Privacy policy
FOXX MEDIA GROUP, s. r. o. respects your privacy and is committed to processing personal data in accordance with applicable data protection laws, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (“GDPR”), and the applicable laws of the Slovak Republic.
This Privacy Notice explains what personal data we process, why and on what legal basis we process it, how long we retain it, to whom we may disclose it, and what rights you have in relation to the processing of your personal data.
1. Data Controller
The data controller is:
FOXX MEDIA GROUP, s. r. o.
Registered address: Astrová 27, 974 01 Banská Bystrica, Slovak Republic
Company ID: 50968467
VAT ID: SK2120544437
Website: https://www.foxx-media.com
Contact email: foxx@foxx-media.com
In this Privacy Notice, the company is also referred to as the “Controller” or “FOXX”.
The Controller is responsible for processing personal data to the extent that it determines the purposes and means of processing. Where other companies or service providers are involved, their roles and responsibilities are determined according to the actual processing arrangements and applicable law.
2. What Personal Data We Process
Depending on how you communicate with us or use our website, we may process the following categories of personal data:
Identification and professional information, such as your name, surname, company name, job title or professional position.
Contact details, such as your email address, telephone number and postal address.
Communication data, including the content of messages, enquiries, requests and other information you provide when communicating with us.
Business relationship data, including information necessary for negotiations, entering into and performing contracts, providing services and maintaining related records.
Technical data, which may include your IP address, device and browser information, access times, pages visited and information collected through cookies or similar technologies, where used on the website.
The categories of data processed depend on the specific purpose and the circumstances in which the data are collected. We process only data that are adequate, relevant and necessary for the relevant purpose.
3. How We Collect Personal Data
We primarily collect personal data directly from you, for example when you:
- contact us by email or through another communication channel,
- request information about our services or activities,
- discuss business cooperation with us or enter into a contract,
- attend a meeting or event organised or supported by FOXX,
- use our website.
In justified circumstances, we may also obtain data from publicly available sources or business partners where this is lawful and necessary for the relevant purpose.
Where personal data are obtained from a source other than the data subject, we will provide the required information within the scope and time limits prescribed by the GDPR.
4. Purposes and Legal Bases for Processing
We process personal data only where an appropriate legal basis under the GDPR applies.
4.1 Communications and Enquiries
We use personal data to respond to questions, handle requests and manage ordinary business communications.
Depending on the circumstances, the legal basis is our legitimate interest in maintaining proper communications or taking steps at your request before entering into a contract.
4.2 Business Relationships and Contracts
We process personal data to discuss cooperation, enter into and perform contracts, provide services, maintain related records and communicate with business partners.
The legal basis may be the performance of a contract, taking steps before entering into a contract, or our legitimate interest, depending on the circumstances.
4.3 Compliance with Legal Obligations
We may process personal data to comply with obligations imposed by applicable law, for example in relation to accounting, taxation or the retention of legally required records.
The legal basis is compliance with a legal obligation to which the Controller is subject.
4.4 Security and Protection of Rights
We may process personal data to maintain website security, prevent misuse, protect legal claims and establish, exercise or defend legal rights.
The legal basis may be the Controller’s legitimate interest or compliance with a legal obligation.
4.5 Marketing Communications
Where we carry out marketing communications, we use personal data only to the extent and in the manner permitted by applicable law.
Where consent is required for a particular method of sending marketing communications, we will send such communications only after obtaining that consent. You may withdraw your consent at any time.
Where applicable, each marketing communication must clearly identify the sender and provide a simple way to opt out of further communications.
4.6 Website Analytics and Cookies
If our website uses analytics or advertising tools, we may process data to analyse website traffic, understand how the website is used and improve its functionality.
Technologies that require consent will be used only after valid consent has been given. The specific tools, purposes and settings must reflect the website’s actual technical configuration.
5. Is Providing Personal Data Mandatory?
Providing personal data is generally voluntary.
However, if you do not provide information necessary to respond to your enquiry, prepare a contract or perform a contract, we may be unable to fulfil your request or carry out the relevant activity.
Where providing data is a legal or contractual requirement, or is necessary to enter into a contract, we will inform you in the relevant circumstances.
6. How Long We Retain Personal Data
We retain personal data only for as long as necessary to fulfil the purpose for which the data were collected, or for the period required by applicable law.
When determining retention periods, we consider in particular:
- the purpose and nature of the processing,
- the duration of the business or contractual relationship,
- statutory record retention requirements,
- applicable limitation periods and the need to protect legal claims,
- the validity period of consent, where processing is based on consent.
After the relevant retention period expires, we will delete, anonymise or otherwise securely dispose of the data unless a legal basis requires or permits further retention.
Specific retention periods or criteria must be determined for each category of data according to the Controller’s actual processes.
7. Who May Receive Personal Data
Where necessary, we may disclose personal data to:
- IT, hosting and website maintenance providers,
- providers of analytics and communication tools, where used,
- legal, accounting and other professional advisers,
- contractual partners involved in a specific project or service, where disclosure is lawful and necessary,
- public authorities where disclosure is required by law or a binding decision of a competent authority.
Recipients receive only the data necessary for the relevant purpose. Where a service provider processes data on behalf of the Controller, its role and obligations are governed in accordance with the GDPR.
We do not sell personal data.
Where we use social media or other external platforms, their operators may process personal data in accordance with their own privacy notices.
8. Transfers of Personal Data to Third Countries
Where the services or technologies we use involve transfers of personal data to countries outside the European Economic Area, such transfers will take place only in accordance with the GDPR.
Depending on the circumstances, a transfer may be based on an adequacy decision adopted by the European Commission or on appropriate safeguards, such as Standard Contractual Clauses.
Information about specific transfers and the safeguards used will be provided to the extent required by the GDPR.
9. Your Rights
Subject to the conditions set out in the GDPR, you have the right to:
- request access to your personal data,
- request the rectification of inaccurate or incomplete data,
- request erasure of your data where the legal conditions are met,
- request restriction of processing,
- receive your personal data in a portable format where the legal conditions are met,
- object to processing based on legitimate interests,
- withdraw your consent at any time where processing is based on consent,
- lodge a complaint with a supervisory authority.
Where we process personal data for direct marketing purposes, you have the right to object to such processing at any time. Following your objection, we will no longer process your personal data for that purpose.
You may exercise your rights using the contact details provided in this Privacy Notice.
To protect personal data, we may request reasonable verification of your identity where justified.
Where processing is based on consent, withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
10. Cookies and Similar Technologies
Our website may use essential cookies required for its operation. Depending on its technical configuration, it may also use analytics or other non essential cookies.
Non essential cookies and similar technologies for which consent is required by law may be used only after valid consent has been given.
You may refuse or change your consent through the cookie settings, where available on the website. You may also manage cookies through your internet browser settings.
The specific list of cookies used, their providers, purposes and expiry periods must reflect the website’s actual configuration.
11. Automated Individual Decision Making
Information about automated individual decision making, including profiling, must be provided where such processing takes place and meets the conditions set out in the GDPR.
If the Controller does not carry out such processing, this should be expressly confirmed before the final version of this Privacy Notice is published.
12. Changes to This Privacy Notice
We may update this Privacy Notice if our personal data processing activities, technologies or applicable legal requirements change.
The current version will be published on www.foxx-media.com, together with its effective date.
13. Contact
If you have questions about the processing of personal data or wish to exercise your rights, please contact us:
FOXX MEDIA GROUP, s. r. o.
Astrová 27, 974 01 Banská Bystrica, Slovak Republic
Email: foxx@foxx-media.com Company Details:Company ID: 50968467
VAT ID: SK2120544437
14. Supervisory Authority
If you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the competent supervisory authority.
The supervisory authority in Slovakia is:
Office for Personal Data Protection of the Slovak Republic
Galvaniho Business Centrum II; Galvaniho 7/B; 821 04 Bratislava; Slovenská republika
Contact: Office Secretariat and Registry Office: + 421 2 32 31 32 14; + 421 2 32 31 32 4
Current contact details and information on how to file a complaint are available on the authority’s official website: https://dataprotection.gov.sk/This Privacy Policy takes effect on May 25, 2018.