Privacy Policy

(Controller’s Information Obligation – GDPR)

This Privacy Policy is issued in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (“GDPR”) and Section 19 of Act No. 18/2018 Coll. on the Protection of Personal Data.

1. Controller

Business name: Dream Work agency s.r.o.
Registered office: Štúrova 632/35, 054 01 Levoča, Slovakia
Company ID No.: 56739001
Registered in: Commercial Register of the Municipal Court Košice, Section: Sro, Insert No. 61410/V
Telephone: +421 950 493 554
E-mail: [email protected]

Note: In the original Slovak version, the term “processor” was used by mistake – in this context, “controller” is correct under GDPR.

2. Contact for Exercising Your Rights

Telephone: +421 951 080 969
E-mail: [email protected]

3. Rights of Data Subjects

A data subject is any natural person whose personal data we process (in particular employees, job applicants, clients). You may exercise the following rights in writing or electronically using the contact details above.

3.1 Right of Access (Art. 15 GDPR)

You have the right to obtain confirmation as to whether we process your personal data and, if so, to access it along with the following information:

  • purposes of processing,

  • categories of personal data,

  • recipients or categories of recipients,

  • retention periods,

  • any automated decision-making, including profiling.

You may request a copy of your personal data. The first copy is free of charge; additional copies may be subject to a reasonable administrative fee.

3.2 Right to Rectification (Art. 16 GDPR)

If your personal data is inaccurate or incomplete, you have the right to request correction or completion without undue delay.

3.3 Right to Erasure – “Right to be Forgotten” (Art. 17 GDPR)

You may request the erasure of your personal data if:

  • it is no longer necessary for the purposes for which it was collected,

  • you withdraw consent and no other legal basis applies,

  • you successfully object to processing,

  • processing is unlawful,

  • erasure is required by law,

  • the data was collected in relation to the offer of information society services to a child under 16 years of age.

We will not erase data where processing is necessary to comply with legal obligations, establish or defend legal claims, or for reasons of public interest.

3.4 Right to Restrict Processing (Art. 18 GDPR)

You may request restriction of processing if:

  • you contest the accuracy of the data,

  • you object to processing,

  • processing is unlawful and you request restriction instead of erasure,

  • we no longer need the data but you require it for legal claims.

Restricted data will only be stored and not otherwise processed.

3.5 Right to Data Portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used, machine-readable format and to have it transmitted to another controller, where processing is based on consent or contract and carried out by automated means.

3.6 Right to Object (Art. 21 GDPR)

You may object to the processing of your personal data where it is based on:

  • our legitimate interests,

  • direct marketing purposes,

  • scientific or historical research or statistical purposes.

If you object, we will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms.

3.7 Right to Lodge a Complaint

If you believe that your personal data is being processed unlawfully, you may lodge a complaint with:
Office for Personal Data Protection of the Slovak Republic
Hraničná 12, 820 07 Bratislava 27, Slovakia.

4. Additional Information on Processing

4.1 Data Security

We have implemented appropriate technical, organisational, and personnel measures to protect personal data from loss, misuse, unauthorised access, or disclosure.

4.2 Provision of Data

We only request personal data necessary to meet legal or contractual requirements. Failure to provide such data may result in our inability to conclude or perform a contract.

4.3 Contact Form Processing

  • Purpose: Communication with individuals contacting us via our website contact form.

  • Legal Basis: Art. 6(1)(b) GDPR – steps necessary before entering into a contract at the request of the data subject.

  • Recipients: Authorised employees, legal representatives.

  • Retention Period: Until the completion of communication and pre-contractual negotiations. If no contract is concluded, the data will be deleted without undue delay.

  • Cross-border Transfer: Not applicable.

  • Automated Decision-Making / Profiling: Not applicable.

5. Final Provisions

This Privacy Policy may be updated periodically to reflect changes in our processing activities or legal obligations. The current version is always available on our website.