controller under the special provisions governing taxation and accounting, on the basis of the data subject's consent, if the processing of personal data requires consent under the legislation of the Slovak Republic or the legislation of the European Union.

Legitimate interests of the controller or of a third party
The processing of personal data for the purpose of direct marketing is considered a legitimate interest for the processing of personal data by the controller within the meaning of point 47 of the Recital of the EU Regulation. The data subject shall have the right to object to such processing, including profiling, insofar as it is related to such direct marketing, regardless of whether it is original or further processing, at any time and free of charge, provided that if the data subject objects to the processing of personal data for the purpose of direct marketing, the controller shall not further process the personal data for the purpose of direct marketing.

Recipients, or categories of recipients, of personal data

Personal data will be provided to to a person who provides bookkeeping, tax, payroll and HR services for the controller (accounting and tax advisors, auditors), the law firm and the legal representative of the controller, a person who provides the controller with information technology and server and internet network management services, the controller's personal data processor, which is: DataCamp s.r.o., with registered office at Boženy Němcovej 8, 811 04 Bratislava, ID No.: 45247676 and WebSupport, s.r.o., with registered office at Karadžičova 12, 821 08 Bratislava, ID No.: 36421928 Information about the transfer of personal data to a third country or international organisation. The controller does not intend to transfer personal data to a third country or an international organisation.

Retention period or criteria for determining it:
The personal data will be kept for the period from the conclusion of the contractual relationship between the controller and the data subject until the expiry of 4 years from the end of this contractual relationship. The personal data provided solely for the purpose of registration on the website of the controller will be processed for the duration of the validity of this registration. The personal data necessary for the performance of direct marketing will be stored for the duration of the controller's legitimate interest in processing the personal data, unless the data subject objects to the processing beforehand. However, the personal data will be processed at the latest until the purpose of processing the personal data has been fulfilled. Personal data may be processed by the controller in accordance with the GDPR for the period of time required by the legislation governing the archiving of data in the public interest, provided that they are processed solely for the purpose of such archiving.

Information as to whether the provision of personal data is a legal requirement or a contractual requirement or a requirement necessary for entering into a contract, and as to whether the data subject is obliged to provide the personal data. The provision of personal data is both a contractual requirement and a requirement necessary for entering into a contract. The data subject is not obliged to provide personal data, but in such a case it is not possible to enter into a contractual relationship with the data subject. The provision of personal data is also a legal requirement required by specific accounting and tax legislation. The data subject is obliged to provide personal data for this purpose, and if personal data are not provided, it will not be possible to comply with the obligations laid down in the above-mentioned special legislation governing accounting and taxation. Information about the existence of automated individual decision-making, including profiling. The controller does not carry out automated individual decision-making, including profiling.

The data subject has the following data protection rights under the GDPR and the Data Protection Act:


THE RIGHT TO WITHDRAW CONSENT. The data subject shall have the right to withdraw consent to the processing of his or her personal data at any time if the personal data are processed on the basis of the consent given. The withdrawal of consent shall not affect the lawfulness of processing based on consent prior to its withdrawal. The data subject may withdraw consent in the same way as he or she gave consent.

THE RIGHT TO BRING PROCEEDINGS. The data subject shall have the right to file a petition with the Office for Personal Data Protection of the Slovak Republic to initiate a personal data protection proceeding, the purpose of which is to determine whether the rights of natural persons have been violated in the processing of their personal data.

THE RIGHT TO ACCESS PERSONAL DATA. The data subject has the right to obtain written confirmation from the controller as to whether personal data are being processed. The controller is obliged to provide the data subject with the personal data it processes.

THE RIGHT TO RECTIFICATION OF PERSONAL DATA, TO ERASURE, TO RESTRICTION OF PROCESSING. The data subject shall have the right to have incorrect personal data concerning him or her rectified without undue delay, or incomplete data completed, or to have the processing of personal data restricted, or to have the personal data erased.

THE RIGHT TO DATA PORTABILITY. The data subject shall have the right to obtain the personal data concerning him or her which he or she has provided to the controller and shall have the right to transfer such data to another controller, if technically feasible.

THE RIGHT TO OBJECT. The data subject shall have the right to object to processing of his or her personal data on grounds relating to his or her particular situation carried out for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or for the purpose of the legitimate interests of the controller or of a third party, including profiling based on these provisions. The data subject shall have the right to object to the processing of personal data concerning him or her for the purpose of direct marketing, including profiling to the extent that it is related to direct marketing.