Information obligation
OPERATOR INFORMATION
Business name HOMERS Production sro
Identification number (IČO) (if assigned)
55 451 161
Registered office Hlavná 2967/50, Prešov 080 01, SR
Email d.egri@homers-production.eu
(hereinafter referred to as the "Operator")
When processing personal data by the Controller, you are the data subject, i.e. the person whose personal data is being processed.
Privacy Policy
Your personal data will be stored securely, in accordance with the Operator's security policy and only for the period necessary to fulfill the purpose of the processing. Access to your personal data will be exclusively granted to persons authorized by the Operator to process personal data, who process them on the basis of the Operator's instructions, in accordance with the Operator's security policy.
Your personal data will be backed up, in accordance with the Operator's retention rules. Your personal data will be completely deleted from backup storage as soon as possible in accordance with the backup rules. Personal data stored in backup storage serves to prevent security incidents, in particular disruption of data availability due to a security incident. The Operator is obliged to ensure data backup in accordance with the security requirements of the GDPR and Act No. 18/2018 Coll.
On what basis will your data be processed?
Your personal data will be processed based on specific legal regulations and purposes determined by the Operator as follows:
The purpose of processing personal data by the Operator is
EMPLOYEE SELECTION
Legal basis Act No. 311/2001 Coll. Labor Code as amended
Categories of data subjects: job seekers
Category of personal data: personal data provided in the CV or cover letter,
certificate of education
Deadlines for erasing personal data 6 months
Beneficiary categories: employees
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

The purpose of processing personal data by the Operator is to FULFILL EMPLOYER'S OBLIGATIONS RELATED TO THE EMPLOYMENT RELATIONSHIP AND SIMILAR RELATIONSHIP
Legal basis Act No. 311/2001 Coll. Labor Code as amended
contractual relationship
In relation to special categories of personal data, Article 9(2)(b) GDPR
Categories of data subjects: job seekers,
employees, spouses of employees, dependent children of employees,
parents of dependent children of employees, close relatives,
former employees
Category of personal data: regular personal data
payroll data,
data on previous employment,
data on incapacity for work, on changed working capacity, this data may also include health data (special category of personal data)
about important personal obstacles at work,
Deadlines for erasing personal data 70 years
50 years
Categories of beneficiaries: employees, intermediary, head of accounting, personnel and payroll
other authorized state authorities, if the provision of data is based on a regular legal obligation
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation
The purpose of processing personal data by the Operator is FULFILLING THE EMPLOYER'S OBLIGATIONS TOWARDS THE SOCIAL INSURANCE COMPANY
Legal basis Act No. 461/2003 Coll. on social insurance, as amended
Act No. 43/2004 Coll. on old-age pension savings, as amended
Act No. 650/2004 Coll. on supplementary pension savings and on amendments to certain acts, as amended
later regulations, Act No. 462/2003 Coll. on income compensation in the event of temporary incapacity for work of an employee and on amendments and supplements to certain acts, as amended by later regulations
In relation to special categories of personal data, Article 9(2)(b) GDPR
Categories of persons concerned: employees, spouses of employees, dependent children of employees,
parents of dependent children of employees, close relatives, former employees
Category of personal data: regular personal data, data on pension declaration, data from the employment contract of the supplementary pension insurance company, data on taking maternity and parental leave
data on incapacity for work, on altered working capacity, this data may also include data on health (a special category of personal data) on important personal obstacles to work
Deadlines for erasing personal data 10 years
Beneficiary categories Social Insurance Company, Employees, intermediary in charge of accounting, personnel and payroll
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

The purpose of processing personal data by the Operator is to FULFILL THE EMPLOYER'S OBLIGATIONS TOWARDS THE HEALTH INSURANCE COMPANY
Legal basis Act No. 580/2004 Coll. on health insurance amending Act No. 95/2002 Coll. on insurance and
amendments to certain laws as amended
Categories of persons concerned: employees, spouses of employees, dependent children of employees, parents of dependent children of employees, close persons, former employees of the office
Category of personal data: regular personal data
Deadlines for erasing personal data 10 years
Beneficiary categories Health insurance companies, Employees, intermediary in charge of accounting, personnel and payroll
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is to FULFILL EMPLOYER'S OBLIGATIONS IN THE AREA OF SAFETY AND HEALTH PROTECTION
Legal basis Act No. 124/2006 Coll. on safety and health protection at work and on amendments and supplements to certain acts, as amended
Act No. 355/2007 Coll. on the protection, promotion and development of public health and on amendments and supplements to certain acts, as amended

In relation to special categories of personal data, Article 9(2)(b) GDPR
Categories of data subjects Employees, mediator for the positions of OHS technician
Category of personal data: regular personal data
personal data relating to health when registering work-related accidents within the scope of lawful processing (special category of personal data)
Deadlines for erasing personal data 5 years after the termination or expiry of the obligation
medical reports on health fitness for work pursuant to Section 30f, paragraph 1, Act No. 355/2007 Coll. on the protection, promotion and development of public health and on amendments and supplements to certain acts, as amended, of employees who perform hazardous work, 20 years from the end of this hazardous work
Categories of recipients: intermediary for processing the OHS and PO agenda, training entities, authorized employees,
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is FULFILLMENT OF OBLIGATIONS IN THE FIELD OF DEFENSE DUTY
Legal basis Act No. 570/2005 Coll. on military service and on amendments and supplements to certain acts, as amended

Categories of data subjects: employees
Category of personal data: regular personal data

Deadlines for erasing personal data 50 years after the termination or expiry of the obligation
Categories of recipients by the Ministry of Defense of the Slovak Republic
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is FULFILLMENT OF TAX OBLIGATIONS
Legal basis Act No. 595/2003 Coll. on Income Tax, as amended
Act No. 222/2004 Coll. on Value Added Tax
Act No. 563/2009 Coll. on tax administration (Tax Code) and on amendments and supplements to certain acts, as amended
Categories of data subjects: employees
Category of personal data: regular personal data
income data

Deadlines for erasing personal data 10 years
Categories of recipients Tax authorities, tax administrators, intermediary in charge of accounting, personnel and payroll
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is EMPLOYER'S WAGE POLICY
Legal basis Act No. 311/2001 Coll. Labor Code as amended
Act No. 400/2009 Coll. on Civil Service and on Amendments to Certain Acts, as amended
Act No. 552/2003 Coll. on the performance of work in the public interest, as amended
Act No. 553/2003 Coll. on the remuneration of certain employees performing work in the public interest and on amendments and supplements to certain acts, as amended
Act No. 580/2004 Coll. on health insurance amending Act No. 95/2002 Coll. on insurance and amending certain acts as amended
Act No. 461/2003 Coll. on social insurance, as amended
Act No. 595/2003 Coll. on Income Tax, as amended
Act No. 43/2004 Coll. on old-age pension savings, as amended
Act No. 650/2004 Coll. on Supplementary Pension Savings and on Amendments to Certain Acts, as amended Act No. 5/2004 Coll. on Employment Services and on Amendments to Certain Acts, as amended
Act No. 462/2003 Coll. on income compensation in the event of temporary incapacity for work of an employee and on amendments and supplements to certain acts, as amended
Act No. 152/1994 Coll. on the Social Fund and on amendments and supplements to Act No. 286/1992 Coll. on income taxes, as amended
contractual relationship
collective agreement

In relation to special categories of personal data, Article 9(2)(b) GDPR
Categories of data subjects Employees, dependent children of employees, former employees
Category of personal data: regular personal data
wage, salary or salary ratios and other financial details awarded for the performance of a function or for the performance of work activity, data on time worked, amounts affected by the execution of a decision ordered by a court or administrative authority, fines and penalties, as well as compensation imposed on the employee by an enforceable decision of the competent authorities, data on incapacity for work, data on important personal obstacles to work, data on changed work capacity, date of commencement of civil service or work activity, data on dependent children, data on taking maternity leave and parental leave, data on the award of a pension, type of pension, amount of employee and employer contribution to the supplementary pension insurance company, payment of membership contribution to a trade union organization,
marital status, permanent residence, temporary residence, employer information
Deadlines for erasing personal data 50 years
Beneficiary categories Health insurance companies, social insurance company, tax office, DDS,
authorized employees, intermediary in charge of accounting, personnel and payroll
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is
EMPLOYEE VISITS AGENDA
Legal basis Legitimate interest of the controller as an employer within the meaning of Art. 6 para. 1 letter f) of the GDPR Regulation resulting from Section 78 para. 3 of Act No. 18/2018 Coll. on the protection of personal data and on amendments and supplements to certain acts, i.e. to provide, i.e. process personal data or disclose its employees' personal data necessary in connection with the performance of work duties, official duties or functional duties of the employee.
Categories of data subjects Employees
Category of personal data: title, name, surname, job title, service title, functional title, employee personal number or employee employee number, professional department, place of work, telephone number, fax number, workplace email address and employer identification data
Deadlines for erasing personal data Termination of employment
Categories of recipients: authorized employees
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

The purpose of processing personal data by the Operator is THE EMPLOYER'S CONTROL MECHANISM AT THE WORKPLACE AND IN THE EMPLOYER'S COMMON AREAS FOR THE PROTECTION OF PROPERTY AND HEALTH
Legal basis Legitimate interest of the controller as an employer in maintaining work discipline
Categories of data subjects Employees

Category of personal data: video recording from the camera system

Deadlines for deleting personal data 1 month

Recipient categories Intermediary providing management of the camera system

Designation of a third country or international organization for the Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is
MANAGEMENT OF THE ECONOMIC AND ACCOUNTING AGENDA
Legal basis Act No. 431/2002 Coll. on accounting, as amended,
Act No. 222/2004 Coll. on Value Added Tax, as amended,
Act No. 145/1995 Coll. on administrative fees, as amended,
Act No. 152/1994 Coll. on the Social Fund and on the Amendment and Supplementation of Act No. 286/1992 Coll. on Income Taxes, as amended,
Categories of data subjects Employees, Suppliers, customers, representatives of suppliers and customers
Clients/customers

Personal data category Common and contact personal data, Accounting and economic personal data
Deadlines for erasing personal data after ten years following the year to which the documents relate
Categories of recipients: authorized employees
competent state administration, public administration and local government bodies, intermediary in charge of accounting, personnel and payroll
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is
LEGISLATIVE AGENDA MANAGEMENT
Legal basis Legitimate interest of the controller pursuant to Art. 6 para. 1 lit. f) GDPR consisting in establishing, exercising and defending the controller's legal claims.
Categories of data subjects Employees, suppliers, customers, representatives of suppliers and customers
Category of personal data Common, contact and identification personal data
Deadlines for erasing personal data During the duration of the lawsuit, out-of-court settlement, but at most until the claim in question expires due to statute of limitations or preclusion
Categories of recipients External debt collection agents, lawyer/advocate, authorized employees, authorities competent for judicial and extrajudicial dispute resolution
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is to PROVIDE SERVICES IN ACCORDANCE WITH THE CONTRACT, COMPLYING WITH CONTRACTUAL OBLIGATIONS.
Legal basis Service contract
Categories of data subjects Contracting parties
Category of personal data Common, contact and identification personal data, personal data contained in the contract
Deadlines for deleting personal data 3 years from the termination of the contract or the termination of the provision of the given services
Categories of recipients External debt collection agents, lawyer/advocate, authorized employees, bodies competent for judicial and extrajudicial dispute resolution, employees, suppliers/customers and their representatives
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is
KEEPING RECORDS OF SUPPLIER AND CUSTOMER REPRESENTATIVES
Legal basis Legitimate interest within the meaning of Article 6(1)(f) GDPR consisting in ensuring contacts within the framework of the smooth running of business relations
Categories of data subjects Representatives of suppliers and customers
Category of personal data: contact and identification personal data
Deadlines for deleting personal data 3 years from the termination of the supplier or customer relationship
Beneficiary categories Authorized employees
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is to SECURE THE AGENDA RELATED TO THE EXERCISE OF THE RIGHTS OF THE DATA SUBJECTS
Legal basis GDPR Regulation
Act No. 18/2018 on the Protection of Personal Data
Categories of data subjects All data subjects who have exercised their rights
Category of personal data: contact and identification personal data, content of the exercise of the data subject's right
Deadlines for erasing personal data 5 years from the date of processing the data subject's complaint
Recipient categories Authorized employees, Personal Data Protection Office
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is to MAINTAIN THE LIST - RECORDS OF PARTNERS OF A LIMITED LIABILITY COMPANY
Legal basis §118 of Act No. 513/1991 Coll. Commercial Code, as amended
Categories of data subjects Partners of a limited liability company
Category of personal data: name, address and birth registration number of the natural person of the partner or business name, or name, registered office and identification number of the legal person of the partner, indicating the amount of the deposit and the extent of its repayment
Deadlines for erasing personal data
Beneficiary categories Authorized members/staff
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is
MANAGEMENT OF THE AGENDA OF COMPLAINT PROCEEDINGS
Legal basis Act No. 40/1964 Coll. Civil Code, as amended,
Act No. 513/1991 Coll. Commercial Code, as amended,
CONTRACT
Categories of data subjects Data subject who claims defect(s) of goods and/or services from the operator
Category of personal data Identification data, contact personal data
Deadlines for erasing personal data 4 years
Categories of beneficiaries Authorized members/employees, intermediary in charge of accounting, personnel and payroll
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is
PROTECTION OF PROPERTY AND/OR HEALTH WITH A CAMERA SYSTEM
Legal basis Legitimate interest within the meaning of Article 6(1)(f) GDPR, which is the protection of the property and safety of the controller and the data subjects
Categories of data subjects: natural persons who entered the premises monitored by the camera system under the jurisdiction of the operator
Category of personal data Camera recording of the data subject
Deadlines for deleting personal data 1 month
Categories of beneficiaries Public authorities according to relevant legislation,
Insurance companies
Police Force
Intermediary providing management of the camera system
Authorized employee
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is to KEEP RECORDS OF JOB APPLICANTS IN ORDER TO ENSURE SMOOTH EMPLOYEE FLUCTUATION
Legal basis Consent of the data subject
NOTICE: The data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Categories of data subjects Job seekers
Category of personal data: regular personal data
personal data provided in the CV and/or cover letter
Deadlines for deleting personal data 1 year from the date of inclusion
Categories of recipients The operator processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Designation of a third country or international organisation, no transfer to a third country takes place
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is to RAISE AWARENESS OF BUSINESS ACTIVITIES IN THE ONLINE ENVIRONMENT (VIA THE WEBSITE)
Legal basis Legitimate interest in raising awareness of the operator's business or commercial activities in the online environment, primarily through the operator's website.
or
Consent of the person concerned

Note: The data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Categories of data subjects Client, potential client
Suppliers/Customers
Potential suppliers/customers

Category of personal data Identification data, contact personal data

Deadlines for erasing personal data 2 years from the date of the last provision of services or from the date of consent under the legal basis
Recipient categories Authorized members/employees, Website administrator

Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is to RESPOND AND SUBSEQUENT COMMUNICATION WITH THE PERSON WHO HAS USED THE OPPORTUNITY TO ADDRESS THEIR INQUIRY TO THE OPERATOR THROUGH THE CONTACT FORM
Legal basis Article 6(1)(b) GDPR so-called pre-contractual relations: processing is necessary to take steps at the request of the data subject prior to entering into a contract
Categories of data subjects: natural persons who contacted the operator with an inquiry via the contact form
Personal data category Regular personal data
Personal identification data
Contact personal information
Subject or content of the form
Deadlines for erasing personal data Immediately after the end of communication and pre-contractual relations
Beneficiary categories Authorized collaborators
Website administrator
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is to MANAGE SUPPLIER-CUSTOMER RELATIONSHIPS WITH SELF-EMPLOYED PERSONS
Legal basis Service contract or similar contractual relationship
Categories of data subjects Contracting parties – suppliers, customers in the position of self-employed persons, intermediary in charge of accounting, personnel and payroll
Category of personal data Common, contact and identification personal data, personal data contained in the contract
Deadlines for deleting personal data 3 years from the termination of the contract or the termination of the provision of the given services
Categories of recipients External debt collection agents, lawyer/advocate, authorized employees, bodies competent for judicial and extrajudicial dispute resolution, employees, suppliers/customers and their representatives
Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Security measures (technical and organizational) operator's security documentation

 
The purpose of processing personal data by the Operator is CONTROL OF AN EXTERNAL COLLABORATOR DURING THE PERFORMANCE OF THE SUBJECT OF THE CONTRACT IN THE FORM OF CAMERA RECORDING
Legal basis Legitimate interest of the controller in the proper performance of the contract by checking its compliance by external collaborators in the performance of the subject matter of the contract
Categories of data subjects External collaborator
Category of personal data Identification personal data
Camera recording
Deadlines for deleting personal data 1 month
Categories of recipients Authorized employee, statutory body, camera system administrator

Designation of a third country or international organization The Controller processes personal data primarily in the territory of the Slovak Republic and other member states of the European Union and the European Economic Area (EEA).
The transfer of personal data to third countries, namely the United Kingdom of Great Britain and Northern Ireland, is carried out on the basis of European Commission Implementing Decision No. (EU) 2021/1773 of 28 June 2021, which establishes an adequate level of protection of personal data in the United Kingdom in accordance with Article 45 of Regulation (EU) 2016/679 (GDPR).
Based on the aforementioned decision, the transfer of personal data to the United Kingdom is considered to be a transfer to a country with an adequate level of protection and therefore does not require the adoption of specific safeguards or additional measures within the meaning of Chapter V of the GDPR.
Safety precautions
(technical and organizational) safety documentation of the operator

 
The provision of personal data in the case of processing for purposes to which, in accordance with the above, a legal obligation or contractual or pre-contractual relations are assigned as the legal basis for processing, is therefore a legal or contractual requirement, or a requirement that is necessary for the conclusion of a contract. The data subject is obliged to provide personal data in the case of processing such personal data for purposes based on the fulfillment of the Operator's legal obligations. Failure to provide personal data results in the non-provision of the service/cooperation, or failure to conclude a contract.
Will your data be used for automated individual decision-making?
Personal data will not be used for automated individual decision-making, including profiling.
What rights do you have?
Withdraw consent – ​​in cases where we process your personal data based on your consent, you have the right to withdraw this consent at any time. You can withdraw your consent electronically, at the addresses listed, in writing, by notifying you of the withdrawal of consent or in person at the Operator. The withdrawal of consent does not affect the lawfulness of the processing of personal data that we processed about you based on it.
Right of access – you have the right to be provided with a copy of the personal data we hold about you, as well as information about how we use your personal data. In most cases, your personal data will be provided to you in written, hard copy form, unless you request it to be provided in another way. If you have requested this information by electronic means, it will be provided to you electronically, where technically feasible.
Right to rectification – we take reasonable steps to ensure the accuracy, completeness and timeliness of the information we hold about you. If you believe that the data we hold about you is inaccurate, incomplete or out of date, please do not hesitate to ask us to correct, update or supplement this information.
Right to erasure (to be forgotten) – you have the right to ask us to erase your personal data, for example where the personal data we have collected about you is no longer necessary for the purposes for which it was originally processed. However, your right needs to be assessed in the light of all the relevant circumstances. For example, we may have certain legal and regulatory obligations which mean we will not be able to comply with your request.
Right to restriction of processing – in certain circumstances, you have the right to ask us to stop using your personal data. This includes cases where you believe that the personal data we hold about you may be inaccurate or where you believe that we no longer need to use your personal data.
Right to data portability – in certain circumstances, you have the right to ask us to transfer the personal data you have provided to us to another third party of your choice. However, the right to portability only applies to personal data that we have obtained from you based on consent or on the basis of a contract to which you are a party.

Right to object – you have the right to object to data processing that is based on our legitimate interests. If we do not have a compelling legitimate reason for the processing and you object, we will no longer process your personal data.

The right to file a motion to initiate proceedings on the protection of personal data – if you believe that your personal data is being processed unfairly or unlawfully, you may file a complaint with the supervisory authority, which is the Office for the Protection of Personal Data of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; tel. number: +421 /2/ 3231 3214; email: statny.dozor@pdp.gov.sk, https://dataprotection.gov.sk. In the case of submitting a motion electronically, it is necessary that it meets the requirements under Section 19, paragraph 1 of Act No. 71/1967 Coll. on Administrative Procedure (Administrative Procedure Code).