Personal Data Processing Policy and Personal Data Protection System According to GDPR

General Data Protection Regulation

The purpose of these policies is to demonstrate that the processing of personal data by the controller is carried out in accordance with current legal regulations, in particular Act 18/2018 Coll. on the protection of personal data (hereinafter referred to as the "new PDPA") and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as "GDPR").

The new legal regulation requires the controller, taking into account the nature, scope and purpose of the processing of personal data and the risks with varying probability and severity for the rights of the natural person, to adopt appropriate technical and organizational measures to ensure and demonstrate that the processing of personal data is carried out in accordance with the new legal regulation. The controller is obliged to update these adopted measures as necessary.

This document is the result of an assessment of the processing of personal data by the controller for the purposes of legal regulations governing the protection of personal data. By implementing standardized personal data protection based on the principles set out here, the risk of breach of personal data protection is minimized.

Legal Basis for Processing Personal Data

The legal basis for processing personal data by the controller of data subjects of all categories is based on the following provisions of GDPR and the new PDPA:

• a) processing of personal data is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract - according to § 13 par. 1 letter b) PDPA, or Art. 6 letter b) GDPR. (orders, purchase contracts, framework agreements, employment contracts, CVs...)
• b) According to § 78 par. 3 PDPA, the controller who is the employer of the data subject is entitled to provide or publish their personal data to the extent of title, name, surname, job classification, service classification, functional classification, employee personal number or employee number, professional department, place of work, telephone number, fax number, workplace email address and identification data of the employer, if this is necessary in connection with the performance of work duties, service duties or functional duties of the data subject. The provision or publication of personal data must not violate the dignity, honor and security of the data subject. (employee data)
• c) processing of personal data is necessary in accordance with a special regulation or international treaty by which the Slovak Republic is bound - according to § 13 par. 1 letter c) PDPA, or Art. 6 letter c) GDPR (cadastral law, commercial code, labor code, health insurance act, social insurance act, income tax act...)
• d) processing of personal data is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or rights of the data subject which require protection of personal data, in particular where the data subject is a child - according to § 13 par. 1 letter f) PDPA, or Art. 6 letter f) GDPR
• e) further processing of personal data for archiving purposes, scientific purposes, historical research purposes or statistical purposes, if it is in accordance with a special regulation and if appropriate safeguards for the protection of the rights of the data subject are observed.

Declaration

We declare that as the controller of your personal data, we fulfill all legal obligations required by applicable legislation, in particular the Personal Data Protection Act and GDPR, and therefore:

• we will process your personal data only on the basis of a valid legal ground described above.
• We hereby fulfill the information obligation towards data subjects according to Article 13 GDPR
• we will enable you and support you in exercising and fulfilling your rights according to the new PDPA and GDPR.

Social Networks

Promotion of the company through social networks

How Long Will We Collect Your Personal Data?

• The controller guarantees that personal data provided by the data subject in the contract in question or in another manner will be processed in information systems in accordance with the principle of storage minimization and in the event that the purpose of processing ceases to exist, the controller guarantees to delete the personal data. In the event that the personal data will be processed for a purpose other than that specified above in this article, the data subject will be informed about this purpose as well as the legal basis for such processing before such processing.
• The controller guarantees that personal data of employees for the purposes specified in these policies will be processed for a maximum of the duration of the employment relationship, or if required by any special regulation, for the period specified in that statutory regulation.

Security and Protection of Personal Data

We protect personal data to the maximum extent possible. We protect them as if they were our own. We have implemented all possible technical and organizational measures to prevent misuse, damage or destruction of your personal data.

Transfer of Personal Data to Third Parties (Processors, Recipients)

Your personal data are accessed by authorized persons appointed by the controller, who are bound by confidentiality and trained in the field of processing security.

We handle most processing operations ourselves and do not need third parties for them. To ensure some specific processing operations that we cannot secure with our own resources, we use the services of processors who specialize in the processing in question and are bound by a processor agreement in accordance with GDPR.

These are providers of the following platforms and services:

• Social Insurance Agency
• Health Insurance Company
• Tax Office
• Statistical Office
• Occupational Health and Safety Service Provider
• IT Services Provider

Transfer of Data Outside the European Union

We process data exclusively in the European Union or in countries that ensure a level of protection based on a decision of the European Commission.

Data Subjects

• Contractual and pre-contractual business partners
• Employees of the controller

Purposes of Processing

We process personal data that you entrust to us for the following purposes:

Contractual/Pre-contractual Partners and Clients of the Controller

• identification of the contracting party
• provision of agreed services (processing of personal data necessary to fulfill the purpose of accounting services and personnel management)
• sending marketing offers and carrying out other marketing activities
• The controller declares that it does not work with records in any way and does not provide them to third parties or entities

Employees

• The controller processes personal data of its employees exclusively for the purposes of employment relationships and other legal relationships arising from labor law and social security law.
• The controller processes personal data necessary for the payment of wages and personnel management based on employment relationships or processing based on agreements on work performed outside employment relationships.
• Another purpose is the fulfillment of employer's obligations related to employment, state employment or similar relationships (e.g., based on agreements on work performed outside employment relationships) including pre-contractual relationships.
• Also to ensure the identification of its employee in employment contracts.

Camera System

• The controller uses a camera system to prevent and protect its customers, its own and their property.
• The controller declares that it does not work with recordings in any way and does not provide them to third parties or entities

GPS

• The controller uses a GPS system to optimize company costs for fuel, transparent fuel accounting, automatic generation of logbooks, reporting business trips, locating the vehicle in case of theft, monitoring compliance with employees' labor obligations when driving a company vehicle, protecting the employer's property - company vehicles against theft and damage
• The controller declares that it does not work with records in any way and does not provide them to third parties or entities

Your Rights in Connection with the Protection of Personal Data

• In connection with the protection of personal data, you have several rights. If you want to exercise any of these rights, please contact us via the email address above.
• You have the right to information, which is already fulfilled by these personal data processing policies - information obligation.
• Thanks to the right of access, you can contact us at any time and we will provide you within 30 days with information about what personal data we process and why.
• If something changes with you or you notice any of your personal data is outdated or incomplete, you have the right to supplement and change your personal data.
• You can exercise the right to restrict processing if you believe we are processing your inaccurate data, you think we are carrying out processing unlawfully but do not want all data deleted, or if you have an objection to processing.
• You can restrict the scope of personal data or processing purposes.
• Right to erasure (to be forgotten): Your other right is the right to erasure, if there is no legal basis that entitles us or legal obligation that requires us to process your personal data. In that case, we will delete all your personal data from our system, as well as from the system of all partial processors and backups within the statutory deadline.

How You Can Exercise These Rights

You can contact us with your request in one of the following ways:

These personal data processing policies are valid from 25.5.2018 and replace the previous Personal Data Protection.

---

Cookie Policy

What Are Cookies?

As is common practice on almost all professional websites, this site uses cookies, which are small files downloaded to your computer to improve the services provided. This page describes what information we collect, how we use it and why we sometimes need to store these files. We will also provide information on how you can prevent cookies from being stored, which may, however, degrade or "break" certain elements of this website's functionality. For more general information about cookies, see the Wikipedia article on HTTP cookies.

How We Use Cookies

We use cookies for various reasons detailed below. Unfortunately, in most cases there are no standardized options for disabling cookies without completely blocking the functionality and features they provide to this site. It is recommended that you leave all cookies enabled if you are not sure whether you need them or not, in case they are used to provide a service that you use.

Disabling Cookies

You can prevent the setting of cookies by adjusting the settings in your browser (see the Help section of your browser to find out how to do this). Please note that disabling cookies will affect the functionality of this and many other websites you visit. Disabling cookies usually results in the disabling of certain functions and features of this site as well. Therefore, it is recommended that you do not disable cookies.

Cookies We Set

When you submit data through forms, such as those found on contact pages or comment forms, cookies may be set to remember user information for future correspondence.

Third-Party Cookies

In certain special cases, we also use cookies provided by trusted third parties. The following section describes which cookies you may encounter through this site.

This site uses Google Analytics, which is one of the most widespread solutions on the internet for identifying how you use the site and ways we can improve your experience. These cookies may track things such as how long you spend on the site and which pages you visit so that we can continue to offer you interesting content. For more information about Google Analytics cookies, visit the official Google Analytics page.

Third-party analytics is used to track and measure the use of this site so that we can continue to offer you interesting content. These cookies may track things such as how long you spend on the site and which pages you visit, which helps us understand how we can improve the site for you.

In some cases, we may provide you with customized content based on what you have told us about yourself either directly or indirectly through linking to social media accounts. These types of cookies simply enable us to provide you with content that might interest you.

We also use social media buttons and/or plugins that allow you to connect in various ways with your social network. For these buttons and plugins to work, the following social media including Facebook, Youtube, will set cookies through our website that may be used to enhance your profile on their site or to provide the data they hold for various purposes outlined in their personal data usage policies.

More Information

We hope this has clarified things for you and as mentioned, if there is something you are not sure whether you need or not, it is usually safer to leave cookies enabled in case they interact with one of the features you use on our website.

If you are still looking for more information, you can contact us through one of our preferred methods.