Dear visitors and customers,
We would like to inform you why and how we process your personal data in connection with your visit to our website and the purchase of ATTACK products.
Please read the following information carefully before providing us with your personal data.
If you have any questions about the processing of your personal data, please contact us at gdpr@attack.sk.
Data controller:
ATTACK, s.r.o., with its registered office at Dielenská Kružná 5020, 038 61 Vrútky, Slovak Republic
Tel.: +421 43 4003 102
Email: gdpr@attack.sk
Website: www.attack.sk
Personal data we process
We will process only the personal data you provide when visiting our websites if you subscribe to our newsletter, and when you purchase our products. This means:
When you visit our website:
- your email address, if you subscribe to the newsletter
When you purchase an ATTACK product:
- product type and serial number
- first name
- surname
- address
- telephone number
Purpose and legal basis for processing your personal data
A. We will process the personal data you provide when visiting our websites and subscribing to the newsletter for the following purposes and on the following legal basis.
We process it for direct marketing, which is our company’s legitimate interest.
The legal basis in this case is Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
If you do not wish to receive our newsletter, you can unsubscribe using the “unsubscribe” link included in every newsletter email.
B. We will process the personal data you provide when purchasing an ATTACK product and putting it into operation for the following purposes and on the following legal bases.
First purpose
- Direct marketing, which is our company’s legitimate interest.
The legal basis in this case is Article 6(1)(f) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Processing based on this legitimate interest, namely direct marketing, takes place as follows.
Your personal data will be stored in our electronic database, which we manage ourselves and which is accessible only to us. This database is stored and secured on devices owned by our company.
We will use your personal data on the basis of this legitimate interest only to send you offers for our new products, especially when a product is nearing the end of its expected service life.
This refers to the product identified in the boiler commissioning record you complete, or to a newer, more technologically advanced and higher-quality product developed by our company that could replace it.
Our legitimate interest, and one of the two purposes for processing your personal data, is therefore direct marketing: making direct offers for our new products.
Second purpose
- To fulfil the extended warranty contract for the product recorded in your boiler commissioning record.
The legal basis in this case is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
This processing is necessary to fulfil the extended warranty contract for a product to which you are a party, and takes place as follows.
Our company provides an extended contractual warranty for its products, beyond the warranty required by law.
This applies if you comply with the warranty conditions (see the warranty conditions in the operating manual for the product recorded in your boiler commissioning record).
To provide this extended contractual warranty, we need to know who the other party to the contract is and whether you are meeting your obligations under the contract, in particular by having the required annual service inspections carried out.
After each annual service inspection (up to five inspections), we therefore also need the inspection record so that we can note in our database that you are meeting the warranty conditions.
Since every contract has at least two parties, we need your personal data to identify you as a party to the extended warranty contract and to identify the specific product.
Without this information, unfortunately, we would not be able to fulfil our obligations under the extended warranty contract properly.
For both purposes, we process personal data manually and in electronic information systems. These systems are subject to continuous and thorough physical and technical controls.
Everyone who comes into contact with personal data under our instructions and authorisation as part of their work or contractual duties is bound by confidentiality.
Categories of personal data recipients
We primarily process your personal data ourselves. However, we may need to use another organisation’s services to process personal data for one of the purposes listed above.
In that case, we will have a controller–processor relationship with that third party and will enter into a personal data processing agreement with the processor to ensure that your personal data is processed securely and lawfully.
Your personal data may therefore be disclosed to recipients in the following categories:
- companies that provide bulk distribution of commercial offers;
- companies that distribute our products and/or provide authorised servicing for our products in the European Union member state where you purchased the product recorded in your boiler commissioning record, or where the product is put into operation at your request;
How long we store personal data
We will process your personal data for as long as necessary to fulfil the extended contractual warranty agreement.
For direct marketing, we will store it for no longer than the expected service life of the product recorded in your boiler commissioning record.
Right to object to the processing of personal data
You have the right to object at any time to our processing of your personal data for direct marketing purposes (see “Purpose and legal basis for processing your personal data” above).
If you object to our processing of your data for direct marketing, we will stop processing your personal data for that purpose on the day we receive your objection.
You can send your objection to the processing of your personal data for direct marketing by post to:
ATTACK, s.r.o., Dielenská Kružná 5020, 038 61 Vrútky, Slovak Republic,
or by email to gdpr@attack.sk.
In your objection, it is sufficient to include your name and address, the text “I hereby object to the processing of my personal data for direct marketing purposes”, and your signature.
We will always inform you of the outcome of your request without undue delay. Please note that you cannot object to our processing of personal data that is necessary to fulfil the extended warranty contract.
Personal data protection and your other rights
Please note that you also have the following rights in relation to our processing of your personal data:
- if you have doubts about whether we comply with our personal data processing obligations, contact the Data Controller or the Office for Personal Data Protection;
- request information about which of your personal data we process;
- request access to this data and have it updated or corrected;
- request that this personal data be erased or that its processing be restricted;
- object to the processing of your personal data;
- request the portability of your personal data.
You can exercise these rights with our company using the same procedure as for objecting to the processing of your personal data.