**DATA PROTECTION PRINCIPLES**

1. **INTRODUCTION**

 

1.1 This website www.fentasy.film (hereinafter referred to as the "Website" or "Internet portal") is owned and operated by the company BeOnMind s.r.o., with registered office at Bosákova 7, Bratislava - Petržalka 851 04, IČO: 45 637 440, registered in the Commercial Register of the District Court Bratislava IIIII, Section: Sro, Insert No.: 66045/B, email address: studio@beonmind.com (hereinafter referred to as the "Controller" or "BeOnMind company" or "we" in the respective grammatical form).

 

1.2 The website www.fentasy.film is intended to inform the general public about the feature film titled FENTASY.

 

1.3 BeOnMind s.r.o, as the controller of the relevant information system for processing personal data represented by this website, processes the personal data of individuals who are:

1.3.1 visitors to the website (hereinafter referred to as "Website Visitor")

1.3.2 registered users of the website (hereinafter referred to as "User")

(hereinafter collectively referred to as the "Data Subject" in the respective grammatical form).

 

1.4 We value and respect your privacy, and therefore, we emphasize the protection of your personal data. We process your personal data in accordance with the Personal Data Protection Act and amendments No. 18/2018 Z.z. and in compliance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation).

 

1.5 BeOnMind s.r.o issues these Principles of Personal Data Protection (hereinafter referred to as "Principles") in accordance with § 19 of the Personal Data Protection Act and Articles 13 and 14 of the Regulation. The purpose of these Principles is to provide you, as the data subject, with a legal framework of information to be provided when collecting and processing your personal data, or when obtaining personal data from a source other than the data subject.

 

1.6 When browsing our website, in addition to the provisions of these principles of BeOnMind s.r.o, you also accept the terms of use of this website. Therefore, if you do not accept these conditions and/or principles for browsing our website, please do not visit our website and do not use the content and services offered through our website.

 

2. **DEFINITION OF BASIC TERMS**

2.1 "Personal data" means any information about an identified or identifiable natural person, whereby identification can be directly or indirectly made, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or by reference to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

 

2.2 "Supervisory authority" is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, Slovak Republic, email address: statny.dozor@pdp.gov.sk

 

2.3 "Controller" is a natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.

 

2.4 "Recipient" is a natural or legal person, public authority, agency, or another body to whom personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.

 

2.5 "Profiling" is any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

 

2.6 "Pseudonymization" is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

 

2.7 "Processing" is an operation or set of operations which is performed on personal data or on sets of personal data, whether or

 

 not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

 

2.8 "Processor" is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.

 

2.9 "Third party" is a natural or legal person, public authority, agency, or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

 

3. **PRINCIPLES OF PROCESSING PERSONAL DATA**

 

3.1 **Lawfulness, fairness, and transparency** - Personal data shall be processed lawfully, fairly and in a transparent manner in relation to the data subject.

 

3.2 **Purpose limitation** - Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes shall not be considered to be incompatible with the initial purposes.

 

3.3 **Data minimization** - Personal data shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.

 

3.4 **Accuracy** - Personal data shall be accurate and, where necessary, kept up to date; every reasonable step must be taken to ensure that personal data that are inaccurate, having regard to the purposes for which they are processed, are erased or rectified without delay.

 

3.5 **Storage limitation** - Personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed; personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes subject to implementation of the appropriate technical and organizational measures required by the Regulation in order to safeguard the rights and freedoms of the data subject.

 

3.6 **Integrity and confidentiality** - Personal data shall be processed in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organizational measures.

 

3.7 **Accountability** - The controller shall be responsible for and be able to demonstrate compliance with the principles.

 

4. **LEGAL BASIS OF PERSONAL DATA PROCESSING**

 

4.1 BeOnMind s.r.o, as the controller, processes personal data on the following legal bases:

4.1.1 the data subject has given consent to the processing of his or her personal data for one or more specific purposes;

4.1.2 processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

4.1.3 processing is necessary for compliance with a legal obligation to which the controller is subject;

4.1.4 processing is necessary in order to protect the vital interests of the data subject or of another natural person;

4.1.5 processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

4.1.6 processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

 

4.2 BeOnMind s.r.o, as the controller, shall always inform the data subject about the legal basis for the processing of personal data.

 

4.3 If the legal basis for processing personal data is the data subject's consent, BeOnMind s.r.o shall keep records of such consents granted by data subjects.

 

5. **CATEGORIES OF PROCESSED PERSONAL DATA**

 

5.1 BeOnMind s.r.o, as the controller, processes the following categories of personal data:

5.1.1 Identification data - name, surname, title, date of birth, sex, nationality, identification number, passport number, and other similar identification data;

5.1.2 Contact details - address, email address, telephone number, and other similar contact information;

5.1.3 Technical data - IP address, browser type, device type, operating system, and other technical data collected through cookies or similar technologies;

5.1.4 Usage data - information about how the data subject uses the website, including pages visited, time spent on the website, and similar data.

 

5.2 BeOnMind s.r.o does not process sensitive personal data (such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning a natural person's sex life or sexual orientation) unless required by law or with the explicit consent of the data subject.

 

5.3 If BeOnMind s.r.o intends to process personal data for a purpose other than that for which the personal data were collected, it shall provide the data subject with information on that other purpose and any relevant further information before processing.

 

6. **SOURCE OF PERSONAL DATA**

 

6.1 BeOnMind s.r.o, as the controller, obtains personal data from the following sources:

6.1.1 Directly from the data subject - when the data subject provides personal data to BeOnMind s.r.o through the website, registration forms, or other means;

6.1.2 Automatically through the website - when the data subject uses the website, technical and usage data may be automatically collected through cookies or similar technologies.

 

6.2 If BeOnMind s.r.o obtains personal data from a source other than the data subject, it shall inform the data subject about this within a reasonable period after obtaining the personal data, but no later than one month.

 

7. **RECIPIENTS OF PERSONAL DATA**

 

7.1 BeOnMind s.r.o, as the controller, may disclose personal data to the following recipients:

7.1.1 Processors - BeOnMind s.r.o may engage third-party processors to process personal data on its behalf. In such cases, BeOnMind s.r.o ensures that the processors comply with the data protection regulations and provide sufficient guarantees to implement appropriate technical and organizational measures to meet the requirements of the Regulation;

7.1.2 Public authorities - BeOnMind s.r.o may disclose personal data to public authorities if required by law or in response to a legitimate request.

 

7.2 BeOnMind s.r.o does not transfer personal data to countries outside the European Economic Area (EEA) unless adequate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission.

 

Your Rights

8.1 In this Part 8 of these Principles, we have summarized the rights you have under the law on the protection of personal data and the Regulation.

 

8.2 Your fundamental rights under the data protection law are:

(a) the right to access

(b) the right to rectification

(c) the right to erasure

(d) the right to restriction of processing

(e) the right to data portability

(f) the right to object to processing

(g) the right to lodge a complaint with the supervisory authority

(h) the right to withdraw consent

 

8.3 Right to Access: The data subject has the right to obtain from the Controller confirmation as to whether personal data concerning them are being processed, including information about the purposes of processing, the categories of personal data concerned, and the recipients of personal data, the envisaged period of storage of personal data, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing, or the right to object to such processing, the right to lodge a complaint with a supervisory authority, the source of information, the existence of profiling, and the safeguards provided in case of international data transfers. The first copy will be provided free of charge, but additional copies may be subject to a reasonable fee. You can request your personal data at the email address: studio@beonmind.com.

 

8.4 You have the right to rectify any inaccurate personal data concerning you. For the purposes of processing, the data subject has the right to supplement incomplete personal data, even by providing a supplementary statement.

 

8.5 Under certain circumstances, you have the right to erasure of your personal data without undue delay. These circumstances include: personal data is no longer necessary for the purposes for which they were collected or otherwise processed; you withdraw consent on which the processing is based and where there is no other legal ground for the processing; you object to the processing under certain rules of applicable data protection law; the processing is for direct marketing purposes; personal data has been unlawfully processed. However, there are exceptions to the right to erasure. General exceptions apply where processing is necessary for the exercise of the right to freedom of expression and information; compliance with a legal obligation; or for the establishment, exercise, or defense of legal claims.

 

8.6 Under certain circumstances, you have the right to restrict the processing of your personal data. These circumstances include: you contest the accuracy of personal data; processing is unlawful, and you oppose the erasure; we no longer need the personal data for the purposes of our processing, but you require personal data for the establishment, exercise, or defense of legal claims; and you have objected to processing pending verification of that objection. If processing is restricted on this basis, we may continue to store your personal data but will process them differently: with your consent; for the establishment, exercise, or defense of legal claims; to protect the rights of another natural or legal person; or for reasons of important public interest.

 

8.7 You have the right to object to the processing of your personal data for reasons related to your particular situation, but only to the extent that the legal basis allows. Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us; or for the purposes of the legitimate interests pursued by us or a third party. If you make such an objection and we cannot demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims, we will cease processing personal information.

 

8.8 You have the right to object to the processing of your personal data for direct marketing purposes (including profiling). If you make such an objection, we will cease processing your personal data for this purpose.

 

8.9 You have the right to object to the processing of your personal data for scientific or historical research purposes or statistical purposes on grounds relating to your particular situation, unless the processing is necessary for the performance of a task carried out for reasons of public interest.

 

8.10 If you believe that our processing of your personal data violates data protection laws, you have the legal right to lodge a complaint with the supervisory authority responsible for data protection. You can do this in the EU member state of your habitual residence, place of work, or the alleged violation.

 

8.11 To the extent that the legal basis for processing your personal data is consent, you have the right to withdraw that consent at any time.

 

8.12 You can exercise any rights regarding your personal data through written notice.

 

8.13 Consent to the processing of personal data is based on the principle of voluntariness, i.e., you can withdraw your consent at any time by sending an email to the email address: studio@beonmind.com, stating your personal data, at least your name and surname, address of residence, along with information that you do not want the Controller to process your personal data (or if you only want to receive selected offers, please specify the offers so that we can accommodate your request).

 

Profiling

9.1 BeOnMind s.r.o. uses Profiling as part of processing your personal data, consisting of automated processing of personal data (via web applications or software).

 

Changes to These Rules

10.1 These Principles of personal data protection may be updated from time to time by posting a new version on our website.

 

10.2 Occasionally, you should check this page to be satisfied with any changes to these Principles.

 

10.3 We may inform you of changes to these Principles by email.

 

Contact Details of the Controller

11.1 You can contact us:

(a) by mail to the postal address specified in Article 1, point 1.1 of these rules

(b) by completing the contact form on our website

(c) by email, using the email address studio@beonmind.com published on our website.

 

In Bratislava on January 1, 2024

 

 

**COOKIE POLICY**

 

This website www.fentasy.film (hereinafter referred to as the "Website" or also as the "Internet portal") is owned and operated by the company BeOnMind s.r.o., with its registered office at Bosákova 7, Bratislava - Petržalka 851 04, ID: 45 637 440, registered in the Commercial Register of the District Court Bratislava III, Section: Sro, Insert No.: 66045/B, email address: studio@beonmind.com (hereinafter referred to as the "Operator" or also as "BeOnMind s.r.o." or also as "we" in the respective grammatical form).

 

On our website, we use cookies to make your online browsing easier, faster, and more interactive. This information notice describes the cookies used and how to disable or enable them. You should read this notice in conjunction with the Privacy Policy available on this website, which forms an integral part thereof.

 

1. **What is a Cookie?**

Cookies are small files sent to and stored on your computer, mobile, or tablet by the websites you visit. Cookies are stored in the folder of your respective web browser, which you use when browsing websites. When you revisit these websites, your web browser reloads the stored cookies and sends them back to the website or element that created the original cookie. This typically ensures the proper functionality of these websites.

 

These stored cookies on your device allow you to customize your website browsing or make it easier (e.g., by storing the language in which you want to browse the website, access credentials to restricted areas, or products you have added to your basket). Cookies make it possible to collect selected information about your online browsing preferences and improve your user experience on the website.

 

2. **Which Cookies Do We Use? How Can You Enable or Disable Them?**

We use various types of cookies depending on their functions and purposes. The Operator uses cookies for the purposes of:

 

- Ensuring the proper functionality of this Website (so-called technical cookies)

- Analytical purposes and statistical evaluation of the use of the services and content of the website in the interest of continually improving the settings of this Website (so-called analytical cookies)

 

In general, cookies can be divided into two macro categories: Technical cookies (so-called essential cookies) and Profiling cookies.

 

**2.1 Technical Cookies** ensure the optimal use of our Website. These cookies must be used because, in their absence, some parts of our Website would not be accessible or would be difficult to use. Your consent is not required for the operation of these cookies, and it is not possible to deactivate them. The legal basis that allows us to use them is our legitimate interest in the proper functioning of our Website. Technical cookies help determine:

 

- User preferences regarding filtered ads, location, etc.

- Browsing history, time spent on the Website, etc.

- User identification in connection with displayed content based on preferences

 

Functional cookies, which allow navigation according to a series of selected criteria (such as language), also fall into the category of technical cookies.

 

**Analytical cookies** are mainly used to measure the number of visits and the use of the Website, based on our legitimate interest in continually improving the Website. They provide statistical information gathered in summary form concerning the number of visitors and how they use our Website. If the information is not collected in summary form and instead contains identification data (such as the IP address used by your device), such cookies used to collect this additional data will be qualified as profiling cookies, which will be active only after obtaining your consent. Analytical cookies help determine:

 

- Technical details about the type of web browser, IP address, domain name, geolocation, etc.

- Information about the time spent on the Website

- Information about user activities on the Website (e.g., the user's list of favorite ads, the history of added ads, the most frequently searched ads, etc.)

 

**2.2 Profiling Cookies** are used to gather information about your habits and preferences while browsing the website (e.g., most frequently searched ad, most frequently searched ad category, most frequently added ad category, etc.): we use this data to offer you customized content.

 

A profiling cookie can be ours (so-called first-party) if it is managed directly by BeOnMind s.r.o. or owned by a third party, i.e., owned by our business partners.

 

As the Operator, we may use Profiling cookies to address you with an offer of our services after you leave our Website, based on our legitimate interest in offering services in which you have shown interest during your visit to our Website. Profiling cookies help:

 

- Ensure the comfort of users of our Internet portal

- Statistically evaluate and assess the success of our Website

 

All profiling cookies (first and third party) can be enabled/disabled using our Cookie Settings or by changing the settings of the browser you use to browse the web.

 

We remind you that a profiling cookie, even if marked with a checkmark, will be effective only if you click the "I agree" button on the cookie banner on our Website. Therefore, profiling cookies collect information about your navigation only based on your explicit consent.

 

3. **Social Networks**

We do not have profiles on any social networks and, therefore, do not share your personal data with any social network or publish your personal data on any social network (especially Facebook, Instagram, Pinterest, YouTube, and others).

 

4. **Google Analytics and Google reCAPTCHA**

Our websites use mechanisms of web service analysis by Google Inc. (Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA): Google Analytics, Google reCAPTCHA.

 

Google Analytics uses "cookie" files to analyze the use of websites. Information collected through "cookie" files is transmitted to Google servers in the USA and archived. If the function of anonymizing the IP address is active during your visit to our website, your user IP address is provided to Google in a shortened form. This applies to member states of the European Union and other states listed in the European Economic Area Agreement. The complete IP address is sent to the Google server in the USA only in exceptional cases, where it is shortened. In this way, the IP address anonymization function on our website is active.

 

At the request of the website operator, Google uses the collected information to analyze the transmission of data to the website and create reports on the use of the website and other services related to the use of the website. The IP address provided by your browser in Google Analytics is not stored together with other Google data. We use the Google Analytics service to analyze the use of our website to improve it and present attractive products from our brands.

 

Google reCAPTCHA: To protect our online services, we may use so-called CAPTCHA tests, which allow us to determine whether the other party is a human being or a machine. The purpose is to find out whether people or machines, which are often misused, are responsible for accesses. Because this request comes from a Google server, Google creates a cookie file that exists only for the duration of the request. These cookies cannot be blocked and are part of technical cookies.

 

5. **Duration of Cookies:**

The duration of the cookies depends on the specific type of cookies. Depending on the duration, cookies are categorized into:

   - **Session cookies:** Data collected by these cookies is stored for a limited period corresponding to the duration of your browsing session.

   - **Persistent cookies:** These cookies serve the purpose of storing data (such as passwords for access to restricted areas), ensuring that it is not necessary to re-enter the information on each visit. Information collected by these cookies remains stored on the device used for browsing even after closing the browser. Persistent cookies, including locally stored objects, may remain valid for several months.

 

6. **How to Contact the Data Controller and Data Protection Officer:**

The data controller for personal data (entities that determine the purposes and methods of processing personal data) is BeOnMind s.r.o. with registered office at Bosákova 7, Bratislava - Petržalka, 851 04, Slovakia, Identification Number (IČO): 45 637 440, registered in the Commercial Register of the District Court Bratislava IIIII, Section: Sro, Insert No.: 66045/B.

 

The data controller has not appointed a Data Protection Officer.

 

7. **Data Recipients and Data Transfer Outside the European Union:**

Information collected through cookies will be disclosed to:

  - Employees of BeOnMind s.r.o. responsible for managing and monitoring the website.

   - Entities providing various advisory services (accounting, tax, legal, etc.).

   - Public authorities and entities authorized by law to access data (e.g., police authorities).

   - Other individuals providing services for the Data Controller, processing personal data on its behalf based on a data processing agreement, which may fulfill certain obligations related to legal relationships with Data Subjects in all or some countries where the Data Controller operates.

   - **Google LLC,** 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States.

 

In some cases, data may be transferred outside the European Union to countries that have adopted a level of data protection similar to European standards (and are recipients of adequacy decisions) or subject to the provisions of Standard Contractual Clauses adopted by the European Commission by Decision 2021/914, aimed at subordinating the transfer to appropriate safeguards.

 

8. **Your Rights:**

To exercise your rights regarding personal data, you can send an email to studio@beonmind.com. We will respond to your request as soon as possible, but no later than 30 days from receiving your message. In some cases, we may request a copy of your identification document if it is necessary to verify your identity in connection with your request.

 

   - **Right of Access:** You have the right to know whether personal data concerning you is being processed, and if so, you have the right to obtain a copy of this data and be informed about the origin of the data, categories of processed personal data, recipients of the data, processing purposes, existence of automated decision-making processes (including profiling), data retention periods, and rights established by EU Regulation 2016/679.

 

   - **Right to Rectification:** You have the right to rectify or integrate incomplete data we hold about you.

 

   - **Right to Erasure:** You have the right to request the erasure of your personal data if it is no longer needed for the purpose for which it was collected, or if we are no longer authorized to process it.

 

   - **Right to Restriction of Processing:** You have the right to obtain the restriction of processing in certain cases, including when you contest the accuracy of your personal data, object to processing, or the data is no longer needed, but it is required for legal purposes or to assert, exercise, or defend legal claims.

 

   - **Right to Withdraw Consent:** If we process your data based on your consent, you have the right to withdraw that consent by accessing the Cookie Settings.

 

   - **Right to Data Portability:** If we process your data based on your consent, or for the performance of a contract, or if we process it using automated means, you have the right to data portability. This allows you to receive your personal data in a structured, commonly used, and machine-readable format. You can also request direct transfer of your data to another company, where technically feasible.

 

   - **Right to Object:** You have the right to object to the processing of your personal data at any time, including profiling based on our legitimate interests. If you believe that the processing of personal data concerning you violates the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the relevant data protection supervisory authority.

 

We reserve the right to regularly update the content of this website. Therefore, we encourage you to regularly review this information notice to stay informed about any changes that have occurred since your last consultation.

 

In Bratislava, on January 1, 2024.