K A S I C O, a. s. is a specialized security printing companie, but also of other printing products. The company can also provide those products that require the greatest number of security features to be applied in their production to prevent their counterfeiting or alteration. In the field of publications, the company produces hundreds of titles in paperback or hardcover as well as sewn binding annually.

To ensure the quality of the services provided, the company implements and certifies several management systems:

- ISO 9001:2008 quality management system

- ISO 14001:2004 environmental management system

- Occupational Health and Safety Management System ISO 45001:2018

- Information Security Management System ISO/IEC 27001:2013

In order to carry out its activities, the company must process personal data about its employees and clients

The Company declares that all personal data is considered strictly confidential and is treated in accordance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR).

Company:

Processing of personal data:

The company operates several systems processing personal data of data subjects, primarily employees and clients of the company

K A S I C O, a. s. information on the purposes and legal basis of the processing of personal data of data subjects, as well as on the scope of personal data and the duration of processing.

Processing of personal data on the website (information about cookies):

 

The Provider operates a website that uses cookie technology. Therefore, all visitors to the website are considered to be data subjects, even if they have not directly provided any data. Other groups of data subjects are visitors who have filled in a form on the website for a specific purpose and have also given their consent to the processing of the data provided by the form.

We process the following about website visitors: person identifier, IP address, cookies About email newsletter subscribers: person identifier, name, email address 

We provide the data subjects with detailed information about the use of cookies, with the possibility of granting or withdrawing consent for individual types of cookies online on the website. We use IP address anonymization within Google Analytics cookies. More information at en/cookies

Automated individual decision-making, including profiling

Automated individual decision-making, including profiling, is not used in the context of the activities carried out in the company.

Joint controllers

Within the scope of its activities, K A S I C O, a. s. does not act as a joint controller with another entity in the processing of personal data.

Rights of data subjects

Data subjects have the right

• for information about the processing of your personal data;
• to obtain access to personal data held about you;
• request the rectification of incorrect, inaccurate or incomplete personal data;
• request the erasure of personal data when it is no longer needed or if the processing is unlawful;
• object to the processing of your personal data for marketing purposes or on grounds relating to your particular situation;
• request the restriction of the processing of your personal data in specific cases;
• receive your personal data in a machine-readable format and send it to another controller ("data portability");
• request that decisions based on automated processing which concern or significantly affect you and which are based on your personal data are carried out by natural persons and not by computers. You also have the right to express your views and object to the decision in this case

For some of the purposes of processing, the company may obtain the consent of the data subject, which may be revoked at any time by notarized written request sent to the address of the organization or delivered in person (without the need for verification) to the registered office of the company: Hagarova 9, Bratislava. Consent may also be revoked electronically by sending an e-mail to gdpr@kasico.sk, provided that such revocation is accompanied by a qualified electronic signature. The Company processes personal data obtained directly from the data subjects or informs them about the processing within 30 days.

Law under the GDRP	Means of verification of the data subject	Timeframe for response
Right to information	Verification required when obtaining the personal data	Provided immediately
Right of access to personal data	Personal visit, notarised data request or email with qualified electronic signature required	1 month
Right to erasure of the personal data	Personal visit, notarised request for correction of data or e-mail bearing a qualified electronic signature required	1 month
Right to erasure of the personal data	Personal visit, notarised request for deletion of data or e-mail with a qualified electronic signature required; for the newsletter it is sufficient to send an e-mail from the address used for registration to gdrp@kasico.sk	Without undue delay
Right to object to processing	Personal visit, notarised objection or e-mail with qualified electronic signature required	Without undue delay
Right to withdraw consent to processing	Personal visit, notarised request or e-mail with a qualified electronic signature required; for the newsletter, sending an e-mail from the address used for registration to gdrp@kasico.sk is sufficient	Without undue delay

---

Right to data transfer	Personal visit, notarised data transfer request or e-mail with a qualified electronic signature required	1 month
Right to lodge a complaint with the supervisory authority	The supervisory authority is the Office for Personal Data Protection of the Slovak Republic, contacts are published on the website of the Office https://dataprotection.gov.sk/uoou	Not applicable
Right to restriction of processing of personal data	Personal visit, notarised request for restriction or e-mail with qualified electronic signature required	1 month

 

Form for exercising the rights of data subjects

The completed application form for exercising the rights of data subjects whose personal data K A S I C O, a. s. processes within its information systems may be delivered by post or in person to the company's registered office or electronically to gdpr@kasico.sk.  Upon delivery of the form, verification of the data subject is required. In the case of inappropriate requests from data subjects, i.e. unjustified or vexatious, the form and scope of the provision of information, notifications and procedures for exercising the rights of the data subject shall be decided by the statutory body of the company.