Information about cookie processing

All cookies and similar tools processed on the website www.ppacontroll.sk are managed by the company PPA CONTROL, as, with registered office: Vajnorská 137, 830 00 Bratislava, Company ID: 17 055 164, registration: Commercial Register of the Municipal Court Bratislava III, section: Sa, insert No. 159/B

You can contact the joint responsible person at any time regarding cookies:

• by email to: dpo@ppa.sk
• by phone: +421 2 49237123
• by post to the address: Responsible Person (DPO), PPA CONTROLL, as Vajnorská 137, 830 00 Bratislava

This document supplements and specifies the Protection and Privacy Terms available at www.ppacontroll.sk/ochrana-osobnych-udajov/ and is primarily intended for website visitors, as it focuses on providing information about the use of cookies and similar tools in connection with the use of the website and the use of data obtained in this way.

What types of cookies do we use?

Cookies are text files that are stored in your browser or mobile device when you browse our website and send us information about your activity. This is a technology that improves the use of the website, for example by allowing us to recognize previous visitors when logging into the user environment, remembering the visitor's choice when opening a new window, measuring website traffic or how it is used to improve its user experience.

We use the following basic types of cookies on our website:

• Necessary cookies - are essential for the functioning of the website, as they enable basic website functionality, operation, security, remembering basic settings (e.g. language, font size - so-called preference cookies) and enable basic functions such as page navigation and access to secure areas of the website or very basic traffic measurement without sharing data with a third party; 
• Marketing and analytical cookies - collect data about the use of the website that is not necessary for its functioning and allows us to more directly and precisely target advertisements (for example, on social networks) based on profiling and classifying website visitors into specific demographic groups, as well as measuring the success of these advertisements and campaigns or other statistical measurements of website use.

The law states that we can use cookies even without your consent if they are strictly necessary for the operation and proper functioning of our website that you request to view, while we automatically store necessary cookies on the legal basis of legitimate interests. We require your prior consent for all marketing and analytical cookies., which you can revoke at any time.

At the same time, we distinguish between so-called "1st party" cookies - which are stored directly by us or our servers - and so-called "3rd party" cookies - which are stored by our external service providers / third parties.

For what purposes and on what legal basis do we use cookies?

We use essential and marketing-analytical cookies to:

These unifying purposes consist of several processing operations described below:

These above-mentioned processing operations are also carried out on the basis of our legitimate interests, which are:

• Optimal functioning of websites;
• Website security;
• Basic measurement of website traffic.

What specific cookies do we use and what is their lifespan?

Our websites directly store information in a cookie file about permanently hiding the cookie notification bar after the visitor has given their consent. In addition, we use www.ppacontroll.sk also so-called "session cookies", which contain only non-personal information about the site visitor and are automatically deleted after closing the browser. They provide us with a lot of useful information, such as how many visitors have been to the site or what browsers they use, thanks to which we are able to optimize and improve our site. We also use so-called "functional cookies", which allow us to remember the login details of the site visitor, ensure security after logging in. In addition, cookies are used by third-party tools that are implemented on our websites and serve mainly to support our marketing, statistical and analytical activities that allow us to operate a modern website. We can divide our cookies into the following categories: i) necessary, ii) statistical, iii) marketing. Necessary cookies help make our website usable by enabling basic functions such as page navigation and access to secure areas of the website. Without these cookies, the website cannot function properly. Statistical cookies help us understand how visitors interact with the website by anonymously collecting and reporting information. Marketing cookies are used to track visitors on the website. The purpose is to display advertisements that are relevant and engaging for the individual user, and thus more valuable to third-party publishers and advertisers. In addition, cookies are used by third-party tools that are implemented on the websites of the PPA CONTROLL group. Specifically, we use the following cookies:.

How can I withdraw consent?

By interacting with the active "Cookie Settings" element, you will be shown the cookies bar again, where you can change your original preference to disagree with just one click (see image below). The changes to the settings will take effect immediately.

You can also withdraw your consent by submitting a data subject request to our data controller, but this process is not immediate and automatic. We therefore recommend that you change your settings directly on the Websites as described above.

How to control cookies?

If you do not consent through our cookie bar (in the case of marketing and analytical cookies), these cookies will not be stored on your device, which will not affect the functionality of the website. You can control and/or delete cookies at your own discretion at any time through your internet browser settings. If you delete even essential cookies, some settings and functions of the website may not work.    

Third-party marketing and analytical cookies can also be controlled through so-called opt-out mechanisms, which prevent the use of specific third-party cookies not only in relation to our website, but also in relation to the use of any other websites, or in relation to specific social networks that you use and on which you have set up your own user account.

Cookies stored in your browser can also be deleted through your internet browser settings according to the information below, depending on which browser you are using:

• Google Chrome
• Safari (iPhone)
• Safari (Mac)
• Mozilla Firefox
• Samsung Internet (Mobile)
• Microsoft Edge
• Internet Explorer
• Opera

If you wish to increase your protection against unauthorized tracking of your device and Internet behavior via cookies (especially third-party ones), use the "Do Not Track" function (or Blocking third-party cookies), which you can enable according to the type of browser you use according to the following instructions:

• Firefox
• Internet Explorer
• Edge
• Chrome
• safari
• Opera

How do we use social networks and third-party plug-ins?

 Google reCAPTCHA

As part of security our website against cyber attacks, we currently use Google reCAPTCHA. By using our website, you acknowledge that the ReCAPTCHA API works by collecting hardware and software information about your end device used when browsing our website and sending it to Google for analysis. This data is used to improve this service and for general security purposes, and will not be used to display personalized advertising by Google. For further details on the processing of personal data, please refer to the Privacy Policy, the Google Terms of Service and the additional information for Google reCAPTCHA, which also applies to the provision of this service.

Google Ads

Google Ads collects data using Google Tag (gtag.js), Google Ads conversion tracking a Google Ads RemarketingIf activated Google Consent Mode, respects users' consent. The following data is collected when using Google Ads: IP address (anonymized in GA4, but used in Ads), Cookies and Device ID, Website Interactions, Conversions, Demographics, Geographic Data (approximate location by IP). If these tools are used, Google Ads remarketing - tracks users who have already visited the website, Google Ads conversion tracking - measures whether the user has taken the desired action, Google Analytics 4 - integration with Ads for better attribution.    

Our website also provides simple links that allow for an immediate connection between our website and our profile on a social network or other platform (e.g. Facebook, YouTube, LinkedIn). In connection with the connection and use of social networks, we recommend that you familiarize yourself with the privacy policies of the social media platform providers through which we communicate. Our privacy policies only explain basic issues related to the management of our profiles or those of our clients. We only have typical administrative rights when processing your personal data through our or client profiles. We assume that by using social networks, you understand that your personal data is primarily processed by social media platform providers (such as Facebook and LinkedIn) and that we have no control over and are not responsible for this processing, the further provision of your personal data to third parties and the cross-border transfer to third countries carried out by these social media platform providers for their own purposes. PPA CONTROLL is not interested in processing your personal data from a special category of personal data on any social network profile. Any additional information provided by you that would reveal such sensitive data will be considered as incidental acquisition of so-called observed data, which will not be further systematically processed, except for their deletion or anonymization.

Facebook and Instagram

Our website has integrated social media plugins ("plugins") of the social network Facebook or Instagram, which is operated by Meta Platforms Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA ("Facebook"). You can recognize them by the Facebook or Instagram logo on the website. When you visit our website, Facebook receives the information that you have visited the website with your IP address. If you click on the "like" button or the Facebook icon available on our website while you are logged in and/or registered with your Facebook account, the content of the website will be redirected to your Facebook profile. Facebook can then assign your visit to the website to your user account. The data transfer takes place regardless of whether you have a Facebook account or not.

Facebook Ads (Meta) uses Facebook Pixel or Conversions API (CAPI) to track activities. This includes tracking data such as Cookies and Facebook ID, IP address and device information (e.g. operating system, device type), Website interactions (visits, clicks, adding to cart, purchase), Conversions (e.g. submitting a form, completing an order), Email or phone number or time and date of interaction. Facebook Pixel – tracks website visitors and enables retargeting and Facebook Conversions API (CAPI) – sends data directly from the server, not via cookies.  

The operator would like to point out that when using our website, it has no influence on the collected data and data processing processes, and we are also not aware of the total scope of the collected data, the purpose of the processing or the storage period of this data. Facebook stores the collected data about you as user profiles and uses them for its own purposes of advertising, market research and/or adapting its services and tools to registered users. Such an evaluation is carried out in particular in order to inform other Facebook users about your activities on our website. You have the right to object to the creation of such user profiles, and you must contact Facebook with your objection. After you have finished using Facebook, we always recommend that you log out, in particular in order to avoid your online activity being assigned to your profile. Further information on the purpose and scope of data collection and processing by Facebook can be found in Facebook's Privacy Policy at the following link: https://www.facebook.com/policy.php.

When managing our user profiles set up on the social network Facebook, your personal data may also be processed for statistical purposes. When you visit our profiles set up on Facebook, Facebook records, among other things, your Internet IP address as well as other information that is stored on your computer in the form of “cookies”. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. You can find more information about this statistical information (“insights”) at: https://www.facebook.com/help/pages/insightsIn this processing, we act as joint controllers with Facebook, and the essential elements of the joint controller agreement for this case are available here: https://www.facebook.com/legal/terms/page_controller_addendum

We also inform you that we may use services provided by Facebook Ireland Limited, with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, which are designated as “data file custom audiences” – audience management for the implementation of advertising campaigns, whereby the data processed by us may be linked to personal data processed in Facebook databases, and “measurement and analytics”, within which Facebook processes personal data on our behalf in order to measure the performance and reach of our advertising campaigns and provide us with reports on users who have seen and responded to our advertising content. This processing of your personal data may therefore occur if you interact with our advertising content or our websites as part of the use of your user profile established on Facebook. In such cases, we use Facebook as an intermediary, and the following legal guarantees apply to the processing of your personal data: https://www.facebook.com/legal/terms/businesstools, https://www.facebook.com/legal/terms/dataprocessing.

If you are bothered by the processing of personal data explained above, you can object to it or you can also use the available self-regulatory tools developed for the online marketing sector, which are available here: http://www.aboutads.info/choices a http://www.youronlinechoices.eu/). These online tools will allow you to automatically identify third-party digital identifiers (including those from Facebook) in your browser and delete them, thereby preventing the possible processing of your personal data.

LinkedIn

If you visit and use our profile established on this social network, we may process your personal data together with LinkedIn Corporation, located at 1000 W Maude Ave Sunnyvale (HQ), California, USA, which is part of the Microsoft group, for statistical purposes within the framework of the use of the “page insights” service. You can find more information below.

However, the use of this social network is primarily important for us in that, through our professionally managed account, we build awareness of the PPA CONTROLL group in the online environment (e.g. by adding PR content) and, secondly, to establish internal communication with experts and professionals whom we might be interested in employing or establishing another form of professional cooperation with. Through our account, our HR staff can communicate with our potential business partners or suitable candidates for filling a vacant position. In addition, we can also use the services of LinkedIn Ireland Unlimited Company aimed at supporting our marketing and PPC (Pay Per Click) campaigns, the aim of which is mainly to increase traffic to our websites or purpose-built sub-pages (microsites). We may also use LinkedIn tools to manage our campaigns such as (Campaign manager) and personalized internal mail to send our content to build PR and awareness of the PPA CONTROLL group, or to inform about a job vacancy suitable for your profile. In the event that we use these services, LinkedIn will act as our intermediary, and the legal guarantees explained below apply to the processing of your personal data.

YouTube

Our website includes YouTube videos from YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, which are stored on www.youtube.com and can be played directly from our website. When you visit our website, YouTube receives information that you have accessed a subpage of our website. When you run advertisements on YouTube via Google Ads, the interaction of users with the videos is monitored. YouTube stores the data obtained about you as user profiles and uses them for advertising, market research and/or to adapt its website to the needs of users. The data is transferred regardless of whether YouTube provides a user profile through which you are logged in or whether there is no user account. If you have a user profile on YouTube and do not want it to be assigned to your profile, you must log out before activating the YouTube button. The user profile is also evaluated for non-logged-in users, in particular for the purpose of providing appropriate advertising and so that other YouTube users are also informed about your activities on our website. You have the right to object to the creation of such user profiles, in which case you must contact YouTube. The operator has no influence on the data transfer and use of your data by YouTube and you can use the link to obtain further information regarding your data protection: https://policies.google.com/privacy.

When using YouTube through Google Ads, the following data is collected: Cookies and Device ID, YouTube viewing history, Ad interactions, Geographic data, Device type and browser, Demographic data (age, gender - if available). In the case of engaging the above tools, YouTube remarketing – allows targeting to viewers who have already seen ads and YouTube conversion tracking – measures whether a user took an action after seeing an ad.

PPA CONTROLL is responsible for the processing of your data only to a certain extent, for example if you visit our profile, if we communicate with each other on a social network or if we target advertising on social networks to you. On our social network profiles, we may process your personal data and cookies for marketing or statistical purposes together with the relevant social network operators as so-called joint controllers within the meaning of the GDPR. Based on this fact, we are obliged to inform you about the essential parts of the agreements we have concluded pursuant to Art. 26 GDPR:

• Joint operator agreement concluded with Meta (Facebook)
• Joint controller agreement concluded with LinkedIn
• Operator agreement concluded with Google (Youtube)

Do we transfer your data to third countries outside the EU/EEA?

To the extent necessary and minimal, yes. Some of our suppliers that we use for the use of cookies are based in the United States of America, or their other group companies are based in the United States of America, which is generally considered a third country that does not ensure an adequate level of protection. In many cases, the data may not physically leave servers located in the EU, but the processing may be subject to the legal order of a third country due to the supplier's location. We therefore only carry out these cross-border transfers in strict accordance with legal regulations (in particular the GDPR) and only in cases where, according to our conclusions and findings, additional measures are taken to mitigate the risks for data subjects, as the Court of Justice of the EU ruled in case C-311/18 (Schrems II).

The European Commission adopted on 10 July 2023 new implementation decision, which approved "EU-US Data Privacy Framework", which constitutes an adequacy decision pursuant to Art. 45 GDPR. On its basis, transfers of personal data to certified organizations (data importers) in the USA can be carried out without the need for further authorization or the need to adopt additional safeguards and measures.

If we cannot rely on the European Commission's decision on the adequacy of a third country under Article 45 GDPR, we require the adoption of specific safeguards under Article 46 GDPR (most often so-called standard contractual clauses) or Article 47 (so-called binding corporate rules) and, if necessary, the adoption of other additional measures to protect the rights and freedoms of data subjects.

[1] Recommendation No 1/2020 of the European Data Protection Board on measures supplementing the transfer instruments to ensure compliance with the level of personal data protection in the EU

Change of terms of use of cookies

The protection of personal data is not a one-time issue for us. The information that we are obliged to provide you with in relation to our processing of personal data may change or cease to be up-to-date. For this reason, we reserve the right to modify and change these terms and conditions at any time to any extent. If we change these terms and conditions in a material way, we will bring this change to your attention, e.g. by a general notice on this website or by a separate notice via email.

Management of PPA CONTROLL, as

Bratislava, 01.03.2025

Version 1.1