The data subject may exercise his rights by submitting an application, namely:

• by email to the address of the responsible person dpo@egroup.sk, or
• by consignment delivered to the address of the Controller's registered office, specified in the Contact tab.

The Controller shall cooperate with the data subject in exercising his rights.

The Controller may request additional information necessary to confirm the identity of the data subject if he has reasonable doubts about the identity of the natural person making the request.

If the request is manifestly unfounded or disproportionate, in particular due to its recurring nature, the Controller may refuse to act on the request of the data subject or may charge a reasonable fee taking into account the administrative costs incurred in processing the request. In other cases, the information within the meaning of Art. 12 par. 5 of the Regulation and § 29 par. 5 of the Act is provided FOR FREE.

The Controller shall provide the data subject with information on the measures taken on the basis of the application pursuant to Articles 15 to 22 of the Regulation or pursuant to Sections 21 to 28 of the Act, without undue delay and in any case within one month of receipt. That period may be extended by further two months if necessary, taking into account the complexity of the application and the number of applications. The Controller shall inform the data subject of any extension within one month of receipt of the application, as well as of the reasons for the extension. If the data subject has submitted the application by electronic means, the information shall, as far as possible, be provided by electronic means, unless the data subject has requested otherwise.

In the event that the Controller does not take measures at the request of the data subject, it shall immediately and no later than one month from the delivery of the application inform the data subject of the reasons for failure to act and the possibility to file a complaint to the supervisory authority to file a motion to initiate proceedings on the protection of personal data in accordance with the Act.

The Controller shall notify each recipient to whom personal data have been provided of any rectification, erasure or restriction of personal data processing carried out pursuant to Articles 16, 17 and 18 of the Regulation or pursuant to Sections 22, 23 and 24 of the Act, unless this proves impossible or requires unreasonable efforts. The Controller shall inform the data subject of these recipients if the data subject so requests.