provided according to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons in the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation), in effect from 25.05.2018 (hereinafter referred to as “GDPR Regulation”) and according to Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments to Certain Acts, as amended on 25.05.2018 (hereinafter also referred to as “Act on Personal Data Protection”).
All personal data are processed in accordance with the GDPR Regulation with effect from 25.05.2018.
I hereby acknowledge that the website controlled on behalf of Westend Crossing, with its registered office at Dvořákovo nábrežie 10, 811 02 Bratislava, ID: 47 928 905, registered in: The Commercial Register of the Bratislava I District Court, Section: Sa, File No. 6775/B (hereinafter also referred to as “Westend Crossing”) is not directly intended for people who cannot authorize the controller to process their personal data themselves.
A. Who we are
Westend Crossing is a company, which cooperates with J & T REAL ESTATE, a.s. with its registered office at Dvořákovo nábrežie 10, 811 02 Bratislava, ID: 35 712 155, registered in: The Commercial Register of the Bratislava I District Court, Section: Sa, File No. 1352/B (hereinafter referred to as “J & T REAL ESTATE”), implemented the construction of the development project [Westend].
Westend Crossing records your interest in receiving news and current information about suitable offers and marketing information related to development projects implemented also in cooperation with the J & T REAL ESTATE. More information about the development projects implemented by J & T REAL ESTATE is available at: http://www.jtre.sk/projekty (hereinafter referred to as the “Projects”).
From the moment you grant consent to the processing of personal data for the purpose of direct marketing, which includes addressing the Data Subjects with the marketing offers of the Controller, of the Westend Crossing, Westend Crossing processes your personal data related to your person up to the following extent:
the data referred to in Points 1) to 3) above hereinafter collectively referred to as also “Personal Data”), which is in accordance with the GDPR Regulation.
B. Information on the processing of Personal Data on behalf of Westend Crossing according to the GDPR Regulation and the Personal Data Protection Act
1. Identification and contact details of the Controller
The Controller, on behalf of which the Personal Data is processed, is Westend Crossing, with its registered office at Dvořákovo nábrežie 10, 811 02 Bratislava, ID: 47 928 905, registered in: Commercial Register of the Bratislava I District Court, Section: Sa, File No.: 6775/B.
2. The purposes of processing Personal Data and the legal basis for the processing of Personal Data
Westend Crossing, as the Controller, processes Personal Data to the extent that it was provided by you as the Data Subject for the following purposes:
(i) the purpose of direct marketing, to inform clients, as the Data Subject, about news on the individual Projects implemented also in cooperation with Westend Crossing and addressing clients with other marketing offers of the Controller, of the Westend Crossing, through direct mail, direct offers, or another suitable form. The legal basis for the processing of Personal Data is the authorized interest of Westend Crossing (Article 6, Paragraph 1, Letter f) of the GDPR) or consent if the client provides an email address and declares consent to the processing of his/her Personal Data for the purpose of sending business and marketing information from Westend Crossing as the Controller (Article 6, Paragraph 1, Letter a) of the GDPR);
(ii) the purpose of fulfilling the obligations of Westend Crossing, as the Controller, according to applicable legislation, e.g. tax obligations or obligations related to consumer protection in the internal market. The legal basis for the processing of Personal Data is the fulfillment of legal obligations (Article 6, Paragraph 1, Letter c) of the GDPR);
(iii) statistical purposes, for the purpose of combining Personal Data with other client data for the purpose of creating reports that help improve the service of Westend Crossing, as the Controller, while maintaining technical and organizational measures to ensure compliance with the principle of data minimization. The legal basis for the processing of Personal Data is thus compatible with the further processing of Personal Data (Article 5, Paragraph 1, Letter b) together with Article 89 1 of the GDPR);
(iv) the purpose of keeping a record of the requests of Data Subjects and their handling by the Controller, Westend Crossing. The legal basis for the processing of Personal Data is the authorized interest of Westend Crossing (Article 6, Paragraph 1, Letter f) of the GDPR).
3. Categories of Data Subjects
Westend Crossing, as the Controller, processes Personal Data for purposes of direct marketing related to clients, as the Data Subjects, for which Westend Crossing records that they have expressed interest in any of the Westend Crossing Projects.
4. Authorized Interests Pursued by Westend Crossing as the Controller
Westend Crossing sees an authorized interest in the possibility of acquainting clients in the future with suitable offers related to the Projects. The legal basis for the processing of Personal Data on behalf of Westend Crossing for the purpose of direct marketing is an authorized interest of Westend Crossing according to the relevant article of the GDPR and the relevant provisions of the Personal Data Protection Act, on the condition that in the case of such interests on the part of Westend Crossing they do not outweigh the interests or basic rights and freedoms of the Data Subject that require the protection of personal data.
If you are not interested in receiving news and up-to-date information on promotional offers related to the Projects as the Data Subject, you may, at any time and free-of-charge, exercise the right to object due to reasons related to your concrete situation, to the processing of Personal Data for the purpose of direct marketing by Westend Crossing, as the Controller, mainly in the following ways:
If you object to the processing of Personal Data for the purpose of direct marketing, Westend Crossing will not further process your Personal Data, and you will not receive any news from Westend Crossing.
In handling the requests of the Data Subject, Westend Crossing sees its authorized interest in the possibility of demonstrating compliance of the procedures with the requirements of the GDPR.
5. Guidance on the Voluntariness or Obligation to Grant Consent to the Processing of Personal Data
If the Data Subject is interested in the Controller, Westend Crossing, sending news and marketing information, the Data Subject is obliged to provide at least its email address to Westend Crossing and to grant consent to the processing of his/her Personal Data for the purposes of direct marketing, otherwise it is not possible to subscribe to the news and marketing information sent by Westend Crossing.
6. Recipients or Categories of Recipients of the Personal Data
It is expected that the Personal Data processed on behalf of Westend Crossing, as the Controller, will be provided to the following recipients for the purpose of direct marketing:
i. J & T REAL ESTATE, a.s., with its registered office on Dvořákovo nábrežie 4, 811 02 Bratislava, ID: 35 712 155, registered in: The Commercial Register of the Bratislava I District Court, Section: Sa, File No. 1352/B;
ii. Touch4IT s.r.o., with its registered office at Hany Meličkovej 5, 841 05 Bratislava, ID: 48 024 066, registered in: The Commercial Register of the Bratislava I District Court, Section: Sro, File No.: 102430/B (hereinafter referred to as “Touch4IT s.r.o.”);
iii. MailChimp c/o The Rocket Science Group, LLC, with its registered office at 675 Ponce De Leon AVE NE, Suite 5000, Atlanta, GA 30308 USA, MOSS No. EU 826 477 914 (hereinafter referred to as “MailChimp”);
iv. J & T SERVICES SR, s.r.o., with its registered office at Dvořákovo nábrežie 8, 811 02 Bratislava, ID: 46 293 329, registered in: The Commercial Register of the Bratislava I District Court, Section: Sro, File No.: 75888/B;
v. J&T SERVICES ČR, a.s., with its registered office at Pobřežní 297/14, 186 00 Prague 8, ID: 281 68 305, registered in: Commercial Register of the Municipal Court in Prague, Section: B, File Number: 12445;
vi. companies belonging to the JTRE Group.
7. The Transfer of Personal Data to a Third Country
In order for J & T Real Estate to properly provide electronic newsletters services, your Personal Data may be transferred to a third country, to the USA, but in such case, the Commission Implementing Decision (EU) 2016/1250 as of 12 July 2016 according to the Directive 95/46/EC of the European Parliament and of the Council on the adequacy of the protection provided by the EU-US Personal Data Protection Shield (notified under document number C (2016) 4176) shall apply.
The transfer of Personal Data to the US may be carried out by means of MailChimp. MailChimp has its own certification due to the maintenance of security rules related to personal data protection for EUU. S. Privacy Shield and Swiss-U.S. Privacy Shield transactions and legally transfers EU/EEA personal data to the USA in accordance with Privacy Shield certification. Every year, MailChimp also completes a SOC II Type 2 exam in the Core Criteria for ensuring Trust, Integrity in Processing, Confidentiality, and Availability.
8. The Retention Period of Personal Data, or the Criteria for Determining the Processing Period of Personal Data
Personal data will be processed until the period when the purpose of processing the Personal Data for which it was obtained expires, however, at the latest until the legal basis for the processing of Personal Data according to the GDPR and the Act on Personal Data Protection is in force.
9. Information Related to Automated Individual Decision-Making
Westend Crossing, as the Controller, does not use any of the automated individual decision-making or profiling procedures in the processing of Personal Data on behalf of Westend Crossing.
10. Information on Other Rights of Clients, as the Data Subjects, in Accordance with Valid and Effective Legislation and Information on the Procedures for Exercising the Rights of Clients, as the Data Subject, According to the Provisions of the Personal Data Protection Act
On the condition of compliance with the valid and effective legal regulations governing personal data protection according to the GDPR and according to the Act on Personal Data Protection, as the Data Subject you have the following rights:
· The Right to Request Access to the Personal Data Related to Him/Her from the Controller, according to Article 15 of the GDPR:
The Data Subject has the right to obtain from Westend Crossing, as the Controller, confirmation of the processing of the personal data related to him/her and, if so, he/she has the right to access such personal data and the following information:
If personal data are transferred to a third country or international organization, the Data Subject shall have the right to be informed of reasonable guarantees regarding the transfer according to Article 46 of the GDPR.
Westend Crossing, as the Controller, will provide a copy of the personal data being processed. For any further copies requested by the Data Subject, the Controller may charge a reasonable fee corresponding to the administrative cost. If the Data Subject has made the request through electronic means, the information shall be provided in a commonly used electronic form, unless the Data Subject has requested a different method. The right to obtain a copy must not result in an adverse effect on the rights and freedoms of others.
· Right to the Rectification of Personal Data according to Article 16 of the GDPR:
The Data Subject has the right so that Westend Crossing, as the Controller, corrects incorrect personal data relating to him/her without undue delay. With regard to processing purposes, the Data Subject is entitled to supplement incomplete personal data, also through the provision of a supplementary statement.
· Right of Deletion (Right to “Obscurity”) according to Article 17 of the GDPR:
The Data Subject also has the right to obtain from Westend Crossing, as the Controller, the deletion of the personal data concerning him/her without undue delay and Westend Crossing, as the Controller, is obliged to delete personal data without undue delay if any of the following reasons are met:
If the Controller discloses personal data and is obliged to delete personal data, taking into consideration available technology and the cost of implementing the measures, it shall take reasonable measures, including technical measures, to inform the Controllers who process the personal data that the Data Subject is requesting them to delete all references to such personal data, along with their copies or replicas.
The right of deletion does not apply if processing is necessary:
· The Right to Restrict Processing according to Article 18 of the GDPR:
The Data Subject has the right to restrict the processing by the Controller for one of the following cases:
If the processing in accordance with the above-mentioned restriction has been restricted, such personal data shall, with the exception of retention, be processed only with the consent of the Data Subject or for the purpose of proving, applying or defending legal claims or for the protection of the rights of another natural person or legal entity or for reasons of significant public interest for the Union or a Member State.
A Data Subject who has attained a restriction in processing in accordance with the abovementioned is informed by the Controller before the processing restriction is revoked.
· The Right to Data Portability according to Article 20 of the GDPR:
The Data Subject has the right to obtain personal data relating to him/her and which he/she has provided to the Controller in a structured, commonly used and machine-readable format and has the right to transfer this data to another Controller without the provider to whom the personal was provided preventing the transfer, if: a) the processing is based on the consent referred to in Article 6, Paragraph 1, Letter a) or Article 9, Paragraph Article 2, Letter a) of the GDPR or the contract referred to in Article 6, Paragraph 1, Letter b) of the GDPR, and b) where the processing is performed through automated means.
In the exercising of his/her right to data portability, the Data Subject has the right to transfer personal data directly from one Controller to another Controller, as much as technically possible. The Data Subject has the right to obtain personal data relating to him/her and which he/she has provided to the Controller in a structured, commonly used and machine-readable format and has the right to transfer this data to another Controller without the provider to whom the personal was provided preventing the transfer, if: a) the processing is based on the consent referred to in Article 6, Paragraph 1, Letter a) or Article 9, Paragraph Article 2, Letter a) of the GDPR or the contract referred to in Article 6, Paragraph 1, Letter b) of the GDPR, and b) where the processing is performed through automated means.
In the exercising of his/her right to data portability, the Data Subject has the right to transfer personal data directly from one Controller to another Controller, as much as technically possible.
The application of the law does not affect Article 17 of the GDPR. This right does not apply to the processing necessary to meeting a task performed in the public interest or in the exercise of public authority entrusted to the Controller. The right to data portability must not have an adverse effect on the rights and freedoms of others.
· The Right to Object to Processing, Including Objection to Profiling (If Performed) according to Article 21 of the GDPR:
The Data Subject shall have the right at any time to object, for reasons relating to his or her concrete situation against the processing of personal data concerning him/her, which is performed pursuant to Article 6, Paragraph 1, Letter e) or f) of the GDPR, including objection to profiling, based on the above-mentioned provisions. The Controller may not further process personal data unless it demonstrates the necessary authorized reasons for processing, which outweigh the interests, rights and freedoms of the Data Subject or reasons for proving, applying or defending legal claims. If the personal data are processed for the purposes of direct marketing, the Data Subject has the right at any time to object to the processing of personal data relating to him/her for the purposes of such marketing, including profiling in the range related to such direct marketing. If the Data Subject opposes the processing for purposes of direct marketing, the personal data may no longer be processed for such purposes.
In relation to the use of information society services and regardless of Directive 2002/58/EC, the Data Subject may exercise his/her right to object to automated means by use of technical specifications. If the personal data are processed for purposes of scientific or historical research or for statistical purposes according to Article 89, Paragraph 1 of the GDPR, the Data Subject has the right to object, for reasons related to his/her concrete situation, to the processing of personal data concerning him/her, except in cases when processing is necessary for meeting a task due to public interest.
· The Right to File a Grievance to the Supervisory Authority Pursuant to Article 77 of the GDPR:
The supervisory authority to which the Data Subject addresses his/her complaint in justified cases shall be understood as the Office for the Protection of Personal Data of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27.
· The Right to Revoke Consent to Processing according to Article 7 of the GDPR:
In case the legal basis for the processing of personal data is the consent of the Data Subject, the Data Subject may at any time revoke his/her consent without impacting the lawfulness of the processing based on the consent granted prior to its revoking.
The right to revoke consent at any time, even before the expiration of the period for which it was granted, may be exercised by the Data Subject mainly through the following ways:
a) by clicking on the relevant link found in each newsletter at any time and free-of-charge;
b) through the telephone line at +421 2 5941 8200;
c) through e-mail: unsubscribe@jtre.sk; or
d) by post to the registered office of Westend Crossing, at the following address: Dvořákovo
nábrežie 10, 811 02 Bratislava.Westend Crossing is obliged to take appropriate measures and provide information to the Data Subject according to Section 19 and 20 of the Personal Data Protection Act and notifications according to Sections 21 to 28 and 41 of the Personal Data Protection Act concerning the processing of his/her personal data, in a concise, transparent, comprehensible and easily accessible form, clearly worded, mainly for information intended specifically for a child. Westend Crossing is obliged to provide information paper or electronic form, regularly in the same format as the sent request. If requested by the Data Subject, Westend Crossing may also provide orally information if the Data Subject can prove his/her identity through another method.
Westend Crossing provides assistance to the Data Subject in exercising his/her rights according to Sections 21 to 28 of the Personal Data Protection Act. In the cases specified in Section 18, Paragraph 2 Westend Crossing, as the Controller , cannot refuse to act on the basis of the request of a Data Subject in the exercising of his/her rights according Sections 21 to 28 of the Personal Data Protection Act, unless it proves that it is not able to identify the Data Subject.
Westend Crossing is obliged to provide the Data Subject with information on the measures that were taken at his/her request according to Sections 21 to 28 of the Personal Data Protection Act within one month of receiving the request from the Data Subject. In justified cases the abovementioned period can be extended by Westend Crossing for another two months, with regard to the complexity and the number of applications, also if repeated. However, Westend Crossing is obliged to inform the Data Subject of any such extension within one month of receiving the request along with the reasons for the extension of the period. If the Data Subject has sent in a request in electronic form, Westend Crossing will provide the information in electronic form if the Data Subject did not request that the information be provided through another method.
If Westend Crossing fails to carry out measures at the request of the Data Subject, it shall, within one month from receiving the request, inform the Data Subject of the reasons for the failure to take measures and the possibility of filing a proposal according toSection 100 of the Personal Data Protection Act at the Office for the Protection of Personal Data of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27.
Information according to Sections 19 and 20 of the Personal Data Protection Act and the notifications and measures taken according to Sections 21 to 28 and 41 of the Personal Data Protection Act are provided free-of-charge. If the request of the Data Subject is manifestly unfounded or inappropriate mainly due to its recurring nature, Westend Crossing may:
a) require a reasonable fee, considering the administrative costs of providing information or a reasonable fee considering the administrative costs of communication or a reasonable fee considering the administrative costs of implementing the requested measure; or
b) refuse to act on the basis of the request.
Westend Crossing shall prove the irrelevance or inappropriateness of the request. Westend Crossing may request the provision of additional information necessary to verify the identity of the Data Subject if it has reasonable doubts as to the identity of the natural person who submitted the request according to Section 21 to 27 of the Personal Data Protection Act; laid down bySection 18 of the Personal Data Protection Act.
In case of any questions, you can contact Westend Crossing at any time through the contact form specified and found on the website. Besides our contact form, you can also contact us at any time through the phone line, at +421 2 59418200, through e-mail info@westend.sk or through post, at the address of Westend Crossing, at the following address: Dvořákovo nábrežie 10, 81 02 Bratislava.
We have good news for you. The streetfood festival will be back again on Tuesday, October 16th. You can enjoy this event in an autumn mood. At the Westend Gate car park from 11:00 am, you can try some delicacies of Slovak and European cuisine. Food Park will offer traditional food such as duck, favourite […] Read more >>
The construction works on the last building of our Westend business complex zone are slowly coming to an end. WESTEND PLAZZA is a business centre of the newest generation, that is about to bring 33 000 m2 of top standard office space, as well as a superb congress centre consisting of three conference halls of […] Read more >>
Have you long been a fan of the famous American sweet dough with a hole in the middle and various toppings, or have you not tasted this delicacy just yet? La Donuteria is about to offer its sweet doughnuts to you at Westend as of August 1. And that’s not all! On the opening day […] Read more >>